| forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html |  216.58.207.193 | | 61 kB |
URL forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html IP216.58.207.193:0
File typeHTML document, ASCII text, with very long lines (12679) Hash82240285fc11b806f334440ad9bd82ba d2d4470a766f7b30234127274c9242767e722345 264b232861969448f7f974fa944a9db4e63423c96ac2e0a850b805872b584f1e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2017/07/australia-business-conditions-good-aud.html HTTP/1.1
Host: forexchair.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 19 Apr 2024 07:51:21 GMT
date: Fri, 19 Apr 2024 07:51:21 GMT
cache-control: private, max-age=0
last-modified: Mon, 19 Feb 2024 06:49:27 GMT
etag: W/"ed4a5e344b52981489d9eeb9fedda087684b16829fb80b05c0e6959e6e9ba576"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 61272
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forexchair.blogspot.com/js/cookienotice.js | 216.58.207.193 | | 2.0 kB |
URL forexchair.blogspot.com/js/cookienotice.js IP216.58.207.193:0
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: forexchair.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Fri, 19 Apr 2024 07:51:22 GMT
expires: Fri, 26 Apr 2024 07:51:22 GMT
cache-control: public, max-age=604800
last-modified: Thu, 18 Apr 2024 18:06:59 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/platform.js | 142.250.74.110 | 200 OK | 21 kB |
URL GET HTTP/2apis.google.com/js/platform.js IP142.250.74.110:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE3:82:77:FB:12:E7:1E:09:41:8D:12:01:82:E8:DB:CC:47:EB:3F:57 ValidityMon, 04 Mar 2024 07:19:24 GMT - Mon, 27 May 2024 07:19:23 GMT
File typeJavaScript source, ASCII text, with very long lines (2050) Hash798dea345bd0af3e48de30cfcd337d47 cd00120ad15ea77c8cf78358259e85e0766ac773 cad302ce096e88c3b635b4a0538bbdbf1fbbe1e8329aa700458c18a452cac919
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21304
date: Fri, 19 Apr 2024 07:51:22 GMT
expires: Fri, 19 Apr 2024 07:51:22 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "14aeab144b0e1576"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css | 216.58.207.233 | 200 OK | 6.6 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css IP216.58.207.233:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeASCII text, with very long lines (30596) Hashe3f09df1bc175f411d1ec3dfb5afb17b 3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9 1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 21:58:53 GMT
expires: Tue, 15 Apr 2025 21:58:53 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:56:10 GMT
content-type: text/css
vary: Accept-Encoding
age: 294749
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js | 142.250.74.42 | 200 OK | 34 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js IP142.250.74.42:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (65483) Hash3576a6e73c9dccdbbc4a2cf8ff544ad7 06e872300088b9ba8a08427d28ed0efcdf9c6ff5 61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:52:47 GMT
expires: Wed, 16 Apr 2025 09:52:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 251915
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/517362887-widgets.js | 216.58.207.233 | 200 OK | 52 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/517362887-widgets.js IP216.58.207.233:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash86de7fcdc04a3785d1993eb37f6195b1 4a5e86cb75b2293474687d0df446be05f82834d5 94b59a1adfdfdf56b53562950e3e27938b87028f31544b2ba65d71be73c83e6c
GET /static/v1/widgets/517362887-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51586
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 02:15:44 GMT
expires: Tue, 15 Apr 2025 02:15:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 01:51:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 365738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/jsbin/4269703388-comment_from_post_iframe.js | 216.58.207.233 | | 6.8 kB |
URL www.blogger.com/static/v1/jsbin/4269703388-comment_from_post_iframe.js IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeJavaScript source, ASCII text, with very long lines (2169) Hashb0d91146560437ffe492330479c2803e 9bdb83b95969c2ff6603e3d4ca2c59132e719b7d 23d82536efbe90719d594c5d074bbd02dc4047aeff609910a1730551b486cac7
GET /static/v1/jsbin/4269703388-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6758
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 03:10:13 GMT
expires: Fri, 18 Apr 2025 03:10:13 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 17 Apr 2024 16:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 103269
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs | 142.250.74.110 | | 61 kB |
URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs IP142.250.74.110:0
CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE3:82:77:FB:12:E7:1E:09:41:8D:12:01:82:E8:DB:CC:47:EB:3F:57 ValidityMon, 04 Mar 2024 07:19:24 GMT - Mon, 27 May 2024 07:19:23 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash76133c3df4d28244701891e8670f4545 019196e766c703aea7c87c6d7840814313012c97 8a04bb79b7bcc37f3f5f6214e1dc28fb47be1c8d445a431976f9fdc296454e63
GET /_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61024
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:07:14 GMT
expires: Fri, 18 Apr 2025 17:07:14 GMT
cache-control: public, max-age=31536000
age: 53048
last-modified: Sun, 31 Mar 2024 15:20:31 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/js/google_top_exp.js | 172.217.21.162 | | 42 B |
URL pagead2.googlesyndication.com/pagead/js/google_top_exp.js IP172.217.21.162:0
Hash7f5f2be159837d73b72a4b37616bce44 c93d7f25b530b05c26440d3352213b683d03dcc3 ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Thu, 18 Apr 2024 11:16:09 GMT
expires: Thu, 02 May 2024 11:16:09 GMT
cache-control: public, max-age=1209600
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 74113
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4.bp.blogspot.com/-XQ1mCeIfl54/U76qP1fXB7I/AAAAAAAAAZM/zbvhz2EYFR4/homes.png | 142.250.74.161 | 200 OK | 571 B |
URL GET HTTP/24.bp.blogspot.com/-XQ1mCeIfl54/U76qP1fXB7I/AAAAAAAAAZM/zbvhz2EYFR4/homes.png IP142.250.74.161:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintA4:03:49:6F:80:6E:27:69:C4:CF:7F:94:FC:BC:3C:1F:D5:28:AE:B5 ValidityMon, 04 Mar 2024 06:55:13 GMT - Mon, 27 May 2024 06:55:12 GMT
File typePNG image data, 30 x 25, 8-bit/color RGBA, non-interlaced Hash27f0f23311ac55b2a7cc73b97c423018 375bf8d5cc154e7a4f94787b2356b1941b919745 6794511a5d2e0317ea9f91a97741e7728b630ae17794f6c04dfd2207609910c2
GET /-XQ1mCeIfl54/U76qP1fXB7I/AAAAAAAAAZM/zbvhz2EYFR4/homes.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="homes.png"
x-content-type-options: nosniff
server: fife
content-length: 571
x-xss-protection: 0
date: Fri, 19 Apr 2024 04:52:54 GMT
expires: Sat, 20 Apr 2024 04:52:54 GMT
cache-control: public, max-age=86400, no-transform
age: 10708
etag: "v194"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=8450030707273844825&zx=a416d4eb-7dcd-47ff-a28e-52c69d915769 | 216.58.207.233 | | 21 B |
URL www.blogger.com/dyn-css/authorization.css?targetBlogID=8450030707273844825&zx=a416d4eb-7dcd-47ff-a28e-52c69d915769 IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=8450030707273844825&zx=a416d4eb-7dcd-47ff-a28e-52c69d915769 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 07:51:22 GMT
