www.quangngaisale.blogspot.com/
301 Moved Permanently 180 B URL HTTP/1.1 www.quangngaisale.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 055626fdd857d391276aeb078f8d2d90
ca99c02e9a4f6da003fb1fb73497f5be310287dc
3b298a607df3aa170bd5e966db0b7e7c302e3f59ee010146d3bb9e492157ba74
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.quangngaisale.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: http://quangngaisale.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 23 Oct 2022 15:10:13 GMT
Expires: Sun, 23 Oct 2022 15:10:13 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 180
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 73c4166ca864f777db2cc1cd8658a7c2
c56b66b0b7c8516d4d5bfafe0c166711c78f3d25
310c633350812c064e159275b6dbbdba6d6a5991a54ccfcc23459320c6513572
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "310C633350812C064E159275B6DBBDBA6D6A5991A54CCFCC23459320C6513572"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11285
Expires: Sun, 23 Oct 2022 18:18:18 GMT
Date: Sun, 23 Oct 2022 15:10:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 23 Oct 2022 14:52:52 GMT
Expires: Sun, 23 Oct 2022 15:39:36 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5OuP0Ta4u-RYRhSU-mvn7VOEnYx8EJR9DfF96bgbwH5tLg5pxEC82A==
Age: 1041
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11362
Expires: Sun, 23 Oct 2022 18:19:35 GMT
Date: Sun, 23 Oct 2022 15:10:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3psOQ0gBxQrIoyqv96xL/guGOd5h22SAUskMpVpIoWGeqm0qzv7q79CWNL425fb1BJorqvwGUbIiXiJ8aUHeaw==
x-amz-request-id: BMDQJF5JVGAGE0P9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 23 Oct 2022 15:08:08 GMT
age: 125
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 15:10:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 23 Oct 2022 14:43:40 GMT
Expires: Sun, 23 Oct 2022 15:39:21 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sx4NFg66hizWMpla0VzHSpGdARVG7GY5yXnqbBi9Y-Mr_u-GhTh7Dg==
Age: 1592
ocsp.digicert.com/
200 OK 471 B IP
Hash 60d5d7cce6c32a6bdaf0d4c92ec93a1a
cd29edee660366b41749cfd206bdc08fb421449c
fb90c4cc44b32e4ca4a7d1533bbf4a2fd5c482dda5d232f1be2334f3cefbbb0e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5943
Cache-Control: max-age=153333
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:13 GMT
Etag: "6354f613-1d7"
Expires: Tue, 25 Oct 2022 09:45:46 GMT
Last-Modified: Sun, 23 Oct 2022 08:06:43 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
200 OK 33 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65481)
Hash 912555c06f2a23f889e88b7aa1ccb92f
5a8c04c1b7d8d65f436d1f58b8b72f259b4ae321
fb4993353e02cfa40d83abd923d3c48bb48e193609c0a9bd4de5c8fd97059abf
GET /ajax/libs/jquery/1.8.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33285
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 19 Oct 2022 10:25:28 GMT
Expires: Thu, 19 Oct 2023 10:25:28 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 362686
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
quangngaisale.blogspot.com/
200 OK 30 kB URL HTTP/1.1 quangngaisale.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (403)
Hash 8a2d0d1faae348547aa206a5f40ac51f
710027836e0d593e8e0b8382827960a280ac2241
c5a33e24b0696b7f5d2d75cf68a8115f12f25c6e2a859896282c887048f5c67e
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: quangngaisale.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sun, 23 Oct 2022 15:10:13 GMT
Date: Sun, 23 Oct 2022 15:10:13 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 13 Dec 2021 03:34:51 GMT
ETag: W/"2de27d8bb8af0e4c6adc06adf33377ec21c22db33a7d7e8a36548e99de6c03cd"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 30044
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f78426bc7003a86ec3ccac8190e07351
8b5eccaae7d22628d62bce21e546907779cba46d
85b3800511304b07be29ceaa578211ee5643115ad4a9e8c7fddea1a515980901
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ea20460028066b7fba2f10b51d883192
a73b8263a4477aceeda349c7beff7050de9df38b
f933a7ff2c6ec9189ba29fdf09da9125ac59d9c03b4a14e14e9f1b5fa5322b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
200 OK 33 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 18351732b1849ba758e98884e186b3c8
d735af8661eda41ff4ffbf76e6a284a0e2deb81c
bfac625d304d52e04f2caeb19266354749929c888ca09d3d1e3edcbb8770d0f0
GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33333
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 16 Oct 2022 23:26:32 GMT
expires: Mon, 16 Oct 2023 23:26:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 575022
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
quangngaisale.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 quangngaisale.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: quangngaisale.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sun, 23 Oct 2022 15:10:14 GMT
Expires: Sun, 30 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 23 Oct 2022 13:50:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Sun, 23 Oct 2022 15:10:14 GMT
expires: Sun, 23 Oct 2022 15:10:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7e98899798af4e9103fdb6681d935cfe
1f234cfdf95577f07e584f7765f225a85771801b
f446d60e3ed08cc87b29bcad0522f8812ad3c2cd7615063c4c0c9d6aeb554545
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 202c448a129630b18423f5811fdcf7b2
