Overview

URLnhacuame.com.vn/210336/
IP 103.75.184.21 (Vietnam)
ASN#135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 09:55:12 UTC
StatusLoading report..
IDS alerts0
Blocklist alert4
urlquery alerts No alerts detected
Tags None

Domain Summary (6)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
global-sales-point.blogspot.com (14) 0 2023-05-25 21:15:29 2023-05-26 05:56:11 7341 28983 172.217.21.161
www.blogger.com (6) 8975 2012-05-22 09:35:03 2023-05-26 05:16:21 2754 68299 142.250.74.73
www.blogblog.com (3) 28878 2012-05-22 09:35:04 2023-05-26 08:56:53 1398 261134 142.250.74.73
blogger.googleusercontent.com (2) 16485 2012-05-25 19:41:01 2023-05-26 05:22:17 1379 308340 216.58.211.1
nhacuame.com.vn (1) 0 2023-02-21 12:33:58 2023-05-26 07:38:12 479 1116 103.75.184.21
ocsp.pki.goog (8) 175 2018-07-01 08:43:07 2023-05-26 05:09:27 2664 5594 142.250.74.131

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-05-26 medium nhacuame.com.vn/210336/ Phishing
2023-05-26 medium global-sales-point.blogspot.com/ Phishing
2023-05-26 medium global-sales-point.blogspot.com/js/cookienotice.js Phishing
2023-05-26 medium global-sales-point.blogspot.com/none Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 103.75.184.21
Date UQ / IDS / BL URL IP
2023-06-02 03:44:19 UTC 0 - 0 - 4 giaxefordhathanh.com/Taylor_Barbara2.html 103.75.184.21
2023-05-31 21:42:29 UTC 0 - 0 - 1 giaxefordhathanh.com/964608 103.75.184.21
2023-05-31 12:01:30 UTC 0 - 0 - 1 giaxefordhathanh.com/Shoshana 103.75.184.21
2023-05-26 09:55:12 UTC 0 - 0 - 4 nhacuame.com.vn/210336/ 103.75.184.21
2023-05-26 05:38:37 UTC 0 - 0 - 4 nhacuame.com.vn/210336 103.75.184.21


Last 5 reports on ASN: VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Date UQ / IDS / BL URL IP
2023-06-06 01:06:52 UTC 0 - 0 - 20 103.133.104.112/dashboard/ 103.133.104.112
2023-06-05 22:08:13 UTC 0 - 3 - 2 103.133.104.112/877/hkcmd.exe 103.133.104.112
2023-06-05 22:08:09 UTC 0 - 1 - 2 103.133.104.112/ih/ihihihihihihihihihihihi%23 (...) 103.133.104.112
2023-06-05 16:42:56 UTC 0 - 1 - 1 14.225.254.203/ 14.225.254.203
2023-06-05 16:23:29 UTC 0 - 0 - 2 103.140.251.122/ 103.140.251.122


Last 2 reports on domain: nhacuame.com.vn
Date UQ / IDS / BL URL IP
2023-05-26 09:55:12 UTC 0 - 0 - 4 nhacuame.com.vn/210336/ 103.75.184.21
2023-05-26 05:38:37 UTC 0 - 0 - 4 nhacuame.com.vn/210336 103.75.184.21


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-06-04 21:46:38 UTC 0 - 0 - 1 140.129.23.147/Walker_Carol.html 140.129.23.147
2023-06-04 19:57:16 UTC 0 - 2 - 0 fedex-tracking.vendettadao.com/Green_Sandra6 184.168.104.180
2023-06-02 16:03:26 UTC 0 - 0 - 1 140.129.23.147/Randi 140.129.23.147
2023-06-01 23:05:09 UTC 0 - 1 - 0 schukinaconsultinggroup.ru/Maybelle 31.31.196.206
2023-06-01 21:40:08 UTC 0 - 0 - 1 140.129.23.147/Harris_Ruth9.html 140.129.23.147

JavaScript

Executed Scripts (11)

