ocsp.pki.goog/gts1c3
471 B IP
Hash 17d4dac18fa2e921b6142e9a6e7638e9
3e4d5337720590d6a2b8941baf90fa8dfd9d752b
f367bf987bcfb690ef53baf4cca8970b83fe522c820de2babb8cb3c943fa84c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
200 OK 29 kB URL User Request GET HTTP/2 phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2930)
Hash 0f7c3fec8d17685824d15b789e107680
1a5a8cb303980141b854e21311929c2a433db511
895ef7c60fd6c5f051f2d3dc34767b77bc3b407ea128e6a3ea5a87ed1f808a44
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/ HTTP/1.1
Host: phimhddd.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sun, 24 Sep 2023 03:41:14 GMT
date: Sun, 24 Sep 2023 03:41:14 GMT
cache-control: private, max-age=0
last-modified: Tue, 21 Mar 2023 14:48:38 GMT
etag: W/"717df21b35fce0ad4d04cca7a5e8af8b1662ae982aa9120cad5a07ac1ffc587c"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 28668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 17d4dac18fa2e921b6142e9a6e7638e9
3e4d5337720590d6a2b8941baf90fa8dfd9d752b
f367bf987bcfb690ef53baf4cca8970b83fe522c820de2babb8cb3c943fa84c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
phimhddd.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 phimhddd.blogspot.com/js/cookienotice.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/cookienotice.js HTTP/1.1
Host: phimhddd.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Sun, 01 Oct 2023 03:41:15 GMT
cache-control: public, max-age=604800
last-modified: Sat, 23 Sep 2023 17:50:44 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-p2yKO1xw2WE/UWm_lZiSxcI/AAAAAAAAUQE/XnrG778V4hA/s1600/logo.png
200 OK 28 kB URL GET HTTP/2 3.bp.blogspot.com/-p2yKO1xw2WE/UWm_lZiSxcI/AAAAAAAAUQE/XnrG778V4hA/s1600/logo.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 320 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash ef80130ee914eb8a12dfad52b4aafd88
d9daf2c690fb5cdf44dd66a3939485e2bc4dbddb
e53ff632c27413907285d1d32c493746fb3220ebb3b0096ad08c5440009722d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-p2yKO1xw2WE/UWm_lZiSxcI/AAAAAAAAUQE/XnrG778V4hA/s1600/logo.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="logo.png"
x-content-type-options: nosniff
server: fife
content-length: 28268
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v801e"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-yS295gI-XAo/T6y5cZVfM4I/AAAAAAAADTA/XRg13DauQQw/s72-c/phim-Bay-cap-3.jpg
200 OK 3.5 kB URL GET HTTP/2 2.bp.blogspot.com/-yS295gI-XAo/T6y5cZVfM4I/AAAAAAAADTA/XRg13DauQQw/s72-c/phim-Bay-cap-3.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 05465a0d5ebb357d7ce42305cbe1eae2
2d2783c08a57c18fe1a9066c3af01dd4fae5d5f1
03b30d7a05ad75d0f4245694ff63d0b72811a56f824940c472b4d6c29b09ee90
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-yS295gI-XAo/T6y5cZVfM4I/AAAAAAAADTA/XRg13DauQQw/s72-c/phim-Bay-cap-3.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="phim-Bay-cap-3.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3532
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3b1a"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash a5f5467555eddaec1c42dc5e77af601a
47c172dac1e914c8962b8ad8684ef16ad8742ce2
2e1982a8d405cc85b00953f293a893a61dc1d08977d3cef226054c33ba3c3f1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-YUeQnJ5QCHM/Tv_u74e9xAI/AAAAAAAAFVc/zRD3UQaNXnw/s72-c/vesi.jpg
200 OK 3.9 kB URL GET HTTP/2 2.bp.blogspot.com/-YUeQnJ5QCHM/Tv_u74e9xAI/AAAAAAAAFVc/zRD3UQaNXnw/s72-c/vesi.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash a1b14bcff2fa05f09cd9f578f0919ccc
0e02eb53935d321fbfd73b1a3d20efb3b8fceb07
a018c530cb1e56de1f1cfae02d776a4ec21af0e9a5d60fd1d52cde3b1ec164fe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-YUeQnJ5QCHM/Tv_u74e9xAI/AAAAAAAAFVc/zRD3UQaNXnw/s72-c/vesi.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vesi.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3877
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1557"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-BaS6x0Gtz7M/Uc-OfCg12QI/AAAAAAAAWLo/iQ3lf83wQUs/s1600/728x90ads.png
200 OK 30 kB URL GET HTTP/2 1.bp.blogspot.com/-BaS6x0Gtz7M/Uc-OfCg12QI/AAAAAAAAWLo/iQ3lf83wQUs/s1600/728x90ads.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash c6f19199aa63ff1abe66e65c0da8824e
b4c3cae1e56f1b5ac181c3854fc7b1bd33c1df0c
e94b5d079d3e6b03fb5af58e1180ee5dafdf4334aebf9fe3510ed04883e9e238
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-BaS6x0Gtz7M/Uc-OfCg12QI/AAAAAAAAWLo/iQ3lf83wQUs/s1600/728x90ads.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="728x90ads.png"
x-content-type-options: nosniff
server: fife
content-length: 29804
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v801d"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-YUeQnJ5QCHM/Tv_u74e9xAI/AAAAAAAAFVc/zRD3UQaNXnw/w72-h72-p-k-no-nu/vesi.jpg
200 OK 3.7 kB URL GET HTTP/2 2.bp.blogspot.com/-YUeQnJ5QCHM/Tv_u74e9xAI/AAAAAAAAFVc/zRD3UQaNXnw/w72-h72-p-k-no-nu/vesi.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 85eed70a35b475cad6d15b4288782df9
ab96e341783a8d5cc5839c89d98bf9fda61343d3
77dcea5810539e0003ecb7d3e33c03a7dc482a3aa5f297eb97601c8f8afb457a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-YUeQnJ5QCHM/Tv_u74e9xAI/AAAAAAAAFVc/zRD3UQaNXnw/w72-h72-p-k-no-nu/vesi.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vesi.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3720
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1557"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-69f3wkeCPHw/TywGi0xwClI/AAAAAAAAFJE/xl3lkwU4qfI/w72-h72-p-k-no-nu/phim-co-em-vo.jpg
200 OK 3.3 kB URL GET HTTP/2 1.bp.blogspot.com/-69f3wkeCPHw/TywGi0xwClI/AAAAAAAAFJE/xl3lkwU4qfI/w72-h72-p-k-no-nu/phim-co-em-vo.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1e2318df84d365f2dd0cf5fa658b025a
85b055212a69c105bf8d10d18b5e6e9e9229b8ee
24fb46b22fac1b9dcc75fcae2ef584e66eb29174a13411347b4e0d845298217b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-69f3wkeCPHw/TywGi0xwClI/AAAAAAAAFJE/xl3lkwU4qfI/w72-h72-p-k-no-nu/phim-co-em-vo.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="phim-co-em-vo.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3344
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1491"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-Zo-JRoAyX7M/Ty9L8BrAJ3I/AAAAAAAAFNg/vWePtwIhXiU/w72-h72-p-k-no-nu/forbidden_sex_adultery.jpg