435022e5d4a6dcb9fbead7f0af130a11c914f440
5ec8e27bc8c852aa9b870b34a868d1179cbc05bfa1d9d4c2d95aa4c64a538ab3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 202c448a129630b18423f5811fdcf7b2
435022e5d4a6dcb9fbead7f0af130a11c914f440
5ec8e27bc8c852aa9b870b34a868d1179cbc05bfa1d9d4c2d95aa4c64a538ab3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogthietke.googlecode.com/files/pagenavi.min.js
404 Not Found 1.6 kB URL HTTP/1.1 blogthietke.googlecode.com/files/pagenavi.min.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 7e947f9b74282077a3bcf8c24160d59b
ebbb5a9be7ab1bc30e307577a9b6a0c2eb9f414d
9a4464ff401f7c1a80111f2ef9fb7132aed5a6d1aebb69b3146cf27d4823279a
GET /files/pagenavi.min.js HTTP/1.1
Host: blogthietke.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1582
Date: Sun, 23 Oct 2022 15:10:14 GMT
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 06:44:47 GMT
expires: Sat, 21 Oct 2023 06:44:47 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 21 Oct 2022 00:50:45 GMT
content-type: text/css
age: 203127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s7.addthis.com/js/300/addthis_widget.js
308 Permanent Redirect 171 B URL HTTP/1.1 s7.addthis.com/js/300/addthis_widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3c417e9efbcaeb3bf7e7df75cf3b22fd
00465aec6b8ec302eae8abb99678fc5c09c3f343
21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 308 Permanent Redirect
Server: nginx/1.15.8
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/300/addthis_widget.js
Date: Sun, 23 Oct 2022 15:10:14 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com
tintuctv.googlecode.com/svn/trunk/ddlevelsmenu.js
404 Not Found 1.6 kB URL HTTP/2 tintuctv.googlecode.com/svn/trunk/ddlevelsmenu.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 1e602550328e6debb0555024b4d9faba
97788a21f8ab2a785a12c8c6a1c65d011ca770cc
0999e4aafe81b474745fef7d93b9aa983d9157739cdf73e988117d9d8fd2c356
GET /svn/trunk/ddlevelsmenu.js HTTP/1.1
Host: tintuctv.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1586
date: Sun, 23 Oct 2022 15:10:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f92e194fd751a123c6d75cb30628e6e
1be6c632f4402240b95dd820cc96987f9b1a95a3
c26dd5239250b99337d76273e0d350ac70767dc1131384187c320720366483f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/1583485740-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1583485740-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 51e9765a21d04965e256c5c0391baa23
64a603f8621455aca30ce9ffbcf57ec255a1c606
d3ffeaf05e015d956c69cc71a2f40f0a2336989bf0f09df1fef010cfa75b64bd
GET /static/v1/widgets/1583485740-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56805
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 20:28:34 GMT
expires: Sat, 21 Oct 2023 20:28:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 19 Oct 2022 18:58:05 GMT
content-type: text/javascript
age: 153700
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ea20460028066b7fba2f10b51d883192
a73b8263a4477aceeda349c7beff7050de9df38b
f933a7ff2c6ec9189ba29fdf09da9125ac59d9c03b4a14e14e9f1b5fa5322b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tintuctv.googlecode.com/svn/trunk/featuredpost.min.js
404 Not Found 1.6 kB URL HTTP/2 tintuctv.googlecode.com/svn/trunk/featuredpost.min.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash adb4c4138ea292e14390b782f0939d3f
2fe0413bac2090bf4a9067fb248c67f23686c9e4
a68aadafb2482ba4c6048eb038bdcdfcbabf842f1c1733fd13e359bad4cd9652
GET /svn/trunk/featuredpost.min.js HTTP/1.1
Host: tintuctv.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1590
date: Sun, 23 Oct 2022 15:10:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116360 bytes)
Hash b87cd33d44e99d7bb4fa59f97915a154
429b6461bab5189d6987d39713c3405223c461b8
9ad12a8b1ed82ccdfc74eebce578bd8f146b04ba08476f8a9a237e346f1772b2
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://quangngaisale.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116360
date: Sun, 23 Oct 2022 15:10:14 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dbe328751574db3465bc8c4f745a487
661ca1463bea33b14bec8f6669dacb2f1ffb78c1
95b3e76c084b00b1d5ca6e02551a48d645b0eae239313b46cfb3468d62b08193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PaKW+tTGb+9loO4EKuedew==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hq2E3UoofiyhA4bMjrIrVJrm3yY=
icons.iconarchive.com/icons/designbolts/vector-christmas/128/Christmas-Star-icon.png
200 OK 7.4 kB URL HTTP/1.1 icons.iconarchive.com/icons/designbolts/vector-christmas/128/Christmas-Star-icon.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 71374b0e2ca2d4e03120786c1c5dc17c
73db31069bfca5b35912b63df5bcec14f3195c86
f08966d8ecc9cf61cebab49e03686bc1b8b356d8e3ca488575f4c994913cbb7e
GET /icons/designbolts/vector-christmas/128/Christmas-Star-icon.png HTTP/1.1
Host: icons.iconarchive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 23 Oct 2022 15:10:14 GMT
Content-Type: image/png
Content-Length: 7412
Connection: keep-alive
Last-Modified: Wed, 08 Jul 2020 23:31:30 GMT
ETag: "5f065752-1cf4"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3364
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DU1dIzvkgbbKmrkI26I8BQq6tEGagtkOUAdDCGc8ON%2FkvhcExyVibY%2B8fbpyrn%2FfpU16Vd2iuC1p6YmNY%2BLT0Yw8GyuhIka4cX9nJN0dnb%2BmK55gspxvqUvUxEzr6I7MrmSm2RjhuSU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75eb65fb3ad3bc91-LHR