Executed Evals (4)
#1 JavaScript::Eval (size: 147) - SHA256: a43b00781b503d224676e9471bf5b7836f50df0fe971cfb22e1938b00a9d85e9
(function() {
    return {
        'attribution': 'Powered by \x3ca href\x3d\x27https://www.blogger.com\x27 target\x3d\x27_blank\x27\x3eBlogger\x3c/a\x3e.'
    };
})()
#2 JavaScript::Eval (size: 999) - SHA256: 9950b791b5df97ad1a3c84bf5b7c197488632eeb8638e29e8b8e23f64e13fa9f
(function() {
    return {
        'title': '',
        'showSnippets': true,
        'showThumbnails': true,
        'thumbnailSize': 72,
        'showAuthor': true,
        'showDate': true,
        'posts': [{
            'id': '2082657791248077176',
            'title': 'SUPER SHOP#1 \\/iagr/\\ just $0.26! click on the image to enter',
            'href': 'https://global-sales-point.blogspot.com/2023/05/super-shop1-iagr-just-026-click-on.html',
            'snippet': 'https://sex-assistant.xyz/ \xa0',
            'thumbnail': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5Xh9nkzqw8-MDM_ziWLcRDcKT5YdNcbLLF48tO0VSj6qFLgBgj8sU8rzvOhRmyRgq84zVns9U9rvImXg5klJI_whxsrkArz6SYPLkatN-Jl8AAOuHvYYXxelQ-lbh1Dk63Y6fCE8C_-u9DwopwyahpIER8NZor_kH2xCA1jmxVRbdC4YUmFdJ-treWA/s72-c/DeborahWright17446.jpeg',
            'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5Xh9nkzqw8-MDM_ziWLcRDcKT5YdNcbLLF48tO0VSj6qFLgBgj8sU8rzvOhRmyRgq84zVns9U9rvImXg5klJI_whxsrkArz6SYPLkatN-Jl8AAOuHvYYXxelQ-lbh1Dk63Y6fCE8C_-u9DwopwyahpIER8NZor_kH2xCA1jmxVRbdC4YUmFdJ-treWA/s16000/DeborahWright17446.jpeg'
        }]
    };
})()
#3 JavaScript::Eval (size: 238) - SHA256: 4b662ef9900d44c3ff11adc4162ddb66472d0a0b7bcaefb69bd20579297dea35
(function() {
    return {
        'data': [{
            'url': 'https://global-sales-point.blogspot.com/2023/05/',
            'name': 'May 2023',
            'expclass': 'expanded',
            'post-count': 1
        }],
        'toggleopen': 'MONTHLY-1682924400000',
        'style': 'FLAT',
        'title': 'Blog Archive'
    };
})()
#4 JavaScript::Eval (size: 403) - SHA256: 51d78e1b09fac28a4dd4c9619083c51699eb5ef0cd90c1ceb1d884ad2b22d274
(function() {
    return {
        'title': 'About Me',
        'team': false,
        'showlocation': false,
        'occupation': '',
        'showoccupation': false,
        'aboutme': '',
        'showaboutme': true,
        'displayname': 'Pooran',
        'profileLogo': '//www.blogger.com/img/logo-16.png',
        'hasgoogleprofile': false,
        'userUrl': 'https://www.blogger.com/profile/04194471075663575525',
        'viewProfileMsg': 'View my complete profile',
        'isDisplayable': true
    };
})()

Executed Writes (1)
#1 JavaScript::Write (size: 44) - SHA256: adaee92714de3cc13afede8329494a8a43c1c485e94aadf139f3548682aade83
< script id = "__gwt_marker_comments" > < /script>


HTTP Transactions (34)


Request Response
                                        
                                            GET /210336/ HTTP/1.1 
Host: nhacuame.com.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             103.75.184.21
HTTP/2 302 Found
content-type: text/html
                                            
content-length: 683
date: Fri, 26 May 2023 09:55:39 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: https://global-sales-point.blogspot.com/
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   683
Md5:    6371befc85069a96b0cb3c52e754a55a
Sha1:   de3def799f60ce2a16721687937ffb2a3f9bd3ae
Sha256: db6f3663ecb5b124f3c02ce15691739fe69888b7ed6112f03062489470517f77

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.217.21.161
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
content-security-policy: upgrade-insecure-requests
content-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-uri https://www.blogger.com/cspreport
expires: Fri, 26 May 2023 09:54:54 GMT
date: Fri, 26 May 2023 09:54:54 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: W/"08ba800180559742bced0dbadb5e51cea26a60f39f4d48c73c1d8c3922b3eb37"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 4842
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5691)
Size:   4842
Md5:    680aa4287089e948d7844040cd7111a2
Sha1:   6d4efefedfb9ef1984665460b58c76afccc07a45
Sha256: 697f0f0243d401fd902d7e7a1244ca9afe854e23d9f7b970297e4cba37f24554