last-modified: Fri, 19 Apr 2024 07:51:22 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 3.bp.blogspot.com/-Ejs4kT7A1cc/UkcGpzyrRzI/AAAAAAAAFpM/-BEQDsEw7kk/s1600/icnall.png | 142.250.74.161 | | 1.1 kB |
URL 3.bp.blogspot.com/-Ejs4kT7A1cc/UkcGpzyrRzI/AAAAAAAAFpM/-BEQDsEw7kk/s1600/icnall.png IP142.250.74.161:0
File typePNG image data, 32 x 197, 8-bit gray+alpha, non-interlaced Hash0450c5ba296c8dd9ab0c6e93cce27db4 2d3fb12aaff8115af1a34d047ee052b39a5d656b c30f5e991c7f351371a065ead714eb27145b66f1675cccdc89ea5d2c6b3ed516
GET /-Ejs4kT7A1cc/UkcGpzyrRzI/AAAAAAAAFpM/-BEQDsEw7kk/s1600/icnall.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="icnall.png"
x-content-type-options: nosniff
server: fife
content-length: 1081
x-xss-protection: 0
date: Fri, 19 Apr 2024 04:52:55 GMT
expires: Sat, 20 Apr 2024 04:52:55 GMT
cache-control: public, max-age=86400, no-transform
age: 10707
etag: "v1694"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| themes.googleusercontent.com/static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff | 142.250.74.97 | 200 OK | 22 kB |
URL GET HTTP/2themes.googleusercontent.com/static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeWeb Open Font Format, TrueType, length 21520, version 1.1 Hashb2181049bee439ab4f6b8678c8812e38 b20b90ecd6fc597f161d2228f5779e76e090edf9 a057e0c74a6ffa4a289512d05beb6998e6be8b91be2d056568ebf0c317c11a6c
GET /static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forexchair.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
timing-allow-origin: *
content-length: 21520
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 04:35:07 GMT
expires: Fri, 18 Apr 2025 04:35:07 GMT
cache-control: public, max-age=31536000
age: 98175
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| themes.googleusercontent.com/static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff | 142.250.74.97 | 200 OK | 20 kB |
URL GET HTTP/2themes.googleusercontent.com/static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeWeb Open Font Format, TrueType, length 19812, version 1.1 Hashc74ddf8e339408e3d7d8082b7e1f5125 e140a63f45f42c4a5f29ea4e2d83a2859c6f99c6 9947e1f452a6580f1089ab62e3b140c96dd7ba65585b7b568c07c6d6947ffb06
GET /static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forexchair.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
timing-allow-origin: *
content-length: 19812
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 03:15:39 GMT
expires: Fri, 18 Apr 2025 03:15:39 GMT
cache-control: public, max-age=31536000
age: 102943
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| themes.googleusercontent.com/static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff | 142.250.74.97 | | 21 kB |
URL themes.googleusercontent.com/static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff IP142.250.74.97:0
CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeWeb Open Font Format, TrueType, length 21132, version 1.1 Hashe5d1ccfbe43c8138e553093300603815 87deb174af2e2beebb9f09d618a5159ca299a3d0 00ceca786c807c91b19ff7b38bdccbe7f2a5404efbd910831122750c5d88b713
GET /static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forexchair.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
timing-allow-origin: *
content-length: 21132
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 14:48:38 GMT
expires: Fri, 18 Apr 2025 14:48:38 GMT
cache-control: public, max-age=31536000
age: 61364
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forexchair.blogspot.com/feeds/posts/summary/-/Australia%20Business%20Conditions%20Good%20AUD%20/%20USD%20Climb?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex | 216.58.207.193 | 200 OK | 2.9 kB |
URL GET HTTP/3forexchair.blogspot.com/feeds/posts/summary/-/Australia%20Business%20Conditions%20Good%20AUD%20/%20USD%20Climb?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex IP216.58.207.193:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintA4:03:49:6F:80:6E:27:69:C4:CF:7F:94:FC:BC:3C:1F:D5:28:AE:B5 ValidityMon, 04 Mar 2024 06:55:13 GMT - Mon, 27 May 2024 06:55:12 GMT
File typeASCII text, with very long lines (9541) Hasha65ca125f6aefc515e61db8684035044 0eff061ecceb681f612e9219b4c4cce63cb12eaf 6cb3c12392ae222ff6fd09cdf23f283dd72904664f9df931fa76877ddc86c8e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/summary/-/Australia%20Business%20Conditions%20Good%20AUD%20/%20USD%20Climb?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex HTTP/1.1
Host: forexchair.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"1d22f2afc9ddfa40534ef3ecf94a963b6b6ed76b1f4bc12597855698db540ca1"
date: Fri, 19 Apr 2024 07:51:22 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Fri, 19 Apr 2024 07:51:23 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 19 Feb 2024 06:49:27 GMT
content-encoding: gzip
content-length: 2929
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQjlrL825QJerh3nsJfs2qzrZoQaEN-iu_9ByAneAcmfyE4VKmE2_7xlgCoVrbRBjqJMYfEDLZ2d4JgLdpVFQVMWzPLs01wNbXDad9oUpldDAd9wQdenjg_rDkjBklALvI9EOKOvDabk8G/s72-c/yen.jpg | 142.250.74.97 | 200 OK | 3.8 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQjlrL825QJerh3nsJfs2qzrZoQaEN-iu_9ByAneAcmfyE4VKmE2_7xlgCoVrbRBjqJMYfEDLZ2d4JgLdpVFQVMWzPLs01wNbXDad9oUpldDAd9wQdenjg_rDkjBklALvI9EOKOvDabk8G/s72-c/yen.jpg IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hash663785ea631a4e2e765e2d124049dd4a e6bc2c70183528c2b3af5204ba7477051c6d1db0 a73acc1ebab8c362b1bdf9a3ca595a42d2e3deffecc2b07f728cfe09d0601e9f
GET /img/b/R29vZ2xl/AVvXsEiQjlrL825QJerh3nsJfs2qzrZoQaEN-iu_9ByAneAcmfyE4VKmE2_7xlgCoVrbRBjqJMYfEDLZ2d4JgLdpVFQVMWzPLs01wNbXDad9oUpldDAd9wQdenjg_rDkjBklALvI9EOKOvDabk8G/s72-c/yen.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v45"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="yen.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 3772
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1zgW6TjbJKA_YvxKlZI9bFDGXvBwZ9_WSKwiTlqhiu1q0lEYOqg850c3sn_CdT3yKXcev2yfmvA7X4cHVDpWnYE1lxxG6I4W5_9oYSu7wefuXXdmu6KW1Cw54Un2OiOoSN_AGwTB6LMlc/s72-c/silver.jpg | 142.250.74.97 | 200 OK | 3.1 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1zgW6TjbJKA_YvxKlZI9bFDGXvBwZ9_WSKwiTlqhiu1q0lEYOqg850c3sn_CdT3yKXcev2yfmvA7X4cHVDpWnYE1lxxG6I4W5_9oYSu7wefuXXdmu6KW1Cw54Un2OiOoSN_AGwTB6LMlc/s72-c/silver.jpg IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hasha4f3a1e3c281987c84aea511d58a0312 749e3dd7dacf65b6369ab3f2842adfd3de626240 483844cc7f95c04cd5b871304079dde6b9c88c6b5b40ce0588397d2a79e44258
GET /img/b/R29vZ2xl/AVvXsEg1zgW6TjbJKA_YvxKlZI9bFDGXvBwZ9_WSKwiTlqhiu1q0lEYOqg850c3sn_CdT3yKXcev2yfmvA7X4cHVDpWnYE1lxxG6I4W5_9oYSu7wefuXXdmu6KW1Cw54Un2OiOoSN_AGwTB6LMlc/s72-c/silver.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v74"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="silver.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 3145
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoin2mQ73rUmapdgv-TIJwEKNKCly7DPQEQJYLVXGoO_bFd87iNpAdzvi7ZGuRQH9fwssXfLBglgHT6_17Jgt9tlkXRAe_01KnsBig8Sag1LLZJnlsy-RvqOz0MTM5g4BuU-fHOKJr9dSk/s72-c/oil-prices1.jpg | 142.250.74.97 | 200 OK | 3.0 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoin2mQ73rUmapdgv-TIJwEKNKCly7DPQEQJYLVXGoO_bFd87iNpAdzvi7ZGuRQH9fwssXfLBglgHT6_17Jgt9tlkXRAe_01KnsBig8Sag1LLZJnlsy-RvqOz0MTM5g4BuU-fHOKJr9dSk/s72-c/oil-prices1.jpg IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hash2360fb680500dc529a3105771acebe40 be580edb2c314717a3ff5d18efbbc8bfdbccb559 9ad97fdb08eeed0686b0e5d961ca32f59cd4318623ae9a5baf53190a14681b76