alt-svc: h2=":443"; ma=60
tintuctv.googlecode.com/svn/trunk/featuredpost.min.js
404 Not Found 1.6 kB URL HTTP/2 tintuctv.googlecode.com/svn/trunk/featuredpost.min.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash adb4c4138ea292e14390b782f0939d3f
2fe0413bac2090bf4a9067fb248c67f23686c9e4
a68aadafb2482ba4c6048eb038bdcdfcbabf842f1c1733fd13e359bad4cd9652
GET /svn/trunk/featuredpost.min.js HTTP/1.1
Host: tintuctv.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1590
date: Sun, 23 Oct 2022 15:10:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-OKlDEjd3DyQ/UMnHyxn_apI/AAAAAAAAJaY/DbBPG79a-xU/s1600/messanger.png
200 OK 4.0 kB URL HTTP/1.1 3.bp.blogspot.com/-OKlDEjd3DyQ/UMnHyxn_apI/AAAAAAAAJaY/DbBPG79a-xU/s1600/messanger.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 86ea0b693219abcab4b63eaa1295816f
6ef9e2d91ddbba21e9f96e16926f3d6a93434300
74156fc503351344db434256b694698f70002e90751a46bd23ca6a05e3ef8916
GET /-OKlDEjd3DyQ/UMnHyxn_apI/AAAAAAAAJaY/DbBPG79a-xU/s1600/messanger.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="messanger.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4001
X-XSS-Protection: 0
Date: Sun, 23 Oct 2022 15:10:14 GMT
Expires: Sat, 22 Oct 2022 19:55:57 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v25a6"
Content-Type: image/png
Age: 0
cdn4.iconfinder.com/data/icons/colorful/128/red-29.png
301 Moved Permanently 0 B URL HTTP/1.1 cdn4.iconfinder.com/data/icons/colorful/128/red-29.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /data/icons/colorful/128/red-29.png HTTP/1.1
Host: cdn4.iconfinder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Sun, 23 Oct 2022 15:10:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 23 Oct 2022 16:10:14 GMT
Location: https://cdn4.iconfinder.com/data/icons/colorful/128/red-29.png
Server-Timing: cf-q-config;dur=7.9999990703072e-06
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 75eb65fb6bcffac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn3.iconfinder.com/data/icons/ballcons/png/classic.png
301 Moved Permanently 0 B URL HTTP/1.1 cdn3.iconfinder.com/data/icons/ballcons/png/classic.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /data/icons/ballcons/png/classic.png HTTP/1.1
Host: cdn3.iconfinder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Sun, 23 Oct 2022 15:10:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 23 Oct 2022 16:10:14 GMT
Location: https://cdn3.iconfinder.com/data/icons/ballcons/png/classic.png
Server-Timing: cf-q-config;dur=6.0000020312145e-06
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 75eb65fb8e7f0afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
tintuctv.googlecode.com/svn/trunk/ddlevelsmenu.js
404 Not Found 1.6 kB URL HTTP/2 tintuctv.googlecode.com/svn/trunk/ddlevelsmenu.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 1e602550328e6debb0555024b4d9faba
97788a21f8ab2a785a12c8c6a1c65d011ca770cc
0999e4aafe81b474745fef7d93b9aa983d9157739cdf73e988117d9d8fd2c356
GET /svn/trunk/ddlevelsmenu.js HTTP/1.1
Host: tintuctv.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1586
date: Sun, 23 Oct 2022 15:10:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-1e7sOUI4miE/UMnHdKMffTI/AAAAAAAAJaQ/y3xR-9BNINI/s1600/home.png
200 OK 2.8 kB URL HTTP/1.1 1.bp.blogspot.com/-1e7sOUI4miE/UMnHdKMffTI/AAAAAAAAJaQ/y3xR-9BNINI/s1600/home.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 54ba64ea8b63bd39ccbbc08997848214
02c3467a3ce189698fa82a850889479e1d63c425
e2163d331894d1e4e88104091af09f66003264008f58893b7099bf2261ac177c
GET /-1e7sOUI4miE/UMnHdKMffTI/AAAAAAAAJaQ/y3xR-9BNINI/s1600/home.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="home.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2844
X-XSS-Protection: 0
Date: Sun, 23 Oct 2022 15:10:14 GMT
Expires: Mon, 24 Oct 2022 10:35:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v25a4"
Content-Type: image/png
Age: 0
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1FT5ELLuQAArJbZ4baPmf426DYP1u7CS20mzDZdW-Qc-pKxqsU8ZEXrtJ2ayZ0Xlej8yt9ip0flHazdYyz0gUJAHw029Niej-NHU9F8iCQ6rQXzooK=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1FT5ELLuQAArJbZ4baPmf426DYP1u7CS20mzDZdW-Qc-pKxqsU8ZEXrtJ2ayZ0Xlej8yt9ip0flHazdYyz0gUJAHw029Niej-NHU9F8iCQ6rQXzooK=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 7aecd8f7c058a1fbfa8158769916bbaa
bc76ead819bcad10a050f6bad5f0fa1b6464ec15
24a88660f0e7851b32a3baf468977cb636d24bf7158ac0a407ddf6ac09c6b140
GET /blogger_img_proxy/ANbyha1FT5ELLuQAArJbZ4baPmf426DYP1u7CS20mzDZdW-Qc-pKxqsU8ZEXrtJ2ayZ0Xlej8yt9ip0flHazdYyz0gUJAHw029Niej-NHU9F8iCQ6rQXzooK=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 23 Oct 2022 15:10:14 GMT
server: fife
content-length: 1717
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-ZRzxUrgZj_A/UbbH3l_q8YI/AAAAAAAAASY/xQ86CNTIv2s/w72-h72-p-k-no-nu/xem-phim--7vS311301598334_sek.jpg
404 Not Found 1.7 kB URL HTTP/1.1 2.bp.blogspot.com/-ZRzxUrgZj_A/UbbH3l_q8YI/AAAAAAAAASY/xQ86CNTIv2s/w72-h72-p-k-no-nu/xem-phim--7vS311301598334_sek.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-ZRzxUrgZj_A/UbbH3l_q8YI/AAAAAAAAASY/xQ86CNTIv2s/w72-h72-p-k-no-nu/xem-phim--7vS311301598334_sek.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
