Report - dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1

Report Overview

Visited public
2023-11-30 19:55:39
Tags
phishing
URL
dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Finishing URL
dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
IP / ASN
172.217.21.161
#15169 GOOGLE
Title
df5g5dfg6fgd6fdg56dfgfgd
Phishing - Generic phishing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.blogger.com	8975	1999-06-22	2012-05-22 09:35:03	2023-11-30 05:09:41	952 B	63 kB	142.250.74.41
resources.blogblog.com	13274	2000-09-15	2017-01-30 05:47:40	2023-11-30 05:09:41	477 B	48 kB	142.250.74.105
ipinfo.io	8136	2013-04-23	2013-12-16 08:25:53	2023-11-29 18:15:05	475 B	1.1 kB	34.117.59.81
dfg5696dg6dfgfd56fdg65fgd.blogspot.com	unknown	unknown	No data	No data	2.0 kB	24 kB	172.217.21.161
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-11-30 06:35:27	3.5 kB	71 kB	216.58.207.227
upload.wikimedia.org	2215	2003-03-16	2012-05-21 11:39:45	2023-11-30 19:23:46	533 B	18 kB	185.15.59.240
blogger.googleusercontent.com	16485	2008-11-17	2012-05-25 19:41:01	2023-11-30 05:21:53	658 B	463 kB	142.250.74.97
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2023-11-30 06:52:33	469 B	4.2 kB	142.250.74.67
1.bp.blogspot.com	8403	2000-07-31	2012-05-21 15:44:19	2023-11-30 00:25:24	2.2 kB	872 kB	142.250.74.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-30 19:55:27	medium	Client IP	34.117.59.81	ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1	ScriptElement	275 B	2023-03-07	2025-05-09
Pretty URL dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1 IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 05:32 Times Seen37684 Hash 38ee2f6ddbe8a478e5795030e72ba35d d332319b04b273e3b9a93ffa22ba9036d59b8e99 97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319 Loading...

	dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1	ScriptElement	2.5 kB	2023-09-15	2024-08-21
Pretty URL dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1 IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-15 21:13 Last Seen2024-08-21 06:47 Times Seen10 Hash 55edb47136f4b7ecfc23b6493b8448e6 916870d80c6188fc0a8f7e8919b4eaed786dc1c0 38ec6d1678ec1bef37d0f179135672d7003a09d531b19ecaf50dc369fdd90f1f Loading...

	dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1	ScriptElement	789 B	2023-03-07	2024-08-21
Pretty URL dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1 IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2024-08-21 09:44 Times Seen17283 Hash 0699fb3015610319b1639f47466451f0 5f4d8a4022f3a687921d7b3dce01cfc5bd62248f 2443e5c9c4ba5a75e030860f998bcf800907b0d4b3c4017999c2ed7ac84eeefa Loading...

	www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js	ScriptElement	12 kB	2023-04-05	2025-05-09
Pretty URL www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js IP 142.250.74.67 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 03:08 Last Seen2025-05-09 04:17 Times Seen8098 Hash a1a2e5bd3af1cf7d730f15dd7e308a1b 6ab91a37884d5f70808157c5cb6ed7345d8f537a d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e Loading...

	www.blogger.com/static/v1/widgets/325989852-widgets.js	ScriptElement	165 kB	2023-11-23	2023-12-04
Pretty URL www.blogger.com/static/v1/widgets/325989852-widgets.js IP 142.250.74.41 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-23 06:43 Last Seen2023-12-04 01:06 Times Seen1747 Hash 2aaaea7286ee481cbc12cfd76e10c0cf 6e8576cb84ac125faa0bc0a5fe5508166cc4eed8 4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580 Loading...

	dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1	ScriptElement	5.6 kB	2024-08-20	2024-08-20
Pretty URL dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1 IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 17:18 Last Seen2024-08-20 17:18 Times Seen1 Hash 490199ecc10000de9a61d07623a943c7 673818900324837d0809bcb228a3d9c1e6b5943f 63583195b7ee2f3ed427afbaa3fc53df3c560150f0a18af2700929ecd965dc32 Loading...