200 OK 4.0 kB URL GET HTTP/2 2.bp.blogspot.com/-Zo-JRoAyX7M/Ty9L8BrAJ3I/AAAAAAAAFNg/vWePtwIhXiU/w72-h72-p-k-no-nu/forbidden_sex_adultery.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 642e6cdc0e2e98ead29c4a1ffc2929c8
a3d915d3e80cadcd94bfa66d2cb893bac4baa026
37fce01f57fd9d8002026f11f6a95255610cd0393d0f050c39fcc9b200241b4c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-Zo-JRoAyX7M/Ty9L8BrAJ3I/AAAAAAAAFNg/vWePtwIhXiU/w72-h72-p-k-no-nu/forbidden_sex_adultery.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="forbidden_sex_adultery.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4015
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14d8"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-Zo-JRoAyX7M/Ty9L8BrAJ3I/AAAAAAAAFNg/vWePtwIhXiU/s72-c/forbidden_sex_adultery.jpg
200 OK 4.3 kB URL GET HTTP/2 2.bp.blogspot.com/-Zo-JRoAyX7M/Ty9L8BrAJ3I/AAAAAAAAFNg/vWePtwIhXiU/s72-c/forbidden_sex_adultery.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2b82dca4a5ef6af657ae9912475e21b0
3ab27ac8aa193b5f3a7f21e90ec269b9a7b7b95d
e8496d747267084ce413429ee6bd41d06a9f4841a453d949423f8fae9523b6e1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-Zo-JRoAyX7M/Ty9L8BrAJ3I/AAAAAAAAFNg/vWePtwIhXiU/s72-c/forbidden_sex_adultery.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="forbidden_sex_adultery.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4251
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14d8"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-2y9B0SpmgHI/TyiVWz4VIDI/AAAAAAAAAY0/yvhYLqJ9n6E/w72-h72-p-k-no-nu/chien+binh+spartacus.jpg
200 OK 3.8 kB URL GET HTTP/2 1.bp.blogspot.com/-2y9B0SpmgHI/TyiVWz4VIDI/AAAAAAAAAY0/yvhYLqJ9n6E/w72-h72-p-k-no-nu/chien+binh+spartacus.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, description=a2.jpg, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 7ac20a77e7c7020bfde8d08a98290f61
7bd4a7c9acb8cf70b8441b025dd2bf9f5c58147b
11ab3c773fc58926f17ed579ac818ef29543c1cce010786ba505ed6e3d113546
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-2y9B0SpmgHI/TyiVWz4VIDI/AAAAAAAAAY0/yvhYLqJ9n6E/w72-h72-p-k-no-nu/chien+binh+spartacus.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="chien binh spartacus.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3791
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v18d"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-yS295gI-XAo/T6y5cZVfM4I/AAAAAAAADTA/XRg13DauQQw/w72-h72-p-k-no-nu/phim-Bay-cap-3.jpg
200 OK 3.4 kB URL GET HTTP/2 2.bp.blogspot.com/-yS295gI-XAo/T6y5cZVfM4I/AAAAAAAADTA/XRg13DauQQw/w72-h72-p-k-no-nu/phim-Bay-cap-3.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 5e42ada1357199c56aa900c0d40b492b
85df031fcad5fcece49ae09be64e8a1c9753a6fd
7d169a924f3555fd6e14ae5df370e34cbabdd510c39a18b409b1c92584e0d8c7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-yS295gI-XAo/T6y5cZVfM4I/AAAAAAAADTA/XRg13DauQQw/w72-h72-p-k-no-nu/phim-Bay-cap-3.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="phim-Bay-cap-3.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3437
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3b1a"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-gnqhgw2NNbQ/TumOTUbhcgI/AAAAAAAACAw/jaueZ2XPMK8/s72-c/honey.jpg
200 OK 5.1 kB URL GET HTTP/2 1.bp.blogspot.com/-gnqhgw2NNbQ/TumOTUbhcgI/AAAAAAAACAw/jaueZ2XPMK8/s72-c/honey.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 7e60b316bc2dfbd3e43c11d3545afacc
960b38ddec560fa115eb3036bde68b38ec51afac
c63bdd6f67374bfbe86a06a2de07739e3edcd727833a8a76cc43dd0d979b83d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-gnqhgw2NNbQ/TumOTUbhcgI/AAAAAAAACAw/jaueZ2XPMK8/s72-c/honey.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="honey.jpg"
x-content-type-options: nosniff
server: fife
content-length: 5073
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v80c"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-q-O3eKEZ878/Ty9RyeF4GQI/AAAAAAAAFOY/uUT4QDEfmQQ/s72-c/phim-xin-anh-noi-that.jpg
200 OK 4.5 kB URL GET HTTP/2 4.bp.blogspot.com/-q-O3eKEZ878/Ty9RyeF4GQI/AAAAAAAAFOY/uUT4QDEfmQQ/s72-c/phim-xin-anh-noi-that.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 3774d96e997b8cb0968e4ea9afdfd7b4
0154b926783bfa10d7c4e47ff32ea9de5d2ed920
9d0a56a12c5c744e161ae1a2407b2bd74ebecc0cfaeaeeeafb0a596ffef0de8a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-q-O3eKEZ878/Ty9RyeF4GQI/AAAAAAAAFOY/uUT4QDEfmQQ/s72-c/phim-xin-anh-noi-that.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="phim-xin-anh-noi-that.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4504
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14e6"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-RmEhvHLfSck/Tzp-tYbqELI/AAAAAAAAFj8/mWNBM13PL7k/s72-c/phim-nu-than-tinh-duc.jpg
200 OK 13 kB URL GET HTTP/2 2.bp.blogspot.com/-RmEhvHLfSck/Tzp-tYbqELI/AAAAAAAAFj8/mWNBM13PL7k/s72-c/phim-nu-than-tinh-duc.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 122a4ce465a2e37deab489cb3e6777a9
91ca737af61022b5a676a38178e8d59087b5f45f
02ad4466ad2ffa6222e5279a2cbd95ed41b6a6d61b4eb9dc08a492fe2c398c7f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-RmEhvHLfSck/Tzp-tYbqELI/AAAAAAAAFj8/mWNBM13PL7k/s72-c/phim-nu-than-tinh-duc.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="phim-nu-than-tinh-duc.png"
x-content-type-options: nosniff
server: fife
content-length: 13417
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v163f"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-_0Q1SVa3QWw/TznzY5CSoFI/AAAAAAAAAq8/jgqa7xKCNEE/s72-c/Abe+Sada+Saigo+no+Nanokakan+%282011%29.jpg
200 OK 4.7 kB URL GET HTTP/2 1.bp.blogspot.com/-_0Q1SVa3QWw/TznzY5CSoFI/AAAAAAAAAq8/jgqa7xKCNEE/s72-c/Abe+Sada+Saigo+no+Nanokakan+%282011%29.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 13d4403e85f9534f5da385a23d482ed3
0c252706b968f204a8c58110c809dfec6eab3419
be8584d45331311f4589ce1fea5993120d1fe5dcb12aca44b0474dd6ac9ad0bf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-_0Q1SVa3QWw/TznzY5CSoFI/AAAAAAAAAq8/jgqa7xKCNEE/s72-c/Abe+Sada+Saigo+no+Nanokakan+%282011%29.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Abe Sada Saigo no Nanokakan (2011).jpg"
x-content-type-options: nosniff
server: fife
content-length: 4727
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2af"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-ok-UALWEXkY/UAaW2gkN2CI/AAAAAAAADnw/hMqvWNcUKxk/s72-c/1.jpg
200 OK 4.9 kB URL GET HTTP/2 4.bp.blogspot.com/-ok-UALWEXkY/UAaW2gkN2CI/AAAAAAAADnw/hMqvWNcUKxk/s72-c/1.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 8bb6ed93e30742572ab1587506b62cb7