2.bp.blogspot.com/-ZWVVyA8EU8k/Ubq5YPyChvI/AAAAAAAAAcE/YZAquUPfd6Y/s72-c/1346745751-chongvaosin-tam-eva.jpg
404 Not Found 1.7 kB URL HTTP/1.1 2.bp.blogspot.com/-ZWVVyA8EU8k/Ubq5YPyChvI/AAAAAAAAAcE/YZAquUPfd6Y/s72-c/1346745751-chongvaosin-tam-eva.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-ZWVVyA8EU8k/Ubq5YPyChvI/AAAAAAAAAcE/YZAquUPfd6Y/s72-c/1346745751-chongvaosin-tam-eva.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
lh6.googleusercontent.com/-_4kZHLjqO6A/ULGjxN4gGLI/AAAAAAAAKCs/BzXRCu1enaE/s369/bg-body.gif
200 OK 280 B URL HTTP/2 lh6.googleusercontent.com/-_4kZHLjqO6A/ULGjxN4gGLI/AAAAAAAAKCs/BzXRCu1enaE/s369/bg-body.gif
IP
File type GIF image data, version 89a, 2 x 369\012- data
Hash f1758281e44b3ab9721259a0ae85032e
55009e993ae26e162cc53c69835393f64def2fae
49853b79d41da4aecaf0a10534d5ae5263f8ddec2779114ceab522a80c0bea37
GET /-_4kZHLjqO6A/ULGjxN4gGLI/AAAAAAAAKCs/BzXRCu1enaE/s369/bg-body.gif HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bg-body.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 280
x-xss-protection: 0
date: Sun, 23 Oct 2022 15:10:14 GMT
expires: Mon, 24 Oct 2022 10:35:35 GMT
cache-control: public, max-age=86400, no-transform
etag: "v29a5"
content-type: image/gif
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-gTsR90HWeFI/Ubq43Ok9RNI/AAAAAAAAAb8/R-hEEF71_2M/s72-c/daigiasoctrang4-5615a.jpg
404 Not Found 1.7 kB URL HTTP/1.1 2.bp.blogspot.com/-gTsR90HWeFI/Ubq43Ok9RNI/AAAAAAAAAb8/R-hEEF71_2M/s72-c/daigiasoctrang4-5615a.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-gTsR90HWeFI/Ubq43Ok9RNI/AAAAAAAAAb8/R-hEEF71_2M/s72-c/daigiasoctrang4-5615a.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 47 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Server: cafe
Content-Length: 47
X-XSS-Protection: 0
Date: Sun, 23 Oct 2022 05:30:47 GMT
Expires: Sun, 06 Nov 2022 05:30:47 GMT
Cache-Control: public, max-age=1209600
Age: 34767
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
3.bp.blogspot.com/-l09t9FKGCpo/UbVr8LlMtBI/AAAAAAAAAN8/QZM-3lzvsTs/w72-h72-p-k-no-nu/tama1jpg1331169806.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-l09t9FKGCpo/UbVr8LlMtBI/AAAAAAAAAN8/QZM-3lzvsTs/w72-h72-p-k-no-nu/tama1jpg1331169806.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-l09t9FKGCpo/UbVr8LlMtBI/AAAAAAAAAN8/QZM-3lzvsTs/w72-h72-p-k-no-nu/tama1jpg1331169806.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
1.bp.blogspot.com/-qFPzfaP6wNk/UMnJJPIXmjI/AAAAAAAAJbI/gSDHtW5y8Xw/s1600/youtbe.png
200 OK 2.9 kB URL HTTP/1.1 1.bp.blogspot.com/-qFPzfaP6wNk/UMnJJPIXmjI/AAAAAAAAJbI/gSDHtW5y8Xw/s1600/youtbe.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 2afcd59a35f3ed08f612abfec569c49c
8554193aadb7e6de600f5f175fcb0780b7c66337
501b6a2692cba08f80769712a362e9ad018b644a727b4dd112b5e48441ea51d5
GET /-qFPzfaP6wNk/UMnJJPIXmjI/AAAAAAAAJbI/gSDHtW5y8Xw/s1600/youtbe.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="youtbe.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2911
X-XSS-Protection: 0
Date: Sun, 23 Oct 2022 15:10:14 GMT
Expires: Mon, 24 Oct 2022 10:35:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v25b2"
Content-Type: image/png
Age: 0
3.bp.blogspot.com/-9XAOEV3G4rE/Ubq2m8vvARI/AAAAAAAAAbc/lmDAapnIKwA/s72-c/cu_dan1.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-9XAOEV3G4rE/Ubq2m8vvARI/AAAAAAAAAbc/lmDAapnIKwA/s72-c/cu_dan1.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-9XAOEV3G4rE/Ubq2m8vvARI/AAAAAAAAAbc/lmDAapnIKwA/s72-c/cu_dan1.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
blogthietke.googlecode.com/files/pagenavi.min.js
404 Not Found 1.6 kB URL HTTP/1.1 blogthietke.googlecode.com/files/pagenavi.min.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 7e947f9b74282077a3bcf8c24160d59b
ebbb5a9be7ab1bc30e307577a9b6a0c2eb9f414d
9a4464ff401f7c1a80111f2ef9fb7132aed5a6d1aebb69b3146cf27d4823279a
GET /files/pagenavi.min.js HTTP/1.1
Host: blogthietke.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1582
Date: Sun, 23 Oct 2022 15:10:14 GMT
lh5.googleusercontent.com/-86PFRyHe9As/T40ykYuiLZI/AAAAAAAAJKA/Yj8luErnfqI/s16/comment_alt1_stroke_16x12.png
200 OK 435 B URL HTTP/2 lh5.googleusercontent.com/-86PFRyHe9As/T40ykYuiLZI/AAAAAAAAJKA/Yj8luErnfqI/s16/comment_alt1_stroke_16x12.png
IP
File type PNG image data, 16 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash f15576fc7d9859c1a4621686f63bf1e0
ff4d0caab3faaf69b7eea01b7962f98aabf3d904
81b47523b1a28b5465446fa9df07983760d691dc1316f6cc563b8947f8975aca
GET /-86PFRyHe9As/T40ykYuiLZI/AAAAAAAAJKA/Yj8luErnfqI/s16/comment_alt1_stroke_16x12.png HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="comment_alt1_stroke_16x12.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 435
x-xss-protection: 0
date: Sun, 23 Oct 2022 13:04:56 GMT
expires: Sun, 23 Oct 2022 21:06:57 GMT
cache-control: public, max-age=86400, no-transform
age: 7518
etag: "v24a0"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-Eykx0WAEb5s/T40ykWBI9ZI/AAAAAAAAJJ8/RCI6gP0CLLE/s16/clock_16x16.png
200 OK 484 B URL HTTP/2 lh3.googleusercontent.com/-Eykx0WAEb5s/T40ykWBI9ZI/AAAAAAAAJJ8/RCI6gP0CLLE/s16/clock_16x16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 4265ce81bb57f77225284ce17bf06679
69fddea51a24756ef54bf67ea429f45b6af9bf45
b0d574f4a52df3ac4c7dad2d709fd6b38b40ea97b23865275a3b67f695993834