	dfg5696dg6dfgfd56fdg65fgd.blogspot.com/js/cookienotice.js	ScriptElement	6.5 kB	2023-03-07	2025-05-09
Pretty URL dfg5696dg6dfgfd56fdg65fgd.blogspot.com/js/cookienotice.js IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 05:32 Times Seen43825 Hash a705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568 Loading...

	resources.blogblog.com/blogblog/data/res/403235463-indie_compiled.js	ScriptElement	139 kB	2023-11-21	2023-12-12
Pretty URL resources.blogblog.com/blogblog/data/res/403235463-indie_compiled.js IP 142.250.74.105 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-21 01:55 Last Seen2023-12-12 17:54 Times Seen89 Hash 5e09a625d98829b4a924d49b95db611a 2fd5eac6602ea8e53e2df6c3f859153229603739 9fc2d4fd976d828b6f2851cfcf31c079139924781cac8f1aae1f59b972f91262 Loading...

HTTP Transactions (21)

URL IP Response Size

dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1

172.217.21.161

200 OK

17 kB

URL User Request GET HTTP/2
dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6974)
Size
17 kB (17259 bytes)
Hash
24485aab5e02aef3c18eac84bf5dde79
2b7e48248b90c922c0ca1d52446a61a2d6663130
9f906a489ee34a35c589a90acde0fd855664b454e60457fa9d9a15cfc88ccc9f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Generic phishing

HTTP Headers

GET /?m=1 HTTP/1.1
Host: dfg5696dg6dfgfd56fdg65fgd.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 30 Nov 2023 19:55:21 GMT
date: Thu, 30 Nov 2023 19:55:21 GMT
cache-control: private, max-age=0
last-modified: Wed, 15 Jun 2022 11:46:06 GMT
etag: W/"dbb5464450b4a5bed68071d63c2f9664424376d47114d1bedc9108045509ea35"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 17259
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dfg5696dg6dfgfd56fdg65fgd.blogspot.com/js/cookienotice.js

172.217.21.161

200 OK

2.0 kB

URL GET HTTP/3
dfg5696dg6dfgfd56fdg65fgd.blogspot.com/js/cookienotice.js
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
ASCII text
Size
2.0 kB (2026 bytes)
Hash
a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568

HTTP Headers

GET /js/cookienotice.js HTTP/1.1
Host: dfg5696dg6dfgfd56fdg65fgd.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Thu, 30 Nov 2023 19:55:22 GMT
expires: Thu, 07 Dec 2023 19:55:22 GMT
cache-control: public, max-age=604800
last-modified: Thu, 30 Nov 2023 17:57:13 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

dfg5696dg6dfgfd56fdg65fgd.blogspot.com/responsive/sprite_v1_6.css.svg

172.217.21.161

200 OK

2.2 kB

URL GET HTTP/3
dfg5696dg6dfgfd56fdg65fgd.blogspot.com/responsive/sprite_v1_6.css.svg
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7657)
Size
2.2 kB (2244 bytes)
Hash
d4dcfc8144f556815c7a1d84ed4e959e
22088bd6cdf970dcf7bfab9a74a4768548ca8890
73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c

HTTP Headers

GET /responsive/sprite_v1_6.css.svg HTTP/1.1
Host: dfg5696dg6dfgfd56fdg65fgd.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: image/svg+xml
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2244
date: Thu, 30 Nov 2023 19:55:22 GMT
expires: Thu, 07 Dec 2023 19:55:22 GMT
cache-control: public, max-age=604800
last-modified: Thu, 30 Nov 2023 17:57:13 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js

