Report - saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment=1437755741251

Report Overview

URL

saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment=1437755741251
IP

142.250.74.1

ASN

#15169 GOOGLE
Submitted

2023-09-19T05:21:52Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

1

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.pki.goog (10)	175	2018-07-01 08:43:07	2023-09-18 18:12:08	3330	6998	142.250.74.131
accounts.google.com (9)	81	2016-03-20 13:44:49	2023-09-18 18:36:52	8229	622643	142.250.74.109
www.gstatic.com (11)	unknown	2016-07-26 11:37:06	2023-09-18 18:15:59	17087	373046	142.250.74.131
play.google.com (1)	34	2013-05-31 01:24:35	2023-09-18 19:40:52	610	1132	142.250.74.110
www.google.com (1)	7	2015-05-10 13:11:19	2023-09-03 06:47:12	709	2221	142.250.74.164
saolya.blogspot.com (1)	unknown	2012-12-14 01:35:31	2023-09-16 16:45:59	553	973	142.250.74.1
www.blogger.com (2)	8975	2012-05-22 09:35:03	2023-09-18 18:59:13	1241	3016	216.58.207.233
fonts.gstatic.com (4)	unknown	2014-09-09 02:40:21	2023-09-18 19:51:32	2122	77391	216.58.207.227
accounts.youtube.com (1)	1033	2012-06-27 17:58:07	2023-09-19 05:31:59	617	37185	216.58.211.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-09-19	medium	saolya.blogspot.com	Sinkholed

ThreatFox

No alerts detected

HTTP Transactions (40)

URL IP Response Size

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

11428f669a78b9590668faeac6f11163

4d0cd300ee04649eb98f53fe5e3b00f33cab04ab

5849cca08de7b7d0aa64f18b12542e31a194081f276123f9de442109ae5622c8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 05:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment=1437755741251

142.250.74.1

302 Found

271

URL User Request GET HTTP/2

saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment=1437755741251
IP

142.250.74.1:443
ASN

#15169 GOOGLE

Certificate

IssuerGoogle Trust Services LLC

Subjectmisc-sni.blogspot.com

FingerprintDB:6F:B7:F7:A1:B7:4E:4D:A1:FA:56:E5:EB:89:CB:4E:AE:97:4D:CE

ValidityMon, 14 Aug 2023 08:21:16 GMT - Mon, 06 Nov 2023 08:21:15 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text

Size

271
Hash

e85e3beba48e4f2ba40afbf615d42e6d

9b6fe5d23665c837cc94377d84e80afb1f604837

9398676fafc3f1560fa50f36c83afea8ffc956a6720e39ae89c7287d08e48ceb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

                                        GET /2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment=1437755741251 HTTP/1.1
Host: saolya.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 302 Found
x-robots-tag: noindex, nofollow
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 05:21:32 GMT
location: https://www.blogger.com/blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog
content-type: text/html; charset=UTF-8
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 271
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

11428f669a78b9590668faeac6f11163

4d0cd300ee04649eb98f53fe5e3b00f33cab04ab

5849cca08de7b7d0aa64f18b12542e31a194081f276123f9de442109ae5622c8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 05:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

9f0e261ab8e2a186c6abcb7311a0a9b1

5b2521de7c88b8f767301d6976696b49224ee36c

8c4a73c04f1e533a06f2f6a82e8946c188d432ce04702525b59dd59bb912cce9

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 05:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.blogger.com/blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog

216.58.207.233

302 Found

341

URL User Request GET HTTP/2

www.blogger.com/blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog
IP

216.58.207.233:443
ASN

#15169 GOOGLE

Certificate

IssuerGoogle Trust Services LLC

Subject*.blogger.com

Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE

ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (498)

Size

341
Hash

8b2f224df57d9b148852826df67905de

48b5b65b5be833dc192bb5130234d62ae5e530c7

02ea3effca04c2d8ff852cf08588e28c82a4e608a3f4a945b637263a0429d507

HTTP Headers

                                        GET /blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Tue, 19 Sep 2023 05:21:32 GMT
expires: Tue, 19 Sep 2023 05:21:32 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 341
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

9f0e261ab8e2a186c6abcb7311a0a9b1

5b2521de7c88b8f767301d6976696b49224ee36c

8c4a73c04f1e533a06f2f6a82e8946c188d432ce04702525b59dd59bb912cce9

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 05:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