GET /-Eykx0WAEb5s/T40ykWBI9ZI/AAAAAAAAJJ8/RCI6gP0CLLE/s16/clock_16x16.png HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="clock_16x16.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 484
x-xss-protection: 0
date: Sun, 23 Oct 2022 15:10:14 GMT
expires: Mon, 24 Oct 2022 10:38:39 GMT
cache-control: public, max-age=86400, no-transform
etag: "v249f"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-Xla9rTS02Fk/T40ylpqblSI/AAAAAAAAJKQ/lrZW0zK6P_Q/s16/user_12x16.png
200 OK 361 B URL HTTP/2 lh3.googleusercontent.com/-Xla9rTS02Fk/T40ylpqblSI/AAAAAAAAJKQ/lrZW0zK6P_Q/s16/user_12x16.png
IP
File type PNG image data, 12 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 909be43790be624f9c01358c47f98392
1a21b239bdf14fff52015a3fe872780a63b494de
898b5ba4f54b1d0fffb92f1da25a07eb3dc05f22db79eadaecd64fded8c2320d
GET /-Xla9rTS02Fk/T40ylpqblSI/AAAAAAAAJKQ/lrZW0zK6P_Q/s16/user_12x16.png HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="user_12x16.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 361
x-xss-protection: 0
date: Sun, 23 Oct 2022 15:10:14 GMT
expires: Mon, 24 Oct 2022 10:38:39 GMT
cache-control: public, max-age=86400, no-transform
etag: "v24a4"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-TuiJy6qhQOg/UMnJam4XwjI/AAAAAAAAJbY/tyLP82SmbV4/s1600/photo.png
200 OK 2.8 kB URL HTTP/1.1 4.bp.blogspot.com/-TuiJy6qhQOg/UMnJam4XwjI/AAAAAAAAJbY/tyLP82SmbV4/s1600/photo.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash b2f82f552ff2253ec14ab729750c8af1
6bb71a9817818d5107b1df4edd79fb6b96334e75
a6036fa5b0365185e605123ba5c0e038a73310a7c74cbb87c1b68973cb7b8cdd
GET /-TuiJy6qhQOg/UMnJam4XwjI/AAAAAAAAJbY/tyLP82SmbV4/s1600/photo.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="photo.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2823
X-XSS-Protection: 0
Date: Sun, 23 Oct 2022 15:10:14 GMT
Expires: Mon, 24 Oct 2022 10:35:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v25b6"
Content-Type: image/png
Age: 0
www.blogger.com/dyn-css/authorization.css?targetBlogID=3715979499786893690&zx=39254745-3eca-4737-85c4-bfbfb3bd0316
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3715979499786893690&zx=39254745-3eca-4737-85c4-bfbfb3bd0316
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3715979499786893690&zx=39254745-3eca-4737-85c4-bfbfb3bd0316 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 23 Oct 2022 15:10:14 GMT
last-modified: Sun, 23 Oct 2022 15:10:14 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/w72-h72-p-k-no-nu/3-1370839383621.jpg
404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/w72-h72-p-k-no-nu/3-1370839383621.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/w72-h72-p-k-no-nu/3-1370839383621.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
1.bp.blogspot.com/-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/s72-c/3-1370839383621.jpg
404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/s72-c/3-1370839383621.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/s72-c/3-1370839383621.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
icons.iconarchive.com/icons/3xhumed/mega-games-pack-40/128/Need-for-Speed-World-Online-10-icon.png
200 OK 30 kB URL HTTP/1.1 icons.iconarchive.com/icons/3xhumed/mega-games-pack-40/128/Need-for-Speed-World-Online-10-icon.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 7af9ee63aeb01f47d15a6f4dbc4ca95a
5a1133b557b9520db7b715d79553bf672372b9c6
6fdeae20396200736085854ecb46586a9bfba46d896b0a8d70aa80bb4800cf01
GET /icons/3xhumed/mega-games-pack-40/128/Need-for-Speed-World-Online-10-icon.png HTTP/1.1
Host: icons.iconarchive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 23 Oct 2022 15:10:14 GMT
Content-Type: image/png
Content-Length: 30473
Connection: keep-alive
Last-Modified: Wed, 08 Jul 2020 23:19:59 GMT
ETag: "5f06549f-7709"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VgiuPeVU7SNs9Oe4S2iRMg4796I8WjGmcmYaPgCPOsbomHzvfX83dRpgwux5PO7CCHEsx9VPiBd6NfYkpdfBSdlB3HZEWoCt%2BZ16bh%2Fc9uduMhJx9YM5KLR1AtbHztnevoP8mQgaUfk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75eb65fb2dcb76cb-LHR
alt-svc: h2=":443"; ma=60
icons.iconarchive.com/icons/aha-soft/dating/128/sex-icon.png
200 OK 9.6 kB URL HTTP/1.1 icons.iconarchive.com/icons/aha-soft/dating/128/sex-icon.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 871a0f91fa43100fb8d34152cccbb6db
25310ebbe5e4fef11fd148c77a8f3bb34dde6611
c88e18a9d87f0334ac31a592ee733d31da12262a727846c4818932e1d28b2aea
GET /icons/aha-soft/dating/128/sex-icon.png HTTP/1.1
Host: icons.iconarchive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 23 Oct 2022 15:10:14 GMT
Content-Type: image/png
Content-Length: 9585
Connection: keep-alive
Last-Modified: Wed, 08 Jul 2020 23:20:36 GMT
ETag: "5f0654c4-2571"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p3x9F1yTGKl0wRz47O4KZUArQPVhgBtEEYVqEmPCjRiUB%2BFalSoa8cULNUvGAfKnbPdbYaoE2tlvwtPaLS87NIq2%2B6hv8MJVOggJgKUT03rjSKZDRSQBgV4y%2BcvcXErHg%2FJKwR4L7QQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75eb65fb2851dceb-LHR
alt-svc: h2=":443"; ma=60
icons.iconarchive.com/icons/iconleak/or/128/auction-hammer-icon.png
200 OK 15 kB URL HTTP/1.1 icons.iconarchive.com/icons/iconleak/or/128/auction-hammer-icon.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 4548a1dcd0161959fa78d3cf29a0a157
5e4107eaef9f5c4305c8f2df5108b408217892fe