GET /img/b/R29vZ2xl/AVvXsEgoin2mQ73rUmapdgv-TIJwEKNKCly7DPQEQJYLVXGoO_bFd87iNpAdzvi7ZGuRQH9fwssXfLBglgHT6_17Jgt9tlkXRAe_01KnsBig8Sag1LLZJnlsy-RvqOz0MTM5g4BuU-fHOKJr9dSk/s72-c/oil-prices1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "va0"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="oil-prices1.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 2973
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_YIrfknFrqY7ojfnYI_oZbHHUGyLJQHvX_iZa03iPwMIzI94OG_CmCzl9EnBDAjJW7H3JhIOEEBy8bYIekbteDZh7QwhR1ZfCPhY-odTz4YudsZxFr9CFT8EFoBEsmNDL52Bdym8IkHAZ/s72-c/aussie.jpg | 142.250.74.97 | 200 OK | 5.0 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_YIrfknFrqY7ojfnYI_oZbHHUGyLJQHvX_iZa03iPwMIzI94OG_CmCzl9EnBDAjJW7H3JhIOEEBy8bYIekbteDZh7QwhR1ZfCPhY-odTz4YudsZxFr9CFT8EFoBEsmNDL52Bdym8IkHAZ/s72-c/aussie.jpg IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hash16edd1bc1a97f8cf8861602204e467a3 4148a487a5eb99450741afa98a39b2d33488b265 c6161ce01addfb62bba7334507e0b40a1d52358f7cbde57d75e0a642b80a4545
GET /img/b/R29vZ2xl/AVvXsEj_YIrfknFrqY7ojfnYI_oZbHHUGyLJQHvX_iZa03iPwMIzI94OG_CmCzl9EnBDAjJW7H3JhIOEEBy8bYIekbteDZh7QwhR1ZfCPhY-odTz4YudsZxFr9CFT8EFoBEsmNDL52Bdym8IkHAZ/s72-c/aussie.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "vc4"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="aussie.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 5023
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghsO0IW-kjxOP0st1YZCESzL0YkFfqrqPtOEHXE1ugKRXQ5UNEse1p-pdQ87jGO2rQua2mxLjkl2_uav-y3919upzOj2oEo6H2Og11MsTl1QYHYdbUeDyN4v63FZUuBHYJymEpsCiVhsX8/s72-c/profit+2.jpg | 142.250.74.97 | | 4.1 kB |
URL blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghsO0IW-kjxOP0st1YZCESzL0YkFfqrqPtOEHXE1ugKRXQ5UNEse1p-pdQ87jGO2rQua2mxLjkl2_uav-y3919upzOj2oEo6H2Og11MsTl1QYHYdbUeDyN4v63FZUuBHYJymEpsCiVhsX8/s72-c/profit+2.jpg IP142.250.74.97:0
CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hashe94718469dfba8e6af699eaf7463782b bb74108bf42f5628d303422ca14deb20f0b1af78 aca2af494411dee79e82e558360cf70a069d8727a9db7eeca07d3319f30b4586
GET /img/b/R29vZ2xl/AVvXsEghsO0IW-kjxOP0st1YZCESzL0YkFfqrqPtOEHXE1ugKRXQ5UNEse1p-pdQ87jGO2rQua2mxLjkl2_uav-y3919upzOj2oEo6H2Og11MsTl1QYHYdbUeDyN4v63FZUuBHYJymEpsCiVhsX8/s72-c/profit+2.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2d"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="profit 2.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 4055
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773 | 216.58.207.233 | | 339 B |
URL www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773 IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeHTML document, ASCII text, with very long lines (416) Hash762de367aab1d8f47717923b21e04faa 124ad09d77cc1a2194b43274c214503171bd209c cc20ec71792783bf8215191bcc0daa5f072846e951d5d3e2b3d08d41382caba6
GET /comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 19 Apr 2024 07:51:23 GMT
expires: Fri, 19 Apr 2024 07:51:23 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 339
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEheBtijTz6yb4dqPOpdgKsN32G5bAfIYEOJzopKmn6mlRcQejXAF5-Jba44pFv_5g0Y7BHN2th76nHuymRgZwv5_FczSsn4zWG2PjEih7ETZEGvPRpcxnJRB3MiNc69PggTXIC6ai8XHbe9/s72-c/coal.jpg | 142.250.74.97 | 200 OK | 3.1 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEheBtijTz6yb4dqPOpdgKsN32G5bAfIYEOJzopKmn6mlRcQejXAF5-Jba44pFv_5g0Y7BHN2th76nHuymRgZwv5_FczSsn4zWG2PjEih7ETZEGvPRpcxnJRB3MiNc69PggTXIC6ai8XHbe9/s72-c/coal.jpg IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hashee0f01a9569877bdcbc66b4b77c29f6b 8fd0f6c0f630babcc7255d6c474a4629fd9fca8c 7b95b93c7cf05805440ace1d5e8aae310098b413a62a0a04d1e9572743d072d3
GET /img/b/R29vZ2xl/AVvXsEheBtijTz6yb4dqPOpdgKsN32G5bAfIYEOJzopKmn6mlRcQejXAF5-Jba44pFv_5g0Y7BHN2th76nHuymRgZwv5_FczSsn4zWG2PjEih7ETZEGvPRpcxnJRB3MiNc69PggTXIC6ai8XHbe9/s72-c/coal.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "vc1"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="coal.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 3067
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXnQ_01dpCWQ-QRmqLg0bQBgjP2WkfEVIz6M-53BjQleC6yLrJA4UGk6jwfy2bdBIVR4Z68YhT2WvANcztTZ6hJy1ArHAhOBEJf0TNACBqAOrSUOBeqcA5yPBnnoJN04vJD7mkdF3_8lqa/s72-c/kakao.jpg | 142.250.74.97 | | 4.3 kB |
URL blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXnQ_01dpCWQ-QRmqLg0bQBgjP2WkfEVIz6M-53BjQleC6yLrJA4UGk6jwfy2bdBIVR4Z68YhT2WvANcztTZ6hJy1ArHAhOBEJf0TNACBqAOrSUOBeqcA5yPBnnoJN04vJD7mkdF3_8lqa/s72-c/kakao.jpg IP142.250.74.97:0
CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hashc482f7d7a265b2728ed74d437862aa34 5c8179dd13a2f6b73a0468746bdefaf544fa5594 0a8091c9217793bd856dccea764e1b21b4594453f8669e21fbdad00cb00de5de
GET /img/b/R29vZ2xl/AVvXsEjXnQ_01dpCWQ-QRmqLg0bQBgjP2WkfEVIz6M-53BjQleC6yLrJA4UGk6jwfy2bdBIVR4Z68YhT2WvANcztTZ6hJy1ArHAhOBEJf0TNACBqAOrSUOBeqcA5yPBnnoJN04vJD7mkdF3_8lqa/s72-c/kakao.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "va8"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="kakao.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 4340
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css | 142.250.74.99 | 200 OK | 4.0 kB |
URL GET HTTP/2www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css IP142.250.74.99:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeASCII text, with very long lines (20367), with no line terminators Hash72d3a735ccca1027f6b3afba2c93e3a7 67f8eff8d17334c59c28fc1753bf451527c7490d c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:56:48 GMT
expires: Wed, 16 Apr 2025 09:56:48 GMT
cache-control: public, max-age=31536000
age: 251675
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjP5dBluhFtSVn97UG7AacLiwmOZK8l-si40c7y3BAB6-XjVPzZZg7PZT00LH7L68kz8q8vOh4i9gZq9pswTuCIr_FpKXwgl6sB9qs_sOidywHwilozHCIIJCxIG7GDJcfSiS54zxUuxoVm/s640/download.jpg | 142.250.74.97 | | 13 kB |
URL blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjP5dBluhFtSVn97UG7AacLiwmOZK8l-si40c7y3BAB6-XjVPzZZg7PZT00LH7L68kz8q8vOh4i9gZq9pswTuCIr_FpKXwgl6sB9qs_sOidywHwilozHCIIJCxIG7GDJcfSiS54zxUuxoVm/s640/download.jpg IP142.250.74.97:0
CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 255x198, components 3 Hash4019463a9a4eb45083484b01f559fc21 4ed772113c2f08685c1c08c3dd459938b6c7e98c 2b4c70692c86e3b83c933084b41a2eef88eb47c87aaad76ff58d9007c1031219
GET /img/b/R29vZ2xl/AVvXsEjP5dBluhFtSVn97UG7AacLiwmOZK8l-si40c7y3BAB6-XjVPzZZg7PZT00LH7L68kz8q8vOh4i9gZq9pswTuCIr_FpKXwgl6sB9qs_sOidywHwilozHCIIJCxIG7GDJcfSiS54zxUuxoVm/s640/download.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v5b"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="download.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 12862
