ocsp.pki.goog/gts1c3
472 B IP
Hash ee6dd3d5e439506c1c5d882849b6871e
62243782389a088216d40b2bf0684b4fa6fc5728
e499212218f87a738674cdeeda68c4ec05bf8bd780fd89125f5287b776595ca7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
200 OK 49 kB URL User Request GET HTTP/2 nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13257)
Hash 15e1eac55c7d1d47f3bb955b22e38671
8b1d6af8d33d9d04c0cc93a0cd5b34c79f28f633
8b5f652a88fad8eff91468a3f425fa23837cc46f12ad9d9c9fc95142e38f3f9b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0 HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 19 Sep 2023 20:09:16 GMT
date: Tue, 19 Sep 2023 20:09:16 GMT
cache-control: private, max-age=0
last-modified: Thu, 10 Aug 2023 09:18:03 GMT
etag: W/"2b5fc9c7e6a560d323590a958b97479de359f56a77e1f6b0ed60af37ba25b598"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 49083
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 11428f669a78b9590668faeac6f11163
4d0cd300ee04649eb98f53fe5e3b00f33cab04ab
5849cca08de7b7d0aa64f18b12542e31a194081f276123f9de442109ae5622c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nghiencuukhoahocsupham.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/js/cookienotice.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/cookienotice.js HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Tue, 26 Sep 2023 20:09:17 GMT
cache-control: public, max-age=604800
last-modified: Tue, 19 Sep 2023 16:55:46 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-zgNsIpXxJJE/Ts-oVoylT3I/AAAAAAAAADk/DW6LSIzDvLY/s1600/us.png
200 OK 620 B URL GET HTTP/2 1.bp.blogspot.com/-zgNsIpXxJJE/Ts-oVoylT3I/AAAAAAAAADk/DW6LSIzDvLY/s1600/us.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash e9666fc22c1afdf930f0391868dfaddc
b9122b169b00639bb22d842b1ec491cc65ea7715
ecea7929abaf1136762ab541efa866060771d307d5e482f9a2a69374f4e7b955
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-zgNsIpXxJJE/Ts-oVoylT3I/AAAAAAAAADk/DW6LSIzDvLY/s1600/us.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="us.png"
x-content-type-options: nosniff
server: fife
content-length: 620
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v39"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-vmzr8xYY8fs/Ts-oVg2xm6I/AAAAAAAAADY/U3kOPBcRfOY/s1600/vn.png
200 OK 446 B URL GET HTTP/2 1.bp.blogspot.com/-vmzr8xYY8fs/Ts-oVg2xm6I/AAAAAAAAADY/U3kOPBcRfOY/s1600/vn.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash caaa8141eeacf47d0b033e33cb046272
1108a06005b51b1b81a99644949eaf541ce52aa5
1fdd05c061116367cd3460ef182aeea62fea4f2a10eb9dd8ed8c625cafcc8645
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-vmzr8xYY8fs/Ts-oVg2xm6I/AAAAAAAAADY/U3kOPBcRfOY/s1600/vn.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vn.png"
x-content-type-options: nosniff
server: fife
content-length: 446
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v36"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-uaMLXcdkcLs/YRaS7LWzPaI/AAAAAAAAaIU/5lztioOczh0Pe_cjeb6QG7a7Qc91ih6QgCLcBGAsYHQ/s0/5jhwn4.gif
200 OK 66 kB URL GET HTTP/2 1.bp.blogspot.com/-uaMLXcdkcLs/YRaS7LWzPaI/AAAAAAAAaIU/5lztioOczh0Pe_cjeb6QG7a7Qc91ih6QgCLcBGAsYHQ/s0/5jhwn4.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type GIF image data, version 89a, 300 x 150\012- data
Hash f1964f49949e4fbd1059c087eb3652ad
a1d0b0af505c3f91d5b661b434fa0720354805bd
cfa9b9411cfc6b6309da9775570b6428a57af0ce486e30ad1089a12cd85db70a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-uaMLXcdkcLs/YRaS7LWzPaI/AAAAAAAAaIU/5lztioOczh0Pe_cjeb6QG7a7Qc91ih6QgCLcBGAsYHQ/s0/5jhwn4.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v6886"
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="5jhwn4.gif"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:17 GMT
server: fife
content-length: 66029
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 7c6c4ab403868ce33ede1ab6647ba1f5
574286bad8cc750c13bae961e4ca9f949b7b0bab
2808d998194c57f0f000205adc947b346de85ce853383f4126c1bb0c868e647a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 9f0e261ab8e2a186c6abcb7311a0a9b1
5b2521de7c88b8f767301d6976696b49224ee36c
8c4a73c04f1e533a06f2f6a82e8946c188d432ce04702525b59dd59bb912cce9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 9f0e261ab8e2a186c6abcb7311a0a9b1
5b2521de7c88b8f767301d6976696b49224ee36c
8c4a73c04f1e533a06f2f6a82e8946c188d432ce04702525b59dd59bb912cce9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 15:00:46 GMT
expires: Tue, 17 Sep 2024 15:00:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 12:52:31 GMT
content-type: text/css
vary: Accept-Encoding
age: 104911
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh6.googleusercontent.com/-8Q8_bB8Jhf8/UH15SxtVP4I/AAAAAAAAEAw/5A9nHwtU3As/s16/facebook.png
200 OK 635 B URL GET HTTP/2 lh6.googleusercontent.com/-8Q8_bB8Jhf8/UH15SxtVP4I/AAAAAAAAEAw/5A9nHwtU3As/s16/facebook.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c0af48f28595ac0e0489ea5812128da
1c034683f0e34c090793f8c20c8fd78936f2a927
a650cbf22cc6b9b9fcd3d63076dabe026a32b5976380a93dd75a731c27c67412
GET /-8Q8_bB8Jhf8/UH15SxtVP4I/AAAAAAAAEAw/5A9nHwtU3As/s16/facebook.png HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="facebook.png"
x-content-type-options: nosniff
server: fife
content-length: 635
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v100c"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh6.googleusercontent.com/-MfUTwAJDVHs/UHehpNyiReI/AAAAAAAAD4I/o0u-CP5al-M/s15/ico-gioithieu.png
200 OK 280 B URL GET HTTP/2 lh6.googleusercontent.com/-MfUTwAJDVHs/UHehpNyiReI/AAAAAAAAD4I/o0u-CP5al-M/s15/ico-gioithieu.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash c5d1cc6b05fc01473c050a0ec086bf45
954ca958779bf7f78bda6cc434658cc0df5f0128
d64e4ca645362b1924c6726b7b3a3d1b4b7dbbee9942134e36c2a44a043a7719
GET /-MfUTwAJDVHs/UHehpNyiReI/AAAAAAAAD4I/o0u-CP5al-M/s15/ico-gioithieu.png HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-gioithieu.png"
x-content-type-options: nosniff
server: fife
content-length: 280
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf82"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh6.googleusercontent.com/-mGuMMXcOEkM/UH15S1Px2EI/AAAAAAAAEAo/ICNRZxoRk_g/s16/googlebuzz.png
200 OK 636 B URL GET HTTP/2 lh6.googleusercontent.com/-mGuMMXcOEkM/UH15S1Px2EI/AAAAAAAAEAo/ICNRZxoRk_g/s16/googlebuzz.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dc95e36a9016622079f4e2481cb7385
1eef94e5d2ab07b5def7474d50305f256c17dbce
b32c7928befc34734270143791d9d4e572e53bdc3f0dacb78416f210d59db3ba
GET /-mGuMMXcOEkM/UH15S1Px2EI/AAAAAAAAEAo/ICNRZxoRk_g/s16/googlebuzz.png HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="googlebuzz.png"
x-content-type-options: nosniff
server: fife
content-length: 636
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v100a"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 058b9b9df76bc29602ccb5d0566a9b27
18efc32454d9446ccb23ae4ec5c3550fd1942e9e
65daea862d4547e367f9fe10316653f688bcbc6de9a987bfa8b2512ed6e01a4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh6.googleusercontent.com/-py3UTWU3Nzw/UHehopAwXOI/AAAAAAAAD34/GPkxUEHwl5Q/s15/ico-a.jpg
200 OK 775 B URL GET HTTP/2 lh6.googleusercontent.com/-py3UTWU3Nzw/UHehopAwXOI/AAAAAAAAD34/GPkxUEHwl5Q/s15/ico-a.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 15x15, components 3\012- data
Hash ae323ab808ba8243686fca76867c3537
39d72ab93023607a7c873414c69bc9b33e0880b9
20d172dd6a4a80854ff19a4508058776432c0a03d8bf7eff45a2c873bd1c2420
GET /-py3UTWU3Nzw/UHehopAwXOI/AAAAAAAAD34/GPkxUEHwl5Q/s15/ico-a.jpg HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-a.jpg"
x-content-type-options: nosniff
server: fife
content-length: 775
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf7e"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/1465578468-widgets.js
200 OK 58 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/1465578468-widgets.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type ASCII text, with very long lines (2215)
Hash a1cb4046392479f1acaeeba88535eaee
65ac5b085dd4b87ef3dbfe271254bd1d742f1abb
d49c1e3a643794375db57ab0f237a97a189577f3e822d8512ed383f95941dde8
GET /static/v1/widgets/1465578468-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57929
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 09:00:41 GMT
expires: Wed, 18 Sep 2024 09:00:41 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 15 Sep 2023 13:53:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 40116
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-SDwX8yQ8gV8/Uyr-zbzvdGI/AAAAAAAAAMo/VWMnNM4hm1M/s72-c/SKKN+CNTT+mam+non.JPG
200 OK 4.2 kB URL GET HTTP/2 1.bp.blogspot.com/-SDwX8yQ8gV8/Uyr-zbzvdGI/AAAAAAAAAMo/VWMnNM4hm1M/s72-c/SKKN+CNTT+mam+non.JPG
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2ecad5f244b922ae0c7744b9e1c200bb
3c4faa536f1f0ba940401d9a576189549328a55b
be2a2fa5d0d1f2efe377ce5f0ec6d042b32810f26cd9a6c78f947beec7339e6b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-SDwX8yQ8gV8/Uyr-zbzvdGI/AAAAAAAAAMo/VWMnNM4hm1M/s72-c/SKKN+CNTT+mam+non.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "vcb"
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="SKKN CNTT mam non.JPG"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:17 GMT
server: fife
content-length: 4235
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-bFMa5R2nfZI/UH15Udpt_mI/AAAAAAAAEBM/0ME5ciXjQm4/s16/twitter.png
200 OK 654 B URL GET HTTP/2 lh4.googleusercontent.com/-bFMa5R2nfZI/UH15Udpt_mI/AAAAAAAAEBM/0ME5ciXjQm4/s16/twitter.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 807d992b605aead86f99cd8f9c6bc76c
cb629bd773f9348f451a80ee21c6676bcb8d6fc7
b0d33beaa5a786a061af4a2db8af3e943de6124d289388f1bdcc9fd1db97a74f
GET /-bFMa5R2nfZI/UH15Udpt_mI/AAAAAAAAEBM/0ME5ciXjQm4/s16/twitter.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="twitter.png"
x-content-type-options: nosniff
server: fife
content-length: 654
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1013"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-5joH5eWvLJE/UHehpUlIUZI/AAAAAAAAD4M/3dUKKd5YczY/s15/ico-h.jpg
200 OK 785 B URL GET HTTP/2 lh5.googleusercontent.com/-5joH5eWvLJE/UHehpUlIUZI/AAAAAAAAD4M/3dUKKd5YczY/s15/ico-h.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 15x15, components 3\012- data
Hash cf49214a586a9871f763227f480dc0c7
b0422038af6016c18697dcd7d4c42651a519ced5
a950c5bbd3100823a8f12c2be1558fd9aa69b3bc6092ccc92c40042184029b93
