| samsungs4.blogspot.com/search/?m=1 |  216.58.207.193 | 200 OK | 9.1 kB |
URL User Request GET HTTP/2samsungs4.blogspot.com/search/?m=1 IP216.58.207.193:443
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com Fingerprint08:43:CF:E7:9C:1F:30:EA:9B:AD:8A:4E:2D:73:57:EA:80:DC:5B:E0 ValidityMon, 08 Apr 2024 07:01:25 GMT - Mon, 01 Jul 2024 07:01:24 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (4403) Hash735dc29666ad59ad93cf32f2612a3f22 a3c2d87454fd6aceea3c97955fc844e5f34b9c1b 735be34ef6da41be2b3fe5c6a097fd874343e8a8de68f3d0a6e83c1fd8197584
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /search/?m=1 HTTP/1.1
Host: samsungs4.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 26 Apr 2024 11:59:40 GMT
date: Fri, 26 Apr 2024 11:59:40 GMT
cache-control: private, max-age=0
last-modified: Tue, 05 Mar 2024 23:56:01 GMT
etag: W/"53d37b859769de40a317e0d6db832142becf6cd6cc257e0eaa88f98871b2ba34"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9084
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| samsungs4.blogspot.com/js/cookienotice.js | 216.58.207.193 | 200 OK | 2.0 kB |
URL GET HTTP/3samsungs4.blogspot.com/js/cookienotice.js IP216.58.207.193:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com Fingerprint08:43:CF:E7:9C:1F:30:EA:9B:AD:8A:4E:2D:73:57:EA:80:DC:5B:E0 ValidityMon, 08 Apr 2024 07:01:25 GMT - Mon, 01 Jul 2024 07:01:24 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: samsungs4.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/search/?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Fri, 26 Apr 2024 11:59:40 GMT
expires: Fri, 03 May 2024 11:59:40 GMT
cache-control: public, max-age=604800
last-modified: Fri, 26 Apr 2024 09:52:17 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/widgets/1807328581-widgets.js | 142.250.74.41 | 200 OK | 51 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/1807328581-widgets.js IP142.250.74.41:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint43:1F:49:42:7D:BA:4B:2E:1C:79:1D:C4:01:68:47:0E:C3:3F:0F:14 ValidityMon, 08 Apr 2024 06:31:59 GMT - Mon, 01 Jul 2024 06:31:58 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash3fd63936a88c795358e97868e471a443 ca64663c1f3115e480fc373d6e47b01d1f5b03a0 d611421e714f0491c867715cfd4b567a8e4590161c005cbf65fe2644e38685f1
GET /static/v1/widgets/1807328581-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51394
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:54:37 GMT
expires: Sat, 26 Apr 2025 05:54:37 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 25 Apr 2024 06:59:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 21903
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/1539816172-widget_css_mobile_2_bundle.css | 142.250.74.41 | 200 OK | 4.9 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/1539816172-widget_css_mobile_2_bundle.css IP142.250.74.41:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint43:1F:49:42:7D:BA:4B:2E:1C:79:1D:C4:01:68:47:0E:C3:3F:0F:14 ValidityMon, 08 Apr 2024 06:31:59 GMT - Mon, 01 Jul 2024 06:31:58 GMT
File typeASCII text, with very long lines (20429) Hash3530457ff5686a9eb40a5b14522ed0c7 c1f07552b1d3120ab83dcd6787ab8f43482268b9 fd47e1c7c5792d78bb2849ce121d3b574e2057042d5f803dfc593b7ff5d5763a
GET /static/v1/widgets/1539816172-widget_css_mobile_2_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 4934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:33:15 GMT
expires: Fri, 25 Apr 2025 02:33:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 25 Apr 2024 01:53:44 GMT
content-type: text/css
vary: Accept-Encoding
age: 120385
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/js/google_top_exp.js | 216.58.211.2 | 200 OK | 42 B |
URL GET HTTP/2pagead2.googlesyndication.com/pagead/js/google_top_exp.js IP216.58.211.2:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint30:89:D4:C8:96:C6:D4:7B:F7:49:8D:DB:57:A1:D2:5A:D1:D3:D1:B4 ValidityMon, 08 Apr 2024 06:34:54 GMT - Mon, 01 Jul 2024 06:34:53 GMT
Hash7f5f2be159837d73b72a4b37616bce44 c93d7f25b530b05c26440d3352213b683d03dcc3 ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Thu, 25 Apr 2024 13:37:58 GMT
expires: Thu, 09 May 2024 13:37:58 GMT
cache-control: public, max-age=1209600
age: 80502
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| draft.blogger.com/dyn-css/authorization.css?targetBlogID=8075768563677114163&zx=a1369284-4f21-4be2-bc32-6eb3cb3453c1 | 142.250.74.41 | 200 OK | 21 B |