fd4423093b92711e8b365fb452129ded24e66b2ad581a552db3d622e23cb7ff0
GET /icons/iconleak/or/128/auction-hammer-icon.png HTTP/1.1
Host: icons.iconarchive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 23 Oct 2022 15:10:14 GMT
Content-Type: image/png
Content-Length: 14954
Connection: keep-alive
Last-Modified: Wed, 08 Jul 2020 23:44:37 GMT
ETag: "5f065a65-3a6a"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GBIIokxiS0c9ULgFzdaTySSeF2rRxChFINRyuC0%2B8NPGevtntoHRKe3%2FQWeDmZqI8CU%2BumHr%2FvkcsAMrVgAglacnu6rP0LgUEP%2Bp%2F5AAfAynpsj%2Bd%2BB0MT8tXcCen0BBU%2BsYFGRh29U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75eb65fb392e7695-LHR
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7e98899798af4e9103fdb6681d935cfe
1f234cfdf95577f07e584f7765f225a85771801b
f446d60e3ed08cc87b29bcad0522f8812ad3c2cd7615063c4c0c9d6aeb554545
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-RCyCQ41S8L8/Ubq3mIMFdmI/AAAAAAAAAbs/1ESCVSdFOwc/s72-c/28106943thumb.jpg
404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-RCyCQ41S8L8/Ubq3mIMFdmI/AAAAAAAAAbs/1ESCVSdFOwc/s72-c/28106943thumb.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-RCyCQ41S8L8/Ubq3mIMFdmI/AAAAAAAAAbs/1ESCVSdFOwc/s72-c/28106943thumb.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 202c448a129630b18423f5811fdcf7b2
435022e5d4a6dcb9fbead7f0af130a11c914f440
5ec8e27bc8c852aa9b870b34a868d1179cbc05bfa1d9d4c2d95aa4c64a538ab3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0dTvqZphcV7RpohIFGt5qHQFh0KJgfc6B_umTS6AiKP2UEJIBSZdjvAzpggrKuWSWnAca_XSj7ZaVvWzbzrsJLT7lfzZB6yH6Q5XXBU2paky3VpUNo=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0dTvqZphcV7RpohIFGt5qHQFh0KJgfc6B_umTS6AiKP2UEJIBSZdjvAzpggrKuWSWnAca_XSj7ZaVvWzbzrsJLT7lfzZB6yH6Q5XXBU2paky3VpUNo=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash d417ceb3dda2cc51bed39ad7b909f480
8829519e4ffabb63367018c6951737bf11a1b55f
ce03ea38d0b57ecc45a7fc6244c2cd69b57935bf543f7830649362f344c9fec5
GET /blogger_img_proxy/ANbyha0dTvqZphcV7RpohIFGt5qHQFh0KJgfc6B_umTS6AiKP2UEJIBSZdjvAzpggrKuWSWnAca_XSj7ZaVvWzbzrsJLT7lfzZB6yH6Q5XXBU2paky3VpUNo=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 23 Oct 2022 15:10:14 GMT
server: fife
content-length: 1717
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-O9cRw2BE9OU/UbiLiEgCOeI/AAAAAAAAAZI/r6H7CVs-yKQ/w72-h72-p-k-no-nu/cindy15.jpg
404 Not Found 1.7 kB URL HTTP/1.1 4.bp.blogspot.com/-O9cRw2BE9OU/UbiLiEgCOeI/AAAAAAAAAZI/r6H7CVs-yKQ/w72-h72-p-k-no-nu/cindy15.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-O9cRw2BE9OU/UbiLiEgCOeI/AAAAAAAAAZI/r6H7CVs-yKQ/w72-h72-p-k-no-nu/cindy15.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
1.bp.blogspot.com/-vhgk6dPsIjo/UbiOa3vHkJI/AAAAAAAAAZo/TvgVi671pB0/w72-h72-p-k-no-nu/images931577_trinh2.jpg
404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-vhgk6dPsIjo/UbiOa3vHkJI/AAAAAAAAAZo/TvgVi671pB0/w72-h72-p-k-no-nu/images931577_trinh2.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-vhgk6dPsIjo/UbiOa3vHkJI/AAAAAAAAAZo/TvgVi671pB0/w72-h72-p-k-no-nu/images931577_trinh2.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 993e6b67f7e89386d80e40fa0386e50e
bf118a9dc8e22854e44592d8ea413d0fc9c626db
12c7bce65e26b3d341c016ecf92a9f6f8802bb07ee0d3c0b02861683fce9fc47
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12C7BCE65E26B3D341C016ECF92A9F6F8802BB07EE0D3C0B02861683FCE9FC47"
Last-Modified: Sat, 22 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12803
Expires: Sun, 23 Oct 2022 18:43:37 GMT
Date: Sun, 23 Oct 2022 15:10:14 GMT
Connection: keep-alive
4.bp.blogspot.com/-tk6VzPASOOk/Ubq6IIGhvbI/AAAAAAAAAcQ/6D9HNKSYKXA/s72-c/1357370353vohaitameva2jpg1357434513.jpg
404 Not Found 1.7 kB URL HTTP/1.1 4.bp.blogspot.com/-tk6VzPASOOk/Ubq6IIGhvbI/AAAAAAAAAcQ/6D9HNKSYKXA/s72-c/1357370353vohaitameva2jpg1357434513.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-tk6VzPASOOk/Ubq6IIGhvbI/AAAAAAAAAcQ/6D9HNKSYKXA/s72-c/1357370353vohaitameva2jpg1357434513.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 993e6b67f7e89386d80e40fa0386e50e
bf118a9dc8e22854e44592d8ea413d0fc9c626db
12c7bce65e26b3d341c016ecf92a9f6f8802bb07ee0d3c0b02861683fce9fc47
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12C7BCE65E26B3D341C016ECF92A9F6F8802BB07EE0D3C0B02861683FCE9FC47"
Last-Modified: Sat, 22 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12803
Expires: Sun, 23 Oct 2022 18:43:37 GMT
Date: Sun, 23 Oct 2022 15:10:14 GMT
Connection: keep-alive
4.bp.blogspot.com/-9RjRPkbZoS4/Ubq7KZTpztI/AAAAAAAAAcg/Py9brs2Iqfw/s72-c/thu_choi_nha_go_tien_ty_o_hai_phong__tin_tuc_viet__1.jpg
404 Not Found 1.7 kB URL HTTP/1.1 4.bp.blogspot.com/-9RjRPkbZoS4/Ubq7KZTpztI/AAAAAAAAAcg/Py9brs2Iqfw/s72-c/thu_choi_nha_go_tien_ty_o_hai_phong__tin_tuc_viet__1.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-9RjRPkbZoS4/Ubq7KZTpztI/AAAAAAAAAcg/Py9brs2Iqfw/s72-c/thu_choi_nha_go_tien_ty_o_hai_phong__tin_tuc_viet__1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
cdn3.iconfinder.com/data/icons/ballcons/png/classic.png
200 OK 11 kB URL HTTP/2 cdn3.iconfinder.com/data/icons/ballcons/png/classic.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 41e229a7442e8a8f0abc1f6187296829
f310b7c52adff0907c48dbba75e33f8006988214
4e7874badac0437136d8e407861f53cca4a848229bd1209063179a9885700a38