GET /-5joH5eWvLJE/UHehpUlIUZI/AAAAAAAAD4M/3dUKKd5YczY/s15/ico-h.jpg HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-h.jpg"
x-content-type-options: nosniff
server: fife
content-length: 785
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf83"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-BmTGLIYo3FU/UHehpyJ-ixI/AAAAAAAAD4U/PCCko5XgXZo/s15/ico-m.jpg
200 OK 785 B URL GET HTTP/2 lh5.googleusercontent.com/-BmTGLIYo3FU/UHehpyJ-ixI/AAAAAAAAD4U/PCCko5XgXZo/s15/ico-m.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 15x15, components 3\012- data
Hash 421492d94b224d54846754907a955100
82cc32a9c186c4e8300aa7096a4e64cfe0efd4fd
95145bca602d906f50ffb6eec55ab931d8c2438ccb4862c92533af0baa0dbe1c
GET /-BmTGLIYo3FU/UHehpyJ-ixI/AAAAAAAAD4U/PCCko5XgXZo/s15/ico-m.jpg HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-m.jpg"
x-content-type-options: nosniff
server: fife
content-length: 785
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf85"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-ndguCUG8K_k/UH5HcOi-TII/AAAAAAAAECs/1S8LT_5hYlw/s13/ico_top.png
200 OK 265 B URL GET HTTP/2 lh5.googleusercontent.com/-ndguCUG8K_k/UH5HcOi-TII/AAAAAAAAECs/1S8LT_5hYlw/s13/ico_top.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type PNG image data, 13 x 11, 8-bit/color RGBA, non-interlaced\012- data
Hash 0448afa68d63b877dbd504d0c146636c
ba121145145a82898fcf29b52e939a8709c77373
93b8d69e8a2a7ee45b830e63c24f284e6acb81a208433b7f57af2422a6154245
GET /-ndguCUG8K_k/UH5HcOi-TII/AAAAAAAAECs/1S8LT_5hYlw/s13/ico_top.png HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico_top.png"
x-content-type-options: nosniff
server: fife
content-length: 265
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
etag: "v102b"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-yw15nyYdci8/Unozpg9A32I/AAAAAAAAES8/fqqi6885F4I/s200/Luanvanlogo.jpg
404 Not Found 832 B URL GET HTTP/3 3.bp.blogspot.com/-yw15nyYdci8/Unozpg9A32I/AAAAAAAAES8/fqqi6885F4I/s200/Luanvanlogo.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-yw15nyYdci8/Unozpg9A32I/AAAAAAAAES8/fqqi6885F4I/s200/Luanvanlogo.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:17 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.bp.blogspot.com/-kfDCXkM_tuk/UyRZbJCLRPI/AAAAAAAAADk/WX7k4U0f_78/s72-c/download.gif
200 OK 2.0 kB URL GET HTTP/3 2.bp.blogspot.com/-kfDCXkM_tuk/UyRZbJCLRPI/AAAAAAAAADk/WX7k4U0f_78/s72-c/download.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type GIF image data, version 89a, 72 x 72\012- data
Hash a22606b935486278bbf3fb1d942e3a95
abc1c00fda8bea29faa4179e711206b8c9ac2165
6f1625137103e0a4e4f4579f547ac2213740e34e98d4863084788410ad5b0b42
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-kfDCXkM_tuk/UyRZbJCLRPI/AAAAAAAAADk/WX7k4U0f_78/s72-c/download.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v39"
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="download.gif"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:17 GMT
server: fife
content-length: 1978
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-PurpaaQv7Y0/UyHcpE8BUZI/AAAAAAAAABw/9BZVchgkQHE/s72-c/images+%25284%2529.jpg
200 OK 2.8 kB URL GET HTTP/3 3.bp.blogspot.com/-PurpaaQv7Y0/UyHcpE8BUZI/AAAAAAAAABw/9BZVchgkQHE/s72-c/images+%25284%2529.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 8ea0255e9ff252e555db8841bd7902ad
793ebeb04ee225a60bb42375de29508f522fa0ae
e0f67a0a18f63b4aae23b1ba72aab13c3aa6e6793ac4aca65574b62a8a94a6db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-PurpaaQv7Y0/UyHcpE8BUZI/AAAAAAAAABw/9BZVchgkQHE/s72-c/images+%25284%2529.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1c"
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="images (4).jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:17 GMT
server: fife
content-length: 2798
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.bp.blogspot.com/-EnpvjPoF_X4/UyHcEGcIlkI/AAAAAAAAABQ/d-vBi2GDS8k/s72-c/images+%25281%2529.jpg
200 OK 2.4 kB URL GET HTTP/3 2.bp.blogspot.com/-EnpvjPoF_X4/UyHcEGcIlkI/AAAAAAAAABQ/d-vBi2GDS8k/s72-c/images+%25281%2529.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 0c4f2da31d03e1b6536108b944b3f464
498f18ec149991c46d420c4e816dc7dd62232a11
2e35531684f5892edcc3263dc808658c64cfc8423b2c63f054e9d584e9c62e78
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-EnpvjPoF_X4/UyHcEGcIlkI/AAAAAAAAABQ/d-vBi2GDS8k/s72-c/images+%25281%2529.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v14"
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="images (1).jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:17 GMT
server: fife
content-length: 2384
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-txo63fTomGM/UyHcgS9NKCI/AAAAAAAAABo/6eDYmRohg9g/s72-c/images+%25283%2529.jpg
200 OK 2.5 kB URL GET HTTP/3 3.bp.blogspot.com/-txo63fTomGM/UyHcgS9NKCI/AAAAAAAAABo/6eDYmRohg9g/s72-c/images+%25283%2529.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2d9a6644bd092c30e98b80eb5eb7fefc
780085a12e633b96b035c8bc1223bdf074a0a6ba
d568a55d6cf4c5357617c2c897c5c10494940fcfb7b16686d18b8ec7fa39e5fc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-txo63fTomGM/UyHcgS9NKCI/AAAAAAAAABo/6eDYmRohg9g/s72-c/images+%25283%2529.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1a"
expires: Wed, 20 Sep 2023 20:09:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="images (3).jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:17 GMT
server: fife
content-length: 2455
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/platform.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
Fingerprint89:B3:89:45:05:60:05:42:93:21:7A:DF:C0:DE:50:38:57:4A:B1:52
ValidityMon, 14 Aug 2023 08:23:10 GMT - Mon, 06 Nov 2023 08:23:09 GMT
File type ASCII text, with very long lines (2664)
Hash bc0c02039629e33a0f670270feb69b5f
74ea07e932b0800171297bca3b64c71d7c409bf3
13499aaf026263e1df495859efe16fc7e928d087b1206a593594cc7bee4728a0
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21840
date: Tue, 19 Sep 2023 20:09:17 GMT
expires: Tue, 19 Sep 2023 20:09:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "6d6113196b448c31"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 410bfc9bc55fa3d6b6c7b36e763d99b1
3c5791270aa32bf420babf1ed8a5c932cfb12bb7
bdba0ca23de388dfab64bbc05da45b5756e5a00525a7e5055467ed62e665be39
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 5edd9547dfabd68a235178dd7f5ebac2
48801897d490b1b7c4d4b87c291eb8b094c0f109
10808a6d5adbac605187a63d862cb9629c633fe48d459805581274a39681c4f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 7c6c4ab403868ce33ede1ab6647ba1f5
574286bad8cc750c13bae961e4ca9f949b7b0bab
2808d998194c57f0f000205adc947b346de85ce853383f4126c1bb0c868e647a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 51 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (3920)
Hash 5721d4bb945c424480633cf6dda66c49
a57c529cc23daf99516d4ffa6e0e68a4ae279fbb
6fe39eccb4f24d23daa10599f21a36d2067f16028931401ab0bf3bfc1b53fc7c
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Tue, 19 Sep 2023 20:09:18 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 12737555302975093412
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 50600
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-Na6WNNSGuiI/UHb_aG5hY2I/AAAAAAAAD2k/MA0Js_GJh-Y/s30/bg-menu-foot.jpg
200 OK 369 B URL GET HTTP/3 lh4.googleusercontent.com/-Na6WNNSGuiI/UHb_aG5hY2I/AAAAAAAAD2k/MA0Js_GJh-Y/s30/bg-menu-foot.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 5x30, components 3\012- data
Hash 2c42c10f22f6a30fdb45b5df085db7c1
1897a1cc0c3a31b3e83ea4f6923d78d55cf18555
5383e381832bf2cd18ec207c1cf070e1bf7a8db92deb0dceae8b13b49f0a19e4
GET /-Na6WNNSGuiI/UHb_aG5hY2I/AAAAAAAAD2k/MA0Js_GJh-Y/s30/bg-menu-foot.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bg-menu-foot.jpg"
x-content-type-options: nosniff
server: fife
content-length: 369
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf69"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh4.googleusercontent.com/-Gru2cLmFwcI/TtTg4D0DuJI/AAAAAAAABGA/RGSalmz0kQA/s18/iconsearchr.gif
200 OK 350 B URL GET HTTP/3 lh4.googleusercontent.com/-Gru2cLmFwcI/TtTg4D0DuJI/AAAAAAAABGA/RGSalmz0kQA/s18/iconsearchr.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type GIF image data, version 89a, 18 x 14\012- data
Hash 3909bab18f8c8ba2920b6fd128c6fcda
e4523d16cea7bc74e000b414e014e34013942fb6
d5519b87fccb32e6bc1bb4af403888c0f4d040032a7c93a4661262adbebf477d
GET /-Gru2cLmFwcI/TtTg4D0DuJI/AAAAAAAABGA/RGSalmz0kQA/s18/iconsearchr.gif HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="iconsearchr.gif"
x-content-type-options: nosniff
server: fife
content-length: 350
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "v22e0"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/-PP-kteLdf8g/UHb-ZUHbgBI/AAAAAAAAD2Q/Xs3Hv2_6IL8/s26/bg-nav-foot.jpg
200 OK 365 B URL GET HTTP/3 lh3.googleusercontent.com/-PP-kteLdf8g/UHb-ZUHbgBI/AAAAAAAAD2Q/Xs3Hv2_6IL8/s26/bg-nav-foot.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1x26, components 3\012- data
Hash 21fbaa3f9256b84b0b697f3004ec632c
4a3341650f7f26df3751b92d00188c86d21c701a
a5cd15aee515109881387d34093c724105c6bd457abf15ece51f7441fd00f03e
GET /-PP-kteLdf8g/UHb-ZUHbgBI/AAAAAAAAD2Q/Xs3Hv2_6IL8/s26/bg-nav-foot.jpg HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bg-nav-foot.jpg"
x-content-type-options: nosniff
server: fife
content-length: 365
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf64"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash fe704f1fc624b4900172e83e20ad7c95
584b993ed1557e607362f7ba7f34b7b588c409ad
32c845313425787f331e7b2173d258f5f2f878e8a876b32bbb2b1e275d6ca705
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/-Tie8MX__wvA/UHehq5XkyzI/AAAAAAAAD4w/fOZkTtYvAQk/s48/li-right.jpg
200 OK 490 B URL GET HTTP/3 lh3.googleusercontent.com/-Tie8MX__wvA/UHehq5XkyzI/AAAAAAAAD4w/fOZkTtYvAQk/s48/li-right.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 2x48, components 3\012- data
Hash f4d8d6301c5dd1fdc603c57a76267285
38c9f0086e07a39f61a662d21326a3a29d72a74f
b6781c596174ddb2166de8937d2bd1f98069fef05f7dfbe70ee873a3f1b7352e
GET /-Tie8MX__wvA/UHehq5XkyzI/AAAAAAAAD4w/fOZkTtYvAQk/s48/li-right.jpg HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="li-right.jpg"
x-content-type-options: nosniff
server: fife
content-length: 490
