ocsp.pki.goog/gts1c3
471 B IP
Hash a10bf1244cba4323104fe9d4a23e228f
8943d772662c41169c4461355687298205011f3b
6e0a2297c3e668c8a15cdb92b364bcb67c18cea413af1f306dd67673d0a9b724
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kenhphim3s.blogspot.ru/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
302 Found 226 B URL User Request GET HTTP/2 kenhphim3s.blogspot.ru/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash f94f4bcaae533094a7322f56545475e2
a34d88a093d5e4f202d35ceb577fa6c11d36d653
e8730795030bc2eb70802e19224d7a45819963825f898d822ab284085eb233e7
GET /search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/ HTTP/1.1
Host: kenhphim3s.blogspot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sun, 04 Jun 2023 14:57:01 GMT
expires: Sun, 04 Jun 2023 14:57:01 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 226
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash a10bf1244cba4323104fe9d4a23e228f
8943d772662c41169c4461355687298205011f3b
6e0a2297c3e668c8a15cdb92b364bcb67c18cea413af1f306dd67673d0a9b724
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash a10bf1244cba4323104fe9d4a23e228f
8943d772662c41169c4461355687298205011f3b
6e0a2297c3e668c8a15cdb92b364bcb67c18cea413af1f306dd67673d0a9b724
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
404 Not Found 24 kB URL User Request GET HTTP/2 kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2930)
Hash 1ac990a32edd635df7db70418c191ddc
263a93c958720bb84c6e82455988b6f7d9a87ab9
b608d895d61c1991cd896abb74cb8b75a816312ffd1ae38220df28c8ee53e405
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
GET /search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/ HTTP/1.1
Host: kenhphim3s.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 14:57:01 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 24205
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
404 Not Found 22 kB URL User Request GET HTTP/2 kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2930)
Hash 7b9b7c8c76fc30007d9fedce4d244682
bee44c92d4b647b22ec052b8013c0a0147c47a23
4d0713ec9ab3bd75648aa5fcb67ea6093181bcb70a146fa74c394006ed326687
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
GET /search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/ HTTP/1.1
Host: kenhphim3s.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 04 Jun 2023 14:57:03 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 21505
Server: GSE
apis.google.com/js/plusone.js
200 OK 22 kB URL GET HTTP/1.1 apis.google.com/js/plusone.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type ASCII text, with very long lines (1576)
Hash 0cb9bb0589c1b8bba79f8920f432492d
d1460e2be4e185ee60a50e59150632afdbed0775
e61bc2a62646eca4b91ae5d9d9c334b3b8a140a4c54804b0a39ceb3e34aaa56e
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Access-Control-Allow-Origin: *
Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
Timing-Allow-Origin: *
Content-Length: 22282
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
ETag: "4af61c9c02ca9038"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
200 OK 33 kB URL GET HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash ddb84c1587287b2df08966081ef063bf
9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f
88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd
GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33333
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 03 Jun 2023 20:56:21 GMT
Expires: Sun, 02 Jun 2024 20:56:21 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 64842
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
kenhphim3s.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/1.1 kenhphim3s.blogspot.com/js/cookienotice.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: kenhphim3s.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 03 Jun 2023 17:13:40 GMT
Expires: Sat, 10 Jun 2023 17:13:40 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 03 Jun 2023 16:50:56 GMT
Content-Type: text/javascript
Vary: Accept-Encoding
Age: 78203
ocsp.pki.goog/gts1c3
471 B IP
Hash 34d9e4e508a70d42180686b70a225a52
1d54115c94e76e52e3c07b2d3c38ed50c60fdd04
b6e88977e0706ed9db5ca106ba6330625a4dc1bc82c158cee7a91711fe1bc5de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint16:37:BF:DE:18:2B:BB:D4:6F:7B:05:89:E7:8F:31:BC:9A:D5:92:87
ValidityFri, 19 May 2023 12:52:45 GMT - Fri, 11 Aug 2023 12:52:44 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 01:50:37 GMT
expires: Sat, 01 Jun 2024 01:50:37 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 23:50:56 GMT
content-type: text/css
vary: Accept-Encoding
age: 219986
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash daea1591424a17127d073fb60a7391bb
20b9aa9b14fd4b071ef940b281bdf22e6ec7b896
c890dbf05d923384a3fd582e8eda4ab4ea950147c0731a935a35f5d13077e2e8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash ca359c54531ea823812a5abbcf85eb97
6c9d445dc87b58e70dfd8d80a15374667f9f0b4f
32015b73ad6385df42848ae288806993cab31ee8f210e61ac5d2857fa0d30805