69b596bef11d6616eb1f872bbf5b5a8816cfe5a7
2a6533128b29755492673ab4db125cfd252e4245822894c12352336d295c9b96
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-ok-UALWEXkY/UAaW2gkN2CI/AAAAAAAADnw/hMqvWNcUKxk/s72-c/1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="1.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4885
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "ve7c"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-g_cxttZjEgY/T4BihUUMjSI/AAAAAAAACNo/PX4ZWRAihqI/s72-c/2282_big.jpg
200 OK 2.6 kB URL GET HTTP/2 4.bp.blogspot.com/-g_cxttZjEgY/T4BihUUMjSI/AAAAAAAACNo/PX4ZWRAihqI/s72-c/2282_big.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 3011090825f4b9c913e88a4aa9ef1478
ff694e343e398e52abdddf3e58be9b2eeb7fd788
ae08a37f1779ef02140cd593021b2e8516777171aea44c72bb8d2e2ee0e3e027
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-g_cxttZjEgY/T4BihUUMjSI/AAAAAAAACNo/PX4ZWRAihqI/s72-c/2282_big.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="2282_big.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2560
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3b1f"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-2y9B0SpmgHI/TyiVWz4VIDI/AAAAAAAAAY0/yvhYLqJ9n6E/s72-c/chien+binh+spartacus.jpg
200 OK 3.9 kB URL GET HTTP/2 1.bp.blogspot.com/-2y9B0SpmgHI/TyiVWz4VIDI/AAAAAAAAAY0/yvhYLqJ9n6E/s72-c/chien+binh+spartacus.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, description=a2.jpg, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 5e596776d465c753e0b227d4717be6cc
2bc8a5f804a992904a87b3cb85fa9681a7c74ac7
f79ef4c5aab6bb3ef327209766c9c7cb4bb40ec1d399a1fac1f83d159bf508c8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-2y9B0SpmgHI/TyiVWz4VIDI/AAAAAAAAAY0/yvhYLqJ9n6E/s72-c/chien+binh+spartacus.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="chien binh spartacus.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3905
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v18d"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-ok-UALWEXkY/UAaW2gkN2CI/AAAAAAAADnw/hMqvWNcUKxk/w72-h72-p-k-no-nu/1.jpg
200 OK 5.0 kB URL GET HTTP/2 4.bp.blogspot.com/-ok-UALWEXkY/UAaW2gkN2CI/AAAAAAAADnw/hMqvWNcUKxk/w72-h72-p-k-no-nu/1.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 89f4f5e10e09fe34bd6186c5f4498ab1
4dd0259ff4fd761bf0a58ee9e76a5d4e5dbbdc3e
e5f640f7e062102ab0dae43828577436d12e074095d68e1d211c6303ffbf855a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-ok-UALWEXkY/UAaW2gkN2CI/AAAAAAAADnw/hMqvWNcUKxk/w72-h72-p-k-no-nu/1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="1.jpg"
x-content-type-options: nosniff
server: fife
content-length: 5002
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "ve7c"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-69f3wkeCPHw/TywGi0xwClI/AAAAAAAAFJE/xl3lkwU4qfI/s72-c/phim-co-em-vo.jpg
200 OK 3.3 kB URL GET HTTP/2 1.bp.blogspot.com/-69f3wkeCPHw/TywGi0xwClI/AAAAAAAAFJE/xl3lkwU4qfI/s72-c/phim-co-em-vo.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 52f0c3b1dc1a28e4e544f43cada0b87e
494dbdf5c69b09eebe4c9ec439a1a6d9dfe1c686
d16ac577bdb36f18773409a13efd5ac4b63dbb6ec412d10a783865f523a3098e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-69f3wkeCPHw/TywGi0xwClI/AAAAAAAAFJE/xl3lkwU4qfI/s72-c/phim-co-em-vo.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="phim-co-em-vo.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3336
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1491"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-g_cxttZjEgY/T4BihUUMjSI/AAAAAAAACNo/PX4ZWRAihqI/w72-h72-p-k-no-nu/2282_big.jpg
200 OK 2.5 kB URL GET HTTP/2 4.bp.blogspot.com/-g_cxttZjEgY/T4BihUUMjSI/AAAAAAAACNo/PX4ZWRAihqI/w72-h72-p-k-no-nu/2282_big.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 8f316ee99d4e8ba612dc712e979fc117
be6983fbabf0ad9c992606d4471abf5fd0ccc326
32563bff5a8c3aa2ddeda66f997062834e3aec7012a7cd6eb4cb26df268404d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-g_cxttZjEgY/T4BihUUMjSI/AAAAAAAACNo/PX4ZWRAihqI/w72-h72-p-k-no-nu/2282_big.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="2282_big.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2519
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3b1f"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-VJkWLlcX9rY/UYY_9a2y69I/AAAAAAAABZI/a8M6y08Gjv4/s1600/shopvochong.jpg
200 OK 62 kB URL GET HTTP/2 1.bp.blogspot.com/-VJkWLlcX9rY/UYY_9a2y69I/AAAAAAAABZI/a8M6y08Gjv4/s1600/shopvochong.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 575x90, components 3\012- data
Hash 3cc06e26c8f5a61e495f01284315aae0
0232ec4f7ebd05dfa9680edb4bf847f6b4eb653a
cec8950270774bd9067423e68343f5e6db65f902578137a09cc38c1e29a103fd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-VJkWLlcX9rY/UYY_9a2y69I/AAAAAAAABZI/a8M6y08Gjv4/s1600/shopvochong.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="shopvochong.jpg"
x-content-type-options: nosniff
server: fife
content-length: 61948
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v593"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-h7HrQXR5Leg/TtZWjmdlNCI/AAAAAAAAAvY/u7EwQG3fZsw/s72-c/Blue-sky-2010.jpg
200 OK 4.4 kB URL GET HTTP/2 2.bp.blogspot.com/-h7HrQXR5Leg/TtZWjmdlNCI/AAAAAAAAAvY/u7EwQG3fZsw/s72-c/Blue-sky-2010.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9221d82fb45b9663a74b14fa9db05e01
328689bd0332701fafb8efa1ce48dfb5b874cff4
2fd33d1e6f9f0104f10e16f2734758dc3f85735afff62d26fc622afce39aac51
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-h7HrQXR5Leg/TtZWjmdlNCI/AAAAAAAAAvY/u7EwQG3fZsw/s72-c/Blue-sky-2010.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Blue-sky-2010.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4419
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2f6"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 128fe2f55863135d7197a64373812d46
110a159115c90116bf86ddd99b83f643c0c0e854
e46b38e8f0a1defddd4f3bdb976cad1ff91ef32422673cae824dd0b10df28ea6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-_0Q1SVa3QWw/TznzY5CSoFI/AAAAAAAAAq8/jgqa7xKCNEE/w72-h72-p-k-no-nu/Abe+Sada+Saigo+no+Nanokakan+%282011%29.jpg
200 OK 4.8 kB URL GET HTTP/2 1.bp.blogspot.com/-_0Q1SVa3QWw/TznzY5CSoFI/AAAAAAAAAq8/jgqa7xKCNEE/w72-h72-p-k-no-nu/Abe+Sada+Saigo+no+Nanokakan+%282011%29.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2930514a664e01d4885edccf1fff86c7