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf8c"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh6.googleusercontent.com/-ikwqo8Fs1x8/UHzkFs1r5OI/AAAAAAAAD-I/77cKlsVO54Q/s101/hnjn.gif
200 OK 1.4 kB URL GET HTTP/3 lh6.googleusercontent.com/-ikwqo8Fs1x8/UHzkFs1r5OI/AAAAAAAAD-I/77cKlsVO54Q/s101/hnjn.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type GIF image data, version 89a, 2 x 101\012- data
Hash bf82486e75c3fdae4fc0a1f6e37ad675
9352dc212b50da26a8436f486f12282549ee0674
3c08ba93bd8e1722efb7323c7f0a02c4f4c1b120a86651981ed9a20b723d2918
GET /-ikwqo8Fs1x8/UHzkFs1r5OI/AAAAAAAAD-I/77cKlsVO54Q/s101/hnjn.gif HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="hnjn.gif"
x-content-type-options: nosniff
server: fife
content-length: 1417
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1e3c"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/-eEoX3YdUMGg/UHxDSVpNFcI/AAAAAAAAD9s/gGao2ZhvyNM/s18/hbhjs.png
200 OK 347 B URL GET HTTP/3 lh3.googleusercontent.com/-eEoX3YdUMGg/UHxDSVpNFcI/AAAAAAAAD9s/gGao2ZhvyNM/s18/hbhjs.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash a18ba4e6fb1952ed27d8988a90846533
f6992ef5b5f3389301b61a6773e921d290906999
60b73d70d057e214e29c8ff403e5135569a5da3e01629615abe0e4474379aad8
GET /-eEoX3YdUMGg/UHxDSVpNFcI/AAAAAAAAD9s/gGao2ZhvyNM/s18/hbhjs.png HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="hbhjs.png"
x-content-type-options: nosniff
server: fife
content-length: 347
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "vfdb"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh5.googleusercontent.com/-zJIbSjA0Vpc/UHwi-xtFy4I/AAAAAAAAD9M/12JPXvcuwqw/s32/njnm.gif
200 OK 1.1 kB URL GET HTTP/3 lh5.googleusercontent.com/-zJIbSjA0Vpc/UHwi-xtFy4I/AAAAAAAAD9M/12JPXvcuwqw/s32/njnm.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type GIF image data, version 89a, 1 x 32\012- data
Hash 2ad8604fa28b55b128771ab1abacd209
7779512a1d718d32ef6fc97df860e468dc56a873
a7152fc6f791a158c5e473e7d622cd80b678ea8661e7ce77582c22d81d16e1eb
GET /-zJIbSjA0Vpc/UHwi-xtFy4I/AAAAAAAAD9M/12JPXvcuwqw/s32/njnm.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="njnm.gif"
x-content-type-options: nosniff
server: fife
content-length: 1148
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1f81"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 7c6c4ab403868ce33ede1ab6647ba1f5
574286bad8cc750c13bae961e4ca9f949b7b0bab
2808d998194c57f0f000205adc947b346de85ce853383f4126c1bb0c868e647a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.googleusercontent.com/-M9bTXv6l8y8/UHzxNGfvszI/AAAAAAAAD_Q/vifUw8RtPbg/s12/RSS.png
200 OK 601 B URL GET HTTP/3 lh4.googleusercontent.com/-M9bTXv6l8y8/UHzxNGfvszI/AAAAAAAAD_Q/vifUw8RtPbg/s12/RSS.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 0fa7fcd5c7c5092792aa30bef9f5c879
141b82b11f8c299762215fcb11d9420a021752df
5456a1a24cc37d72704b661976fac091886851f45183e33a2b4bdea91a1d6929
GET /-M9bTXv6l8y8/UHzxNGfvszI/AAAAAAAAD_Q/vifUw8RtPbg/s12/RSS.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="RSS.png"
x-content-type-options: nosniff
server: fife
content-length: 601
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:18 GMT
expires: Wed, 20 Sep 2023 20:09:18 GMT
cache-control: public, max-age=86400, no-transform
etag: "vff4"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 64ed688baf8887c3e918f1a762cdc5b2
057b28a887cac1050b7c08d5647a1e4d8b416ebf
267244dad1693002d314ef71cc0317d4d942c4740009aacafac6a6ab7900a712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dinhvioto.net/keyword.js
200 OK 7.5 kB IP
ASN #49981 WorldStream B.V.
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectdinhvioto.net
FingerprintDA:3D:63:E3:1C:99:AD:57:64:19:D4:BB:63:14:C5:99:1E:3A:77:24
ValidityWed, 09 Aug 2023 03:43:34 GMT - Tue, 07 Nov 2023 03:43:33 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (15654)
Hash 254f6ece63213a128436a20d84695a34
7133d728bc6dae298332d2431cc93fd6e3804f14
748ec062c3342fe3f4d5334da434fa96d7a5d484844fbbf7db85f708b4b61d51
GET /keyword.js HTTP/1.1
Host: dinhvioto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 19 Sep 2023 20:09:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
ocsp.pki.goog/s/gts1d4/rrchy-zOX8M
472 B URL ocsp.pki.goog/s/gts1d4/rrchy-zOX8M
IP
Hash c2dc8b4beab124f9a3fa83540c3eda63
daee7d9deb6495d9b2c086e8b771c8ee0421e3a6
894c0cd3a1f9484e1fa3d823939a5897f17fe1d09e87566133e873abb95f4faf
POST /s/gts1d4/rrchy-zOX8M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 5edd9547dfabd68a235178dd7f5ebac2
48801897d490b1b7c4d4b87c291eb8b094c0f109
10808a6d5adbac605187a63d862cb9629c633fe48d459805581274a39681c4f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?alt=json-in-script&callback=getRandomPosts&max-results=999999
200 OK 133 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?alt=json-in-script&callback=getRandomPosts&max-results=999999
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type Unicode text, UTF-8 text, with very long lines (62150)
Size 133 kB (133131 bytes)
Hash c572aa4d59b0ba544e4a07a2af85afac
260bc395238889597fc4e68ddceeb577181c337c
420940e69f96a00b8722f8cce4d07f4f6dc6c89a7bfeb107c5dc793bb31fc9f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /feeds/posts/default?alt=json-in-script&callback=getRandomPosts&max-results=999999 HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"7edb1009134355579c664e09288605aeef712ba93e9f86384bb0dcc180d23f3a"
date: Tue, 19 Sep 2023 20:09:17 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 19 Sep 2023 20:09:18 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 10 Aug 2023 09:18:03 GMT
content-encoding: gzip
content-length: 133131
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?max-results=20&orderby=published&alt=json-in-script&callback=showposts
200 OK 12 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?max-results=20&orderby=published&alt=json-in-script&callback=showposts
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type Unicode text, UTF-8 text, with very long lines (62176)
Hash 8091240541983c5b1ac4a59a7d436a68
8005c019dd0e011bc88d2c5ebc2d82bbf8b048c6
d65eadf79ed3a62fcf1f932180301ed5f955c6ce63b2f6b3f0570633d1af4b8b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /feeds/posts/default?max-results=20&orderby=published&alt=json-in-script&callback=showposts HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"f1ed04a9b118ff79b4bbcb34ff9a0f57b0c22cbd4ad0d042130ef60061287a7a"
date: Tue, 19 Sep 2023 20:09:18 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 19 Sep 2023 20:09:19 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 10 Aug 2023 09:18:03 GMT
content-encoding: gzip
content-length: 12425
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 64974e31d5d11a422a43482c1cc264fe
29df1e5938da864a59478f5aaa0b25c197a5b097
1c96fb2945985f7073b63e5249b8557af232bc52229fa5a1230317c17b8736c4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/dyn-css/authorization.css?targetBlogID=1631668450721642768&zx=d21789a9-9d23-429b-bc43-26a7b6de25e4
200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=1631668450721642768&zx=d21789a9-9d23-429b-bc43-26a7b6de25e4
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=1631668450721642768&zx=d21789a9-9d23-429b-bc43-26a7b6de25e4 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 20:09:18 GMT
last-modified: Tue, 19 Sep 2023 20:09:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.sangkiengiaovien.com//feeds/posts/default/-//Ki%E1%BA%BFm%20ti%E1%BB%81n%20online?orderby=published&alt=json-in-script&callback=showrecentpostswiththumbs
200 OK 26 kB URL GET HTTP/2 www.sangkiengiaovien.com//feeds/posts/default/-//Ki%E1%BA%BFm%20ti%E1%BB%81n%20online?orderby=published&alt=json-in-script&callback=showrecentpostswiththumbs
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectwww.sangkiengiaovien.com
FingerprintCF:B3:E2:5A:0A:B9:A0:C4:92:77:85:29:E0:CF:99:15:B8:62:08:5B
ValiditySun, 13 Aug 2023 16:16:58 GMT - Sat, 11 Nov 2023 17:01:26 GMT
File type Unicode text, UTF-8 text, with very long lines (59888)
Hash 7ea294e2582a31230bedbbe3f116ffaf
9bc093d2cb1da6025dc14bc21b9c399ae26eb005
b66e0b0391c93464d52428bb0f54509c7c44aa4bef1d4a1a2eaa2f4c50cfc037
GET //feeds/posts/default/-//Ki%E1%BA%BFm%20ti%E1%BB%81n%20online?orderby=published&alt=json-in-script&callback=showrecentpostswiththumbs HTTP/1.1
Host: www.sangkiengiaovien.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"97f0d9efd8348e8f3b51e524de3746763ddb4157388cb812cc3e802d6f074f35"
date: Tue, 19 Sep 2023 20:09:18 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 19 Sep 2023 20:09:19 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 19 Sep 2023 15:34:06 GMT
content-encoding: gzip
content-length: 25703
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
nghiencuukhoahocsupham.blogspot.com/feeds/posts/default/-/%BB%99i%20ngh%E1%BB%8B?alt=json-in-script&callback=numberOfPosts
200 OK 3.7 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/feeds/posts/default/-/%BB%99i%20ngh%E1%BB%8B?alt=json-in-script&callback=numberOfPosts
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type Unicode text, UTF-8 text, with very long lines (13342)
Hash ec7e04880dec78318c54874bc3ca1b3b
987d6bf0d6fb111939d8fdc1230200db16af77e0
4072aacb2b884feee2a09dd4a55fd5ca51dc02d1cbac63b23df903d66c36070d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /feeds/posts/default/-/%BB%99i%20ngh%E1%BB%8B?alt=json-in-script&callback=numberOfPosts HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Cookie: SC_unique_275813=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"079f7f33a121a966fe37fec82c95b354ebb14edfd0d7b02b355e7acbda0b80f3"
date: Tue, 19 Sep 2023 20:09:18 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 19 Sep 2023 20:09:19 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 10 Aug 2023 09:18:03 GMT
content-encoding: gzip
content-length: 3696
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/afd1b6e5/www-player.css
200 OK 49 kB URL GET HTTP/3 www.youtube.com/s/player/afd1b6e5/www-player.css
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 662ec7740ca14a0a6ad24e9bd7a61834
88dc6626002c391392ed522295a68f904b0be922
8e383c59b89e3581ba173e50d18dbedc7760e41313f9fbb44016ad177fe01248
GET /s/player/afd1b6e5/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49338
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 18:16:33 GMT