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhb0lLqpj2rKQDzFu6oPoqPzWJuGE6y69PwtF_RpJkvOLXUmwpp6Lot3c3D-H8DfIlHJARlm_C21I73qc7Rv20uI0Ko-lGcQmnrlr5wBjKIF5qTMB2Zimk3Udqr3HF_RRrEpNZ1IOEYnyF2/s72-c/pmi-jasa-inggris-melengkapi-kekecewaan-trio-indeks-pmi-279494-27744.jpeg | 142.250.74.97 | 200 OK | 3.9 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhb0lLqpj2rKQDzFu6oPoqPzWJuGE6y69PwtF_RpJkvOLXUmwpp6Lot3c3D-H8DfIlHJARlm_C21I73qc7Rv20uI0Ko-lGcQmnrlr5wBjKIF5qTMB2Zimk3Udqr3HF_RRrEpNZ1IOEYnyF2/s72-c/pmi-jasa-inggris-melengkapi-kekecewaan-trio-indeks-pmi-279494-27744.jpeg IP142.250.74.97:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hash01c05e5843531686dfebb9041433ab0a 8d7a7705d5e570148e96750bf49e170df7df6c39 6ad9c84b0720a0b4d32ab13355456f45176663cadfbb6d1240fb64d71ee4ca0a
GET /img/b/R29vZ2xl/AVvXsEhb0lLqpj2rKQDzFu6oPoqPzWJuGE6y69PwtF_RpJkvOLXUmwpp6Lot3c3D-H8DfIlHJARlm_C21I73qc7Rv20uI0Ko-lGcQmnrlr5wBjKIF5qTMB2Zimk3Udqr3HF_RRrEpNZ1IOEYnyF2/s72-c/pmi-jasa-inggris-melengkapi-kekecewaan-trio-indeks-pmi-279494-27744.jpeg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v31"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pmi-jasa-inggris-melengkapi-kekecewaan-trio-indeks-pmi-279494-27744.jpeg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 3859
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.UA-j_uYmzls.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfrSsVi-Sc6-6LuIDw-e85d_nZgEvg/m=el_main | 142.250.74.106 | | 74 kB |
URL translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.UA-j_uYmzls.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfrSsVi-Sc6-6LuIDw-e85d_nZgEvg/m=el_main IP142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (2333) Hash4bb91f7d3340c67fbc422fe923cb4ce4 aa81f4daf848d66f92f853be4bb57333694b2712 2244a4c055184acc3ee54d04f44cde9f71829b12a6adc7ad0956e76eb48c072a
GET /_/translate_http/_/js/k=translate_http.tr.no.UA-j_uYmzls.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfrSsVi-Sc6-6LuIDw-e85d_nZgEvg/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 73503
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 19:23:38 GMT
expires: Fri, 18 Apr 2025 19:23:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 17 Apr 2024 21:12:30 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 44865
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/navbar.g?targetBlogID=8450030707273844825&blogName=All+About+Forex+And+Commodity+News+Up...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://forexchair.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://forexchair.blogspot.com/&targetPostID=9189153497954943585&blogPostOrPageUrl=https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html&vt=-2571663306535311004&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ | 216.58.207.233 | | 2.7 kB |
URL www.blogger.com/navbar.g?targetBlogID=8450030707273844825&blogName=All+About+Forex+And+Commodity+News+Up...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://forexchair.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://forexchair.blogspot.com/&targetPostID=9189153497954943585&blogPostOrPageUrl=https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html&vt=-2571663306535311004&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3170) Hash86b71c3c99ab862f682a5a6d2125a87b 0484e570140272b7bf934f4b43fe0486477e8360 4e1ff4db3684807bd4677fe16249ee4f74a978808339960a99f5d45a2030e529
GET /navbar.g?targetBlogID=8450030707273844825&blogName=All+About+Forex+And+Commodity+News+Up...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://forexchair.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://forexchair.blogspot.com/&targetPostID=9189153497954943585&blogPostOrPageUrl=https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html&vt=-2571663306535311004&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 07:51:23 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2673
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEik6iwtmgohzXXZEWlpjOuw4W3mHlzwiiRcAfgM2OZQ5xshKEwamU4ohuOdihBSP6PPCKapOdKZ_0uiWDO0YTJEB43NjUe2gT_jBSUlTRp0l6xORkYsfzKVtf_emIcIIrPtRPEWdlrkfXLa/s72-c/united-kingdom-unemployment-rate.png | 142.250.74.97 | | 3.2 kB |
URL blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEik6iwtmgohzXXZEWlpjOuw4W3mHlzwiiRcAfgM2OZQ5xshKEwamU4ohuOdihBSP6PPCKapOdKZ_0uiWDO0YTJEB43NjUe2gT_jBSUlTRp0l6xORkYsfzKVtf_emIcIIrPtRPEWdlrkfXLa/s72-c/united-kingdom-unemployment-rate.png IP142.250.74.97:0
CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typePNG image data, 72 x 72, 8-bit/color RGB, non-interlaced Hash68dbf4f773d22fd63b6447bf1fe838de 716edc4a261e95cf588e53a4f5e4e01fe30cce42 3f9770d232640abe101b724ecdee46ac3eac5c44bfe0a4d74bae664ad9e1f545
GET /img/b/R29vZ2xl/AVvXsEik6iwtmgohzXXZEWlpjOuw4W3mHlzwiiRcAfgM2OZQ5xshKEwamU4ohuOdihBSP6PPCKapOdKZ_0uiWDO0YTJEB43NjUe2gT_jBSUlTRp0l6xORkYsfzKVtf_emIcIIrPtRPEWdlrkfXLa/s72-c/united-kingdom-unemployment-rate.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v69"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="united-kingdom-unemployment-rate.png"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 3198
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilLT5LtRevvP34uOV43W3Xmf7YnLpxeSU8-j0unA6lM3KsElo9sqas9hcTS1qTmS3t9vb9QJc6hel4Np98XxWOh9gbAR_JCtQmbCb1f_tOvYuJ56nZA3jNtNe_hLbMHZECF-9m9dZ_QvUF/s72-c/average-cover-photo.jpg | 142.250.74.97 | | 4.3 kB |
URL blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilLT5LtRevvP34uOV43W3Xmf7YnLpxeSU8-j0unA6lM3KsElo9sqas9hcTS1qTmS3t9vb9QJc6hel4Np98XxWOh9gbAR_JCtQmbCb1f_tOvYuJ56nZA3jNtNe_hLbMHZECF-9m9dZ_QvUF/s72-c/average-cover-photo.jpg IP142.250.74.97:0
CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hash36bfcaa55a73d26427a22a4edead962d 45916426afa70d2fec88f368b74ccaae7e13f194 a11fe4926e6c63e12673fc280c0fbd2134062d4f9e7357a24bdd2eb4f06ec1aa
GET /img/b/R29vZ2xl/AVvXsEilLT5LtRevvP34uOV43W3Xmf7YnLpxeSU8-j0unA6lM3KsElo9sqas9hcTS1qTmS3t9vb9QJc6hel4Np98XxWOh9gbAR_JCtQmbCb1f_tOvYuJ56nZA3jNtNe_hLbMHZECF-9m9dZ_QvUF/s72-c/average-cover-photo.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v69"
expires: Sat, 20 Apr 2024 07:51:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="average-cover-photo.jpg"
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:23 GMT
server: fife
content-length: 4252
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&go=true | 173.194.222.84 | | 0 B |
URL accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&go=true IP173.194.222.84:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forexchair.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:lejn8yXUQENHFh0HXnkmm3imqwP0ng:HbZm4-0HQauKXHOA; Expires=Sun, 19-Apr-2026 07:51:23 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 07:51:23 GMT
location: https://www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-qrt4U5E3IWMSKhsLYGVFfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forexchair.blogspot.com/feeds/posts/summary/-/Australia%20Business%20Conditions%20Good%20AUD%20/%20USD%20Climb?alt=json-in-script&orderby=updated&start-index=1&max-results=7&callback=showRelatedPost | 216.58.207.193 | | 2.9 kB |
URL forexchair.blogspot.com/feeds/posts/summary/-/Australia%20Business%20Conditions%20Good%20AUD%20/%20USD%20Climb?alt=json-in-script&orderby=updated&start-index=1&max-results=7&callback=showRelatedPost IP216.58.207.193:0
File typeASCII text, with very long lines (9538) Hash2f84e8914349d6abcd5e815404f83efc eef23700b04619f306fc4e4087dbc16072914947 62de49cbe32c1dd3ab2683b3803586d794c81a037315cb6b093a7ca31a35f05b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/summary/-/Australia%20Business%20Conditions%20Good%20AUD%20/%20USD%20Climb?alt=json-in-script&orderby=updated&start-index=1&max-results=7&callback=showRelatedPost HTTP/1.1