142.250.74.67

200 OK

3.5 kB

URL GET HTTP/2
www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Unicode text, UTF-8 text, with very long lines (10473)
Size
3.5 kB (3475 bytes)
Hash
158013acb7e269a3dbe18de855656c97
08fa355584fc849539b3f04589ae6f61eb4a7d98
92e40dc4bbb485a182b796c58e6da7974cb8a6a84fdb4548ace3b85c991f0f94

HTTP Headers

GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3475
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 19:55:22 GMT
expires: Thu, 30 Nov 2023 19:55:22 GMT
cache-control: public, max-age=0
age: 0
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 53868
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2

216.58.207.227

200 OK

12 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11824, version 1.0\012- data
Size
12 kB (11824 bytes)
Hash
deb26e9b1a25438118e5d39d741ae6b6
a2801defb4c8bed8e4083dfde0b2a5a9c0537020
fc66f942651a9fe1a598770d3d896529dcd7a03d02f40655451513093103e61b

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:50 GMT
expires: Fri, 22 Nov 2024 23:21:50 GMT
cache-control: public, max-age=31536000
age: 592412
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2

216.58.207.227

200 OK

12 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Size
12 kB (11872 bytes)
Hash
87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:03:39 GMT
expires: Fri, 29 Nov 2024 14:03:39 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
age: 21103
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2

216.58.207.227

200 OK

5.6 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 5560, version 1.0\012- data
Size
5.6 kB (5560 bytes)
Hash
ca3b09b62fda648a4511700413313fd0
109cd4c5435bd6614391bb8722c47c287c96b2ec
77b24796a3d4ab521f66765651875338ed50cb9306cfe4603a3e79618e429cec

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:05:19 GMT
expires: Fri, 29 Nov 2024 05:05:19 GMT
cache-control: public, max-age=31536000
age: 53403
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 81686
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2

216.58.207.227

200 OK

5.5 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data
Size
5.5 kB (5548 bytes)
Hash
cdaab83619fcacd4027a77c99dd51e69
9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4
4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:22:10 GMT
expires: Fri, 22 Nov 2024 23:22:10 GMT
cache-control: public, max-age=31536000
age: 592392
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1.bp.blogspot.com/-qD5ESm-tis8/X8kFDuE_JbI/AAAAAAAAAvw/wzXu9F1LtI0-Cdjt_cXxQ8MD3_-fx6yUACLcBGAsYHQ/s0/cxzvzxvbz.PNG

142.250.74.161

200 OK

154 kB

URL GET HTTP/2
1.bp.blogspot.com/-qD5ESm-tis8/X8kFDuE_JbI/AAAAAAAAAvw/wzXu9F1LtI0-Cdjt_cXxQ8MD3_-fx6yUACLcBGAsYHQ/s0/cxzvzxvbz.PNG
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
PNG image data, 511 x 283, 8-bit/color RGB, non-interlaced\012- data
Size
154 kB (153662 bytes)
Hash
2c989f1f97085fb1ce6a0789ee584b9d
e562f0f4fceffd3fe107807f85774ebdf564e7b5
e42fb5d5748c52d9c0c048b5a78c0421c12734f8d71e6cb6a2a90fbe3fc048d2

HTTP Headers

GET /-qD5ESm-tis8/X8kFDuE_JbI/AAAAAAAAAvw/wzXu9F1LtI0-Cdjt_cXxQ8MD3_-fx6yUACLcBGAsYHQ/s0/cxzvzxvbz.PNG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2ff"
expires: Fri, 01 Dec 2023 19:55:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="cxzvzxvbz.PNG"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 19:55:22 GMT
server: fife
content-length: 153662
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1.bp.blogspot.com/-FH9GlgyGiJM/X8kE3scfoJI/AAAAAAAAAvs/_K4GVgGdkZY-GE2JS1tttBQCSbyms27MgCLcBGAsYHQ/s0/vc.PNG