expires: Wed, 18 Sep 2024 18:16:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 12 Sep 2023 20:30:18 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 6766
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/afd1b6e5/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/afd1b6e5/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (3391)
Hash 4e24a70e50fb5281fac0aad4effe5fa2
c6a3a3478435320624a5144fba67dc95fdda3315
204609f065b0cde526bf8f9c28dbfb3303193a09521c5eac5a9922f65c8de411
GET /s/player/afd1b6e5/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 15680
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 23:45:35 GMT
expires: Tue, 17 Sep 2024 23:45:35 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 12 Sep 2023 20:30:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 73424
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/afd1b6e5/www-embed-player.vflset/www-embed-player.js
200 OK 96 kB URL GET HTTP/3 www.youtube.com/s/player/afd1b6e5/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (682)
Hash a2e439eb734622f4464d54c4584a821f
e9aab9578cbc086ade348abb19329b66934950af
cfa99a3aa8188c94845c65fa50fdfab849429c221cb5b6c92aea2498537ffb76
GET /s/player/afd1b6e5/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 96209
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 05:35:27 GMT
expires: Wed, 18 Sep 2024 05:35:27 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 12 Sep 2023 20:30:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 52432
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/afd1b6e5/player_ias.vflset/en_US/base.js
200 OK 797 kB URL GET HTTP/3 www.youtube.com/s/player/afd1b6e5/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (555)
Size 797 kB (796714 bytes)
Hash a26d46289877dd71ff5b1cbe1dd2db92
1953c5fc2646508f25a2b5fd0882b27011c38571
b6597d5a9e7a4d5e0e601eab1a5fd200f43051e52901702b13dc1130dc0faed1
GET /s/player/afd1b6e5/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 796714
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 02:52:17 GMT
expires: Wed, 18 Sep 2024 02:52:17 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 12 Sep 2023 20:30:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 62222
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh6.googleusercontent.com/-0E_Cmoz-GGU/UHbGi-ggJ3I/AAAAAAAAD08/raRmKvf_A4o/s4/dot1.jpg
200 OK 347 B URL GET HTTP/3 lh6.googleusercontent.com/-0E_Cmoz-GGU/UHbGi-ggJ3I/AAAAAAAAD08/raRmKvf_A4o/s4/dot1.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 4x2, components 3\012- data
Hash 78a87d1ae61f35c2908f921fe9f3833a
7fd816b11286b55ddaae344ff7d19c7b54b11835
d6275585b552b8ba93b21166ddc571782261d6bd11d380367d292f4708b308dc
GET /-0E_Cmoz-GGU/UHbGi-ggJ3I/AAAAAAAAD08/raRmKvf_A4o/s4/dot1.jpg HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="dot1.jpg"
x-content-type-options: nosniff
server: fife
content-length: 347
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:19 GMT
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf4f"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh4.googleusercontent.com/-DhT7TaOwPHg/UHaC2uyfwoI/AAAAAAAADyk/9t1sqImvJPo/s83/back-tile.jpg
200 OK 756 B URL GET HTTP/3 lh4.googleusercontent.com/-DhT7TaOwPHg/UHaC2uyfwoI/AAAAAAAADyk/9t1sqImvJPo/s83/back-tile.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 83x83, components 3\012- data
Hash cb4d2cf5a33b321b178ce399f1ac26fb
d6cbb1871acbb8aeacf7996d038c844b03174a44
d4e1b8cd646aa39fea75d52433796cd17ea4319b9aa2d9251d55a395ba0718c2
GET /-DhT7TaOwPHg/UHaC2uyfwoI/AAAAAAAADyk/9t1sqImvJPo/s83/back-tile.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="back-tile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 756
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:19 GMT
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf29"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Sep 2023 15:24:26 GMT
expires: Fri, 13 Sep 2024 15:24:26 GMT
cache-control: public, max-age=31536000
age: 449093
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IoxrLNdlTyI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9N48n3oloz8UTxoCozKcpUKaADkg/cb=gapi.loaded_0?le=scs
200 OK 61 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IoxrLNdlTyI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9N48n3oloz8UTxoCozKcpUKaADkg/cb=gapi.loaded_0?le=scs
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (1368)
Hash 60cb3b69fb3e3b24891141159eb940ad
8b183b5d8df902f7919cec452bce4c7f1bd950a7
6bbd65596c2e3d24a2d396fbf8753545e8d6a3fe2a7467f9ef4e1b4c2a0494f9
GET /_/scs/abc-static/_/js/k=gapi.lb.en.IoxrLNdlTyI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9N48n3oloz8UTxoCozKcpUKaADkg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61126
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 22:31:53 GMT
expires: Tue, 17 Sep 2024 22:31:53 GMT
cache-control: public, max-age=31536000
age: 77846
last-modified: Wed, 02 Aug 2023 15:23:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 05:45:56 GMT
expires: Wed, 18 Sep 2024 05:45:56 GMT
cache-control: public, max-age=31536000
age: 51803
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
st-n.pc2ads.com/js/adv_out.js
200 OK 34 kB URL GET HTTP/2 st-n.pc2ads.com/js/adv_out.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectn.pc2ads.com
Fingerprint3E:76:D8:2E:3A:4C:B6:B2:58:16:5D:6C:48:B6:5B:24:B1:13:3F:3D
ValidityThu, 29 Jun 2023 07:05:50 GMT - Wed, 27 Sep 2023 07:05:49 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 1c634d7b0100774f1374ecdf09f11004
22fe04dde9931a901f2661437d7a079b1360dbed
fe3defbaa6115f3ec1441ec500fbacf6a74b7f2b95e988a673f014a5f73b8ca9
GET /js/adv_out.js HTTP/1.1
Host: st-n.pc2ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 19 Sep 2023 20:09:19 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 07:19:42 GMT
etag: W/"64ed9c0e-15946"
x-id: osix-hw-edge-gc4
expires: Tue, 19 Sep 2023 20:10:19 GMT
cache-control: max-age=60
cache: HIT
x-cached-since: 2023-09-19T20:09:18+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__
2.7 kB URL www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3170)
Hash 6cc8484522b9eb0582d2a4a19311e2ca
e652df631b0fdc3dba1c9865f2cfee3437b23b1a
af1213e28192d1ac990f499976209a443be35169f48634b08dde778191039d77
GET /navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 20:09:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2669
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?max-results=7&orderby=published&alt=json-in-script&callback=showrecentposts
200 OK 8.4 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?max-results=7&orderby=published&alt=json-in-script&callback=showrecentposts
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type Unicode text, UTF-8 text, with very long lines (49561)
Hash 885424ce8d78e59b86b6224159785abd
117ecbb7b6cfd8b5831b338a2f94a1c59118627b
37d4a1a2b49e38211b1e8995f8c1f43e3fd4ddec58f35344c841f57e45f37d00
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /feeds/posts/default?max-results=7&orderby=published&alt=json-in-script&callback=showrecentposts HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Cookie: SC_unique_275813=1; SC_showNum_275813=1; SC_sevenDay_Expires_275813=1695758959070; SC_unique_275811=1; SC_showNum_275811=1; SC_sevenDay_Expires_275811=1695758959378; si_user_id=4oRMizFG_1g2jUS; si_sess_id=4oRMizFG_1g2jUS; SC_unique_275808=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"8dd35457c8a3d34447d75fe2ba1ced9d2d17fff4b7285d57220d1f74b2676376"
date: Tue, 19 Sep 2023 20:09:19 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 19 Sep 2023 20:09:20 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Thu, 10 Aug 2023 09:18:03 GMT
content-encoding: gzip
content-length: 8446
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-Ig9D7jIYh7o/YObSG2p6HMI/AAAAAAAAZh4/fEasiirTeB8oAJlD4hfG5x5E8VNh83pHwCLcBGAsYHQ/w126-h94/download.jpg
200 OK 4.2 kB URL GET HTTP/3 1.bp.blogspot.com/-Ig9D7jIYh7o/YObSG2p6HMI/AAAAAAAAZh4/fEasiirTeB8oAJlD4hfG5x5E8VNh83pHwCLcBGAsYHQ/w126-h94/download.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 126x94, components 3\012- data
Hash d2fe12ba07c7af68cf56ac9405fe8ce1
275ec0effe86b7bf060b91ce7f7e98919926d75a
aaaef8e086b36c54df5a2f888d7b1b91153b126b65f76624c1d024632f661020
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-Ig9D7jIYh7o/YObSG2p6HMI/AAAAAAAAZh4/fEasiirTeB8oAJlD4hfG5x5E8VNh83pHwCLcBGAsYHQ/w126-h94/download.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v661f"
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="download.jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:19 GMT
server: fife
content-length: 4160
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-0HcP8SJB9wI/YRUCdjZ37lI/AAAAAAAAaFw/WFbcALmsUXskj2D06H3yBb0eSjEmcWK2ACLcBGAsYHQ/w150-h77/Sangkiengiaovien1.png
200 OK 6.3 kB URL GET HTTP/3 1.bp.blogspot.com/-0HcP8SJB9wI/YRUCdjZ37lI/AAAAAAAAaFw/WFbcALmsUXskj2D06H3yBb0eSjEmcWK2ACLcBGAsYHQ/w150-h77/Sangkiengiaovien1.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type PNG image data, 150 x 77, 8-bit/color RGB, non-interlaced\012- data
Hash cc8793622a399e2a670257284fbd84e0
8fe7f495c6105ad9b9ea50b622fe40c8c82a7bb8
ce6ef3b3a75d65649a1ec40d079bec82c3e124d3d052420fae34e45d5bbd787e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-0HcP8SJB9wI/YRUCdjZ37lI/AAAAAAAAaFw/WFbcALmsUXskj2D06H3yBb0eSjEmcWK2ACLcBGAsYHQ/w150-h77/Sangkiengiaovien1.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v685d"
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Sangkiengiaovien1.png"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:19 GMT
server: fife
content-length: 6313
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-TTkshs-0KPY/YQ0gnQujT9I/AAAAAAAAaBE/h3BE6o7zGoEiC6-9WdCwJxj45IXrw6SawCLcBGAsYHQ/w126-h80/Sangkien4.png
200 OK 2.9 kB URL GET HTTP/3 1.bp.blogspot.com/-TTkshs-0KPY/YQ0gnQujT9I/AAAAAAAAaBE/h3BE6o7zGoEiC6-9WdCwJxj45IXrw6SawCLcBGAsYHQ/w126-h80/Sangkien4.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type PNG image data, 40 x 80, 8-bit/color RGB, non-interlaced\012- data
Hash 49c9c4251bbda7e3f2811e82e627dd77
2f0e4b5929b0eab53b09d71c217d0768e38d499d
5a08286cad3242dea6841c0e48546695e7965119ac758bca9496cbf3d96076cb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-TTkshs-0KPY/YQ0gnQujT9I/AAAAAAAAaBE/h3BE6o7zGoEiC6-9WdCwJxj45IXrw6SawCLcBGAsYHQ/w126-h80/Sangkien4.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v6812"