Host: forexchair.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"d6392b51187e2d4a54728092bdc3b4a98a5323dad03fd329bae0948d56637d8d"
date: Fri, 19 Apr 2024 07:51:23 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Fri, 19 Apr 2024 07:51:24 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 19 Feb 2024 06:49:27 GMT
content-encoding: gzip
content-length: 2931
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/icons_peach.png | 216.58.207.233 | | 907 B |
URL resources.blogblog.com/img/navbar/icons_peach.png IP216.58.207.233:0
File typePNG image data, 46 x 20, 8-bit colormap, non-interlaced Hash3718077fe5eb689b0ded987a52881d06 f0ce5596ef43f850c400cbbc0556697fb3e7b232 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:31:43 GMT
expires: Tue, 23 Apr 2024 16:31:43 GMT
cache-control: public, max-age=604800
last-modified: Tue, 16 Apr 2024 05:19:38 GMT
content-type: image/png
age: 227980
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/arrows-light.png | 216.58.207.233 | | 117 B |
URL resources.blogblog.com/img/navbar/arrows-light.png IP216.58.207.233:0
File typePNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced Hash25c2b0cfe0ad4dcda4a0e3727d091d80 b9d16f4311e64648b7970baf00cb9841e3c3351b bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 14 Apr 2024 10:18:34 GMT
expires: Sun, 21 Apr 2024 10:18:34 GMT
cache-control: public, max-age=604800
last-modified: Sun, 14 Apr 2024 04:53:03 GMT
content-type: image/png
age: 423169
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/platform:gapi.iframes.style.common.js | 142.250.74.110 | | 21 kB |
URL apis.google.com/js/platform:gapi.iframes.style.common.js IP142.250.74.110:0
CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE3:82:77:FB:12:E7:1E:09:41:8D:12:01:82:E8:DB:CC:47:EB:3F:57 ValidityMon, 04 Mar 2024 07:19:24 GMT - Mon, 27 May 2024 07:19:23 GMT
File typeJavaScript source, ASCII text, with very long lines (2050) Hashf0d50a9a90ad59daa2f877eec130c234 7d06b084efb04f3ab882d07f70bc2cf15a80aa43 533e36742f3669952d3d943143d569f1681c0329f746f36f4364e73e0d5db5dc
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21314
date: Fri, 19 Apr 2024 07:51:23 GMT
expires: Fri, 19 Apr 2024 07:51:23 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "648a5ae4a10e71a2"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs | 142.250.74.110 | 200 OK | 46 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs IP142.250.74.110:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=8450030707273844825&blogName=All+About+Forex+And+Commodity+News+Up...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://forexchair.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://forexchair.blogspot.com/&targetPostID=9189153497954943585&blogPostOrPageUrl=https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html&vt=-2571663306535311004&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fforexchair.blogspot.com&pfname=&rpctoken=21974486 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hashdbd627c28e97cc5bbe7be0c7a75e386e 7bb367b5d18dd59a643a8bd4122b37a8a33bb9e9 97c5e5f7f3c5a1b36449b765e533eab96dd3ee4bb806d0c42d33b2d1457958f2
GET /_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:13:40 GMT
expires: Fri, 18 Apr 2025 17:13:40 GMT
cache-control: public, max-age=31536000
age: 52663
last-modified: Sun, 31 Mar 2024 15:20:31 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1 | 216.58.207.233 | | 2.0 kB |
URL www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1 IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeHTML document, ASCII text, with very long lines (338) Hashe9526ec2320a31ede62b9b276a90ef93 9b68335ed88520a14d3994ca6f974a6a92ae232f 0d2a88ab49a51f0b59eab8183dd4cd011358b40840be048e7b9f0c7008c8390d
GET /comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forexchair.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 07:51:23 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1950
server: GSE
set-cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/v-css/2621646369-cmtfp.css | 216.58.207.233 | | 3.7 kB |
URL www.blogger.com/static/v1/v-css/2621646369-cmtfp.css IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeASCII text, with very long lines (13475) Hash9f212334462c2e699353dc8988690a19 2e25d1abe33ec5ebf10e0a6b055e38c9671802a2 2529a8451bea93302e41dc0fad03f7550094f4ef5ec4f3800f28c2639d5e2789
GET /static/v1/v-css/2621646369-cmtfp.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1
Cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 3701
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 19:39:54 GMT
expires: Tue, 15 Apr 2025 19:39:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:56:10 GMT
content-type: text/css
vary: Accept-Encoding
age: 303090
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/blank.gif | 216.58.207.233 | 200 OK | 43 B |
URL GET HTTP/3resources.blogblog.com/img/blank.gif IP216.58.207.233:443
Requested byhttps://www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1#%7B%22color%22%3A%22rgb(0%2C%200%2C%200)%22%2C%22backgroundColor%22%3A%22rgb(255%2C%20255%2C%20255)%22%2C%22unvisitedLinkColor%22%3A%22rgb(52%2C%20152%2C%20219)%22%2C%22fontFamily%22%3A%22%5C%22Roboto_Regular%5C%22%2C%20%5C%22Roboto%5C%22%2C%20%5C%22Roboto%20Regular%5C%22%2C%20%5C%22Franklin%20Gothic%20Medium%5C%22%2C%20%5C%22Franklin%20Gothic%20Book%5C%22%2C%20%5C%22Lucida%20Sans%5C%22%2C%20%5C%22Lucida%20Sans%20Unicode%5C%22%2C%20%5C%22Helmet%2CFreesans%5C%22%2C%20%5C%22Sans-Serif%5C%22%22%7D CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeGIF image data, version 89a, 1 x 1 Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /img/blank.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 43
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 17:48:59 GMT
expires: Tue, 23 Apr 2024 17:48:59 GMT
cache-control: public, max-age=604800
last-modified: Mon, 15 Apr 2024 18:56:10 GMT
content-type: image/gif
age: 223345
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/jsbin/2542193084-cmt.js | 216.58.207.233 | | 35 kB |
URL www.blogger.com/static/v1/jsbin/2542193084-cmt.js IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeJavaScript source, ASCII text, with very long lines (3100) Hashc292dd02749f4f3191e733c175e7c1a3 424cffebfdb5bd4e4b2c6a8f95ab08db387059fe cff50e9a0338b5890c54422be9467da5b78f89314de9f1b363d7a999fc1f0417
GET /static/v1/jsbin/2542193084-cmt.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1
Cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 34888
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 00:13:06 GMT
expires: Wed, 16 Apr 2025 00:13:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 22:05:43 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 286698
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/img/cmt/close.gif | 216.58.207.233 | | 347 B |
URL www.blogger.com/img/cmt/close.gif IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeGIF image data, version 89a, 16 x 16 Hash6671b9932cbb79a2c2a018ed2c3bf3fb 40566dd706279a44ebd477df58a4cf75ab99cae8 df6cb367e3692c4d2056dd69c54bea18458148ef028ce7b998824f9f49ceafd6
GET /img/cmt/close.gif HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1
Cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 347
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 15:24:49 GMT
expires: Tue, 23 Apr 2024 15:24:49 GMT
cache-control: public, max-age=604800
last-modified: Tue, 16 Apr 2024 15:03:57 GMT
content-type: image/gif
age: 231995
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/6jPXHM4iCzcIQkBKKDnP-Tt4A8fAp8yrNpbLLmyAVNY.js | 142.250.74.164 | | 20 kB |
URL www.google.com/js/bg/6jPXHM4iCzcIQkBKKDnP-Tt4A8fAp8yrNpbLLmyAVNY.js IP142.250.74.164:0
File typeJavaScript source, ASCII text, with very long lines (50891) Hasha50a2b0378cf04e0ea49c60a625159f6 d258000036f4009ab2fb45d9fdc81c47094fb1c9 ea33d71cce220b370842404a2839cff93b7803c7c0a7ccab3696cb2e6c8054d6
GET /js/bg/6jPXHM4iCzcIQkBKKDnP-Tt4A8fAp8yrNpbLLmyAVNY.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 19949
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 00:26:28 GMT
expires: Wed, 16 Apr 2025 00:26:28 GMT
cache-control: public, max-age=31536000
age: 285896
last-modified: Thu, 04 Apr 2024 18:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.blogblog.com/img/anon36.png | 216.58.207.233 | 200 OK | 1.7 kB |
URL GET HTTP/3resources.blogblog.com/img/anon36.png IP216.58.207.233:443
Requested byhttps://www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1#%7B%22color%22%3A%22rgb(0%2C%200%2C%200)%22%2C%22backgroundColor%22%3A%22rgb(255%2C%20255%2C%20255)%22%2C%22unvisitedLinkColor%22%3A%22rgb(52%2C%20152%2C%20219)%22%2C%22fontFamily%22%3A%22%5C%22Roboto_Regular%5C%22%2C%20%5C%22Roboto%5C%22%2C%20%5C%22Roboto%20Regular%5C%22%2C%20%5C%22Franklin%20Gothic%20Medium%5C%22%2C%20%5C%22Franklin%20Gothic%20Book%5C%22%2C%20%5C%22Lucida%20Sans%5C%22%2C%20%5C%22Lucida%20Sans%20Unicode%5C%22%2C%20%5C%22Helmet%2CFreesans%5C%22%2C%20%5C%22Sans-Serif%5C%22%22%7D CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typePNG image data, 36 x 36, 8-bit/color RGB, non-interlaced Hash106b75877485647b4b5618523f541732 c19e26c01d2972a4c895c3688c735158785620c7 19a794aab8d93c3cafd1efa4ae19579369f92ed5f1bb114d05aa0d7c7d1b3c22
GET /img/anon36.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1654
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 08:31:24 GMT
expires: Tue, 23 Apr 2024 08:31:24 GMT
cache-control: public, max-age=604800
last-modified: Tue, 16 Apr 2024 03:17:24 GMT
content-type: image/png
age: 256800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/comment-iframe-bg.g?bgresponse=js_disabled&bgint=6jPXHM4iCzcIQkBKKDnP-Tt4A8fAp8yrNpbLLmyAVNY | 216.58.207.233 | | 15 kB |
URL www.blogger.com/comment-iframe-bg.g?bgresponse=js_disabled&bgint=6jPXHM4iCzcIQkBKKDnP-Tt4A8fAp8yrNpbLLmyAVNY IP216.58.207.233:0
CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
Hash19267f5c63b47a95c2079e7463a3ebea e5b31ea168f9bf2d129652377c55287de6e73d4c 969c8df9d7c42e54fff550829a87863853a406e6bc0cccdbc3a8971c673c3108
GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=6jPXHM4iCzcIQkBKKDnP-Tt4A8fAp8yrNpbLLmyAVNY HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1
Cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 07:51:24 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 15200
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| forexchair.blogspot.com/feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999 | 216.58.207.193 | | 59 kB |
URL forexchair.blogspot.com/feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999 IP216.58.207.193:0
File typeUnicode text, UTF-8 text, with very long lines (65519) Hash6b13715b4e1c8d7cf8af3d8340b2e530 39cb33f56ab0251945e3aeef4de4c1e37850021b 7dd2ec4b5b2fbafe17d0d384bc52fdc55da1397860bef40755f0c1a970fa9cf3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999 HTTP/1.1
Host: forexchair.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"74df0115bf8718e7dac7e92dac1079e8f887497af29a7799589c1b74d03407ee"
date: Fri, 19 Apr 2024 07:51:24 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Fri, 19 Apr 2024 07:51:25 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 19 Feb 2024 06:49:27 GMT
content-encoding: gzip
content-length: 58914
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/plusone.js | 142.250.74.110 | 200 OK | 21 kB |
URL GET HTTP/3apis.google.com/js/plusone.js IP142.250.74.110:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (2050) Hasha878405cf2e9d55e0aca10f5a016990e 0277e2cd3cf9de944e7e2206750b5bffc485a77d 186381606450b1bc2c95df8d7451987027ac3011163ddc23707d02f4514b08c4
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21304
date: Fri, 19 Apr 2024 07:51:24 GMT
expires: Fri, 19 Apr 2024 07:51:24 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9472c1cc1ca55f99"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=plusone/exm=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_1?le=scs | 142.250.74.110 | 200 OK | 10 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=plusone/exm=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_1?le=scs IP142.250.74.110:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (1013) Hash4c56a932acdb4b4b5c73a57493d9bad7 3b6988f9d9bf3abd5ca53d2f3b350f52289936b8 89ae810b04c62de98cd66b3c659032c31e758c4c748c19341b59bab0897c746e
GET /_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=plusone/exm=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 10358
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:37:10 GMT
expires: Fri, 18 Apr 2025 17:37:10 GMT
cache-control: public, max-age=31536000
age: 51254
last-modified: Sun, 31 Mar 2024 15:20:31 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_2?le=scs | 142.250.74.110 | 200 OK | 30 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_2?le=scs IP142.250.74.110:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (1586) Hash86802cca356f33351ece256ec0e6fa19 00f2e719f07f5342c1dca5d1acb16ae746279efa fc3beaf22f117c1d42c9434f2bc387e02b267fe1e2673f8d14b631422f48102a
GET /_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_2?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 29685
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:40:21 GMT
expires: Fri, 18 Apr 2025 17:40:21 GMT
cache-control: public, max-age=31536000
age: 51063
last-modified: Sun, 31 Mar 2024 15:20:31 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=https%3A%2F%2Fforexchair.blogspot.com&url=https%3A%2F%2Fforexchair.blogspot.com%2F2017%2F07%2Faustralia-business-conditions-good-aud.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ | 142.250.74.110 | | 226 B |
URL apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=https%3A%2F%2Fforexchair.blogspot.com&url=https%3A%2F%2Fforexchair.blogspot.com%2F2017%2F07%2Faustralia-business-conditions-good-aud.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ IP142.250.74.110:0
CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE3:82:77:FB:12:E7:1E:09:41:8D:12:01:82:E8:DB:CC:47:EB:3F:57 ValidityMon, 04 Mar 2024 07:19:24 GMT - Mon, 27 May 2024 07:19:23 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash4df07581948280a6e769a24c5d99d775 843a2c95362347eb8894a6acb607f139be65ded4 3561b93a48d81fac116ccd6e60163bd382abb1d594c81240f5718feb1f197f73
GET /u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=https%3A%2F%2Fforexchair.blogspot.com&url=https%3A%2F%2Fforexchair.blogspot.com%2F2017%2F07%2Faustralia-business-conditions-good-aud.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:24 GMT