142.250.74.161

200 OK

141 kB

URL GET HTTP/2
1.bp.blogspot.com/-FH9GlgyGiJM/X8kE3scfoJI/AAAAAAAAAvs/_K4GVgGdkZY-GE2JS1tttBQCSbyms27MgCLcBGAsYHQ/s0/vc.PNG
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
PNG image data, 519 x 291, 8-bit/color RGB, non-interlaced\012- data
Size
141 kB (141134 bytes)
Hash
f0791758133d896f61ef78f7691b9611
f3143da91ddac0719d9efe5236a4d122b904f53e
04bf34df9c046063d4cc0b56c0fff8caa510d498f4152d3d0179e21adee4bff7

HTTP Headers

GET /-FH9GlgyGiJM/X8kE3scfoJI/AAAAAAAAAvs/_K4GVgGdkZY-GE2JS1tttBQCSbyms27MgCLcBGAsYHQ/s0/vc.PNG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2fd"
expires: Fri, 01 Dec 2023 19:55:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vc.PNG"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 19:55:22 GMT
server: fife
content-length: 141134
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

upload.wikimedia.org/wikipedia/commons/thumb/f/fd/Facebook-reversed.svg/800px-Facebook-reversed.svg.png

185.15.59.240

200 OK

17 kB

URL GET HTTP/2
upload.wikimedia.org/wikipedia/commons/thumb/f/fd/Facebook-reversed.svg/800px-Facebook-reversed.svg.png
IP
185.15.59.240:443
ASN
#14907 WIKIMEDIA

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerDigiCert Inc
Subject*.wikipedia.org
Fingerprint48:3F:0C:71:F3:4A:E0:EA:30:D9:9B:D6:04:63:DC:DA:A8:F4:9D:FB
ValidityWed, 18 Oct 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
PNG image data, 800 x 159, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (17076 bytes)
Hash
c5c08ab95460eef9b9c885cfa892d576
f6711570d6bbe664026dcfaf35ee0ab9e3e60484
345237dc266de9f455bb1e23807ab5728dc6b54463923871beb7a85234ce10bb

HTTP Headers

GET /wikipedia/commons/thumb/f/fd/Facebook-reversed.svg/800px-Facebook-reversed.svg.png HTTP/1.1
Host: upload.wikimedia.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-disposition: inline;filename*=UTF-8''Facebook-reversed.svg.png
last-modified: Wed, 02 Nov 2022 11:47:23 GMT
content-length: 17076
date: Wed, 29 Nov 2023 22:18:47 GMT
server: envoy
etag: c5c08ab95460eef9b9c885cfa892d576
age: 77794
x-cache: cp3078 hit, cp3078 hit/16
x-cache-status: hit-front
server-timing: cache;desc="hit-front", host;desc="cp3078"
strict-transport-security: max-age=106384710; includeSubDomains; preload
report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
x-client-ip: 91.90.42.154
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache
timing-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

1.bp.blogspot.com/-nM_WjVAH29s/X8kFOfWIjmI/AAAAAAAAAv4/JOVu5azgOBwAixN-4sPwZf0NQuS83fI1gCLcBGAsYHQ/s0/vYCKNAK.png

142.250.74.161

200 OK

433 kB

URL GET HTTP/2
1.bp.blogspot.com/-nM_WjVAH29s/X8kFOfWIjmI/AAAAAAAAAv4/JOVu5azgOBwAixN-4sPwZf0NQuS83fI1gCLcBGAsYHQ/s0/vYCKNAK.png
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
PNG image data, 450 x 679, 8-bit/color RGB, non-interlaced\012- data
Size
433 kB (433321 bytes)
Hash
29053955c2697fde5d660b90b05e11e4
9736115d5c15ab483f142092bd0682d0d9bfeb07
ca4037a934b3c046d3228ddd5572faabb308bb4cf7da560367824fc94dfb0eb4

HTTP Headers

GET /-nM_WjVAH29s/X8kFOfWIjmI/AAAAAAAAAv4/JOVu5azgOBwAixN-4sPwZf0NQuS83fI1gCLcBGAsYHQ/s0/vYCKNAK.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v300"
expires: Fri, 01 Dec 2023 19:55:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vYCKNAK.png"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 19:55:22 GMT
server: fife
content-length: 433321
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