URL GET HTTP/3draft.blogger.com/dyn-css/authorization.css?targetBlogID=8075768563677114163&zx=a1369284-4f21-4be2-bc32-6eb3cb3453c1 IP142.250.74.41:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint43:1F:49:42:7D:BA:4B:2E:1C:79:1D:C4:01:68:47:0E:C3:3F:0F:14 ValidityMon, 08 Apr 2024 06:31:59 GMT - Mon, 01 Jul 2024 06:31:58 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=8075768563677114163&zx=a1369284-4f21-4be2-bc32-6eb3cb3453c1 HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 Apr 2024 11:59:41 GMT
last-modified: Fri, 26 Apr 2024 11:59:41 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0tQSVNgK99jpZ84TsbZzzuw38AnT1ClRlLMgszI6wqvLhhbUV_Uvf13SMEgTCXf6UH28Azcx87r8FoI4YKPSSbKwb4LBCCpMrlW8w6s2VHjAPNJU1YeWsPao9Q_NvH_geCL8wn13nUNA/s72-c/Samsung-Galaxy-S4-6.jpg | 142.250.74.129 | 200 OK | 5.3 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0tQSVNgK99jpZ84TsbZzzuw38AnT1ClRlLMgszI6wqvLhhbUV_Uvf13SMEgTCXf6UH28Azcx87r8FoI4YKPSSbKwb4LBCCpMrlW8w6s2VHjAPNJU1YeWsPao9Q_NvH_geCL8wn13nUNA/s72-c/Samsung-Galaxy-S4-6.jpg IP142.250.74.129:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintD1:64:F1:6B:AC:65:FC:D3:5F:42:54:08:AE:BC:0A:AC:D1:EA:88:2C ValidityMon, 08 Apr 2024 07:27:47 GMT - Mon, 01 Jul 2024 07:27:46 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hash81462f4cdfd45b1e74f6c32ee4189b2a 92814aa4d4a65580c58ee3a9d001f9270c36c27b 945f7cf0496806de93a9bc7d50566e48f3a1e0d1b615b3a46c30d4a696838efd
GET /img/b/R29vZ2xl/AVvXsEi0tQSVNgK99jpZ84TsbZzzuw38AnT1ClRlLMgszI6wqvLhhbUV_Uvf13SMEgTCXf6UH28Azcx87r8FoI4YKPSSbKwb4LBCCpMrlW8w6s2VHjAPNJU1YeWsPao9Q_NvH_geCL8wn13nUNA/s72-c/Samsung-Galaxy-S4-6.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v19e"
expires: Sat, 27 Apr 2024 11:59:41 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Samsung-Galaxy-S4-6.jpg"
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 11:59:41 GMT
server: fife
content-length: 5313
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhagKL7VmYR1peAkI6UdcNg3h3s3ErphJ6QGGY1DA1hyphenhyphenW52NQfh3aNFfKQg5nkeqeYgRxw-rJYwqcHW0Po0Jm3sDD-V_fhyphenhyphenUohetIHGQW7Cz4UKhxVRXiI7VrY9Nfez99gMBZgtb9Rn8Pk/s72-c/gs4-mini.jpg | 142.250.74.129 | 200 OK | 3.4 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhagKL7VmYR1peAkI6UdcNg3h3s3ErphJ6QGGY1DA1hyphenhyphenW52NQfh3aNFfKQg5nkeqeYgRxw-rJYwqcHW0Po0Jm3sDD-V_fhyphenhyphenUohetIHGQW7Cz4UKhxVRXiI7VrY9Nfez99gMBZgtb9Rn8Pk/s72-c/gs4-mini.jpg IP142.250.74.129:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintD1:64:F1:6B:AC:65:FC:D3:5F:42:54:08:AE:BC:0A:AC:D1:EA:88:2C ValidityMon, 08 Apr 2024 07:27:47 GMT - Mon, 01 Jul 2024 07:27:46 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3 Hash2163f9a6dbb32bfa3031aa972cd66996 8891c7144793c6a4dd93abe8a2d00d4613b74ca9 57220ee8fd6283a30cc0bca707370162fbce2e597af69a3767786760fb48789a
GET /img/b/R29vZ2xl/AVvXsEhagKL7VmYR1peAkI6UdcNg3h3s3ErphJ6QGGY1DA1hyphenhyphenW52NQfh3aNFfKQg5nkeqeYgRxw-rJYwqcHW0Po0Jm3sDD-V_fhyphenhyphenUohetIHGQW7Cz4UKhxVRXiI7VrY9Nfez99gMBZgtb9Rn8Pk/s72-c/gs4-mini.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v1a9"
expires: Sat, 27 Apr 2024 11:59:41 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="gs4-mini.jpg"
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 11:59:41 GMT
server: fife
content-length: 3446
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| samsungs4.blogspot.com/favicon.ico | 216.58.207.193 | 200 OK | 187 B |
URL GET HTTP/3samsungs4.blogspot.com/favicon.ico IP216.58.207.193:443
Requested byhttps://samsungs4.blogspot.com/search/?m=1 CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com Fingerprint08:43:CF:E7:9C:1F:30:EA:9B:AD:8A:4E:2D:73:57:EA:80:DC:5B:E0 ValidityMon, 08 Apr 2024 07:01:25 GMT - Mon, 01 Jul 2024 07:01:24 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash91b446d7f1a7993827f97a4ee2382789 68151bb83f06857c455245f7a2c566a293c4d6e9 a34e11d5b4438a2c21044f847b0c2441481dfc4f741d7ec8b8a64c47624f0fa1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: samsungs4.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://samsungs4.blogspot.com/search/?m=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Fri, 26 Apr 2024 11:59:41 GMT
date: Fri, 26 Apr 2024 11:59:41 GMT
cache-control: private, max-age=86400
last-modified: Tue, 05 Mar 2024 23:56:01 GMT
etag: W/"53d37b859769de40a317e0d6db832142becf6cd6cc257e0eaa88f98871b2ba34"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 187
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|