ocsp.pki.goog/gts1c3
472 B IP
Hash c5c645890ce2ccae946a593449643818
d3160741062ce091085211928c269014301ad94e
c5b30d45cf13cfb0d05caa3c98a88d5c17511578f5be160444e3e975d206f51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 08:32:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
optusnet-com.blogspot.ug/
302 Found 180 B URL User Request GET HTTP/2 optusnet-com.blogspot.ug/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 216ca30fbe2a15f9cf014aa7e5459229
34d036c7d4a06f275f5609709bfda694209dc921
b2a69088cf6ca9de223ce679b64b99e19ad3cf27a88b3b47c69b61d9b94d51fc
Analyzer Verdict Alert OpenPhish phishing Singtel Optus
GET / HTTP/1.1
Host: optusnet-com.blogspot.ug
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://optusnet-com.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 27 Oct 2023 08:32:34 GMT
expires: Fri, 27 Oct 2023 08:32:34 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 180
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash c5c645890ce2ccae946a593449643818
d3160741062ce091085211928c269014301ad94e
c5b30d45cf13cfb0d05caa3c98a88d5c17511578f5be160444e3e975d206f51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 08:32:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash c5c645890ce2ccae946a593449643818
d3160741062ce091085211928c269014301ad94e
c5b30d45cf13cfb0d05caa3c98a88d5c17511578f5be160444e3e975d206f51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 08:32:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
optusnet-com.blogspot.com/
200 OK 3.2 kB URL User Request GET HTTP/2 optusnet-com.blogspot.com/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4037)
Hash b0cd06ab2b93af7cc856d554877f7b47
2e101c0d4b197e52191d5c0325840eec614812a2
128e589e78c7ecc599e68fcb8e604e0c5dfb67a5b32233445e6c8c8529b15bd0
Analyzer Verdict Alert OpenPhish phishing Singtel Optus
GET / HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 27 Oct 2023 08:32:34 GMT
date: Fri, 27 Oct 2023 08:32:34 GMT
cache-control: private, max-age=0
last-modified: Wed, 24 Feb 2021 09:00:07 GMT
etag: W/"31ac303adcfa0611cd494225a5801ef5d2b5dfc6a85e589868d9f16e03ad80b1"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 3195
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
optusnet-com.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 optusnet-com.blogspot.com/js/cookienotice.js
IP
Requested by https://optusnet-com.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
Analyzer Verdict Alert OpenPhish phishing Singtel Optus
GET /js/cookienotice.js HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Fri, 27 Oct 2023 08:32:34 GMT
expires: Fri, 03 Nov 2023 08:32:34 GMT
cache-control: public, max-age=604800
last-modified: Fri, 27 Oct 2023 01:53:41 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 60d26d609eefb6202b60ec01b21b5dc0
a5b5789b0dd3adecd614281e1c0cbd8855ff79f1
33830b39ac6ede19d77b0caf356d9cb4122da38b2f1158a473263e69eed46165
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 08:32:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash ecce14ea4c30afadb072f28965a0f69c
75338c0fc61c396b69738aceac47732967de17d2
7731bc0f09733e2a49c25e33e7b0de07615c6d557635eb953ec6de5aae0c68ea
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 08:32:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
200 OK 3.5 kB URL GET HTTP/2 www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
IP
Requested by https://optusnet-com.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT
File type Unicode text, UTF-8 text, with very long lines (10473)
Hash 158013acb7e269a3dbe18de855656c97
08fa355584fc849539b3f04589ae6f61eb4a7d98
92e40dc4bbb485a182b796c58e6da7974cb8a6a84fdb4548ace3b85c991f0f94
GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3475
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Oct 2023 08:32:35 GMT
expires: Fri, 27 Oct 2023 08:32:35 GMT
cache-control: public, max-age=0
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/4222370799-widgets.js
200 OK 58 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/4222370799-widgets.js
IP
Requested by https://optusnet-com.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint3F:08:9F:49:DB:C6:54:6F:4F:5E:71:19:FC:42:98:33:57:FD:36:44
ValidityMon, 09 Oct 2023 08:03:32 GMT - Mon, 01 Jan 2024 08:03:31 GMT
File type ASCII text, with very long lines (2215)
Hash d9e2e9dda616aa1268a8206f3daf8830
7a400bd8ad0644f3fbc1f9e975a6402bbb5a8a41
9af227d76624335e290dc70aaef77227f4c63cb96588f9663bc59fd3c6f42cf1
GET /static/v1/widgets/4222370799-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Oct 2023 02:22:38 GMT
expires: Tue, 22 Oct 2024 02:22:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 23 Oct 2023 01:50:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 367797
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 60d26d609eefb6202b60ec01b21b5dc0
a5b5789b0dd3adecd614281e1c0cbd8855ff79f1
33830b39ac6ede19d77b0caf356d9cb4122da38b2f1158a473263e69eed46165
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 08:32:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash ecce14ea4c30afadb072f28965a0f69c
75338c0fc61c396b69738aceac47732967de17d2
7731bc0f09733e2a49c25e33e7b0de07615c6d557635eb953ec6de5aae0c68ea
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 08:32:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
optusnet-com.blogspot.com/favicon.ico
200 OK 412 B URL GET HTTP/3 optusnet-com.blogspot.com/favicon.ico
IP
Requested by https://optusnet-com.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
Analyzer Verdict Alert OpenPhish phishing Singtel Optus
GET /favicon.ico HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Fri, 27 Oct 2023 08:32:35 GMT
date: Fri, 27 Oct 2023 08:32:35 GMT
cache-control: private, max-age=86400
last-modified: Wed, 24 Feb 2021 09:00:07 GMT
etag: W/"31ac303adcfa0611cd494225a5801ef5d2b5dfc6a85e589868d9f16e03ad80b1"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pastebin.com/raw/RD9kQSUh
200 OK 0 B URL GET HTTP/2 pastebin.com/raw/RD9kQSUh
IP
Requested by https://optusnet-com.blogspot.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint55:C8:82:61:30:05:42:80:DB:47:5E:D0:66:B5:DF:AC:14:5B:19:6F
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /raw/RD9kQSUh HTTP/1.1
Host: pastebin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 27 Oct 2023 08:32:35 GMT
content-type: text/plain; charset=utf-8
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1;mode=block
cache-control: public, max-age=1801
cf-cache-status: MISS
last-modified: Fri, 27 Oct 2023 08:32:35 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 81c996dade75b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
216.58.207.193
104.20.68.143