1.bp.blogspot.com/-ntAPa6oNHUs/X8kEsUee84I/AAAAAAAAAvk/8vT8pJcQAMsYESWzFeBbk9j4avuQhQKMACLcBGAsYHQ/s0/xzvzxvzbvzx.PNG

142.250.74.161

200 OK

142 kB

URL GET HTTP/2
1.bp.blogspot.com/-ntAPa6oNHUs/X8kEsUee84I/AAAAAAAAAvk/8vT8pJcQAMsYESWzFeBbk9j4avuQhQKMACLcBGAsYHQ/s0/xzvzxvzbvzx.PNG
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
PNG image data, 506 x 286, 8-bit/color RGB, non-interlaced\012- data
Size
142 kB (141470 bytes)
Hash
91bd6b93ac835d22c9823a7159974aa5
40e7caaee6639e7a4712c6264e49547578ec7579
2a23a51d956fa6bef08010d48f8194af4036153e472ed5cf1f2333370942d511

HTTP Headers

GET /-ntAPa6oNHUs/X8kEsUee84I/AAAAAAAAAvk/8vT8pJcQAMsYESWzFeBbk9j4avuQhQKMACLcBGAsYHQ/s0/xzvzxvzbvzx.PNG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2fd"
expires: Fri, 01 Dec 2023 19:55:22 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="xzvzxvzbvzx.PNG"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 19:55:22 GMT
server: fife
content-length: 141470
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.blogger.com/static/v1/widgets/325989852-widgets.js

142.250.74.41

200 OK

59 kB

URL GET HTTP/2
www.blogger.com/static/v1/widgets/325989852-widgets.js
IP
142.250.74.41:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT

File type
ASCII text, with very long lines (2258)
Size
59 kB (59316 bytes)
Hash
2aaaea7286ee481cbc12cfd76e10c0cf
6e8576cb84ac125faa0bc0a5fe5508166cc4eed8
4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580

HTTP Headers

GET /static/v1/widgets/325989852-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:08:07 GMT
expires: Fri, 29 Nov 2024 14:08:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 05:57:17 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 20836
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

resources.blogblog.com/blogblog/data/res/403235463-indie_compiled.js

142.250.74.105

200 OK

47 kB

URL GET HTTP/2
resources.blogblog.com/blogblog/data/res/403235463-indie_compiled.js
IP
142.250.74.105:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT

File type
ASCII text, with very long lines (1721)
Size
47 kB (47331 bytes)
Hash
5e09a625d98829b4a924d49b95db611a
2fd5eac6602ea8e53e2df6c3f859153229603739
9fc2d4fd976d828b6f2851cfcf31c079139924781cac8f1aae1f59b972f91262

HTTP Headers

GET /blogblog/data/res/403235463-indie_compiled.js HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 47331
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:09:40 GMT
expires: Thu, 07 Dec 2023 04:09:40 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 18:59:55 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 56743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.blogger.com/img/blogger_logo_round_35.png

142.250.74.41

200 OK

2.5 kB

URL GET HTTP/3
www.blogger.com/img/blogger_logo_round_35.png
IP
142.250.74.41:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT

File type
PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size
2.5 kB (2531 bytes)
Hash
838622483cbfed35380b4705f19d7cca
7de684136affc969a24d61927afc18905cf2fc36
183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a

HTTP Headers

GET /img/blogger_logo_round_35.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2531
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 19:17:10 GMT
expires: Wed, 06 Dec 2023 19:17:10 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 17:00:16 GMT
content-type: image/png
age: 88693
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

blogger.googleusercontent.com/img/a/AVvXsEgSCbZzfrVE4uBKc_LMWPmgyxhqKWPWXyBIIWVDT6LmiOZLffVLJFqMQAz5i9mb9sw9eoZWKcxBu4ToPsIcbXgTl0Btxeo7Wi5EA51hT2kyA4BXIJUW-DTa1qUKNlCSannqhrvtQbGdTgB1PN9IPO9CqQDyKT2A43mRYFVRpj51K7KPr7c326nVBoBD