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/541336192-widgets.js
200 OK 56 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/541336192-widgets.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint16:37:BF:DE:18:2B:BB:D4:6F:7B:05:89:E7:8F:31:BC:9A:D5:92:87
ValidityFri, 19 May 2023 12:52:45 GMT - Fri, 11 Aug 2023 12:52:44 GMT
File type ASCII text, with very long lines (2215)
Hash aa44d6ded7a7f494bb801da2e270d438
2afe3b98239baba11dae4252198314c3c06088ab
9ca45e0cd2719c8403f25e13c931515b162cbb57faf9773db1033fee191efeff
GET /static/v1/widgets/541336192-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56539
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 12:11:13 GMT
expires: Fri, 31 May 2024 12:11:13 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 31 May 2023 19:54:39 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 269150
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 34d9e4e508a70d42180686b70a225a52
1d54115c94e76e52e3c07b2d3c38ed50c60fdd04
b6e88977e0706ed9db5ca106ba6330625a4dc1bc82c158cee7a91711fe1bc5de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 06eaabe5bc1684b94c61419f605e0cb4
b06217e8c5042074cd969bc2a7d274cd6eaac47d
37421ce20fedd26d6924a655ce444c2f70402bb36a187822c16691465fa157c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
keyrom.googlecode.com/files/jquery.min.js
404 Not Found 1.6 kB URL GET HTTP/2 keyrom.googlecode.com/files/jquery.min.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.googlecode.com
Fingerprint55:FB:EA:10:33:7A:01:48:93:A0:57:3C:27:4F:44:D0:33:85:B2:2B
ValidityFri, 19 May 2023 12:57:26 GMT - Fri, 11 Aug 2023 12:57:25 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 25fd4eee6147eb7675661cabda5141ba
0d110cb5bf04074e1d2c556f3c942ae346e1714e
1b1bc6b5e7c48a45c558fd79a9323a8fcb6decbf17ed8db379d00c9ef941e23e
GET /files/jquery.min.js HTTP/1.1
Host: keyrom.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1580
date: Sun, 04 Jun 2023 14:57:03 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_0?le=scs
200 OK 54 kB URL GET HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_0?le=scs
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintDE:E4:50:C7:14:04:EC:D0:70:AC:04:CC:B1:7B:9A:04:98:C0:3C:9A
ValidityFri, 19 May 2023 12:58:17 GMT - Fri, 11 Aug 2023 12:58:16 GMT
File type ASCII text, with very long lines (1518)
Hash a8a392dbe0c850380179116c15232558
d77274c58d3c3a0f26c76728e0d8bbee388fc475
7b8961d61d85ff799f19ba0572c8e8e46c0a182886df8d8f57d5bb59345e1145
GET /_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 53464
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 17:19:58 GMT
expires: Wed, 29 May 2024 17:19:58 GMT
cache-control: public, max-age=31536000
age: 423425
last-modified: Fri, 28 Apr 2023 16:21:16 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sites.google.com/site/share123vn/ketnoi.js
302 Found 224 B URL GET HTTP/2 sites.google.com/site/share123vn/ketnoi.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 485cc64b286caccf6316547624cd8466
fb59f5b219db507bf86242bd667a76b8526b1cbc
b67c921ce97e4688281d333ff03b6a204cfe6ae0f000e6686192d1a8ea1401dd
GET /site/share123vn/ketnoi.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fketnoi.js
content-encoding: gzip
date: Sun, 04 Jun 2023 14:57:03 GMT
expires: Sun, 04 Jun 2023 14:57:03 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 224
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.imgur.com/DBoTaTj.gif
301 Moved Permanently 0 B IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /DBoTaTj.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/DBoTaTj.gif
Accept-Ranges: bytes
Date: Sun, 04 Jun 2023 14:57:03 GMT
X-Served-By: cache-bma1653-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1685890624.657523,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
3.bp.blogspot.com/-Wr0U_ADt2Zc/Ue5fLLeyuQI/AAAAAAAABTs/mj4KmA6ttzs/s72-c/9347172803_786b8dd8dc_o.jpg
200 OK 6.2 kB URL GET HTTP/1.1 3.bp.blogspot.com/-Wr0U_ADt2Zc/Ue5fLLeyuQI/AAAAAAAABTs/mj4KmA6ttzs/s72-c/9347172803_786b8dd8dc_o.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ae21ac8c47e3cdc99b21666df9af1385
7fc779e303827e3d7cb347ebeef6e70de46bf20e
020b70b31b9281274345c9737bb14aab499ae14a1f46a616b42066cc216cfbb8
GET /-Wr0U_ADt2Zc/Ue5fLLeyuQI/AAAAAAAABTs/mj4KmA6ttzs/s72-c/9347172803_786b8dd8dc_o.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="9347172803_786b8dd8dc_o.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6184
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v53b"
Content-Type: image/jpeg
Vary: Origin
Age: 0
1.bp.blogspot.com/-jOmrHd9fmTE/UaY6nf6Z1HI/AAAAAAAABzg/CoKTw_IfEJM/s72-c/phim41.com-Midnight.Train.2013.720p.HDRip.x264.jpg
200 OK 3.0 kB URL GET HTTP/1.1 1.bp.blogspot.com/-jOmrHd9fmTE/UaY6nf6Z1HI/AAAAAAAABzg/CoKTw_IfEJM/s72-c/phim41.com-Midnight.Train.2013.720p.HDRip.x264.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 5e70994ed2614ecf3080499d6336442f
304b7024a57cf5095b46814966479806878de786
a4d4259fa9e5fcef88cdc559eac66ca63f1c59b028d71ec61dbb2704626bc81d