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Sangkien4.png"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:19 GMT
server: fife
content-length: 2855
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-dRV6PvEvmts/YRUx11QfS7I/AAAAAAAAaHY/L4tyq1qDzxYVYkmnr-TJleyG51J5YrNrQCLcBGAsYHQ/w177-h93/bitcoin-la-gi-va-cach-kiem-bitcoin.jpg
200 OK 9.8 kB URL GET HTTP/3 1.bp.blogspot.com/-dRV6PvEvmts/YRUx11QfS7I/AAAAAAAAaHY/L4tyq1qDzxYVYkmnr-TJleyG51J5YrNrQCLcBGAsYHQ/w177-h93/bitcoin-la-gi-va-cach-kiem-bitcoin.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 177x93, components 3\012- data
Hash 857d6b166194bac4b23f23e1c22182b0
c534f2eb5c46cb0b431ca68664f1b10949424e4a
7eae1d090a46adadac247e15c6aae372768830d41a185c963768e798847dbe9f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-dRV6PvEvmts/YRUx11QfS7I/AAAAAAAAaHY/L4tyq1qDzxYVYkmnr-TJleyG51J5YrNrQCLcBGAsYHQ/w177-h93/bitcoin-la-gi-va-cach-kiem-bitcoin.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v6877"
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="bitcoin-la-gi-va-cach-kiem-bitcoin.jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:19 GMT
server: fife
content-length: 9812
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com&pfname=&rpctoken=21715213
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (2664)
Hash 3e680d5a22266127e8a36263d1aff76d
792c1e4b9c3082d83eadb73e0a171f5af216b74b
646858dc6120e933f6d0951560063dea27b2cbf64693f5b3e45d637166266de1
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21850
date: Tue, 19 Sep 2023 20:09:19 GMT
expires: Tue, 19 Sep 2023 20:09:19 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "3da185580d4f9ca7"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/arrows-light.png
200 OK 117 B URL GET HTTP/3 resources.blogblog.com/img/navbar/arrows-light.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com&pfname=&rpctoken=21715213
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 25c2b0cfe0ad4dcda4a0e3727d091d80
b9d16f4311e64648b7970baf00cb9841e3c3351b
bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 02:56:18 GMT
expires: Tue, 26 Sep 2023 02:56:18 GMT
cache-control: public, max-age=604800
last-modified: Tue, 19 Sep 2023 01:56:24 GMT
content-type: image/png
age: 61981
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/icons_peach.png
200 OK 907 B URL GET HTTP/3 resources.blogblog.com/img/navbar/icons_peach.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com&pfname=&rpctoken=21715213
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 3718077fe5eb689b0ded987a52881d06
f0ce5596ef43f850c400cbbc0556697fb3e7b232
72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 02:45:24 GMT
expires: Tue, 26 Sep 2023 02:45:24 GMT
cache-control: public, max-age=604800
last-modified: Mon, 18 Sep 2023 11:52:55 GMT
content-type: image/png
age: 62635
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh4.googleusercontent.com/-vbnSxRqoxEQ/T4aDaSfMRzI/AAAAAAAACGc/HuIkHJDvaKQ/s33/topv.gif
200 OK 1.2 kB URL GET HTTP/3 lh4.googleusercontent.com/-vbnSxRqoxEQ/T4aDaSfMRzI/AAAAAAAACGc/HuIkHJDvaKQ/s33/topv.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type GIF image data, version 89a, 10 x 33\012- data
Hash 7e8fa12b8d67bc986c0d7880a3c9fde6
4195482bb55dbe075b3e729c59351504c0c1e47f
ca667f0086f6bcf07d98ed5840fdbeb2f9ccd7f61b880560cdee2def1a502667
GET /-vbnSxRqoxEQ/T4aDaSfMRzI/AAAAAAAACGc/HuIkHJDvaKQ/s33/topv.gif HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="topv.gif"
x-content-type-options: nosniff
server: fife
content-length: 1178
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:19 GMT
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1fa1"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/-eOFI4TYEJpU/UGErdORdRcI/AAAAAAAADo8/9b4NH_pRwyA/s35/jklmm.gif
200 OK 1.2 kB URL GET HTTP/3 lh3.googleusercontent.com/-eOFI4TYEJpU/UGErdORdRcI/AAAAAAAADo8/9b4NH_pRwyA/s35/jklmm.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type GIF image data, version 89a, 4 x 35\012- data
Hash 799b24a38ffc4ebab671dfdeca97a239
baaa8b2de2ba01503ff479e298cb76ef689e5820
95ccc58b1dda4518af51082f4af5b8cb94f7f6203b0e6d8e33c8a4084baf8b18
GET /-eOFI4TYEJpU/UGErdORdRcI/AAAAAAAADo8/9b4NH_pRwyA/s35/jklmm.gif HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="jklmm.gif"
x-content-type-options: nosniff
server: fife
content-length: 1169
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:19 GMT
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1d61"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh5.googleusercontent.com/-tdCnptP5WyQ/UHWlT5jEoWI/AAAAAAAADw8/NXRab3RJXWI/s488/bg-box-y.jpg
200 OK 391 B URL GET HTTP/3 lh5.googleusercontent.com/-tdCnptP5WyQ/UHWlT5jEoWI/AAAAAAAADw8/NXRab3RJXWI/s488/bg-box-y.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 488x1, components 3\012- data
Hash 68167d5bcfba9464c5505ac6b322263b
3d609693c8b527a9b382d2634a23ab74e98e8b15
66714acde17395a02f43314b9fab3d6b55f00bf558d71c779044b89e5d3cae10
GET /-tdCnptP5WyQ/UHWlT5jEoWI/AAAAAAAADw8/NXRab3RJXWI/s488/bg-box-y.jpg HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bg-box-y.jpg"
x-content-type-options: nosniff
server: fife
content-length: 391
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:19 GMT
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf0f"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/_u4gySN2ZgqE/SosvnavWq0I/AAAAAAAAArk/yL95WlyTqr0/s400/noimage.png
200 OK 2.1 kB URL GET HTTP/3 1.bp.blogspot.com/_u4gySN2ZgqE/SosvnavWq0I/AAAAAAAAArk/yL95WlyTqr0/s400/noimage.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash a4aef22c4df254938a35638a8c2c6a19
efbea2dcf22a7f58b9ac5fa4cd9c45eccd6bac9f
c6cc9c37af1e4b969581befd07080c64c8600b97bace0daf5ebe3af5b957cb20
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_u4gySN2ZgqE/SosvnavWq0I/AAAAAAAAArk/yL95WlyTqr0/s400/noimage.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="noimage.png"
x-content-type-options: nosniff
server: fife
content-length: 2064
x-xss-protection: 0
date: Tue, 19 Sep 2023 19:40:57 GMT
expires: Wed, 20 Sep 2023 19:40:57 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2b9"
content-type: image/png
vary: Origin
age: 1702
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh4.ggpht.com/-sqCm8lAaRXY/VLXNujcrEMI/AAAAAAAAD1E/r5paa-Gk3bY/s200/images.jpg
200 OK 11 kB URL GET HTTP/2 lh4.ggpht.com/-sqCm8lAaRXY/VLXNujcrEMI/AAAAAAAAD1E/r5paa-Gk3bY/s200/images.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x112, components 3\012- data
Hash 40460479e292ff1906f4704d3b7e392f
3585724042da0d348cad2c047d950511d048f4c6
6dfc089d7f66de2e85ce295b01ea62fce40b7e3235d8479b6050a6e54f500ab9
GET /-sqCm8lAaRXY/VLXNujcrEMI/AAAAAAAAD1E/r5paa-Gk3bY/s200/images.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1952"
expires: Wed, 20 Sep 2023 20:09:19 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="images.jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:19 GMT
server: fife
content-length: 10894
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IoxrLNdlTyI.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9N48n3oloz8UTxoCozKcpUKaADkg/cb=gapi.loaded_0?le=scs
200 OK 46 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.IoxrLNdlTyI.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9N48n3oloz8UTxoCozKcpUKaADkg/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com&pfname=&rpctoken=21715213
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (1368)
Hash 6ad382fa50a2250514d6142072a647f4
316d68172c63ff03f82bb644b5a1ef54149ae818
6c34aa6863dc470b805525b8db49e29a2946b73cc81c1ab6b558efd49a5b2efe
GET /_/scs/abc-static/_/js/k=gapi.lb.en.IoxrLNdlTyI.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9N48n3oloz8UTxoCozKcpUKaADkg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45681
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 22:31:54 GMT
expires: Tue, 17 Sep 2024 22:31:54 GMT
cache-control: public, max-age=31536000
age: 77846
last-modified: Wed, 02 Aug 2023 15:23:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nghiencuukhoahocsupham.blogspot.com/feeds/comments/default?max-results=5&alt=json-in-script&callback=showRCommentsAvatar
200 OK 753 B URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/feeds/comments/default?max-results=5&alt=json-in-script&callback=showRCommentsAvatar
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type Unicode text, UTF-8 text, with very long lines (1391)
Hash 26d5fc092be8f2876551f8c1d7747f26
846e2c14609c29b9efb9b17d19c2bcc1b83c2b65
8f2af870716f9f03664082f67c211743adc489a000a45eadb0deba3533b42cc8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /feeds/comments/default?max-results=5&alt=json-in-script&callback=showRCommentsAvatar HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Cookie: SC_unique_275813=1; SC_showNum_275813=1; SC_sevenDay_Expires_275813=1695758959070; SC_unique_275811=1; SC_showNum_275811=1; SC_sevenDay_Expires_275811=1695758959378; si_user_id=4oRMizFG_1g2jUS; si_sess_id=4oRMizFG_1g2jUS; SC_unique_275808=1; SC_showNum_275808=1; SC_sevenDay_Expires_275808=1695758959613
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"d0777ba3121568f6c72886f54409b2e8eebc8567a6b95fd9f2f5a35f63ee08e3"
date: Tue, 19 Sep 2023 20:09:19 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Tue, 19 Sep 2023 20:09:20 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Sat, 30 Mar 2019 01:24:08 GMT
content-encoding: gzip
content-length: 753
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh6.googleusercontent.com/-wiu3WjmJSnI/Twqqu98YNMI/AAAAAAAABhE/8E4XYKpG7fQ/s6/li2.gif
200 OK 49 B URL GET HTTP/3 lh6.googleusercontent.com/-wiu3WjmJSnI/Twqqu98YNMI/AAAAAAAABhE/8E4XYKpG7fQ/s6/li2.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type GIF image data, version 89a, 6 x 5\012- data
Hash 6ee7ace96221163e84bb20d90cbf9c6b
6986d4952be807c923dcbe6b306bb26d21756220
1b5c6e8901fbc71113d986a9edb45f76576067e2d4e2a83bc3b3867c3a6f8557
GET /-wiu3WjmJSnI/Twqqu98YNMI/AAAAAAAABhE/8E4XYKpG7fQ/s6/li2.gif HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="li2.gif"
x-content-type-options: nosniff
server: fife
content-length: 49
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:20 GMT
expires: Wed, 20 Sep 2023 20:09:20 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2108"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/-Af6eAravO_c/UHehq1qMshI/AAAAAAAAD40/s9eDnyD170c/s8/l-space.jpg