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 20:59:57 GMT
expires: Thu, 01 Jun 2023 20:59:57 GMT
cache-control: public, max-age=604800
last-modified: Thu, 25 May 2023 18:54:28 GMT
vary: Accept-Encoding
age: 46498
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    a705132a2174f88e196ec3610d68faa8
Sha1:   3bad57a48d973a678fec600d45933010f6edc659
Sha256: 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/css
                                            
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 12:04:31 GMT
expires: Wed, 22 May 2024 12:04:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 May 2023 20:55:27 GMT
vary: Accept-Encoding
age: 251424
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35959)
Size:   7756
Md5:    1e32420a7b6ddbdcb7def8b3141c4d1e
Sha1:   a1be54d42ff1f95244c9653539f90318f5bc0580
Sha256: a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
                                        
                                            GET /static/v1/widgets/541336192-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56539
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 02:05:25 GMT
expires: Thu, 23 May 2024 02:05:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:50:57 GMT
vary: Accept-Encoding
age: 200970
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2215)
Size:   56539
Md5:    aa44d6ded7a7f494bb801da2e270d438
Sha1:   2afe3b98239baba11dae4252198314c3c06088ab
Sha256: 9ca45e0cd2719c8403f25e13c931515b162cbb57faf9773db1033fee191efeff
                                        
                                            GET /dynamicviews/25065a3efd4de5c0/js/common.js HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 96347
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 02:45:56 GMT
expires: Wed, 31 May 2023 02:45:56 GMT
cache-control: public, max-age=604800
last-modified: Tue, 23 May 2023 07:51:46 GMT
vary: Accept-Encoding
age: 198539
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2776)
Size:   96347
Md5:    761632aed884849a7189d8e9a5d53daf
Sha1:   946c26e7bcb53a00183370b2f0a8ad1f2ca9ae7a
Sha256: 1f112a3a52e90e60929ecd5d2dbb8911160ef3b91b2b4e869df30e87cdff220a
                                        
                                            GET /dynamicviews/25065a3efd4de5c0/js/classic.js HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 40469
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 04:13:22 GMT
expires: Wed, 31 May 2023 04:13:22 GMT
cache-control: public, max-age=604800
last-modified: Tue, 23 May 2023 07:51:46 GMT
vary: Accept-Encoding
age: 193293
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   40469
Md5:    e63c7bebd815c657c6a06ca8541fb98a
Sha1:   476e262cbfeb0f54929e39061312b1167fd9c80d
Sha256: fababce1912beeafaf3d3629d146bce60ef862b0966d650bbcb257cf68fbda70
                                        
                                            GET /dynamicviews/4224c15c4e7c9321/js/comments.js HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 122175
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 20:15:59 GMT
expires: Tue, 30 May 2023 20:15:59 GMT
cache-control: public, max-age=604800
last-modified: Mon, 14 May 2012 20:21:35 GMT
vary: Accept-Encoding
age: 221936
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2028)
Size:   122175
Md5:    f7c41bb3b904cbcc49ba53232535e983
Sha1:   dc873d1f036da0b53b011a5046a23d258b5a5bd2
Sha256: 266c8725e6911ff0e2f23572d0ebf1e30c7594e49ea8bed00af914c924fc086a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /dyn-css/authorization.css?targetBlogID=6460679392332155237&zx=1cc13206-b172-4af1-8745-fcdde9bd3691 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.73
HTTP/3 200 OK
content-type: text/css; charset=UTF-8
                                            
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 May 2023 09:54:55 GMT
last-modified: Fri, 26 May 2023 09:54:55 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    68b329da9893e34099c7d8ad5cb9c940
Sha1:   adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
Sha256: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: image/x-icon
                                            
expires: Fri, 26 May 2023 09:54:55 GMT
date: Fri, 26 May 2023 09:54:55 GMT
cache-control: private, max-age=86400
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: W/"08ba800180559742bced0dbadb5e51cea26a60f39f4d48c73c1d8c3922b3eb37"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size:   412
Md5:    59a0c7b6e4848ccdabcea0636efda02b
Sha1:   30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
Sha256: a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
                                        
                                            GET /?v=0&action=initial&widgetId=Attribution1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:55 GMT
date: Fri, 26 May 2023 09:54:55 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 231
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text
Size:   231
Md5:    f4976b96fcd443f3df090229c61e6a03
Sha1:   9926e6243b06275a288e5753da0e0bcdd093319c
Sha256: 8e907c1f83a69a8f4cd310a8bd3f21558eeebd4dbd5e557726983e0c8ce71863
                                        