GET /-jOmrHd9fmTE/UaY6nf6Z1HI/AAAAAAAABzg/CoKTw_IfEJM/s72-c/phim41.com-Midnight.Train.2013.720p.HDRip.x264.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="phim41.com-Midnight.Train.2013.720p.HDRip.x264.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2973
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v738"
Content-Type: image/jpeg
Vary: Origin
Age: 0
i.imgur.com/X5mBYtk.png
301 Moved Permanently 0 B IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /X5mBYtk.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/X5mBYtk.png
Accept-Ranges: bytes
Date: Sun, 04 Jun 2023 14:57:03 GMT
X-Served-By: cache-bma1660-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1685890624.671880,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
1.bp.blogspot.com/-UoIJ-iC8pRk/UZ-lGJc8ajI/AAAAAAAABso/v1LF5ZJSR44/s72-c/thien-ha-de-nhat-kiem.jpg
200 OK 4.6 kB URL GET HTTP/1.1 1.bp.blogspot.com/-UoIJ-iC8pRk/UZ-lGJc8ajI/AAAAAAAABso/v1LF5ZJSR44/s72-c/thien-ha-de-nhat-kiem.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 522a64d35bc941546ade5be95bf6c2c5
c1dcd738bced1241e37784729caba7928241423c
ce067d39add259de0f1d97cfc447440508bef86731441edc8832e9a3c8046675
GET /-UoIJ-iC8pRk/UZ-lGJc8ajI/AAAAAAAABso/v1LF5ZJSR44/s72-c/thien-ha-de-nhat-kiem.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="thien-ha-de-nhat-kiem.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4599
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v6ca"
Content-Type: image/jpeg
Vary: Origin
Age: 0
1.bp.blogspot.com/-K3544dnf0Zw/UdKxrDTePkI/AAAAAAAAC8U/3Y_UfdpWIM4/s72-c/phim-chien-tranh-the-gioi-z-phimsock_com.jpg
200 OK 2.9 kB URL GET HTTP/1.1 1.bp.blogspot.com/-K3544dnf0Zw/UdKxrDTePkI/AAAAAAAAC8U/3Y_UfdpWIM4/s72-c/phim-chien-tranh-the-gioi-z-phimsock_com.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 252a5070b436a2fb918af3ecc7624a9d
14d858c2880f80b20b1db0311f62074b31288487
9fd965a99ca678f1e771da2a7ec0a60eaed641af1382e9306fc4672ad0a2a8f9
GET /-K3544dnf0Zw/UdKxrDTePkI/AAAAAAAAC8U/3Y_UfdpWIM4/s72-c/phim-chien-tranh-the-gioi-z-phimsock_com.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="phim-chien-tranh-the-gioi-z-phimsock_com.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2915
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vbc6"
Content-Type: image/jpeg
Vary: Origin
Age: 0
3.bp.blogspot.com/-8OrgrX5iqPY/UYvnx9HqOhI/AAAAAAAAAXM/Xm12lMA9mHs/s72-c/xem-phim-co-dao-kinh-hoang-2.jpg
200 OK 4.0 kB URL GET HTTP/1.1 3.bp.blogspot.com/-8OrgrX5iqPY/UYvnx9HqOhI/AAAAAAAAAXM/Xm12lMA9mHs/s72-c/xem-phim-co-dao-kinh-hoang-2.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d0e19c317d2373ab0c39f57ecc970ea3
154289e3dda087424915313eb15abc49bca8844f
73e0576d053f1b952f4d63aa8c4b275520116448ba4ff734bd03c39926e0f9c2
GET /-8OrgrX5iqPY/UYvnx9HqOhI/AAAAAAAAAXM/Xm12lMA9mHs/s72-c/xem-phim-co-dao-kinh-hoang-2.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="xem-phim-co-dao-kinh-hoang-2.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4034
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v174"
Content-Type: image/jpeg
Vary: Origin
Age: 0
3.bp.blogspot.com/-pKCOOfc9Jnw/Ue7E8NjuwHI/AAAAAAAABUI/XLA0pXDkbtE/s72-c/22966_large.jpg
200 OK 3.1 kB URL GET HTTP/1.1 3.bp.blogspot.com/-pKCOOfc9Jnw/Ue7E8NjuwHI/AAAAAAAABUI/XLA0pXDkbtE/s72-c/22966_large.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash e7b5dbd6587bcc58ccacac39623d9601
f74d0e817fd0073beaed00f0f70761fcf86ad7a7
c4a042f381dab44255dbcf91f69d1fc6b06484c241e91a6789f2c34fd51e9d40
GET /-pKCOOfc9Jnw/Ue7E8NjuwHI/AAAAAAAABUI/XLA0pXDkbtE/s72-c/22966_large.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="22966_large.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3099
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v543"
Content-Type: image/jpeg
Vary: Origin
Age: 0
2.bp.blogspot.com/-iuJ3CfNcjLA/UdDPVHCJiVI/AAAAAAAAC0o/I675ounSv0I/s72-c/phim-bat-nhi-than-tham-phimsock_com.jpg
200 OK 5.0 kB URL GET HTTP/1.1 2.bp.blogspot.com/-iuJ3CfNcjLA/UdDPVHCJiVI/AAAAAAAAC0o/I675ounSv0I/s72-c/phim-bat-nhi-than-tham-phimsock_com.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4b337b308afac003de37581a23124f70
503885617776f23801ebe3edc9adf30ab79bffa5
c1c7d4ea7ec36d595a67724953e367ef73340253531683069ca304a30c106dd3
GET /-iuJ3CfNcjLA/UdDPVHCJiVI/AAAAAAAAC0o/I675ounSv0I/s72-c/phim-bat-nhi-than-tham-phimsock_com.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="phim-bat-nhi-than-tham-phimsock_com.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5037
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vb4b"
Content-Type: image/jpeg
Vary: Origin
Age: 0
2.bp.blogspot.com/-y6LXFNHHKGA/UaJDyfNfgqI/AAAAAAAABtY/HOD4jt2Wo2Y/s72-c/tham-hoa-tau-dien-ngam-metro-2013.jpg
200 OK 4.2 kB URL GET HTTP/1.1 2.bp.blogspot.com/-y6LXFNHHKGA/UaJDyfNfgqI/AAAAAAAABtY/HOD4jt2Wo2Y/s72-c/tham-hoa-tau-dien-ngam-metro-2013.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 77fbda451d581e99edf3b4ace4db21f4
c9a090e0122e2b5e13d205f01b094ef01e9a794c