GET /data/icons/ballcons/png/classic.png HTTP/1.1
Host: cdn3.iconfinder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://quangngaisale.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:14 GMT
content-type: image/webp
content-length: 11440
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=21671
content-disposition: inline; filename="classic.webp"
expires: Mon, 23 Oct 2023 15:10:14 GMT
vary: Accept
via: 1.1 vegur
x-request-id: 34f69187-7706-412d-87ec-fdc393e53fcd
last-modified: Mon, 10 Oct 2022 16:11:11 GMT
cf-cache-status: HIT
age: 16479
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75eb65fd1e2eb503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f92e194fd751a123c6d75cb30628e6e
1be6c632f4402240b95dd820cc96987f9b1a95a3
c26dd5239250b99337d76273e0d350ac70767dc1131384187c320720366483f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f92e194fd751a123c6d75cb30628e6e
1be6c632f4402240b95dd820cc96987f9b1a95a3
c26dd5239250b99337d76273e0d350ac70767dc1131384187c320720366483f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
icons.iconarchive.com/icons/iloveicons.ru/browser-girl/128/browser-girl-safari-icon.png
200 OK 21 kB URL HTTP/1.1 icons.iconarchive.com/icons/iloveicons.ru/browser-girl/128/browser-girl-safari-icon.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e42c38635da188280ec4e9c23a0417c
76050b01ceb1eb32414832277a7832500bb61532
ec64c26910128ed778ae2fdc09aefda69182b38dc87b45a6c8c17fcf5d23b4e6
GET /icons/iloveicons.ru/browser-girl/128/browser-girl-safari-icon.png HTTP/1.1
Host: icons.iconarchive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 23 Oct 2022 15:10:14 GMT
Content-Type: image/png
Content-Length: 21201
Connection: keep-alive
Last-Modified: Wed, 08 Jul 2020 23:48:25 GMT
ETag: "5f065b49-52d1"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ccl0XuPHu2gySpHC520tUwgqsihZ0kYWdoXha917yw5JMSRI3EmUqgloKC%2FLXHh%2Bb58rw46Ecnb8o%2Bj3PJdwR%2BtIqOKdnPUeMu3UFj8QvMwCfu%2B7k2Wi0OjetgTzPtZWMOigUtnwf4o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75eb65fb4a247726-LHR
alt-svc: h2=":443"; ma=60
1.bp.blogspot.com/-Ue80mWvrDzA/Ubc9ASDNPMI/AAAAAAAAAUk/Fta4LTXCF8w/w72-h72-p-k-no-nu/72bf34ce91-13-ngoc-trinh-giaoduc.net.vn-13.jpeg
404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-Ue80mWvrDzA/Ubc9ASDNPMI/AAAAAAAAAUk/Fta4LTXCF8w/w72-h72-p-k-no-nu/72bf34ce91-13-ngoc-trinh-giaoduc.net.vn-13.jpeg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-Ue80mWvrDzA/Ubc9ASDNPMI/AAAAAAAAAUk/Fta4LTXCF8w/w72-h72-p-k-no-nu/72bf34ce91-13-ngoc-trinh-giaoduc.net.vn-13.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 993e6b67f7e89386d80e40fa0386e50e
bf118a9dc8e22854e44592d8ea413d0fc9c626db
12c7bce65e26b3d341c016ecf92a9f6f8802bb07ee0d3c0b02861683fce9fc47
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12C7BCE65E26B3D341C016ECF92A9F6F8802BB07EE0D3C0B02861683FCE9FC47"
Last-Modified: Sat, 22 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12803
Expires: Sun, 23 Oct 2022 18:43:37 GMT
Date: Sun, 23 Oct 2022 15:10:14 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f92e194fd751a123c6d75cb30628e6e
1be6c632f4402240b95dd820cc96987f9b1a95a3
c26dd5239250b99337d76273e0d350ac70767dc1131384187c320720366483f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 314 B IP
Hash b9203f1e01a446a78daf34c0f42ab443
cfe8b2b8caed49de2ec901c75d8af35f4816488b
5b746a02fa07e0e42c28cb81fe0b7c9a8c2b7eeb796c95a05616fded2bba20c3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5775
Cache-Control: max-age=99171
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Etag: "6354232a-13a"
Expires: Mon, 24 Oct 2022 18:43:05 GMT
Last-Modified: Sat, 22 Oct 2022 17:06:50 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 314
1.bp.blogspot.com/-6ajPP7YPsf4/Ubc-YPokE2I/AAAAAAAAAU0/lZ0O57l66Ok/w72-h72-p-k-no-nu/hot-girl-mai-tho-nga-ngon-khoe-nguc-khung.jpg
404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-6ajPP7YPsf4/Ubc-YPokE2I/AAAAAAAAAU0/lZ0O57l66Ok/w72-h72-p-k-no-nu/hot-girl-mai-tho-nga-ngon-khoe-nguc-khung.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-6ajPP7YPsf4/Ubc-YPokE2I/AAAAAAAAAU0/lZ0O57l66Ok/w72-h72-p-k-no-nu/hot-girl-mai-tho-nga-ngon-khoe-nguc-khung.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
www.xtendadvert.com/preshow.php?z=16&pl=4303&rl=30&code=1666537830892
302 Found 0 B URL HTTP/1.1 www.xtendadvert.com/preshow.php?z=16&pl=4303&rl=30&code=1666537830892
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /preshow.php?z=16&pl=4303&rl=30&code=1666537830892 HTTP/1.1
Host: www.xtendadvert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 302 Found
content-length: 0
date: Sun, 23 Oct 2022 15:10:14 GMT
location: https://www.hugedomains.com/domain_profile.cfm?d=xtendadvert.com
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2RXc3d_qar1daaeYcCr66zrnfs4iOG7NhKfxdh5PB6lGrV5AzeZOA7Jv9wt2e_CB4xqBaYhy3MwOotob3PWtrVjy8xYhHZUVk0MdhpECQqYY1DqP3XqGOfz4yX=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2RXc3d_qar1daaeYcCr66zrnfs4iOG7NhKfxdh5PB6lGrV5AzeZOA7Jv9wt2e_CB4xqBaYhy3MwOotob3PWtrVjy8xYhHZUVk0MdhpECQqYY1DqP3XqGOfz4yX=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 789c1d33c91bb23fa011d87ea1d58640
0b819cc9d36dd89e1fd8c326314f191e200fe505
58a72907b400ec3a962a630c36599a4eebcb6d4ba92dc6f078b2a66ce739250b