3dcd85134a74117cae6e0a89dc81d9f5

b8e6545c5acbbe429e57a71e830c6d3f6546a00c

8e40e2fd520c12e7684ca0295a39e784a54e95870c5d95d2ed0c723649fd6ae7

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 05:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&go=true

142.250.74.109

302 Found

URL User Request GET HTTP/2

accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&go=true
IP

142.250.74.109:443
ASN

#15169 GOOGLE

Certificate

IssuerGoogle Trust Services LLC

Subjectaccounts.google.com

Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D

ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:HAkx5fYrnhF3c3CkMpuJqjmUYLaaYQ:Gs_OxGwP-vk1flqC; Expires=Thu, 18-Sep-2025 05:21:32 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 05:21:32 GMT
location: https://www.blogger.com/blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-aauDa6BqArm8jRIDOPzILw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

64ed688baf8887c3e918f1a762cdc5b2

057b28a887cac1050b7c08d5647a1e4d8b416ebf

267244dad1693002d314ef71cc0317d4d942c4740009aacafac6a6ab7900a712

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 05:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.blogger.com/blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog&bpli=1

216.58.207.233

302 Found

343

URL User Request GET HTTP/3

www.blogger.com/blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog&bpli=1
IP

216.58.207.233:443
ASN

#15169 GOOGLE

Certificate

IssuerGoogle Trust Services LLC

Subject*.blogger.com

Fingerprint0A:37:73:3D:BD:C2:5F:FA:38:2B:9B:AB:96:77:54:94:B6:E3:4A:EE

ValidityMon, 14 Aug 2023 08:16:07 GMT - Mon, 06 Nov 2023 08:16:06 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (330)

Size

343
Hash

1fc94e2f34d8e31949ea67c2eb47f728

e814e2465317ef123ae22c5c7965026c92c2c761

25a9a2af3538110daf47f0daa7eecbf0b6c114e94a5728004f90f12bbbb13338

HTTP Headers

                                        GET /blogin.g?blogspotURL=https://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%3D1437755741251&type=blog&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src   'self' *.google.com *.google-analytics.com 'unsafe-inline'   'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com   *.googleapis.com uds.googleusercontent.com https://s.ytimg.com   https://i18n-cloud.appspot.com   https://www.youtube.com   www-onepick-opensocial.googleusercontent.com   www-bloggervideo-opensocial.googleusercontent.com   www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 05:21:33 GMT
location: https://accounts.google.com/ServiceLogin?service=blogger&hl=no&passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 343
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

accounts.google.com/ServiceLogin?service=blogger&hl=no&passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a

142.250.74.109

302 Found

URL User Request GET HTTP/3

accounts.google.com/ServiceLogin?service=blogger&hl=no&passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a
IP

142.250.74.109:443
ASN

#15169 GOOGLE

Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E

ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /ServiceLogin?service=blogger&hl=no&passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Host-GAPS=1:HAkx5fYrnhF3c3CkMpuJqjmUYLaaYQ:Gs_OxGwP-vk1flqC
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:kh62yaImDP0D4aTZUcvj0c57F2eLgw:pdlGFS17auPIBtc0; Expires=Thu, 18-Sep-2025 05:21:33 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 05:21:33 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&passive=true&service=blogger&ifkv=AYZoVhfiRECpmpTWdKWDP16SHmYsQLhCaYrC8wpoCP5HQQNjMsQr6S5ynSeiKea8u6r2gXnt05hSqw
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-Y9vdoFyAf9ZB-iGLrJ5gWQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&passive=true&service=blogger&ifkv=AYZoVhfiRECpmpTWdKWDP16SHmYsQLhCaYrC8wpoCP5HQQNjMsQr6S5ynSeiKea8u6r2gXnt05hSqw

142.250.74.109

302 Found

502

URL User Request GET HTTP/3

accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&passive=true&service=blogger&ifkv=AYZoVhfiRECpmpTWdKWDP16SHmYsQLhCaYrC8wpoCP5HQQNjMsQr6S5ynSeiKea8u6r2gXnt05hSqw
IP

142.250.74.109:443
ASN

#15169 GOOGLE

Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E

ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (558)