ea4fcde132e596007266d834acb7e80bf28e8745ba1e29ab0e5c8dde85b4cfc0
GET /-y6LXFNHHKGA/UaJDyfNfgqI/AAAAAAAABtY/HOD4jt2Wo2Y/s72-c/tham-hoa-tau-dien-ngam-metro-2013.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="tham-hoa-tau-dien-ngam-metro-2013.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4227
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v6d6"
Content-Type: image/jpeg
Vary: Origin
Age: 0
4.bp.blogspot.com/-XurYlU5Ss-M/UY3_26I0qzI/AAAAAAAAAbQ/cyQoiOGN6Ho/s72-c/x6vwqHbl.jpg
200 OK 5.3 kB URL GET HTTP/1.1 4.bp.blogspot.com/-XurYlU5Ss-M/UY3_26I0qzI/AAAAAAAAAbQ/cyQoiOGN6Ho/s72-c/x6vwqHbl.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 0e96c1e2b23c7827728d9fcae2db830c
36cc02e6c75a864d04b9b8f82880dd9f453c9817
aec329dac97a7e23f3bd95e402a9961135094dc65ce789ad4eb37658d784119b
GET /-XurYlU5Ss-M/UY3_26I0qzI/AAAAAAAAAbQ/cyQoiOGN6Ho/s72-c/x6vwqHbl.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="x6vwqHbl.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5303
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b4"
Content-Type: image/jpeg
Vary: Origin
Age: 0
4.bp.blogspot.com/-gqasHPZUMtE/UY6HRtV5BdI/AAAAAAAAAek/PuqXU6yB21k/s72-c/buidoi-makiemsinhtuky.jpg
200 OK 5.4 kB URL GET HTTP/1.1 4.bp.blogspot.com/-gqasHPZUMtE/UY6HRtV5BdI/AAAAAAAAAek/PuqXU6yB21k/s72-c/buidoi-makiemsinhtuky.jpg
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash f29d784244d9cd376ecb3e269f2dcf0d
dcb4fe28c689f4d39867624d24365c79dc4e17cb
5fef58cb4379a814902dd63950b967c66aaf92f93b28d7783deb5053a07203fe
GET /-gqasHPZUMtE/UY6HRtV5BdI/AAAAAAAAAek/PuqXU6yB21k/s72-c/buidoi-makiemsinhtuky.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="buidoi-makiemsinhtuky.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5448
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1e9"
Content-Type: image/jpeg
Vary: Origin
Age: 0
4.bp.blogspot.com/-nmhw1nO-OiM/UWu4MH8I81I/AAAAAAAAB0c/j7YM9dGicGk/s1600/top.png
200 OK 1.7 kB URL GET HTTP/1.1 4.bp.blogspot.com/-nmhw1nO-OiM/UWu4MH8I81I/AAAAAAAAB0c/j7YM9dGicGk/s1600/top.png
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 4dd14d8cf1002725a3c2d7b1f9a22677
c340c7cd6703e44d0d11ea453075887e5029a69b
0b2cbac33627e4452a714140e4d0d92532bdd5a67d66817a0d58547e244639a3
GET /-nmhw1nO-OiM/UWu4MH8I81I/AAAAAAAAB0c/j7YM9dGicGk/s1600/top.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="top.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1691
X-XSS-Protection: 0
Date: Sun, 04 Jun 2023 14:57:03 GMT
Expires: Mon, 05 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v748"
Content-Type: image/png
Vary: Origin
Age: 0
ocsp.pki.goog/gts1c3
471 B IP
Hash ca359c54531ea823812a5abbcf85eb97
6c9d445dc87b58e70dfd8d80a15374667f9f0b4f
32015b73ad6385df42848ae288806993cab31ee8f210e61ac5d2857fa0d30805
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash daea1591424a17127d073fb60a7391bb
20b9aa9b14fd4b071ef940b281bdf22e6ec7b896
c890dbf05d923384a3fd582e8eda4ab4ea950147c0731a935a35f5d13077e2e8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash ca359c54531ea823812a5abbcf85eb97
6c9d445dc87b58e70dfd8d80a15374667f9f0b4f
32015b73ad6385df42848ae288806993cab31ee8f210e61ac5d2857fa0d30805
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.imgur.com/X5mBYtk.png
301 Moved Permanently 35 kB IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type PNG image data, 320 x 90, 8-bit/color RGBA, interlaced\012- data
Hash 09dd068339c98c8cf186a43d584d29c7
6e19c81b18a7f469a49a0fd0e6ab4848d840674a
ac0b029e1f897d34d3077101abfc7774cdbde684932a65fbc636f1b560d7e648
GET /X5mBYtk.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 05 Sep 2013 14:53:37 GMT
etag: "09dd068339c98c8cf186a43d584d29c7"
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: cHYEZOqvvmP2vPGm6YUWM660FLKjdVMf1oI-rAbsI32xjStTGS7vPw==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Jun 2023 14:57:03 GMT
age: 1563276
x-served-by: cache-iad-kiad7000077-IAD, cache-bma1652-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 39, 1
x-timer: S1685890624.827800,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 34766
X-Firefox-Spdy: h2
i.imgur.com/DBoTaTj.gif
301 Moved Permanently 57 kB IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type GIF image data, version 87a, 980 x 90\012- data
Hash 8cf0fb823fd7f81f7b960fbc45844adb
c5feed039c7e1a716e5ac93a506f3b312a5cc22c
aa3bef3b0329f5561d7d108be84f3feb90abb71ce1922f2737a9f58635bad66c
GET /DBoTaTj.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
last-modified: Thu, 05 Sep 2013 14:57:27 GMT
etag: "8cf0fb823fd7f81f7b960fbc45844adb"
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: IeJaI5p7EI8dddchFav2w2-Y-ZVWNcYgDFwc0KpJixmNNOHHHOQ-AQ==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Jun 2023 14:57:03 GMT
age: 743126
x-served-by: cache-iad-kcgs7200078-IAD, cache-bma1652-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 24, 1
x-timer: S1685890624.830722,VS0,VE10
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 57254
X-Firefox-Spdy: h2
sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fketnoi.js