dca1a8bd93c7510ade6bd025079088d730165b9f
2a2ba36d77380e06a499ca1f8af506309902691653536da30268e8ec2b19f2d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-_0Q1SVa3QWw/TznzY5CSoFI/AAAAAAAAAq8/jgqa7xKCNEE/w72-h72-p-k-no-nu/Abe+Sada+Saigo+no+Nanokakan+%282011%29.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Abe Sada Saigo no Nanokakan (2011).jpg"
x-content-type-options: nosniff
server: fife
content-length: 4752
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2af"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash cd2fc206c3846b01ab1d7bc1f361e789
312064b74f13e8043125760f60cd7f9894e6a0a2
6f47791a299e93bbc226e45eeebb8feed97bd34d2285e35536164b1fa3c44665
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash cd2fc206c3846b01ab1d7bc1f361e789
312064b74f13e8043125760f60cd7f9894e6a0a2
6f47791a299e93bbc226e45eeebb8feed97bd34d2285e35536164b1fa3c44665
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 00:59:42 GMT
expires: Thu, 19 Sep 2024 00:59:42 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Sep 2023 12:53:40 GMT
content-type: text/css
vary: Accept-Encoding
age: 355293
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-VtIEPKoKHAk/TyT8nlA-BUI/AAAAAAAAFqI/NihdPijlXAE/s72-c/pc140985.jpg
200 OK 3.3 kB URL GET HTTP/2 1.bp.blogspot.com/-VtIEPKoKHAk/TyT8nlA-BUI/AAAAAAAAFqI/NihdPijlXAE/s72-c/pc140985.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash c9c955f02010f4c9789f623d7384c8c9
5dbc49743d2564bf7fd6b051cf4c2e892fbabcba
3f7c46768c5dfb469f12b6451c3749f87a12c6d135de1191f6742d4fc67a133a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-VtIEPKoKHAk/TyT8nlA-BUI/AAAAAAAAFqI/NihdPijlXAE/s72-c/pc140985.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="pc140985.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3295
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Mon, 25 Sep 2023 03:41:15 GMT
cache-control: public, max-age=86400, no-transform
etag: "v16a2"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-euydHroiJGs/T2yFMEwHVpI/AAAAAAAAD7o/1xmxS8Bm-Ig/w72-h72-p-k-no-nu/loi-nguyen-tinh-yeu-phim-kinh-di.jpg
404 Not Found 1.7 kB URL GET HTTP/2 4.bp.blogspot.com/-euydHroiJGs/T2yFMEwHVpI/AAAAAAAAD7o/1xmxS8Bm-Ig/w72-h72-p-k-no-nu/loi-nguyen-tinh-yeu-phim-kinh-di.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-euydHroiJGs/T2yFMEwHVpI/AAAAAAAAD7o/1xmxS8Bm-Ig/w72-h72-p-k-no-nu/loi-nguyen-tinh-yeu-phim-kinh-di.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:15 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-euydHroiJGs/T2yFMEwHVpI/AAAAAAAAD7o/1xmxS8Bm-Ig/s72-c/loi-nguyen-tinh-yeu-phim-kinh-di.jpg
404 Not Found 1.7 kB URL GET HTTP/2 4.bp.blogspot.com/-euydHroiJGs/T2yFMEwHVpI/AAAAAAAAD7o/1xmxS8Bm-Ig/s72-c/loi-nguyen-tinh-yeu-phim-kinh-di.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-euydHroiJGs/T2yFMEwHVpI/AAAAAAAAD7o/1xmxS8Bm-Ig/s72-c/loi-nguyen-tinh-yeu-phim-kinh-di.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:15 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/plusone.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintB1:CC:B9:00:18:09:CE:C0:F7:B1:3F:29:95:6B:4A:93:CC:9A:19:0A
ValidityMon, 04 Sep 2023 08:23:36 GMT - Mon, 27 Nov 2023 08:23:35 GMT
File type ASCII text, with very long lines (2664)
Hash d5a9dc52df8ed46b53059311d8dfb95b
66727e1e9a1fdbad2dd7e3104bc8edba84676e48
21b7a044584ef7456c5de9e0cc8beb629f62c8663a558ec0d95862b18cf3b851
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21950
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Sun, 24 Sep 2023 03:41:15 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "00e1f4ea5a65d0e5"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 128fe2f55863135d7197a64373812d46
110a159115c90116bf86ddd99b83f643c0c0e854
e46b38e8f0a1defddd4f3bdb976cad1ff91ef32422673cae824dd0b10df28ea6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash a92bb4fa44dc5e89db73ebc0e40801f9
7f0416f383c857c48006658e927f4de597472863
e511500b4244c44623b4953f149d51e0ca0ab43098038aceaea5f9ce0740c3b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/562952797-widgets.js
200 OK 58 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/562952797-widgets.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (2215)
Hash 0804e4c7fd72aea2ce34a04d9ec9686c
9f46bef1076230a1271d151a506fd1d91ae7df93
5ea4b0b19c5f030a3b42b570c07cbea89a7899f1d824a95b53ad2c4ca18a2b5c
GET /static/v1/widgets/562952797-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57937
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 02:21:37 GMT
expires: Thu, 19 Sep 2024 02:21:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Sep 2023 00:55:53 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 350378
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nguyenhuytap.googlecode.com/files/recent14.js
404 Not Found 1.6 kB URL GET HTTP/3 nguyenhuytap.googlecode.com/files/recent14.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googlecode.com
Fingerprint8E:EC:81:12:99:8E:70:1C:EF:1C:B2:C6:8D:72:1D:C5:7D:D1:8E:19
ValidityMon, 04 Sep 2023 08:21:54 GMT - Mon, 27 Nov 2023 08:21:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 02d98be043f5c4b5e2cede9d01bb3941
70ca0814d98dee6f1b27f044fd0be02c232a70dd
3e22bdaf7445abbcc187f9c7a678abd7419253fe977ee7edc55320be7b36c6a9
GET /files/recent14.js HTTP/1.1
Host: nguyenhuytap.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1578
date: Sun, 24 Sep 2023 03:41:15 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
keyrom.googlecode.com/files/jquery.min.js
404 Not Found 1.6 kB URL GET HTTP/2 keyrom.googlecode.com/files/jquery.min.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googlecode.com
Fingerprint8E:EC:81:12:99:8E:70:1C:EF:1C:B2:C6:8D:72:1D:C5:7D:D1:8E:19
ValidityMon, 04 Sep 2023 08:21:54 GMT - Mon, 27 Nov 2023 08:21:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 25fd4eee6147eb7675661cabda5141ba
0d110cb5bf04074e1d2c556f3c942ae346e1714e
1b1bc6b5e7c48a45c558fd79a9323a8fcb6decbf17ed8db379d00c9ef941e23e
GET /files/jquery.min.js HTTP/1.1
Host: keyrom.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1580
date: Sun, 24 Sep 2023 03:41:15 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/platform.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintB1:CC:B9:00:18:09:CE:C0:F7:B1:3F:29:95:6B:4A:93:CC:9A:19:0A
ValidityMon, 04 Sep 2023 08:23:36 GMT - Mon, 27 Nov 2023 08:23:35 GMT
File type ASCII text, with very long lines (2664)
Hash ce7e88034e2b1226294f3d7e515299c9