                                            GET /?v=0&action=initial&widgetId=BlogArchive1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:56 GMT
date: Fri, 26 May 2023 09:54:56 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 296
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text
Size:   296
Md5:    ced93bcdd6f0d15c2bbf5f2eb7f8096f
Sha1:   96ca2e60579253f5b3c7dffc02028a9fee28a726
Sha256: a2dc8ad6fbae679aa65b6e64cd220a0c6f682d322fe5608d64edbf880a0f8bf5
                                        
                                            GET /feeds/posts/default?alt=json&v=2&dynamicviews=1&orderby=published&max-results=25&rewriteforssl=true HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
                                            
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: Blogger Render Server 1.0
x-content-type-options: nosniff
x-xss-protection: 0
content-length: 1588
x-frame-options: SAMEORIGIN
date: Fri, 26 May 2023 09:54:56 GMT
expires: Fri, 26 May 2023 05:58:12 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: W/"c24731f7f3b904e7e2d68763a8b42efc269e3af8df4acf6580554a4f19655e3e"
vary: Accept-Encoding
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (5080), with no line terminators
Size:   1588
Md5:    b1ec5ff1637b0508eb8bb4379525ed5b
Sha1:   a5b9440710e1e4cf4ce2d5cc391c27354343cd26
Sha256: 55d2e8f5d3793c148ccc9515f5d3560315ff3b3411e7c5d245bca6990d7cb1c9
                                        
                                            GET /?v=0&action=initial&widgetId=Profile1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:56 GMT
date: Fri, 26 May 2023 09:54:56 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 342
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text, with very long lines (441)
Size:   342
Md5:    e6a124a705fc5a9fd33c892a47c5ad17
Sha1:   35bcf835fa613a3e31279df078f3d543b39ffac8
Sha256: 4b0c25a1821cd03b0e7966218677cc3f3b427eedd73c4311bf4d245dab88821d
                                        
                                            GET /?v=0&action=initial&widgetId=PopularPosts1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:56 GMT
date: Fri, 26 May 2023 09:54:56 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 644
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text, with very long lines (1042)
Size:   644
Md5:    6e78a7120796753aceb1ea750c659965
Sha1:   2f8cbd9a260c7c7cf7cc239591734505e678e111
Sha256: 14bf9e56d80051d2f6c2834e66d8fe0e5c468bcbadc25bb7e67c643b2c8a8d43
                                        
                                            GET /?v=0&action=initial&widgetId=Attribution1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:56 GMT
date: Fri, 26 May 2023 09:54:56 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 231
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text
Size:   231
Md5:    f4976b96fcd443f3df090229c61e6a03
Sha1:   9926e6243b06275a288e5753da0e0bcdd093319c
Sha256: 8e907c1f83a69a8f4cd310a8bd3f21558eeebd4dbd5e557726983e0c8ce71863
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /?v=0&action=initial&widgetId=BlogArchive1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:56 GMT
date: Fri, 26 May 2023 09:54:56 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 296
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text
Size:   296
Md5:    ced93bcdd6f0d15c2bbf5f2eb7f8096f
Sha1:   96ca2e60579253f5b3c7dffc02028a9fee28a726
Sha256: a2dc8ad6fbae679aa65b6e64cd220a0c6f682d322fe5608d64edbf880a0f8bf5
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEg5Xh9nkzqw8-MDM_ziWLcRDcKT5YdNcbLLF48tO0VSj6qFLgBgj8sU8rzvOhRmyRgq84zVns9U9rvImXg5klJI_whxsrkArz6SYPLkatN-Jl8AAOuHvYYXxelQ-lbh1Dk63Y6fCE8C_-u9DwopwyahpIER8NZor_kH2xCA1jmxVRbdC4YUmFdJ-treWA/s16000/DeborahWright17446.jpeg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
vary: Origin
access-control-expose-headers: Content-Length
etag: "v8"
expires: Sat, 27 May 2023 09:54:56 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="DeborahWright17446.jpeg"
x-content-type-options: nosniff
date: Fri, 26 May 2023 09:54:56 GMT
server: fife
content-length: 303115
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 1032x1109, components 3\012- data
Size:   303115
Md5:    21c04ce523807c8f6cb71e3dc4131020
Sha1:   22944a3877e2a5a407d66b7b3fdacc4b8e3e3160
Sha256: fc357f1d43ac73940a7502cd35e5bbb31dcf78d79125726f437a993093da0444
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 09:54:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /?v=0&action=initial&widgetId=PopularPosts1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:56 GMT
date: Fri, 26 May 2023 09:54:56 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 644
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text, with very long lines (1042)
Size:   644
Md5:    6e78a7120796753aceb1ea750c659965
Sha1:   2f8cbd9a260c7c7cf7cc239591734505e678e111
Sha256: 14bf9e56d80051d2f6c2834e66d8fe0e5c468bcbadc25bb7e67c643b2c8a8d43
                                        