302 Found 289 B URL GET HTTP/2 sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fketnoi.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (337)
Hash 1ff051ae0be5610a40f0962091bd855b
6c50ff807b17d5ab03b5631d36f03fb9a0f6ed59
a84dad2c5e7784d51c3a2d3fd60a16347b53db50c31d66b13a95480e121b8d84
GET /site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fketnoi.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
last-modified: Wed, 24 May 2023 21:52:01 GMT
etag: "1684965121000|#public|0|en|||0|1396687238|534984242"
location: https://accounts.google.com/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js
content-encoding: gzip
date: Sun, 04 Jun 2023 14:57:03 GMT
expires: Sun, 04 Jun 2023 14:57:03 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 289
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 7e34055a3d2144415983852452bad0e0
ef1be20723050c7706bdca028e127802cc7913b4
5617ae740b3f78798b0ec2647fd3f3451db263b35d7198bf9b1018a3bd380ef6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&ffgf=1&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&passive=1209600&service=jotspot&ifkv=Af_xneH8nod_yhhxB7yfPBAvyK6HWVTlLIOSI2LfLGIHgZnbWOSTfV07UTRFUTpSSj0vcIlfAv7V
302 Found 445 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&ffgf=1&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&passive=1209600&service=jotspot&ifkv=Af_xneH8nod_yhhxB7yfPBAvyK6HWVTlLIOSI2LfLGIHgZnbWOSTfV07UTRFUTpSSj0vcIlfAv7V
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint7A:FE:A8:C4:0F:E7:3E:DE:00:43:83:43:39:F5:0A:1A:CC:D5:74:0E
ValidityFri, 19 May 2023 12:58:14 GMT - Fri, 11 Aug 2023 12:58:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (580)
Hash 089d6f98ae75ab1cbf0ba46acf213163
e47c944f2ee0291485306167750d7286b31c87f3
c2b047db4a0b4e00ccd104c0e3224a8122c614ee4ea95d56b5e18e4144613d56
GET /InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&ffgf=1&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&passive=1209600&service=jotspot&ifkv=Af_xneH8nod_yhhxB7yfPBAvyK6HWVTlLIOSI2LfLGIHgZnbWOSTfV07UTRFUTpSSj0vcIlfAv7V HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:uqFJpcotnW1bO1w9TWxVNGsQZPTpDQ:P0AoOKMcX8JdrI5c;Path=/;Expires=Tue, 03-Jun-2025 14:57:04 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 14:57:04 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1828040628%3A1685890624096164&continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ffgf=1&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ifkv=Af_xneHPQu-4FLFPbPXkl9p5fiODQybrREXI4kiF9zAlIKcBaaD-90DrHqQYLb_iY2c4oT5YUfNP&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-DbFRxS4WDVPqBP_5066xlw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 445
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_1?le=scs
200 OK 36 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_1?le=scs
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (2076)
Hash 80ceddb817be4a1142b4b3ab1f336468
3ad3a1e7fd0a77bf6b8f1499333ec0f3ed6ec135
628c5339af109621d475f83bc0f4511e4e3e0bad29ee717ee282db72bcdff335
GET /_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 35983
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 00:24:31 GMT
expires: Thu, 30 May 2024 00:24:31 GMT
cache-control: public, max-age=31536000
age: 397953
last-modified: Fri, 28 Apr 2023 16:21:16 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/v3/signin/identifier?dsh=S-1828040628%3A1685890624096164&continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ffgf=1&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ifkv=Af_xneHPQu-4FLFPbPXkl9p5fiODQybrREXI4kiF9zAlIKcBaaD-90DrHqQYLb_iY2c4oT5YUfNP&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin
403 Forbidden 1.0 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?dsh=S-1828040628%3A1685890624096164&continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ffgf=1&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ifkv=Af_xneHPQu-4FLFPbPXkl9p5fiODQybrREXI4kiF9zAlIKcBaaD-90DrHqQYLb_iY2c4oT5YUfNP&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type gzip compressed data, max compression\012- data
Hash 74a33e920ebfa00a0cf4284a1ba11d49
c0415bebb72e8e165144a883f035349d3e426e1c
2c9d1e85d5c74083661a955714f90899db2d43ce482acd292f79e9607610e188
GET /v3/signin/identifier?dsh=S-1828040628%3A1685890624096164&continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ffgf=1&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fketnoi.js&ifkv=Af_xneHPQu-4FLFPbPXkl9p5fiODQybrREXI4kiF9zAlIKcBaaD-90DrHqQYLb_iY2c4oT5YUfNP&passive=1209600&service=jotspot&flowName=GlifWebSignIn&flowEntry=ServiceLogin HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 14:57:04 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-L0Ru4kF0mKrjcJnU80zrAA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/rpc:shindig_random.js?onload=init
200 OK 7.1 kB URL GET HTTP/3 apis.google.com/js/rpc:shindig_random.js?onload=init
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fkenhphim3s.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__#rpctoken=362784742&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (2056)