326b37908964a9f69460d42cb646716c9f1e86e1
08280e7af6518c3230f34d50cb9534b35c82fddd96138896e2608d9a12661bbe
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21949
date: Sun, 24 Sep 2023 03:41:15 GMT
expires: Sun, 24 Sep 2023 03:41:15 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "22f179323a7dd95a"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash a5f5467555eddaec1c42dc5e77af601a
47c172dac1e914c8962b8ad8684ef16ad8742ce2
2e1982a8d405cc85b00953f293a893a61dc1d08977d3cef226054c33ba3c3f1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mz-v18puQJK_rHj-SidAmSh6BvMt2n6tiCOib_qg12MsydhMgvC1PK0qO9H9JoPkzcbYly9c-83qPwPoPr-zWHNsLf3LohL4Xy91g=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mz-v18puQJK_rHj-SidAmSh6BvMt2n6tiCOib_qg12MsydhMgvC1PK0qO9H9JoPkzcbYly9c-83qPwPoPr-zWHNsLf3LohL4Xy91g=w72-h72-p-k-no-nu
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 0d7c7f2cbeb7e30fa31d4a7e434b4ca3
11bb9547330a72bf4c56ec74fdb58c3e180ccfd2
2650985e38134466f5595f8f39bd22eb99275cf7b7f1be846f780823dd216e2c
GET /blogger_img_proxy/AAOd8Mz-v18puQJK_rHj-SidAmSh6BvMt2n6tiCOib_qg12MsydhMgvC1PK0qO9H9JoPkzcbYly9c-83qPwPoPr-zWHNsLf3LohL4Xy91g=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:15 GMT
server: fife
content-length: 1703
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash f5e8c4f8f278f9efbee06f1da6ca6afa
07cea281d3989868b6a516d85d886f223231c690
207b4b722f6e6827f867905eb8f9d07bb251106fd318bba1b063d0127920444a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash a92bb4fa44dc5e89db73ebc0e40801f9
7f0416f383c857c48006658e927f4de597472863
e511500b4244c44623b4953f149d51e0ca0ab43098038aceaea5f9ce0740c3b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash cd2fc206c3846b01ab1d7bc1f361e789
312064b74f13e8043125760f60cd7f9894e6a0a2
6f47791a299e93bbc226e45eeebb8feed97bd34d2285e35536164b1fa3c44665
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash cd2fc206c3846b01ab1d7bc1f361e789
312064b74f13e8043125760f60cd7f9894e6a0a2
6f47791a299e93bbc226e45eeebb8feed97bd34d2285e35536164b1fa3c44665
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash a92bb4fa44dc5e89db73ebc0e40801f9
7f0416f383c857c48006658e927f4de597472863
e511500b4244c44623b4953f149d51e0ca0ab43098038aceaea5f9ce0740c3b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
200 OK 56 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (1503)
Hash 15e055db474417da5f06d825db39614c
439af736acb77995df3597d250af862633648084
97ad2f5f2d0652571a124e7b07415cebe4e70edc45469ed95bf19cc6898e54cc
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 55720
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:23:50 GMT
expires: Tue, 17 Sep 2024 17:23:50 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 469046
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nguyenhuytap.googlecode.com/files/recent14.js
404 Not Found 1.6 kB URL GET HTTP/3 nguyenhuytap.googlecode.com/files/recent14.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googlecode.com
Fingerprint8E:EC:81:12:99:8E:70:1C:EF:1C:B2:C6:8D:72:1D:C5:7D:D1:8E:19
ValidityMon, 04 Sep 2023 08:21:54 GMT - Mon, 27 Nov 2023 08:21:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 02d98be043f5c4b5e2cede9d01bb3941
70ca0814d98dee6f1b27f044fd0be02c232a70dd
3e22bdaf7445abbcc187f9c7a678abd7419253fe977ee7edc55320be7b36c6a9
GET /files/recent14.js HTTP/1.1
Host: nguyenhuytap.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1578
date: Sun, 24 Sep 2023 03:41:16 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/dyn-css/authorization.css?targetBlogID=983411471944363842&zx=c52b45ff-8f42-4fd9-99cf-69cedcb0f52f
200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=983411471944363842&zx=c52b45ff-8f42-4fd9-99cf-69cedcb0f52f
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=983411471944363842&zx=c52b45ff-8f42-4fd9-99cf-69cedcb0f52f HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 03:41:16 GMT
last-modified: Sun, 24 Sep 2023 03:41:16 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
4.bp.blogspot.com/-15aCXWHUUoI/UWVJ-IJvvkI/AAAAAAAAAyY/7eQILI_I4VI/s1600/bg.jpg
200 OK 626 kB URL GET HTTP/3 4.bp.blogspot.com/-15aCXWHUUoI/UWVJ-IJvvkI/AAAAAAAAAyY/7eQILI_I4VI/s1600/bg.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 1540x900, components 3\012- data
Size 626 kB (625628 bytes)
Hash 4e823ea53736ef9fde876463960c2982
5d99dac426c545a8e09b26a4f69a850c4b656653
5b9c6c7c42b24111a43338a6a050b17a91f009d7f3deb0b9dac1eb05f1bd854d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-15aCXWHUUoI/UWVJ-IJvvkI/AAAAAAAAAyY/7eQILI_I4VI/s1600/bg.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bg.jpg"
x-content-type-options: nosniff
server: fife
content-length: 625628
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:16 GMT
expires: Mon, 25 Sep 2023 03:41:16 GMT
cache-control: public, max-age=86400, no-transform
age: 0
etag: "v327"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-jgJfIQRp-rY/UdKmiJAqYdI/AAAAAAAAWOg/DRp7Tx_ir7M/s1600/no-repeat.png
200 OK 20 kB URL GET HTTP/3 3.bp.blogspot.com/-jgJfIQRp-rY/UdKmiJAqYdI/AAAAAAAAWOg/DRp7Tx_ir7M/s1600/no-repeat.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f4693b56566fd2c1ae9f0938a88ad95
83b07a7dd136eb09ad54013fda41825cfd535f6e
cc23ee0063dad22328022aae7ad45025d270495723ab7692f379a377870a2d20
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-jgJfIQRp-rY/UdKmiJAqYdI/AAAAAAAAWOg/DRp7Tx_ir7M/s1600/no-repeat.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="no-repeat.png"
x-content-type-options: nosniff
server: fife
content-length: 20420
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:16 GMT
expires: Mon, 25 Sep 2023 03:41:16 GMT
cache-control: public, max-age=86400, no-transform
age: 0
etag: "v58e9"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/--j4lVKfbFFQ/UdKoN6wcDiI/AAAAAAAAWOw/UL5xCQqSHq4/s156/repeat-x.png
200 OK 346 B URL GET HTTP/3 3.bp.blogspot.com/--j4lVKfbFFQ/UdKoN6wcDiI/AAAAAAAAWOw/UL5xCQqSHq4/s156/repeat-x.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 1 x 156, 8-bit/color RGB, non-interlaced\012- data
Hash 6d277380a4781034a53b54ca471b975c
3c98aadc05810ec60005126d0cdb23d66ea9c013
036e894263097281dd84e720f7963483d8e066e9b8686f5b7360577a5b47b207
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /--j4lVKfbFFQ/UdKoN6wcDiI/AAAAAAAAWOw/UL5xCQqSHq4/s156/repeat-x.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="repeat-x.png"
x-content-type-options: nosniff
server: fife