                                            GET /none HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 404 Not Found
content-type: text/html; charset=UTF-8
                                            
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 May 2023 09:54:56 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 4854
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5610)
Size:   4854
Md5:    1e61d04396cf09d8027cd7a6a783d1d8
Sha1:   3966f12e02537209aae55046e3db2c3cf65a4798
Sha256: 9ac9b0237cb320dae469fc49148b286ea132f2fba895b7d8fe3b88cd0aaadb49

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /?v=0&action=initial&widgetId=Profile1&responseType=js&xssi_token=AOuZoY76EuIesFkVV0eh8HwALtwZUSoltw%3A1685041482429 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:56 GMT
date: Fri, 26 May 2023 09:54:56 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: "1cc13206-b172-4af1-8745-fcdde9bd3691"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 342
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text, with very long lines (441)
Size:   342
Md5:    e6a124a705fc5a9fd33c892a47c5ad17
Sha1:   35bcf835fa613a3e31279df078f3d543b39ffac8
Sha256: 4b0c25a1821cd03b0e7966218677cc3f3b427eedd73c4311bf4d245dab88821d
                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.73
HTTP/3 200 OK
content-type: image/png
                                            
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 279
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 06:25:18 GMT
expires: Tue, 30 May 2023 06:25:18 GMT
cache-control: public, max-age=604800
last-modified: Mon, 22 May 2023 23:02:07 GMT
age: 271778
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            POST /cspreport HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 362
Origin: https://global-sales-point.blogspot.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.73
HTTP/2 204 No Content
                                            
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
date: Fri, 26 May 2023 09:54:56 GMT
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /cspreport HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 366
Origin: https://global-sales-point.blogspot.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.73
HTTP/2 204 No Content
                                            
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
date: Fri, 26 May 2023 09:54:56 GMT
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /img/b/R29vZ2xl/AVvXsEg5Xh9nkzqw8-MDM_ziWLcRDcKT5YdNcbLLF48tO0VSj6qFLgBgj8sU8rzvOhRmyRgq84zVns9U9rvImXg5klJI_whxsrkArz6SYPLkatN-Jl8AAOuHvYYXxelQ-lbh1Dk63Y6fCE8C_-u9DwopwyahpIER8NZor_kH2xCA1jmxVRbdC4YUmFdJ-treWA/s72-c/DeborahWright17446.jpeg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://global-sales-point.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             216.58.211.1
HTTP/3 200 OK
content-type: image/jpeg
                                            
vary: Origin
access-control-expose-headers: Content-Length
etag: "v8"
expires: Sat, 27 May 2023 09:54:57 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="DeborahWright17446.jpeg"
x-content-type-options: nosniff
date: Fri, 26 May 2023 09:54:57 GMT
server: fife
content-length: 4295
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   4295
Md5:    bbba3bded2765716cc9625daf1e14576
Sha1:   e1dee42c94c2cde1994ebcbc9a5092d3195d67d7
Sha256: 65762de2082293f3e09ec57947bc18fb247cea9cd9b5f7f19676473d31bac2e3
                                        
                                            GET /2023/05/super-shop1-iagr-just-026-click-on.html?dynamicviews=1&v=0 HTTP/1.1 
Host: global-sales-point.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://global-sales-point.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             172.217.21.161
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
                                            
expires: Fri, 26 May 2023 09:54:57 GMT
date: Fri, 26 May 2023 09:54:57 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 May 2023 18:05:49 GMT
etag: W/"08ba800180559742bced0dbadb5e51cea26a60f39f4d48c73c1d8c3922b3eb37"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 5326
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7121)
Size:   5326
Md5:    f0ab8cf191d643322d85785274cef042
Sha1:   58776f7ae3fe8d6318c43de8d0d8ed9411a9eb1a
Sha256: f6382df8504b7f8b7d34d8c7c8f1b8e8f5980a14e03af87d748702ea5135e725