Hash 1eecd98aae1a3b8f875628439305d243
09b220394ec8fa451920e016cf8a601545d70444
49002211468ebd6656255df4ad813aa4f37ea63082d96c9499f601771e1f592e
GET /js/rpc:shindig_random.js?onload=init HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 7120
date: Sun, 04 Jun 2023 14:57:04 GMT
expires: Sun, 04 Jun 2023 14:57:04 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d9db2fb90306a7de"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
developers.google.com/
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://developers.google.com/
X-Cloud-Trace-Context: d6ac7dec821d1986a8dad9dc575a8f89
Date: Sun, 04 Jun 2023 14:57:04 GMT
Content-Type: text/html
Server: Google Frontend
Content-Length: 0
ocsp.pki.goog/gts1c3
471 B IP
Hash c8c4fd34484b10881179e1a092434fd9
b37e3b04da5ba68bf533fcff188ac29b8eb27b3e
e5ccf7ef803972b97b8bff04fcab8af38c84d5a832ab096c7fd5ace5e56bf92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.gstatic.com/accounts/o/3698212825-postmessagerelay.js
200 OK 5.2 kB URL GET HTTP/2 ssl.gstatic.com/accounts/o/3698212825-postmessagerelay.js
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fkenhphim3s.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__#rpctoken=362784742&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (3496)
Hash e89f3c34bd849d5b959045facdced264
6a4ed30e37cf844b1f56d5d81dc6dfec1c611476
37acf5f6aa181790c9f46f7a25b5c89ecc46c35603b9b62c3086228faf72b26d
GET /accounts/o/3698212825-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 5184
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 19:22:40 GMT
expires: Thu, 30 May 2024 19:22:40 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 26 May 2023 00:10:53 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 329664
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash c8c4fd34484b10881179e1a092434fd9
b37e3b04da5ba68bf533fcff188ac29b8eb27b3e
e5ccf7ef803972b97b8bff04fcab8af38c84d5a832ab096c7fd5ace5e56bf92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:57:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_0?le=scs
200 OK 21 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_0?le=scs
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fkenhphim3s.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__#rpctoken=362784742&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (1518)
Hash 3bf83d01c4a9541696ba11ec496d5b76
0f2480443be0cb74aed9f0052cc972d0ff717763
c2a58766c7eb0e1c471c6323ee8659a815e8c35adab512aaf1bfafcbffeb3d8f
GET /_/scs/abc-static/_/js/k=gapi.lb.en.wW0KrNepdTU.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 20733
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 18:01:11 GMT
expires: Sun, 02 Jun 2024 18:01:11 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 28 Apr 2023 16:21:16 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 75354
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/dyn-css/authorization.css?targetBlogID=7449247631223529042&zx=bada9769-11f5-4292-986a-b58e176ee318
200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=7449247631223529042&zx=bada9769-11f5-4292-986a-b58e176ee318
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint16:37:BF:DE:18:2B:BB:D4:6F:7B:05:89:E7:8F:31:BC:9A:D5:92:87
ValidityFri, 19 May 2023 12:52:45 GMT - Fri, 11 Aug 2023 12:52:44 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=7449247631223529042&zx=bada9769-11f5-4292-986a-b58e176ee318 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 14:57:05 GMT
last-modified: Sun, 04 Jun 2023 14:57:05 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
kenhphim3s.blogspot.com/favicon.ico
200 OK 793 B URL GET HTTP/1.1 kenhphim3s.blogspot.com/favicon.ico
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 173a940408e7788f57d9e4c9765cb4f7
9f760468a7f9418e050f66b3c898717419a6f39f
7c764cc042b2c8b420f12f9064c294487c9a67eb78ec58579fb8ae205252dc06
GET /favicon.ico HTTP/1.1
Host: kenhphim3s.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/x-icon
Expires: Sun, 04 Jun 2023 14:57:06 GMT
Date: Sun, 04 Jun 2023 14:57:06 GMT
Cache-Control: private, max-age=86400
Last-Modified: Mon, 20 Mar 2023 06:59:55 GMT
ETag: W/"e9ffd5de18c88f129f5eb280d1a2546ed98c5a917d4fef271856fba99ca228de"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 793
Server: GSE
dpcvietnam.com/nghieppro/image/no-repeat.png
404 Not Found 6.3 kB URL GET HTTP/1.1 dpcvietnam.com/nghieppro/image/no-repeat.png
IP
ASN #56150 Viet Solutions Services Trading Company Limited
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17069)
Hash a63bf9522b69730bfdb48c937dc64db1
66743754f35ff0aa6e36fdeebe3c74e37609cb00
9f72bfebdeb0fd86301cc73691aaa65e4a7a290d6367f434fd8325683181442d
GET /nghieppro/image/no-repeat.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 14:57:04 GMT
Server: Apache/2
X-Powered-By: PHP/5.4.32
Vary: Accept-Encoding,Cookie,User-Agent
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0