content-length: 346
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:16 GMT
expires: Mon, 25 Sep 2023 03:41:16 GMT
cache-control: public, max-age=86400, no-transform
age: 0
etag: "v58ed"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwtMd_AHATTutNc8fkK70dmSmT6K3pPbJ7DCeFBjjME3giu1F8_ZZV_GG57ubJmVlzagXABRylewhwgteTbAnT4D5YFoI1hX5yYH08=s0-d
404 Not Found 1.7 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwtMd_AHATTutNc8fkK70dmSmT6K3pPbJ7DCeFBjjME3giu1F8_ZZV_GG57ubJmVlzagXABRylewhwgteTbAnT4D5YFoI1hX5yYH08=s0-d
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 4470f0b32fed98010534058038ef1a66
cb0a0e523a7b8e13afb71c1d74957669524af896
ae75dbba871acab6c5d6195f4b33be8643561dbe2ace40fef471698181d96924
GET /blogger_img_proxy/AAOd8MwtMd_AHATTutNc8fkK70dmSmT6K3pPbJ7DCeFBjjME3giu1F8_ZZV_GG57ubJmVlzagXABRylewhwgteTbAnT4D5YFoI1hX5yYH08=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:16 GMT
server: fife
content-length: 1691
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-3W0OHTJwYN0/ULO9wskHnII/AAAAAAAAGGs/aJWlK5TQtwQ/s1600/bg_outer.png
404 Not Found 832 B URL GET HTTP/3 3.bp.blogspot.com/-3W0OHTJwYN0/ULO9wskHnII/AAAAAAAAGGs/aJWlK5TQtwQ/s1600/bg_outer.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-3W0OHTJwYN0/ULO9wskHnII/AAAAAAAAGGs/aJWlK5TQtwQ/s1600/bg_outer.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:16 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-GZP1O27-kCg/UKk0DRsozhI/AAAAAAAAFfI/9zy-hFXgTbk/s1600/search-icon.png
404 Not Found 832 B URL GET HTTP/3 3.bp.blogspot.com/-GZP1O27-kCg/UKk0DRsozhI/AAAAAAAAFfI/9zy-hFXgTbk/s1600/search-icon.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-GZP1O27-kCg/UKk0DRsozhI/AAAAAAAAFfI/9zy-hFXgTbk/s1600/search-icon.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:16 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
phimhddd.blogspot.com/feeds/posts/default/-/%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/?alt=json-in-script&callback=numberOfPosts
200 OK 1.5 kB URL GET HTTP/3 phimhddd.blogspot.com/feeds/posts/default/-/%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/?alt=json-in-script&callback=numberOfPosts
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type Unicode text, UTF-8 text, with very long lines (3632)
Hash 3539dd99d1d5e87d953f00c747f27896
9c4f8eb609b4873e71de2b61c11d947f49f892bd
2038f5034efaf457723ac8148991c5e1e26c62a4e5375ab7b081db8a9dae3504
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /feeds/posts/default/-/%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/?alt=json-in-script&callback=numberOfPosts HTTP/1.1
Host: phimhddd.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"9429909c40fef35e2efa74153239be4054b84dc8c6c963c7bb977e949db5ec8a"
date: Sun, 24 Sep 2023 03:41:17 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 24 Sep 2023 03:41:18 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 21 Mar 2023 14:48:38 GMT
content-encoding: gzip
content-length: 1519
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_1?le=scs
200 OK 15 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_1?le=scs
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (3295)
Hash ed45adff0a57235373fdd2903eec60b9
31f91a8c7f7581c0288e437726969d3945c29a6a
7062c2ccdcb39c75f06f01ff5a5c5a41e6f4f1c9d4cd2f590b2ee1615099647c
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 15112
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 18:01:59 GMT
expires: Tue, 17 Sep 2024 18:01:59 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 466758
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-La1GbPAWXcs/ULheJCnANPI/AAAAAAAAA5g/wpajcjRCjc8/s1600/google1.png
200 OK 2.0 kB URL GET HTTP/3 3.bp.blogspot.com/-La1GbPAWXcs/ULheJCnANPI/AAAAAAAAA5g/wpajcjRCjc8/s1600/google1.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 188 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 13d43857686a77db144ed6a40eefee9b
88dfc80157ef3238a3ac4aa90d7b5c666d045f77
e1ace5e0d703a38f7afb2556f6c16317fde59e1b5b7ee30f52a9cee9408ee72a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-La1GbPAWXcs/ULheJCnANPI/AAAAAAAAA5g/wpajcjRCjc8/s1600/google1.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="google1.png"
x-content-type-options: nosniff
server: fife
content-length: 1976
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:17 GMT
expires: Mon, 25 Sep 2023 03:41:17 GMT
cache-control: public, max-age=86400, no-transform
age: 0
etag: "v398"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mz-v18puQJK_rHj-SidAmSh6BvMt2n6tiCOib_qg12MsydhMgvC1PK0qO9H9JoPkzcbYly9c-83qPwPoPr-zWHNsLf3LohL4Xy91g=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/AAOd8Mz-v18puQJK_rHj-SidAmSh6BvMt2n6tiCOib_qg12MsydhMgvC1PK0qO9H9JoPkzcbYly9c-83qPwPoPr-zWHNsLf3LohL4Xy91g=w72-h72-p-k-no-nu
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 0d7c7f2cbeb7e30fa31d4a7e434b4ca3
11bb9547330a72bf4c56ec74fdb58c3e180ccfd2
2650985e38134466f5595f8f39bd22eb99275cf7b7f1be846f780823dd216e2c
GET /blogger_img_proxy/AAOd8Mz-v18puQJK_rHj-SidAmSh6BvMt2n6tiCOib_qg12MsydhMgvC1PK0qO9H9JoPkzcbYly9c-83qPwPoPr-zWHNsLf3LohL4Xy91g=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:17 GMT
server: fife
content-length: 1703
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-_8aUmsu3yAE/ULOokuty4mI/AAAAAAAAGGA/FqHIrABQSNg/s1600/sidebar_titlebg.png
404 Not Found 832 B URL GET HTTP/3 3.bp.blogspot.com/-_8aUmsu3yAE/ULOokuty4mI/AAAAAAAAGGA/FqHIrABQSNg/s1600/sidebar_titlebg.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-_8aUmsu3yAE/ULOokuty4mI/AAAAAAAAGGA/FqHIrABQSNg/s1600/sidebar_titlebg.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:17 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.bp.blogspot.com/-RoYP5EaK-9A/ULOpA8BAwLI/AAAAAAAAGGI/4mFB_qB1gHc/s1600/sprite.png
404 Not Found 832 B URL GET HTTP/3 2.bp.blogspot.com/-RoYP5EaK-9A/ULOpA8BAwLI/AAAAAAAAGGI/4mFB_qB1gHc/s1600/sprite.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-RoYP5EaK-9A/ULOpA8BAwLI/AAAAAAAAGGI/4mFB_qB1gHc/s1600/sprite.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:17 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-2cvoxDn5fEs/UK8e4iooD6I/AAAAAAAAF3M/8VUNL8gmQgo/s1600/tab_bg2.png
404 Not Found 832 B URL GET HTTP/3 3.bp.blogspot.com/-2cvoxDn5fEs/UK8e4iooD6I/AAAAAAAAF3M/8VUNL8gmQgo/s1600/tab_bg2.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-2cvoxDn5fEs/UK8e4iooD6I/AAAAAAAAF3M/8VUNL8gmQgo/s1600/tab_bg2.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:17 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 126b0a9f06e2940180b9f3d7bf846ee3