142.250.74.97

200 OK

462 kB

URL GET HTTP/2
blogger.googleusercontent.com/img/a/AVvXsEgSCbZzfrVE4uBKc_LMWPmgyxhqKWPWXyBIIWVDT6LmiOZLffVLJFqMQAz5i9mb9sw9eoZWKcxBu4ToPsIcbXgTl0Btxeo7Wi5EA51hT2kyA4BXIJUW-DTa1qUKNlCSannqhrvtQbGdTgB1PN9IPO9CqQDyKT2A43mRYFVRpj51K7KPr7c326nVBoBD
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT

File type
PNG image data, 687 x 592, 8-bit/color RGB, non-interlaced\012- data
Size
462 kB (462544 bytes)
Hash
218ebb45bd96ce1c187d02b3c4346530
c5737466eef6d28da704bdfbc9d00511c6fb869d
b36d30c0677dc170a3bd13ffeca2679fff6dd5108fd4df60e066d2cab8bb7074

HTTP Headers

GET /img/a/AVvXsEgSCbZzfrVE4uBKc_LMWPmgyxhqKWPWXyBIIWVDT6LmiOZLffVLJFqMQAz5i9mb9sw9eoZWKcxBu4ToPsIcbXgTl0Btxeo7Wi5EA51hT2kyA4BXIJUW-DTa1qUKNlCSannqhrvtQbGdTgB1PN9IPO9CqQDyKT2A43mRYFVRpj51K7KPr7c326nVBoBD HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v84"
expires: Fri, 01 Dec 2023 19:55:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Untitled.png"
x-content-type-options: nosniff
date: Thu, 30 Nov 2023 19:55:23 GMT
server: fife
content-length: 462544
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ipinfo.io/json

34.117.59.81

200 OK

716 B

URL GET HTTP/2
ipinfo.io/json
IP
34.117.59.81:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerLet's Encrypt
Subjectipinfo.io
Fingerprint02:67:9A:BD:EB:E2:DF:E4:D3:87:6D:3B:B4:56:D4:77:D6:F3:61:E3
ValidityTue, 07 Nov 2023 06:17:02 GMT - Mon, 05 Feb 2024 06:17:01 GMT

File type
gzip compressed data, from Unix\012- data
Size
716 B (716 bytes)
Hash
25155d170e720c07cd4935af32172462
c645f85377881be2e97eb032787993d9f2674402
b04ea1b00eb0bbecb4f6e36083e2d1a1f0b888ada29956dcbbbbcfd15b77ef8d

HTTP Headers

GET /json HTTP/1.1
Host: ipinfo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
x-content-type-options: nosniff
content-type: application/json; charset=utf-8
date: Thu, 30 Nov 2023 19:55:23 GMT
x-envoy-upstream-service-time: 2
strict-transport-security: max-age=2592000; includeSubDomains
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dfg5696dg6dfgfd56fdg65fgd.blogspot.com/favicon.ico

172.217.21.161

200 OK

412 B

URL GET HTTP/3
dfg5696dg6dfgfd56fdg65fgd.blogspot.com/favicon.ico
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Requested by
https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT

File type
MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size
412 B (412 bytes)
Hash
59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: dfg5696dg6dfgfd56fdg65fgd.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfg5696dg6dfgfd56fdg65fgd.blogspot.com/?m=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Thu, 30 Nov 2023 19:55:23 GMT
date: Thu, 30 Nov 2023 19:55:23 GMT
cache-control: private, max-age=86400
last-modified: Wed, 15 Jun 2022 11:46:06 GMT
etag: W/"dbb5464450b4a5bed68071d63c2f9664424376d47114d1bedc9108045509ea35"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3