200 OK 351 B URL GET HTTP/3 lh3.googleusercontent.com/-Af6eAravO_c/UHehq1qMshI/AAAAAAAAD40/s9eDnyD170c/s8/l-space.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 2x8, components 3\012- data
Hash 408e86eaca5364ced387f9f17e673a7f
ab58a11be92fabd4670ce9e1fb93f6646dd786ad
729fa0a7f5ff52e7934b76d2f10d0abcd27ac77d0b6ba819890f581fb0266f45
GET /-Af6eAravO_c/UHehq1qMshI/AAAAAAAAD40/s9eDnyD170c/s8/l-space.jpg HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="l-space.jpg"
x-content-type-options: nosniff
server: fife
content-length: 351
x-xss-protection: 0
date: Tue, 19 Sep 2023 20:09:20 GMT
expires: Wed, 20 Sep 2023 20:09:20 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf8d"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
blogger.googleusercontent.com/img/a/AVvXsEgd7TmmER16kCiA7j1g6mxRVfQK2G6fIahPaUiMh9pRSeFpJkX1a68spU2hxB6Qta_FiCNarkZAWxbQHey4wcKUo6eYq5xnsYXdMDFqTK3B2fZpn_77x6qYCjKIFSNzH5aBP02sgJqIZtmL-fLG0tvBCDaNOohvUcpv4CGI6HhbfnpLQTeEIAQ2qcc=w106-h65
200 OK 3.8 kB URL GET HTTP/3 blogger.googleusercontent.com/img/a/AVvXsEgd7TmmER16kCiA7j1g6mxRVfQK2G6fIahPaUiMh9pRSeFpJkX1a68spU2hxB6Qta_FiCNarkZAWxbQHey4wcKUo6eYq5xnsYXdMDFqTK3B2fZpn_77x6qYCjKIFSNzH5aBP02sgJqIZtmL-fLG0tvBCDaNOohvUcpv4CGI6HhbfnpLQTeEIAQ2qcc=w106-h65
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 105x65, components 3\012- data
Hash 107fcba263bc49ed09eb0f37336bd08d
941d0bd00b0bc9e3f38f5b3f26826993ff403f74
e171ace0f1eb44bb845409347e2b2de72a6d2e6d3978a0cf345416990aae1978
GET /img/a/AVvXsEgd7TmmER16kCiA7j1g6mxRVfQK2G6fIahPaUiMh9pRSeFpJkX1a68spU2hxB6Qta_FiCNarkZAWxbQHey4wcKUo6eYq5xnsYXdMDFqTK3B2fZpn_77x6qYCjKIFSNzH5aBP02sgJqIZtmL-fLG0tvBCDaNOohvUcpv4CGI6HhbfnpLQTeEIAQ2qcc=w106-h65 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v6925"
expires: Wed, 20 Sep 2023 20:09:20 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="D8fb627.jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:20 GMT
server: fife
content-length: 3826
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash abdf8b53099dccf8d09dbfddf3de9ead
ae1e54f0d16df6b3c6c56a557b1d973b2d21e852
8e6598419100a6447e92e81214ae1277824289350a90fa89b3594f1288debcc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash abdf8b53099dccf8d09dbfddf3de9ead
ae1e54f0d16df6b3c6c56a557b1d973b2d21e852
8e6598419100a6447e92e81214ae1277824289350a90fa89b3594f1288debcc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-5eSp236TS64/UyPsIWkOH8I/AAAAAAAAACg/7MuGpP70R5k/s1600/Hinh+2.jpg
200 OK 24 kB URL GET HTTP/3 4.bp.blogspot.com/-5eSp236TS64/UyPsIWkOH8I/AAAAAAAAACg/7MuGpP70R5k/s1600/Hinh+2.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1233x83, components 3\012- data
Hash f52b0dd1eb2f12c9edf0c5a86b124517
b81021791120b95fd558f15dd67db1bec64659a4
4243c86b30d8258f3466de65535ca5e863e00e8f0184138da70ce998e1cf370f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-5eSp236TS64/UyPsIWkOH8I/AAAAAAAAACg/7MuGpP70R5k/s1600/Hinh+2.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v29"
expires: Wed, 20 Sep 2023 20:09:20 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Hinh 2.jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:20 GMT
server: fife
content-length: 24175
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 19 Sep 2023 20:09:20 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/afd1b6e5/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/afd1b6e5/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (539)
Hash 1fb6505112b662c222daa12d69a8f41c
8e11fd8c4755b2159431f9acaea4b720232bbed0
d3bf6e509a100964b2dff792af98461c1f0a45e63c8349fe6369d3a970050c1c
GET /s/player/afd1b6e5/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33517
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 13:01:24 GMT
expires: Wed, 18 Sep 2024 13:01:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 12 Sep 2023 20:30:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 25676
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 32 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 4990d071ee08b04531a85a4fa19d9c0b
e42039be377b63680669f3997c1a40166ca2dd8a
129a4211d7dc3a8dcb0b1728a33e52921f488ad4d03b21126a35cfd53212e1fb
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 19 Sep 2023 20:09:20 GMT
server: ESF
cache-control: private
content-length: 31934
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202309140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-2071981909657164&plah=nghiencuukhoahocsupham.blogspot.com
200 OK 132 kB URL GET HTTP/3 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202309140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-2071981909657164&plah=nghiencuukhoahocsupham.blogspot.com
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (2079)
Size 132 kB (131560 bytes)
Hash 8a4a1888c1de039042aba52e7d561a34
a647dc1a4ecf9c35083087db25b71f5c8f3d0dad
6df7f488aa4b9cbfe6d446bfccb6af60f19a0a614f26d2c3c2ee8d7af50d314d
GET /pagead/managed/js/adsense/m202309140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-2071981909657164&plah=nghiencuukhoahocsupham.blogspot.com HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 19 Sep 2023 20:09:20 GMT
expires: Tue, 19 Sep 2023 20:09:20 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 17876760430333980380
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 131560
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 92a15348a22feb36b0226c56f9243648
269519b91eb941311112a2133c9f08714d405235
1cb3e158f67e534af13b24e4c9560f2622d6cdcd2e2344572e49d15a51ff74f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash abdf8b53099dccf8d09dbfddf3de9ead
ae1e54f0d16df6b3c6c56a557b1d973b2d21e852
8e6598419100a6447e92e81214ae1277824289350a90fa89b3594f1288debcc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/L_VXeMsvUWvqIVWyYZ0MwBrIHX7eOw577PffvJy4mPo.js
200 OK 15 kB URL GET HTTP/2 www.google.com/js/th/L_VXeMsvUWvqIVWyYZ0MwBrIHX7eOw577PffvJy4mPo.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type ASCII text, with very long lines (37373)
Hash 071cd1c3ce8893f4fcf9bc197d949442
d40193d60396c2309f2c2313675b83f58475a0ba
2ff55778cb2f516bea2155b2619d0cc01ac81d7ede3b0e7becf7dfbc9cb898fa
GET /js/th/L_VXeMsvUWvqIVWyYZ0MwBrIHX7eOw577PffvJy4mPo.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14733
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 14:22:52 GMT
expires: Wed, 18 Sep 2024 14:22:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Sep 2023 13:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 20788
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 3d5dda6d90a30b7976bdb70423215300
ca450dbe2cc15c8c615f2ddedffd9a72c31290dc
2c3b195ee41007c9cba0299bd23d603a4894af86830f6cc5f087d2540fb47cce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/lh6NpaV-ukM/default.webp
200 OK 1.2 kB URL GET HTTP/2 i.ytimg.com/vi_webp/lh6NpaV-ukM/default.webp
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint59:B9:6F:C9:0E:12:75:C4:F4:A7:74:F2:62:FF:CB:0E:86:3C:5C:CC
ValidityMon, 14 Aug 2023 08:16:22 GMT - Mon, 06 Nov 2023 08:16:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash af1c3413d385686eee66777066d97570
58a329165ad784e1b9ee1c18ff5fcb22c7e5b465
86d73efe15c560d179ea66accf69c9a3c36e359ccd43c14c6bbb27e93594989b
GET /vi_webp/lh6NpaV-ukM/default.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 1180
date: Tue, 19 Sep 2023 20:09:20 GMT
expires: Tue, 19 Sep 2023 22:09:20 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 3cf2095569015844402a7dfaeeb1afd3
3cf84c2c4c6b432448cd33b4dcb72baa84415488
0f1ed3ceacaf2ad51b1cb9e9f2469f8fef2ddeda1c95cab4399161ec90e18606
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nghiencuukhoahocsupham.blogspot.com/favicon.ico
200 OK 412 B URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/favicon.ico
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE
ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Cookie: SC_unique_275813=1; SC_showNum_275813=1; SC_sevenDay_Expires_275813=1695758959070; SC_unique_275811=1; SC_showNum_275811=1; SC_sevenDay_Expires_275811=1695758959378; si_user_id=4oRMizFG_1g2jUS; si_sess_id=4oRMizFG_1g2jUS; SC_unique_275808=1; SC_showNum_275808=1; SC_sevenDay_Expires_275808=1695758959613
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Tue, 19 Sep 2023 20:09:20 GMT
date: Tue, 19 Sep 2023 20:09:20 GMT
cache-control: private, max-age=86400
last-modified: Thu, 10 Aug 2023 09:18:03 GMT
etag: W/"2b5fc9c7e6a560d323590a958b97479de359f56a77e1f6b0ed60af37ba25b598"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 19 Sep 2023 20:09:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 19 Sep 2023 20:09:20 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
200 OK 5.2 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type Web Open Font Format (Version 2), TrueType, length 5224, version 1.0\012- data
Hash a835084624425dacc5e188c6973c1594
1bef196929bffcabdc834c0deefda104eb7a3318
0dfa6a82824cf2be6bb8543de6ef56b87daae5dd63f9e68c88f02697f94af740
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 16 Sep 2023 13:23:33 GMT
expires: Sun, 15 Sep 2024 13:23:33 GMT
cache-control: public, max-age=31536000
age: 283547
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 8a42237b38707dc45b7d0482b7b3a3f7
8b8ef60383efb5d2a402da4adb53c489f44d1277
c09b00c19260b1416aa6d8af24fe7b1d5915a5e7d01226974620974f805e1ccc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AOPolaSbK6pznibJ2Mpa9ykSDkP14SvtjzxYCkb0g8iHIA=s68-c-k-c0x00ffffff-no-rj
200 OK 1.2 kB URL GET HTTP/3 yt3.ggpht.com/ytc/AOPolaSbK6pznibJ2Mpa9ykSDkP14SvtjzxYCkb0g8iHIA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 1e7639cdacb6630a2d3988d7827cce44
d940e4715e8ee8b07cd210c730fa55899917953e
4ba54288973154f357178634f154d9a8ccd49d5f334ffd180d6c54109aa21292
GET /ytc/AOPolaSbK6pznibJ2Mpa9ykSDkP14SvtjzxYCkb0g8iHIA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "vdfc"
expires: Wed, 20 Sep 2023 20:09:20 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:20 GMT
server: fife
content-length: 1157
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ad2514e24b73d4c41b03f54830382ba0
3c010862be97473964bc5a7a9eee4168a6d9543c
f2f32208de5a8eb1aef6512eac1954f13cf72f18fcbafb835d9582bb335a97dd
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 979
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 19 Sep 2023 20:09:20 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