837d11e1daeabaeb84b17ab34e3668d5f654f5bd
0f4e2ec6b04e2bbfec447077213cb23fe5008094a636f4de026a9534a0edb691
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 42 B URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Sat, 23 Sep 2023 14:42:49 GMT
expires: Sat, 07 Oct 2023 14:42:49 GMT
cache-control: public, max-age=1209600
age: 46708
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_2?le=scs
200 OK 29 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_2?le=scs
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (1584)
Hash 1818309d1e5149aa0d52ae8e6d29606d
213eacc32d50c50d3a9867df947fd8acc63ee183
34a04611304d98f9b53a30ac689eae800d77c00d1b2b4e2c7013f7360b9c6136
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_2?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 28783
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:41:57 GMT
expires: Tue, 17 Sep 2024 17:41:57 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 467960
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.bp.blogspot.com/-DvBRX9RgyRI/ULOqGwQDmWI/AAAAAAAAGGY/ByJEVOPBK8Y/s1600/sprite2.png
404 Not Found 832 B URL GET HTTP/3 2.bp.blogspot.com/-DvBRX9RgyRI/ULOqGwQDmWI/AAAAAAAAGGY/ByJEVOPBK8Y/s1600/sprite2.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-DvBRX9RgyRI/ULOqGwQDmWI/AAAAAAAAGGY/ByJEVOPBK8Y/s1600/sprite2.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:17 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=https%3A%2F%2Fphimhddd.blogspot.com&url=http%3A%2F%2Fwww.share123.vn%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
226 B URL apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=https%3A%2F%2Fphimhddd.blogspot.com&url=http%3A%2F%2Fwww.share123.vn%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintB1:CC:B9:00:18:09:CE:C0:F7:B1:3F:29:95:6B:4A:93:CC:9A:19:0A
ValidityMon, 04 Sep 2023 08:23:36 GMT - Mon, 27 Nov 2023 08:23:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 4df07581948280a6e769a24c5d99d775
843a2c95362347eb8894a6acb607f139be65ded4
3561b93a48d81fac116ccd6e60163bd382abb1d594c81240f5718feb1f197f73
GET /u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=https%3A%2F%2Fphimhddd.blogspot.com&url=http%3A%2F%2Fwww.share123.vn%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: sffe
content-length: 226
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:17 GMT
expires: Sun, 24 Sep 2023 04:11:17 GMT
cache-control: public, max-age=1800
content-type: text/html; charset=UTF-8
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 126b0a9f06e2940180b9f3d7bf846ee3
837d11e1daeabaeb84b17ab34e3668d5f654f5bd
0f4e2ec6b04e2bbfec447077213cb23fe5008094a636f4de026a9534a0edb691
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.googleusercontent.com/-F6dnnxevH6E/To15hDLvzlI/AAAAAAAAAXc/POB4nJMpnzM/s800/search_button.png
404 Not Found 832 B URL GET HTTP/3 lh5.googleusercontent.com/-F6dnnxevH6E/To15hDLvzlI/AAAAAAAAAXc/POB4nJMpnzM/s800/search_button.png
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /-F6dnnxevH6E/To15hDLvzlI/AAAAAAAAAXc/POB4nJMpnzM/s800/search_button.png HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:17 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
2.6 kB URL www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3170)
Hash 627c1e70269d888e08958b29d4291e55
d488f5ab5a1d3b7b46e90da6c08e9f093aa3a5d9
af0325c4f299817af3f1a82a41dc3c1d34cf72785073bf98869965f946188fdf
GET /navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 03:41:17 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2564
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash a919451a4b737e61a8d4798732bd25ca
81887ca8ba5721aae92b25155ee72fb2950bc328
85f10626a1276cce94e6e3fd439fb0d982645177ba3ed0cb9d554ce6432bd16f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/navbar/arrows-light.png
200 OK 117 B URL GET HTTP/3 resources.blogblog.com/img/navbar/arrows-light.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fphimhddd.blogspot.com&pfname=&rpctoken=27545099
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 25c2b0cfe0ad4dcda4a0e3727d091d80
b9d16f4311e64648b7970baf00cb9841e3c3351b
bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 21:11:33 GMT
expires: Mon, 25 Sep 2023 21:11:33 GMT
cache-control: public, max-age=604800
last-modified: Mon, 18 Sep 2023 05:51:50 GMT
content-type: image/png
age: 455384
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/icons_peach.png
200 OK 907 B URL GET HTTP/3 resources.blogblog.com/img/navbar/icons_peach.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fphimhddd.blogspot.com&pfname=&rpctoken=27545099
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 3718077fe5eb689b0ded987a52881d06
f0ce5596ef43f850c400cbbc0556697fb3e7b232
72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 00:54:56 GMT
expires: Wed, 27 Sep 2023 00:54:56 GMT
cache-control: public, max-age=604800
last-modified: Tue, 19 Sep 2023 12:53:40 GMT
content-type: image/png
age: 355581
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fphimhddd.blogspot.com&pfname=&rpctoken=27545099
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2664)
Hash 5ea6889749e35d1997d3d7b45b526cbe
b2be66a88cda67c0d38638906a19d3502db702f2
f8f1efe1d0d52a96dff5f0e285975b33bc89f9093c51e50024fa4c1d3810041f
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21959
date: Sun, 24 Sep 2023 03:41:17 GMT
expires: Sun, 24 Sep 2023 03:41:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "fb306044a1b24cfb"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-uhOZqaYaZr8/T-HkFtXPx-I/AAAAAAAAA-Y/tLdA_-8qlQ4/s1600/error.jpg
404 Not Found 832 B URL GET HTTP/3 1.bp.blogspot.com/-uhOZqaYaZr8/T-HkFtXPx-I/AAAAAAAAA-Y/tLdA_-8qlQ4/s1600/error.jpg
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-uhOZqaYaZr8/T-HkFtXPx-I/AAAAAAAAA-Y/tLdA_-8qlQ4/s1600/error.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:17 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
200 OK 137 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fphimhddd.blogspot.com&pfname=&rpctoken=27545099
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (1503)
Size 137 kB (136623 bytes)
Hash 216b38745f3cce08ced4200dd91c83a4
3f6bd3ee5da23060e704e8116b5a0961e20a80bf
a8183085f79cc939053929846561337bf0b9287aedece2d7eb154a87e572bab1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 136623