expires: Fri, 19 Apr 2024 08:21:24 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png | 142.250.74.99 | 200 OK | 910 B |
URL GET HTTP/3www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png IP142.250.74.99:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typePNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced Hashefa6bb2bfe459bc6f4bdafa3db0383f6 52d15ce52fe50643e542c17812de43f4ed1b6ee0 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 12:46:59 GMT
expires: Fri, 18 Apr 2025 12:46:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/png
vary: Origin
age: 68665
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/branding/product/2x/translate_24dp.png | 142.250.74.99 | | 1.8 kB |
URL www.gstatic.com/images/branding/product/2x/translate_24dp.png IP142.250.74.99:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashc69c796362406f9e11c7f4bf5bb628da e489ce95ab56208090868882113d7416abf46775 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 13:46:06 GMT
expires: Fri, 18 Apr 2025 13:46:06 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 65118
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg | 142.250.74.67 | | 3.3 kB |
URL fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg IP142.250.74.67:0
File typeSVG Scalable Vector Graphics image Hash2bd5c073a88b83ed74db88282a56ddfb d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650 ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:52:46 GMT
expires: Wed, 16 Apr 2025 09:52:46 GMT
cache-control: public, max-age=31536000
age: 251918
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html?action=getFeed&widgetId=Feed3&widgetType=Feed&responseType=js&xssi_token=AOuZoY5yUdUHVZi0BJowIa4pwORFgtX5Ww%3A1713513081870 | 216.58.207.193 | 200 OK | 532 B |
URL GET HTTP/3forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html?action=getFeed&widgetId=Feed3&widgetType=Feed&responseType=js&xssi_token=AOuZoY5yUdUHVZi0BJowIa4pwORFgtX5Ww%3A1713513081870 IP216.58.207.193:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintA4:03:49:6F:80:6E:27:69:C4:CF:7F:94:FC:BC:3C:1F:D5:28:AE:B5 ValidityMon, 04 Mar 2024 06:55:13 GMT - Mon, 27 May 2024 06:55:12 GMT
File typeASCII text, with very long lines (1191) Hashf17f4a7732aaeb9300e5db07417190a7 8129fc07b7e37ccbcdc6f02418982f3821a8eba6 a5a8b83da0aa4f754ccafa89dee40afe0b5e75bdcc23029bf96a7d58688ecb05
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2017/07/australia-business-conditions-good-aud.html?action=getFeed&widgetId=Feed3&widgetType=Feed&responseType=js&xssi_token=AOuZoY5yUdUHVZi0BJowIa4pwORFgtX5Ww%3A1713513081870 HTTP/1.1
Host: forexchair.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Fri, 19 Apr 2024 07:51:24 GMT
date: Fri, 19 Apr 2024 07:51:24 GMT
cache-control: private, max-age=0
last-modified: Mon, 19 Feb 2024 06:49:27 GMT
etag: "a416d4eb-7dcd-47ff-a28e-52c69d915769"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 532
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback | 142.250.74.42 | | 1.4 kB |
URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback IP142.250.74.42:0
Hasha3eefe14b1b4698460d992bd1673a26b a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4 87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 19 Apr 2024 07:51:24 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=513=R7046H4IgmGSNk-qg5nFid3s_d9la1xKAEa74QTld9-jqRojaYIrD3dbJfyIL4BZPpkyvdQUdXyqNO_DcDWNtDMTl3LsijboAiXnqQP5dAnMkTM5ofIbJFvbwYWyi-gzZySgoYUOZ57Wsbo1xAPnY3ZmxE5BorgsVByaO_cbEDg; expires=Sat, 19-Oct-2024 07:51:24 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
expires: Fri, 19 Apr 2024 07:51:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/rpc:shindig_random.js?onload=init | 142.250.74.110 | | 5.9 kB |
URL apis.google.com/js/rpc:shindig_random.js?onload=init IP142.250.74.110:0
CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE3:82:77:FB:12:E7:1E:09:41:8D:12:01:82:E8:DB:CC:47:EB:3F:57 ValidityMon, 04 Mar 2024 07:19:24 GMT - Mon, 27 May 2024 07:19:23 GMT
File typeJavaScript source, ASCII text, with very long lines (2054) Hashc9ddfbc43cb4fae24b4cad788abec29c 171e5fbc2472aaf9058df419bf0a7b512fec9d20 f168a6ce38a1dc352c36d0d26a04150d5c4b250f0c72ee7e7372220adf10a4d4
GET /js/rpc:shindig_random.js?onload=init HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 5911
date: Fri, 19 Apr 2024 07:51:24 GMT
expires: Fri, 19 Apr 2024 07:51:24 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d0fac88f5cc7e7f6"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ssl.gstatic.com/accounts/o/3604799710-postmessagerelay.js | 142.250.74.163 | | 4.8 kB |
URL ssl.gstatic.com/accounts/o/3604799710-postmessagerelay.js IP142.250.74.163:0
File typeJavaScript source, ASCII text, with very long lines (1915) Hash40aaadf2a7451d276b940cddefb2d0ed b2fc8129a4f5e5a0c8cb631218f40a4230444d9e 4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2
GET /accounts/o/3604799710-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 18:56:42 GMT
expires: Wed, 16 Apr 2025 18:56:42 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 11 Apr 2024 10:23:19 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 219283
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs | 142.250.74.110 | | 24 kB |
URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs IP142.250.74.110:0
CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE3:82:77:FB:12:E7:1E:09:41:8D:12:01:82:E8:DB:CC:47:EB:3F:57 ValidityMon, 04 Mar 2024 07:19:24 GMT - Mon, 27 May 2024 07:19:23 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash6ffd2caf6444cada0f100fd970663b2c c9bf7e821444237d9a2ea5f4bfa27d878a60e8b2 4aee83e54bfe4279080651fff0c3006f4c70972182c7250ba144a09baef0275b
GET /_/scs/abc-static/_/js/k=gapi.lb.en.5BIk7BglYEE.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 23471
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:09:12 GMT
expires: Fri, 18 Apr 2025 17:09:12 GMT
cache-control: public, max-age=31536000
age: 52933
last-modified: Sun, 31 Mar 2024 15:20:31 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css | 216.58.207.233 | 200 OK | 6.5 kB |
URL GET HTTP/3www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css IP216.58.207.233:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeASCII text, with very long lines (35822), with no line terminators Hashfb7ea6fe6f6b435448fd0eb8a2db2e12 33cc931a5f17975d0a9d259a9608cfc6f75a1a4f dbcb4b8e7dbaa9d09b7dbee23f9317eba8ae7933be22e798bc054c0c3b16f163
GET /static/v1/v-css/13464135-lightbox_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6525
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 00:43:21 GMT
expires: Wed, 16 Apr 2025 00:43:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 22:05:43 GMT
content-type: text/css
vary: Accept-Encoding
age: 284884
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/jsbin/3538472454-lbx.js | 216.58.207.233 | 200 OK | 123 kB |
URL GET HTTP/3www.blogger.com/static/v1/jsbin/3538472454-lbx.js IP216.58.207.233:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeJavaScript source, ASCII text, with very long lines (1609) Size123 kB (122914 bytes) Hashba1ed99b32b2c729442e7d141549a58d d22cfe1f07540052539937ba7914df0262aa7eb6 d8bd613e3d964abc7a5d43fdccc5a3987a460bd618d2e50de65ed2ce3158ce25