partner.googleadservices.com/gampad/cookie.js?domain=nghiencuukhoahocsupham.blogspot.com&callback=_gfp_s_&client=ca-pub-2071981909657164
200 OK 251 B URL GET HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=nghiencuukhoahocsupham.blogspot.com&callback=_gfp_s_&client=ca-pub-2071981909657164
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.googleadservices.com
FingerprintCD:27:C6:EF:01:EC:85:7D:56:5E:10:61:E6:5F:12:B9:54:18:95:D0
ValidityMon, 14 Aug 2023 08:21:12 GMT - Mon, 06 Nov 2023 08:21:11 GMT
File type ASCII text, with very long lines (391), with no line terminators
Hash 1eb238699f2b93e4f6b80223dd680852
12f11dee973c2c1cea790e60729895192739572e
5261548ecc0c1af4cde2f9d525bb1735c5eb2f721a285492834e33c52643cff6
GET /gampad/cookie.js?domain=nghiencuukhoahocsupham.blogspot.com&callback=_gfp_s_&client=ca-pub-2071981909657164 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 19 Sep 2023 20:09:21 GMT
server: cafe
cache-control: private
content-length: 251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 0911771dbbbabd9b246f572f48ea124c
11441eec1fbf0484ce82467af1d5759eeb1bb07b
7571285a261202593aa5850fe3edc789879a9127286293554b80831ec272dfd5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230918&st=env
200 OK 12 kB URL GET HTTP/3 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230918&st=env
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type JSON data\012- , ASCII text, with very long lines (15934), with no line terminators
Hash ad56ced17b09c5a447ce0e120083fc84
bebef5cc0dccac381c6ced15c2e5a586969fc9a3
2213b9be6865b1b2730bae61ffae220e1587b733b8da4f3c800b3a8181205c80
GET /getconfig/sodar?sv=200&tid=gda&tv=r20230918&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nghiencuukhoahocsupham.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Tue, 19 Sep 2023 20:09:21 GMT
server: cafe
content-length: 12022
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?Kvka4w
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?Kvka4w
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?Kvka4w HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Tue, 19 Sep 2023 20:09:21 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 7f77a5806e71b6402d7457720b44c3d3
08864335b3cae93254c1c9b14c581ebcdf5e9cef
c53e26a5d18a01558162edc8fe2e0e268b6a724dae78ace9928f725b609cd328
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:09:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL GET HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
Fingerprint22:90:92:F5:E8:D9:40:2B:BD:CC:C8:AF:61:09:52:B9:5D:30:B1:34
ValidityMon, 14 Aug 2023 08:22:24 GMT - Mon, 06 Nov 2023 08:22:23 GMT
File type ASCII text, with very long lines (1321)
Hash 2cc87e9764aebcbbf36ff2061e6a2793
b4f2ffdf4c695aa79f0e63651c18a88729c2407b
61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 19 Sep 2023 20:09:21 GMT
expires: Tue, 19 Sep 2023 20:09:21 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL GET HTTP/3 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash 1d3d22df067f5219073f9c0fabb74fdd
d5c226022639323d93946df3571404116041e588
55a119c0394f901a8a297e109c17b5e5402689708b999ab10691c16179f32a4a
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 02:05:29 GMT
expires: Wed, 18 Sep 2024 02:05:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
age: 65032
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/aframe
200 OK 538 B URL GET HTTP/3 www.google.com/recaptcha/api2/aframe
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (829), with no line terminators
Hash 5a26fe60dd14e7d5875e1f0e0fc8989c
d40876b05624321778e572ecac1331f5c09477e5
6a253d6d9d84bb3e9dc20f93eb970b5d462ea1241ac2a432e0157d6242bae928
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 19 Sep 2023 20:09:21 GMT
date: Tue, 19 Sep 2023 20:09:21 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-D_q7JZmBtzY3JOQM89PZ-w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 538
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/bg/D38i8ocviMyns63bFlxz04547CGgVcdJsS8VZS_5djY.js
15 kB URL pagead2.googlesyndication.com/bg/D38i8ocviMyns63bFlxz04547CGgVcdJsS8VZS_5djY.js
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (37336)
Hash 85fdbeb19d2fd9f46d4bd3740d5fffcd
732e242eb505c59e619eebad607c65d3abf81259
0f7f22f2872f88cca7b3addb165c73d38e78ec21a055c749b12f15652ff97636
GET /bg/D38i8ocviMyns63bFlxz04547CGgVcdJsS8VZS_5djY.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14739
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 10:01:41 GMT
expires: Wed, 18 Sep 2024 10:01:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Sep 2023 20:08:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 36460
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20230918&jk=3997213518928334&rc=
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20230918&jk=3997213518928334&rc=
IP
Requested by https://www.google.com/recaptcha/api2/aframe
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gda_r20230918&jk=3997213518928334&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:21 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tpc.googlesyndication.com/generate_204?uvCcaA
0 B URL tpc.googlesyndication.com/generate_204?uvCcaA
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
Fingerprint22:90:92:F5:E8:D9:40:2B:BD:CC:C8:AF:61:09:52:B9:5D:30:B1:34
ValidityMon, 14 Aug 2023 08:22:24 GMT - Mon, 06 Nov 2023 08:22:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?uvCcaA HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Tue, 19 Sep 2023 20:09:21 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1695154162304
Content-Type: application/json
X-Goog-Visitor-Id: CgtyZExxOXhhTU1kTSju_6eoBjIGCgJOTxIA
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230910.00.02
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1695154159587&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 14690
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Tue, 19 Sep 2023 20:09:22 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+661; expires=Thu, 18-Sep-2025 20:09:22 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 19 Sep 2023 20:09:22 GMT
cache-control: private
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230918&jk=3997213518928334&bg=!8POl87zNAAbP3fMH7907ADQBe5WfOLa0e97Afh5CU8R07omRvoEQUd9XCTvjJAJhaAOyjQ_Gdmf7bae6iBsqNz9guTATAgAAAQtSAAAAEWgBB5kCeRkDm3Wi_MSqVstDznE_tK27K2LwXyDJZZRPZybbNfEkkLtYZL9jbQe1LX5HU8r3B1dymjqFRTwzhu0sIggkZmyUd9NiFheA1F6ccnWtkLypFemlbO0tJvbr3wPnNGQgi5vxX3SESWO2IXaZfzAX5TTUE31G6QnRYBd0-JyIlEE8UKxjMkFw0EAAz1vxio6J4A2EBTU2SJa5SU89xVc7fEritPklzeCLGA2S302a4mBSNxgBsnxM-xwg2Dwyb5WEJ0Sayd2Wiytv9Kc4CpJ28qQy8UIiWdz_5ba7_J91t2uCTqVs5b8XD4m4IkZGlb8rBjg3OUtEHlb6MYgUAzUn0AuPDOQsxuFgd1XYqrQlMk28KFRxI5ed3IIxgIUXtwdnzwd_j-iaUiO7XUCVjXr0ao_02vDiYybC2AgofDlqho8znHbN-E3giJhrs_MGqH37_vSr2V2hAvNMoSlrPM-XkJD941SPDkS99Gww0DF4mTEV4_CbSUd8BcOct3jsi2Jycrmfb4kamHTzPyxFbcQUM3IKmeZGRzA1pi4glbFHc_i0d3l0qjTdHHT0YInNnFxnKmvwyGLg950Drli2EdUqd1PFg5w5gJLg_HiAnaLe67YXMD_k1RXM66p3yFuoUZKuqAoCcQO0v2dbsQFNS2Qe7xqIjQRDghQPGbXDJZ91OSMpdvanCx_MjuW0rxDtc27KBkPnD1oZBEZJVzQqzBE5j7NWfW9w72ZQDVGUi8KTIBZ_BQ5BeQdsqHkYSSC5YFAD5nk7LK9mJ9KkY__H4xsamptqF1paaB2bJZ121cFiiNwwJ-S-q0fw8mBALVomeM2PyKoV0vPCPxhzYA
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230918&jk=3997213518928334&bg=!8POl87zNAAbP3fMH7907ADQBe5WfOLa0e97Afh5CU8R07omRvoEQUd9XCTvjJAJhaAOyjQ_Gdmf7bae6iBsqNz9guTATAgAAAQtSAAAAEWgBB5kCeRkDm3Wi_MSqVstDznE_tK27K2LwXyDJZZRPZybbNfEkkLtYZL9jbQe1LX5HU8r3B1dymjqFRTwzhu0sIggkZmyUd9NiFheA1F6ccnWtkLypFemlbO0tJvbr3wPnNGQgi5vxX3SESWO2IXaZfzAX5TTUE31G6QnRYBd0-JyIlEE8UKxjMkFw0EAAz1vxio6J4A2EBTU2SJa5SU89xVc7fEritPklzeCLGA2S302a4mBSNxgBsnxM-xwg2Dwyb5WEJ0Sayd2Wiytv9Kc4CpJ28qQy8UIiWdz_5ba7_J91t2uCTqVs5b8XD4m4IkZGlb8rBjg3OUtEHlb6MYgUAzUn0AuPDOQsxuFgd1XYqrQlMk28KFRxI5ed3IIxgIUXtwdnzwd_j-iaUiO7XUCVjXr0ao_02vDiYybC2AgofDlqho8znHbN-E3giJhrs_MGqH37_vSr2V2hAvNMoSlrPM-XkJD941SPDkS99Gww0DF4mTEV4_CbSUd8BcOct3jsi2Jycrmfb4kamHTzPyxFbcQUM3IKmeZGRzA1pi4glbFHc_i0d3l0qjTdHHT0YInNnFxnKmvwyGLg950Drli2EdUqd1PFg5w5gJLg_HiAnaLe67YXMD_k1RXM66p3yFuoUZKuqAoCcQO0v2dbsQFNS2Qe7xqIjQRDghQPGbXDJZ91OSMpdvanCx_MjuW0rxDtc27KBkPnD1oZBEZJVzQqzBE5j7NWfW9w72ZQDVGUi8KTIBZ_BQ5BeQdsqHkYSSC5YFAD5nk7LK9mJ9KkY__H4xsamptqF1paaB2bJZ121cFiiNwwJ-S-q0fw8mBALVomeM2PyKoV0vPCPxhzYA
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230918&jk=3997213518928334&bg=!8POl87zNAAbP3fMH7907ADQBe5WfOLa0e97Afh5CU8R07omRvoEQUd9XCTvjJAJhaAOyjQ_Gdmf7bae6iBsqNz9guTATAgAAAQtSAAAAEWgBB5kCeRkDm3Wi_MSqVstDznE_tK27K2LwXyDJZZRPZybbNfEkkLtYZL9jbQe1LX5HU8r3B1dymjqFRTwzhu0sIggkZmyUd9NiFheA1F6ccnWtkLypFemlbO0tJvbr3wPnNGQgi5vxX3SESWO2IXaZfzAX5TTUE31G6QnRYBd0-JyIlEE8UKxjMkFw0EAAz1vxio6J4A2EBTU2SJa5SU89xVc7fEritPklzeCLGA2S302a4mBSNxgBsnxM-xwg2Dwyb5WEJ0Sayd2Wiytv9Kc4CpJ28qQy8UIiWdz_5ba7_J91t2uCTqVs5b8XD4m4IkZGlb8rBjg3OUtEHlb6MYgUAzUn0AuPDOQsxuFgd1XYqrQlMk28KFRxI5ed3IIxgIUXtwdnzwd_j-iaUiO7XUCVjXr0ao_02vDiYybC2AgofDlqho8znHbN-E3giJhrs_MGqH37_vSr2V2hAvNMoSlrPM-XkJD941SPDkS99Gww0DF4mTEV4_CbSUd8BcOct3jsi2Jycrmfb4kamHTzPyxFbcQUM3IKmeZGRzA1pi4glbFHc_i0d3l0qjTdHHT0YInNnFxnKmvwyGLg950Drli2EdUqd1PFg5w5gJLg_HiAnaLe67YXMD_k1RXM66p3yFuoUZKuqAoCcQO0v2dbsQFNS2Qe7xqIjQRDghQPGbXDJZ91OSMpdvanCx_MjuW0rxDtc27KBkPnD1oZBEZJVzQqzBE5j7NWfW9w72ZQDVGUi8KTIBZ_BQ5BeQdsqHkYSSC5YFAD5nk7LK9mJ9KkY__H4xsamptqF1paaB2bJZ121cFiiNwwJ-S-q0fw8mBALVomeM2PyKoV0vPCPxhzYA HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:09:22 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1695154176419
Content-Type: application/json
X-Goog-Visitor-Id: CgtyZExxOXhhTU1kTSju_6eoBjIGCgJOTxIA
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230910.00.02
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1695154159587&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 1051
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=eljywcASXJc; VISITOR_INFO1_LIVE=rdLq9xaMMdM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Tue, 19 Sep 2023 20:09:36 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+744; expires=Thu, 18-Sep-2025 20:09:36 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 19 Sep 2023 20:09:36 GMT
cache-control: private
www.youtube.com/embed/lh6NpaV-ukM
200 OK 89 kB URL GET HTTP/3 www.youtube.com/embed/lh6NpaV-ukM