Link: <http://dpcvietnam.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=193uuvbr0638ov2n514qgusq33; path=/
Content-Encoding: gzip
Content-Length: 6337
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dpcvietnam.com/nghieppro/autolike/clip-sex-sao-lo-hang.gif
404 Not Found 6.4 kB URL GET HTTP/1.1 dpcvietnam.com/nghieppro/autolike/clip-sex-sao-lo-hang.gif
IP
ASN #56150 Viet Solutions Services Trading Company Limited
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17083)
Hash 332149c4fec2f73f38abe81fcf3a05b6
decb0b1fc50d5f9abd6cf31316f34fa7710da875
004e43c1d04d27b041337ea827934bb9547d830ac22fa566dfb60e3cd85e4fe3
GET /nghieppro/autolike/clip-sex-sao-lo-hang.gif HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 14:57:05 GMT
Server: Apache/2
X-Powered-By: PHP/5.4.32
Vary: Accept-Encoding,Cookie,User-Agent
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0
Link: <http://dpcvietnam.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=2o098bed30cnggsg9vsvp0ia73; path=/
Content-Encoding: gzip
Content-Length: 6350
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dpcvietnam.com/nghieppro/image/bg.jpg
404 Not Found 6.3 kB URL GET HTTP/1.1 dpcvietnam.com/nghieppro/image/bg.jpg
IP
ASN #56150 Viet Solutions Services Trading Company Limited
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17062)
Hash b9e4a64cf65fd27559ff93e039da6063
d705ee361c5794ed386e29bb028ab35da8f43b7d
1d987cc69b2939347cc245b44f0e874db2779fd84699fc9435ebe87e964fcb21
GET /nghieppro/image/bg.jpg HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 14:57:05 GMT
Server: Apache/2
X-Powered-By: PHP/5.4.32
Vary: Accept-Encoding,Cookie,User-Agent
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0
Link: <http://dpcvietnam.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=m6du0b045l7l725jg0dv5u3v05; path=/
Content-Encoding: gzip
Content-Length: 6333
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dpcvietnam.com/nghieppro/image/bg-2.png
404 Not Found 6.3 kB URL GET HTTP/1.1 dpcvietnam.com/nghieppro/image/bg-2.png
IP
ASN #56150 Viet Solutions Services Trading Company Limited
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17064)
Hash 2607b38c2662d0a97e4bea2c3fa6c2e9
1689c936e97d3e3dca63315ccf0eeab6d8c0099b
4e060c364af4c98a130a307845cf8607a82b57199c6288ae1a38f7faaab2247f
GET /nghieppro/image/bg-2.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 14:57:05 GMT
Server: Apache/2
X-Powered-By: PHP/5.4.32
Vary: Accept-Encoding,Cookie,User-Agent
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0
Link: <http://dpcvietnam.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=256erj5o3tecdmta4ttitaht74; path=/
Content-Encoding: gzip
Content-Length: 6335
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dpcvietnam.com/nghieppro/image/search-icon.png
404 Not Found 6.3 kB URL GET HTTP/1.1 dpcvietnam.com/nghieppro/image/search-icon.png
IP
ASN #56150 Viet Solutions Services Trading Company Limited
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17071)
Hash 6f0a09fc561254c3af62984f9efe9124
276516be37a323b371952ac0358a8a3ed870b305
9af01c94a745bb66886eeb641a67b10dba5f5ccb28e16bc606d9c79650022d62
GET /nghieppro/image/search-icon.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 14:57:06 GMT
Server: Apache/2
X-Powered-By: PHP/5.4.32
Vary: Accept-Encoding,Cookie,User-Agent
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0
Link: <http://dpcvietnam.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=lhvvq3il4r6heihevdvck4hhs7; path=/
Content-Encoding: gzip
Content-Length: 6338
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dpcvietnam.com/nghieppro/image/google1.png
0 B URL GET dpcvietnam.com/nghieppro/image/google1.png
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nghieppro/image/google1.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
dpcvietnam.com/nghieppro/image/sprite2.png
0 B URL GET dpcvietnam.com/nghieppro/image/sprite2.png
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nghieppro/image/sprite2.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=http%3A%2F%2Fkenhphim3s.blogspot.com&url=http%3A%2F%2Fphim.thucdem.net%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__
301 Moved Permanently 0 B URL GET HTTP/3 apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=http%3A%2F%2Fkenhphim3s.blogspot.com&url=http%3A%2F%2Fphim.thucdem.net%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=http%3A%2F%2Fkenhphim3s.blogspot.com&url=http%3A%2F%2Fphim.thucdem.net%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: sffe
content-length: 226
x-xss-protection: 0
date: Sun, 04 Jun 2023 14:48:46 GMT
expires: Sun, 04 Jun 2023 15:18:46 GMT
cache-control: public, max-age=1800
content-type: text/html; charset=UTF-8
age: 498
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fkenhphim3s.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__
200 OK 566 B URL GET HTTP/3 accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fkenhphim3s.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (586), with no line terminators