Size

502
Hash

f6c71bc8ee41c15639919310a8434a4e

0a807c34a52c533dc4031f71fc71690661d55b91

407f07d833c1bd17a61ad0898ad704c5e4a5ff9ed680ec6e9f97ac74c94fb55c

HTTP Headers

                                        GET /InteractiveLogin?continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://saolya.blogspot.com/2015/07/hdstitch-needlleroll-umbrellas-sal-for.html?showComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&passive=true&service=blogger&ifkv=AYZoVhfiRECpmpTWdKWDP16SHmYsQLhCaYrC8wpoCP5HQQNjMsQr6S5ynSeiKea8u6r2gXnt05hSqw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Host-GAPS=1:kh62yaImDP0D4aTZUcvj0c57F2eLgw:pdlGFS17auPIBtc0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 19 Sep 2023 05:21:33 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Fsaolya.blogspot.com%2F2015%2F07%2Fhdstitch-needlleroll-umbrellas-sal-for.html%3FshowComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&ifkv=AYZoVhcj3hRbgaDyRcXeAHO74W8CFGb5AOFtcVIWh55tygO30P3x64RehqIeagm2JjvXhdrkegz4jg&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1795775582%3A1695100893602982&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-F_bYz3C7YtEQ6_TCLwmA0g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 502
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

85073dc38dce61b5a442199213e5e449

436a960500e7061a8bfa3cc3fa897efdaa3dcaa4

0215bd45a978d1802cb17ebe04b8f9b322e7e3b2f12cfbcd8bc61369aeeee040

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 05:21:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.no.P7EpP3bC6PQ.es5.O/am=eRwAImYeYwDxn9L5nnFyGAAAAgAAAAAAYA13/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGkMmvCvdpIMpdD09HjGPPYRBL1Yg/m=_b,_tp

142.250.74.131

200 OK

72436

URL GET HTTP/2

www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.no.P7EpP3bC6PQ.es5.O/am=eRwAImYeYwDxn9L5nnFyGAAAAgAAAAAAYA13/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGkMmvCvdpIMpdD09HjGPPYRBL1Yg/m=_b,_tp
IP

142.250.74.131:443
ASN

#15169 GOOGLE

Requested by

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Fsaolya.blogspot.com%2F2015%2F07%2Fhdstitch-needlleroll-umbrellas-sal-for.html%3FshowComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&ifkv=AYZoVhcj3hRbgaDyRcXeAHO74W8CFGb5AOFtcVIWh55tygO30P3x64RehqIeagm2JjvXhdrkegz4jg&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1795775582%3A1695100893602982&theme=glif
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D

ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT

Magic

ASCII text, with very long lines (3272)

Size

72436
Hash

0aa4cc6e446148076238d095562c5fc8

1e6da2004ba65e2e70aa23c34f063624c4c0fa1b

c36bd997282b864767488a6641f8ce06071f4636df48478a36bdc09577b3ea52

HTTP Headers

                                        GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.no.P7EpP3bC6PQ.es5.O/am=eRwAImYeYwDxn9L5nnFyGAAAAgAAAAAAYA13/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGkMmvCvdpIMpdD09HjGPPYRBL1Yg/m=_b,_tp HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://accounts.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers"
report-to: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]}
content-length: 72436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Sep 2023 17:58:38 GMT
expires: Sat, 14 Sep 2024 17:58:38 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sun, 10 Sep 2023 22:24:58 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 300176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2

216.58.207.227

200 OK

21464

URL GET HTTP/2

fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Fsaolya.blogspot.com%2F2015%2F07%2Fhdstitch-needlleroll-umbrellas-sal-for.html%3FshowComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&ifkv=AYZoVhcj3hRbgaDyRcXeAHO74W8CFGb5AOFtcVIWh55tygO30P3x64RehqIeagm2JjvXhdrkegz4jg&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1795775582%3A1695100893602982&theme=glif
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D

ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 21464, version 1.0\012- data

Size

21464
Hash

923a543cc619ea568f91b723d9fb1ef0

6f4ade25559645c741d7327c6e16521e43d7e1f9

bf7344209edb1be5a2886c425cf6334a102d76cbea1471fd50171e2ee92877cd

HTTP Headers

                                        GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://accounts.google.com/
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21464
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 09:22:47 GMT
expires: Tue, 17 Sep 2024 09:22:47 GMT
cache-control: public, max-age=31536000
age: 71927
last-modified: Mon, 22 Apr 2019 23:42:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

15344

URL GET HTTP/2

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Fsaolya.blogspot.com%2F2015%2F07%2Fhdstitch-needlleroll-umbrellas-sal-for.html%3FshowComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&ifkv=AYZoVhcj3hRbgaDyRcXeAHO74W8CFGb5AOFtcVIWh55tygO30P3x64RehqIeagm2JjvXhdrkegz4jg&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1795775582%3A1695100893602982&theme=glif
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D

ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data

Size

15344
Hash

5d4aeb4e5f5ef754e307d7ffaef688bd

06db651cdf354c64a7383ea9c77024ef4fb4cef8

3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc

HTTP Headers

                                        GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://accounts.google.com/
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Sep 2023 15:24:26 GMT
expires: Fri, 13 Sep 2024 15:24:26 GMT
cache-control: public, max-age=31536000
age: 395828
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2

216.58.207.227

200 OK

21700

URL GET HTTP/2

fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Fsaolya.blogspot.com%2F2015%2F07%2Fhdstitch-needlleroll-umbrellas-sal-for.html%3FshowComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&ifkv=AYZoVhcj3hRbgaDyRcXeAHO74W8CFGb5AOFtcVIWh55tygO30P3x64RehqIeagm2JjvXhdrkegz4jg&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1795775582%3A1695100893602982&theme=glif
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D

ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 21700, version 1.0\012- data

Size

21700
Hash

7d75a9eb3b38b5dd04b8a7ce4f1b87cc

68f598c84936c9720c5ffd6685294f5c94000dff

6c24799e77b963b00401713a1dbd9cba3a00249b9363e2c194d01b13b8cdb3d7

HTTP Headers

                                        GET /s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://accounts.google.com/
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Sep 2023 10:49:50 GMT
expires: Sat, 14 Sep 2024 10:49:50 GMT
cache-control: public, max-age=31536000
age: 325904
last-modified: Mon, 22 Apr 2019 23:43:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

200 OK

15552

URL GET HTTP/2

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Fsaolya.blogspot.com%2F2015%2F07%2Fhdstitch-needlleroll-umbrellas-sal-for.html%3FshowComment%253D1437755741251%26type%3Dblog%26zx%3Dvltklka1l99a&hl=no&ifkv=AYZoVhcj3hRbgaDyRcXeAHO74W8CFGb5AOFtcVIWh55tygO30P3x64RehqIeagm2JjvXhdrkegz4jg&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1795775582%3A1695100893602982&theme=glif
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D

ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data

Size

15552

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (142)

#1 JS:Script (size: 3917)

#2 JS:Script (size: 1727)

#3 JS:Script (size: 171)

#4 JS:Script (size: 3460)

#5 JS:Script (size: 12)

#6 JS:Script (size: 37493)

#7 JS:Script (size: 8680)

#8 JS:Script (size: 210080)

#9 JS:Script (size: 130)

#10 JS:Script (size: 1312)

#11 JS:Script (size: 1596)

#12 JS:Script (size: 18932)

#13 JS:Script (size: 40856)

#14 JS:Script (size: 111703)

#15 JS:Script (size: 4096)

#16 JS:Script (size: 63)

#17 JS:Script (size: 44)

#18 JS:Script (size: 1646)

#19 JS:Script (size: 86)

#20 JS:Script (size: 763699)

#21 JS:Script (size: 876)

#22 JS:Script (size: 23442)

#23 JS:Script (size: 2020)

#24 JS:Script (size: 73)

#25 JS:Script (size: 10925)

#26 JS:Script (size: 611)

#27 JS:Script (size: 213)

#28 JS:Script (size: 82977)

#29 JS:Script (size: 84)

#30 JS:Script (size: 3240)

#31 JS:Script (size: 105)

#32 JS:Script (size: 35569)

#33 JS:Script (size: 86)

#1 JS:Eval (size: 229)

#2 JS:Eval (size: 22)

#3 JS:Eval (size: 2)

#4 JS:Eval (size: 326)

#5 JS:Eval (size: 326)

#6 JS:Eval (size: 261)

#7 JS:Eval (size: 22)

#8 JS:Eval (size: 6)

#9 JS:Eval (size: 27)

#10 JS:Eval (size: 29)

#11 JS:Eval (size: 2)

#12 JS:Eval (size: 2)

#13 JS:Eval (size: 1325)

#14 JS:Eval (size: 29)

#15 JS:Eval (size: 94)

#16 JS:Eval (size: 57)

#17 JS:Eval (size: 22)

#18 JS:Eval (size: 175)

#19 JS:Eval (size: 29)

#20 JS:Eval (size: 1323)

#21 JS:Eval (size: 78)

#22 JS:Eval (size: 77)