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/lh6NpaV-ukM HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 20:09:18 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=eljywcASXJc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=rdLq9xaMMdM; Domain=.youtube.com; Expires=Sun, 17-Mar-2024 20:09:18 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIA; Domain=.youtube.com; Expires=Sun, 17-Mar-2024 20:09:18 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+740; expires=Thu, 18-Sep-2025 20:09:18 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
n.pc2ads.com/a?Id=275808&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc2ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=4351&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=2&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0
200 OK 139 B URL GET HTTP/2 n.pc2ads.com/a?Id=275808&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc2ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=4351&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=2&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectn.pc2ads.com
Fingerprint3E:76:D8:2E:3A:4C:B6:B2:58:16:5D:6C:48:B6:5B:24:B1:13:3F:3D
ValidityThu, 29 Jun 2023 07:05:50 GMT - Wed, 27 Sep 2023 07:05:49 GMT
File type ASCII text, with no line terminators
Hash 4be4e7f828b3ff6d4f4feccc65a41455
fb2513b65532f77a1c0124da098b1efa2d05ec01
90638106a83a7b2d8ed79bf9b21c390b00dd294e6a3a14de41afee513039c3eb
GET /a?Id=275808&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc2ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=4351&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=2&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0 HTTP/1.1
Host: n.pc2ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3
date: Tue, 19 Sep 2023 20:09:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
statinside.com/counter.js
200 OK 9.7 kB URL GET HTTP/2 statinside.com/counter.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectstatinside.com
FingerprintF9:05:7C:C1:FE:ED:5E:20:68:5D:AB:34:21:E3:0C:19:E3:30:CB:17
ValidityThu, 03 Aug 2023 04:13:07 GMT - Wed, 01 Nov 2023 04:13:06 GMT
File type exported SGML document, ASCII text, with very long lines (9977), with no line terminators
Hash 6b4408a9a8fe137adc4efa6565f1d2a9
54adda13f4aa6eef176f381a89ebdbb60fe52a9a
ecc36b143a8850513a968288d2d4433c05f4d8a06e7cdbf5f39648a92fdb3bea
GET /counter.js HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:09:18 GMT
content-type: application/javascript
last-modified: Fri, 07 Jul 2023 11:18:54 GMT
etag: W/"64a7f49e-2614"
cache-control: max-age=14400
cf-cache-status: HIT
age: 236
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mZIaN%2FJbB3I2t88rzZgtRLcchkZRbVERcczbWW9%2BFWQZcgrn9pVWosOO%2FEhfP%2BnjSXav1ZgmPIB0hi1Ky7GhKLGQrXlo%2FqmUSvdBPTG6BSccoYMnqBbsSHvNRLC3pSPu3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80947734bef10b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
n.pc2ads.com/a?Id=275811&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc2ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=2716&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=1&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0
200 OK 139 B URL GET HTTP/2 n.pc2ads.com/a?Id=275811&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc2ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=2716&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=1&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectn.pc2ads.com
Fingerprint3E:76:D8:2E:3A:4C:B6:B2:58:16:5D:6C:48:B6:5B:24:B1:13:3F:3D
ValidityThu, 29 Jun 2023 07:05:50 GMT - Wed, 27 Sep 2023 07:05:49 GMT
File type ASCII text, with no line terminators
Hash 300b5f54683edc7f5f65a17e291942d8
41ef7c83150d46d21fa632cfec06c168a1ef44d6
4a597cba6ce9879579343a78dfb8e12ce2f3c209bfb30a7000affb71ed6044e5
GET /a?Id=275811&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc2ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=2716&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=eyJ3aW4iOnsidyI6MTI4MCwiaCI6MTAyNH0sInNjcmVlbiI6eyJ3aWR0aCI6MTI4MCwiaGVpZ2h0IjoxMDI0LCJjb2xvckRlcHRoIjoyNCwicGl4ZWxEZXB0aCI6MjR9LCJuYXZpZ2F0b3IiOnsibGFuZ3VhZ2UiOiJlbi1VUyIsImJyb3dzZXJMYW5ndWFnZSI6IiIsInN5c3RlbUxhbmd1YWdlIjoiIiwidXNlckxhbmd1YWdlIjoiIiwicGxhdGZvcm0iOiJMaW51eCB4ODZfNjQiLCJ2ZW5kb3IiOiIiLCJ0aW1lWm9uZSI6MCwiZGF0ZSI6IjIwMjMtMDktMTlUMjA6MDk6MTkuMzI5WiIsImhvdXIiOjIwLCJ3aWR0aCI6MTI4MCwiaGVpZ2h0IjoxMDI0LCJwbHVnaW5zIjpbIlBERiBWaWV3ZXIiLCJDaHJvbWUgUERGIFZpZXdlciIsIkNocm9taXVtIFBERiBWaWV3ZXIiLCJNaWNyb3NvZnQgRWRnZSBQREYgVmlld2VyIiwiV2ViS2l0IGJ1aWx0LWluIFBERiJdLCJmbGFzaFZlcnNpb24iOmZhbHNlLCJjb25uZWN0aW9uVHlwZSI6InVuZGVmIn19&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=1&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0 HTTP/1.1
Host: n.pc2ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3
date: Tue, 19 Sep 2023 20:09:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 47 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with no line terminators
Hash dea2b231c49af9e5f5a4a0ff4894bb12
0b723b20f448e7017fd0228e4c5411e8af6268dc
3bc3d10dc6871f38d6042ad8506a996b6a5026541dbcf36eb3365b69fe737c32
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Tue, 19 Sep 2023 10:15:47 GMT
expires: Tue, 03 Oct 2023 10:15:47 GMT
cache-control: public, max-age=1209600
age: 35612
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dl.dropboxusercontent.com/u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js
404 Not Found 0 B URL GET HTTP/2 dl.dropboxusercontent.com/u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerDigiCert Inc
Subjectdl.dropbox.com
FingerprintF7:BA:5F:D1:73:A5:04:E6:AC:52:C4:92:6F:20:23:8D:FD:B3:3F:D0
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Tue, 19 Sep 2023 20:09:17 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 89cda38427e9480589deab348ca16e48
X-Firefox-Spdy: h2
st-n.pc1ads.com/js/adv_out.js
200 OK 88 kB URL GET HTTP/2 st-n.pc1ads.com/js/adv_out.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectn.pc1ads.com
FingerprintAA:9D:53:30:11:FD:32:5F:FF:A3:B3:1A:CF:C7:B4:23:F0:36:B7:1F
ValidityThu, 29 Jun 2023 07:04:36 GMT - Wed, 27 Sep 2023 07:04:35 GMT
File type ASCII text, with very long lines (764)
Hash b1bd0ceb1508e769b36cc4d4013714fc
efa29e6c84a7a51864c7d05fbc48c8c996575a0d
d76535ab07df1120bfada6d12d72c8c1f46cbe4bc32d4c84d3c26af0656a8da5
GET /js/adv_out.js HTTP/1.1
Host: st-n.pc1ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 19 Sep 2023 20:09:18 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 07:19:42 GMT
etag: W/"64ed9c0e-15946"
x-id: osix-hw-edge-gc4
expires: Tue, 19 Sep 2023 20:10:18 GMT
cache-control: max-age=60
cache: REVALIDATED
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
statinside.com/api/add-hit
200 OK 115 B URL POST HTTP/3 statinside.com/api/add-hit
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectstatinside.com
FingerprintF9:05:7C:C1:FE:ED:5E:20:68:5D:AB:34:21:E3:0C:19:E3:30:CB:17
ValidityThu, 03 Aug 2023 04:13:07 GMT - Wed, 01 Nov 2023 04:13:06 GMT
File type ASCII text, with no line terminators
Hash 8c657516d76bd8f929c63f7627106dd0
d3ccad2e20f82831f263ac4cba08a4b72435211b
4c1bf2c630bcc26bd4cdc3c2318af1c3d1458c2cacb3f0b6fd63c7d750cc6d34
POST /api/add-hit HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 315
Origin: https://nghiencuukhoahocsupham.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 19 Sep 2023 20:09:19 GMT
content-type: application/json; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DT50t7C999JqTn%2Bny3PuhZgOf5YKYO4JPyqUzPuolEZsgLtMCuiJKpdRMa9yFruUR2F637H2LhTcaQu7XG2yGUewwAmMIi2Y61FUIOFLbbxP%2FpEVbeT8hA7t5MFh7Wwupg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80947736a87cb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__
200 OK 6.8 kB URL GET HTTP/3 www.blogger.com/navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE
ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7002), with no line terminators
Hash 0ca7f1a9570dbdb934bf76cfe2d0cd28
3813337ea975f9a9f42a4b6ce8a8fc201b267a25
f257b5d2c6aefdcc9ec1c11da0d0b851097400f4e736d29ac60f06d180852f92
GET /navbar.g?targetBlogID=1631668450721642768&blogName=NCKHSPUD+-+%C4%90%E1%BB%81+t%C3%A0i+nghi%C3%AAn+c%E1%BB%A9u+khoa+h%E1%BB%8Dc...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://nghiencuukhoahocsupham.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=https://nghiencuukhoahocsupham.blogspot.com/%3Fm%3D0&vt=-8679947677719567000&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.IoxrLNdlTyI.O%2Fd%3D1%2Frs%3DAHpOoo9N48n3oloz8UTxoCozKcpUKaADkg%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 20:09:19 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2669
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
n.pc1ads.com/a?Id=275813&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc1ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=6746&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=0&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0
200 OK 139 B URL GET HTTP/2 n.pc1ads.com/a?Id=275813&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc1ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=6746&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=0&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/h%E1%BB%99i%20ngh%E1%BB%8B?m=0
Certificate IssuerLet's Encrypt
Subjectn.pc1ads.com
FingerprintAA:9D:53:30:11:FD:32:5F:FF:A3:B3:1A:CF:C7:B4:23:F0:36:B7:1F
ValidityThu, 29 Jun 2023 07:04:36 GMT - Wed, 27 Sep 2023 07:04:35 GMT
File type ASCII text, with no line terminators
Hash 6fdd06433e87b4a542b0e286df0df463
5037179144268469452604807d47f24298888732
615d8277de84d520d932474b5e97da0a96dc3f581019791f95e87b9e572fa5a7
GET /a?Id=275813&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=20&ajax=0&domain=n.pc1ads.com&unq=1&show_num=1&click_num=0&cookies=1&_c=e30%3D&RNum=6746&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KhX8KAbWLCgMKBZXp7wqxpd3bCtcKvwrFvwpB9csKQwpF1wonClMKSw4HCksKG&client_info=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&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwaCVFMSVCQiU5OWklMjBuZ2glRTElQkIlOEIiLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=0&bver=5&loc=https%3A%2F%2Fnghiencuukhoahocsupham.blogspot.com%2Fsearch%2Flabel%2Fh%25E1%25BB%2599i%2520ngh%25E1%25BB%258B%3Fm%3D0 HTTP/1.1
Host: n.pc1ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3
date: Tue, 19 Sep 2023 20:09:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
172.217.21.161
185.244.209.62
31.172.81.228
104.21.57.149
190.2.139.23
0.0.0.0