Hash df5320918665ba341758b3b182f32649
26624438dfd6b1204d2b3faa48f17d4b6e30c728
9fd38d7e712a1d9e27b17067c596e65ce0cc653fb5716e102b2821d86a41cdcd
GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fkenhphim3s.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.wW0KrNepdTU.O%2Fd%3D1%2Frs%3DAHpOoo8Je2IwWe-sD_xcm5fABAaEfyuc1g%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 14:57:04 GMT
content-security-policy: script-src 'nonce-52o3bMXkee3nVeIwSjG-aw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport, require-trusted-types-for 'script';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.thegioigames.mobi/
0 B IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.thegioigames.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
accounts.google.com/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint7A:FE:A8:C4:0F:E7:3E:DE:00:43:83:43:39:F5:0A:1A:CC:D5:74:0E
ValidityFri, 19 May 2023 12:58:14 GMT - Fri, 11 Aug 2023 12:58:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
set-cookie: __Host-GAPS=1:oy8m6DLODLucPESsEhAjFnzJwfTBPQ:nEuWLnDwCwMW0qe8; Expires=Tue, 03-Jun-2025 14:57:04 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 14:57:04 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&ffgf=1&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/ketnoi.js&passive=1209600&service=jotspot&ifkv=Af_xneH8nod_yhhxB7yfPBAvyK6HWVTlLIOSI2LfLGIHgZnbWOSTfV07UTRFUTpSSj0vcIlfAv7V
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-SycSlydTdGaU0506lRQFTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dpcvietnam.com/nghieppro/image/sidebar-title_bg.png
404 Not Found 0 B URL GET HTTP/1.1 dpcvietnam.com/nghieppro/image/sidebar-title_bg.png
IP
ASN #56150 Viet Solutions Services Trading Company Limited
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nghieppro/image/sidebar-title_bg.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 14:57:09 GMT
Server: Apache/2
X-Powered-By: PHP/5.4.32
Vary: Accept-Encoding,Cookie,User-Agent
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0
Link: <http://dpcvietnam.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=dcjiqfc2dbsg7din2ub69vd3f4; path=/
Content-Encoding: gzip
Content-Length: 6341
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dpcvietnam.com/nghieppro/image/nav.png
0 B URL GET dpcvietnam.com/nghieppro/image/nav.png
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nghieppro/image/nav.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
dpcvietnam.com/nghieppro/image/repeat-x.png
404 Not Found 0 B URL GET HTTP/1.1 dpcvietnam.com/nghieppro/image/repeat-x.png
IP
ASN #56150 Viet Solutions Services Trading Company Limited
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nghieppro/image/repeat-x.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 14:57:04 GMT
Server: Apache/2
X-Powered-By: PHP/5.4.32
Vary: Accept-Encoding,Cookie,User-Agent
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0
Link: <http://dpcvietnam.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=duginc0l0qd23dbkncu5u4v0t6; path=/
Content-Encoding: gzip
Content-Length: 6337
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
dpcvietnam.com/nghieppro/image/quang-cao-hai.png
0 B URL GET dpcvietnam.com/nghieppro/image/quang-cao-hai.png
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nghieppro/image/quang-cao-hai.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
dpcvietnam.com/nghieppro/image/sprite.png
0 B URL GET dpcvietnam.com/nghieppro/image/sprite.png
IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nghieppro/image/sprite.png HTTP/1.1
Host: dpcvietnam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kenhphim3s.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
developers.google.com/
301 Moved Permanently 0 B IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://developers.google.com/
X-Cloud-Trace-Context: d6ac7dec821d1986a8dad9dc575a8f89
Date: Sun, 04 Jun 2023 14:57:04 GMT
Content-Type: text/html
Server: Google Frontend
Content-Length: 0
developers.google.com/
200 OK 0 B IP
Requested by http://kenhphim3s.blogspot.com/search/label/phim%20tinh%20c%E1%BA%A3m?max-results/07520/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kenhphim3s.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 02 Jun 2023 19:01:34 GMT
content-type: text/html; charset=utf-8
vary: Cookie, Accept-Encoding
set-cookie: _ga_devsite=GA1.3.3128086912.1685890625; Expires=Tue, 03 Jun 2025 14:57:05 GMT; Max-Age=63072000; Path=/
content-security-policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-Jl0GtM+mMbvPfksBnkejAgRMPQUfP7' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
cache-control: no-cache, must-revalidate
expires: 0
pragma: no-cache
content-encoding: gzip
x-cloud-trace-context: 8339febad866239b7d507146afdc0151
date: Sun, 04 Jun 2023 14:57:05 GMT
server: Google Frontend
content-length: 28065
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
172.217.21.161
151.101.84.193
103.27.63.117
0.0.0.0
0.0.0.0