GET /static/v1/jsbin/3538472454-lbx.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 122914
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 19:30:25 GMT
expires: Thu, 17 Apr 2025 19:30:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 17 Apr 2024 19:01:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 130860
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| forexchair.blogspot.com/favicon.ico | 216.58.207.193 | 200 OK | 412 B |
URL GET HTTP/3forexchair.blogspot.com/favicon.ico IP216.58.207.193:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintA4:03:49:6F:80:6E:27:69:C4:CF:7F:94:FC:BC:3C:1F:D5:28:AE:B5 ValidityMon, 04 Mar 2024 06:55:13 GMT - Mon, 27 May 2024 06:55:12 GMT
File typeMS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel Hash59a0c7b6e4848ccdabcea0636efda02b 30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340 a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: forexchair.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Fri, 19 Apr 2024 07:51:25 GMT
date: Fri, 19 Apr 2024 07:51:25 GMT
cache-control: private, max-age=86400
last-modified: Mon, 19 Feb 2024 06:49:27 GMT
etag: W/"ed4a5e344b52981489d9eeb9fedda087684b16829fb80b05c0e6959e6e9ba576"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.106 | 200 OK | 0 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.106:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://forexchair.blogspot.com/
Origin: https://forexchair.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://forexchair.blogspot.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Fri, 19 Apr 2024 07:51:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.106 | 200 OK | 131 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.106:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forexchair.blogspot.com/
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1197
Origin: https://forexchair.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://forexchair.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Fri, 19 Apr 2024 07:51:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1 | 216.58.207.233 | 200 OK | 6.2 kB |
URL GET HTTP/3www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1 IP216.58.207.233:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
File typeHTML document, ASCII text, with very long lines (6752), with no line terminators Hash8ae43a4acf8fef57c6720f67ef04806a c4800a7426f932d744990d128d43b9c115c6918b d9c22a6b3ec577cdbc54ea904f208458bf92fcbba1759aecb6ed946b3da746e2
GET /comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forexchair.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 07:51:23 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1950
server: GSE
set-cookie: S=blogger=OKMuIeQ_r7qR26PeV5DGPP9umxRtDtD9cl8ti1Yl_iM; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=https%3A%2F%2Fforexchair.blogspot.com&url=https%3A%2F%2Fforexchair.blogspot.com%2F2017%2F07%2Faustralia-business-conditions-good-aud.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ | 142.250.74.110 | 301 Moved Permanently | 0 B |
URL GET HTTP/3apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=https%3A%2F%2Fforexchair.blogspot.com&url=https%3A%2F%2Fforexchair.blogspot.com%2F2017%2F07%2Faustralia-business-conditions-good-aud.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ IP142.250.74.110:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=https%3A%2F%2Fforexchair.blogspot.com&url=https%3A%2F%2Fforexchair.blogspot.com%2F2017%2F07%2Faustralia-business-conditions-good-aud.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:51:24 GMT
expires: Fri, 19 Apr 2024 08:21:24 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.addtoany.com/menu/page.js |  104.22.70.197 | 200 OK | 3.0 kB |
URL GET HTTP/2static.addtoany.com/menu/page.js IP104.22.70.197:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerLet's Encrypt Subjectstatic.addtoany.com Fingerprint25:DC:52:06:E9:84:6F:BC:CB:DD:82:F7:D3:4C:8F:F5:9F:49:7E:DD ValiditySat, 24 Feb 2024 06:33:02 GMT - Fri, 24 May 2024 06:33:01 GMT
File typeJavaScript source, ASCII text, with very long lines (3132), with no line terminators Hash40486591ae8ea6d1423aeb13f1fd509b f847af56588642de93c6fe0d2ce182303f312455 16a6753a1de5c5602b0ca4afe3d17b95e2cb18d6b79bf7cdccedba3a733c1138
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 07:51:22 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=86400, stale-while-revalidate=30, public
cf-bgj: minify
etag: W/"e346c2841e4abbb66ee259e9540abb61"
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K9SlRo17%2FEYYEY7TY5VUBa2G0luclF%2Fi9mKP9JIoxaGyg9HDTkx2QKGyXUgtsqVrmCpVypdr9QFZX1ju19YZtHnDUhdiuj6G3zHqk6iKvpR1qlQKK8BqoVYJrA9%2B5qfHIQrYZfty"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2249
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876b4f1d7a57929e-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773 | 216.58.207.233 | 302 Found | 6.2 kB |
URL GET HTTP/3www.blogger.com/comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773 IP216.58.207.233:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint5D:70:C7:7E:E0:07:E9:55:1A:FB:FE:80:60:2A:E6:A1:7B:C8:83:17 ValidityMon, 04 Mar 2024 06:32:21 GMT - Mon, 27 May 2024 06:32:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comment-iframe.g?blogID=8450030707273844825&postID=9189153497954943585&blogspotRpcToken=9789773 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D8450030707273844825%26postID%3D9189153497954943585%26blogspotRpcToken%3D9789773%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 19 Apr 2024 07:51:23 GMT
expires: Fri, 19 Apr 2024 07:51:23 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 339
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| xslt.alexa.com/site_stats/js/s/a?url=forexchair.blogspot.com | 0.0.0.0 | | 0 B |
URL GET xslt.alexa.com/site_stats/js/s/a?url=forexchair.blogspot.com IP0.0.0.0:0
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /site_stats/js/s/a?url=forexchair.blogspot.com HTTP/1.1
Host: xslt.alexa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fforexchair.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ | 173.194.222.84 | 200 OK | 566 B |
URL GET HTTP/3accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fforexchair.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ IP173.194.222.84:443
Requested byhttps://forexchair.blogspot.com/2017/07/australia-business-conditions-good-aud.html CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (586), with no line terminators Hashc1ee32aecade45b56eee1af4649de7c7 df3e2e059017fc0db4a459c7faf618642f5fe0ea 0a3dc21c138a02729f8632ae50b9748c8cf7486b06713797d449bc417e9ff554
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fforexchair.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5BIk7BglYEE.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9V8V9Op_7rn4BCy9pIOBNUyU2IjA%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forexchair.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 07:51:24 GMT
content-security-policy: script-src 'nonce-3ss2rPK2JiAUl24fpm7VGg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport, require-trusted-types-for 'script';report-uri /o/cspreport
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
0.0.0.0