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:31:11 GMT
expires: Tue, 17 Sep 2024 17:31:11 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 468607
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwtMd_AHATTutNc8fkK70dmSmT6K3pPbJ7DCeFBjjME3giu1F8_ZZV_GG57ubJmVlzagXABRylewhwgteTbAnT4D5YFoI1hX5yYH08=s0-d
404 Not Found 1.7 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/AAOd8MwtMd_AHATTutNc8fkK70dmSmT6K3pPbJ7DCeFBjjME3giu1F8_ZZV_GG57ubJmVlzagXABRylewhwgteTbAnT4D5YFoI1hX5yYH08=s0-d
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 4470f0b32fed98010534058038ef1a66
cb0a0e523a7b8e13afb71c1d74957669524af896
ae75dbba871acab6c5d6195f4b33be8643561dbe2ace40fef471698181d96924
GET /blogger_img_proxy/AAOd8MwtMd_AHATTutNc8fkK70dmSmT6K3pPbJ7DCeFBjjME3giu1F8_ZZV_GG57ubJmVlzagXABRylewhwgteTbAnT4D5YFoI1hX5yYH08=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 24 Sep 2023 03:41:18 GMT
server: fife
content-length: 1691
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/rpc:shindig_random.js?onload=init
200 OK 7.1 kB URL GET HTTP/3 apis.google.com/js/rpc:shindig_random.js?onload=init
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fphimhddd.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#rpctoken=245577738&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2056)
Hash 485cb0eecd71f0ea61a51c4e28748d1e
d16a22aee31487496a2859d1f3d469e3c7bbe9a2
408103c7206ee65957a241be6482e6c41ced6026d58ceb6be57b67d655af8409
GET /js/rpc:shindig_random.js?onload=init HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 7125
date: Sun, 24 Sep 2023 03:41:18 GMT
expires: Sun, 24 Sep 2023 03:41:18 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "e3b648773372e9f9"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.gstatic.com/accounts/o/478691279-postmessagerelay.js
200 OK 5.2 kB URL GET HTTP/2 ssl.gstatic.com/accounts/o/478691279-postmessagerelay.js
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fphimhddd.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#rpctoken=245577738&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (3496)
Hash 92169c8a0fbf6e404267d0705cdbdf42
a5cd88b74ca5ced239cdbfb458fe25540d671f46
dba668b49a111527aac8f616b9053ea57c944e01a84ebdcd02a13da921223384
GET /accounts/o/478691279-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 5186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 17:25:12 GMT
expires: Wed, 18 Sep 2024 17:25:12 GMT
cache-control: public, max-age=31536000
age: 382566
last-modified: Tue, 05 Sep 2023 16:15:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:41:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
200 OK 66 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fphimhddd.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#rpctoken=245577738&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (1503)
Hash d8f7db9247244c51bf840de37db47dbe
242635c0501ed48e4560201e82b0177058b8e4d8
07a3a3613cee2564580705ee973949da575fb7c68e213c47afa5574fd02ed573
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 65699
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:23:51 GMT
expires: Tue, 17 Sep 2024 17:23:51 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 469047
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
phimhddd.blogspot.com/favicon.ico
200 OK 412 B URL GET HTTP/3 phimhddd.blogspot.com/favicon.ico
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: phimhddd.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon
expires: Sun, 24 Sep 2023 03:41:18 GMT
date: Sun, 24 Sep 2023 03:41:18 GMT
cache-control: private, max-age=86400
last-modified: Tue, 21 Mar 2023 14:48:38 GMT
etag: W/"717df21b35fce0ad4d04cca7a5e8af8b1662ae982aa9120cad5a07ac1ffc587c"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fphimhddd.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
200 OK 565 B URL GET HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fphimhddd.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint2F:C1:71:0A:05:D9:0F:38:EF:D1:16:F7:50:AF:41:48:6B:F9:BA:B5
ValidityMon, 04 Sep 2023 08:23:30 GMT - Mon, 27 Nov 2023 08:23:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (585), with no line terminators
Hash 0191579312ab94eb6795e3e7e5610cac
31f019a5f1236b876dd9d778b9dd81ebe002aa0f
54e1af675e38b3591716638a1f76af5e713132bfda424815df4e70fb4733af60
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fphimhddd.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 03:41:17 GMT
content-security-policy: script-src 'nonce-Oy7FJOfFz0iHlM7adbRg4Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport, require-trusted-types-for 'script';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=https%3A%2F%2Fphimhddd.blogspot.com&url=http%3A%2F%2Fwww.share123.vn%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
301 Moved Permanently 0 B URL GET HTTP/3 apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=https%3A%2F%2Fphimhddd.blogspot.com&url=http%3A%2F%2Fwww.share123.vn%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=https%3A%2F%2Fphimhddd.blogspot.com&url=http%3A%2F%2Fwww.share123.vn%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: sffe
content-length: 226
x-xss-protection: 0
date: Sun, 24 Sep 2023 03:41:17 GMT
expires: Sun, 24 Sep 2023 04:11:17 GMT
cache-control: public, max-age=1800
content-type: text/html; charset=UTF-8
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
200 OK 6.7 kB URL GET HTTP/3 www.blogger.com/navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Requested by https://phimhddd.blogspot.com/search/label/vi%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%A1%C3%AF%C2%BF%C2%BD%C3%AF%C2%BF%C2%BD%EF%BF%BD%EF%BF%BD%C2%BB!t/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6851), with no line terminators
Hash f0bc1e8013bae370bea077bcfd7d787d
d84b9bcbc819f8c7bfc125a0cb478fa694991776
766396a4c8ac0d5d8ea66049c1bfecedf2fe0ab1c3405313ba0f5320d54c5f41
GET /navbar.g?targetBlogID=983411471944363842&blogName=phim+hd&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://phimhddd.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=https://phimhddd.blogspot.com/&vt=5033872790699393914&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phimhddd.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 03:41:17 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2564
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
172.217.21.161
54.37.238.86
0.0.0.0