GET /blogger_img_proxy/ANbyha2RXc3d_qar1daaeYcCr66zrnfs4iOG7NhKfxdh5PB6lGrV5AzeZOA7Jv9wt2e_CB4xqBaYhy3MwOotob3PWtrVjy8xYhHZUVk0MdhpECQqYY1DqP3XqGOfz4yX=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 23 Oct 2022 15:10:14 GMT
server: fife
content-length: 1725
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 3883ca1d219020e612dd2b658c1877ca
9c2952658d8adbaaa490c9e28b3421361abbd39e
2f4ec770f619cb0b2f9e71cb59bc1f5d39c8218cb5aa2e1e3ddb82e350751cd9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4335
Cache-Control: max-age=150647
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:14 GMT
Etag: "6354f1de-117"
Expires: Tue, 25 Oct 2022 09:01:01 GMT
Last-Modified: Sun, 23 Oct 2022 07:48:46 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
www.blogger.com/navbar.g?targetBlogID=3715979499786893690&blogName=QuangNgaiSale&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://quangngaisale.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://quangngaisale.blogspot.com/&vt=5331013737902609591&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
200 OK 2.6 kB URL HTTP/2 www.blogger.com/navbar.g?targetBlogID=3715979499786893690&blogName=QuangNgaiSale&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://quangngaisale.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://quangngaisale.blogspot.com/&vt=5331013737902609591&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3204)
Hash 42325db88cbaae55470d7b56f8847a58
6d37dbaddca3974e98597b74a01de7bc82acf082
53622757a26aa84e52f58839c7f7d8ad92b0b37cce186e65fd016c5ba980eae3
GET /navbar.g?targetBlogID=3715979499786893690&blogName=QuangNgaiSale&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://quangngaisale.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://quangngaisale.blogspot.com/&vt=5331013737902609591&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 23 Oct 2022 15:10:14 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2598
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash ad989f1caf2f7b9a5b17b800bf97c0cd
45413ae8154042954eee18d5ec6c9a30457c1ae2
7684954b0289f7e1d3a4400c4cd57d81cd0c5b0179698ddd5c26e30d317269d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4526
Cache-Control: max-age=130666
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "6354a313-13a"
Expires: Tue, 25 Oct 2022 03:28:01 GMT
Last-Modified: Sun, 23 Oct 2022 02:12:35 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash ad989f1caf2f7b9a5b17b800bf97c0cd
45413ae8154042954eee18d5ec6c9a30457c1ae2
7684954b0289f7e1d3a4400c4cd57d81cd0c5b0179698ddd5c26e30d317269d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4526
Cache-Control: max-age=130666
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "6354a313-13a"
Expires: Tue, 25 Oct 2022 03:28:01 GMT
Last-Modified: Sun, 23 Oct 2022 02:12:35 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 314
bidder.criteo.com/cdb?ptv=131&profileId=184&cb=98690646080
200 OK 161 B URL HTTP/2 bidder.criteo.com/cdb?ptv=131&profileId=184&cb=98690646080
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 59d41938a656f97d7f05611ab4a9a48b
f10201c6263f31576092e6c5ab87aa54dc04471a
875e7733178570af28e6303bef5b505dd1cdd53b640211431a637d205d62288a
POST /cdb?ptv=131&profileId=184&cb=98690646080 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 528
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: http://quangngaisale.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 161
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
www.xtendadvert.com/preshow.php?z=15&pl=4304&ads=5&code=1666537831489
302 Found 0 B URL HTTP/1.1 www.xtendadvert.com/preshow.php?z=15&pl=4304&ads=5&code=1666537831489
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /preshow.php?z=15&pl=4304&ads=5&code=1666537831489 HTTP/1.1
Host: www.xtendadvert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 302 Found
content-length: 0
date: Sun, 23 Oct 2022 15:10:15 GMT
location: https://www.hugedomains.com/domain_profile.cfm?d=xtendadvert.com
goo.gl/6xmUk
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /6xmUk HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Location: https://goo.gl/6xmUk
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
goo.gl/oT0kF
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /oT0kF HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Location: https://goo.gl/oT0kF
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
goo.gl/oyiFK
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /oyiFK HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Location: https://goo.gl/oyiFK
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
goo.gl/ncoLY
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ncoLY HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Location: https://goo.gl/ncoLY
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 924935dfe678e1cafb56906ef15defec
063dc4e38a869415d29ff059c0e173966c0c96dd
12045f462e3aa1fa3d2c97f1c3c67951dedc6410db5ce75c1907de5beff81bf4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 924935dfe678e1cafb56906ef15defec
063dc4e38a869415d29ff059c0e173966c0c96dd
12045f462e3aa1fa3d2c97f1c3c67951dedc6410db5ce75c1907de5beff81bf4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 924935dfe678e1cafb56906ef15defec
063dc4e38a869415d29ff059c0e173966c0c96dd
12045f462e3aa1fa3d2c97f1c3c67951dedc6410db5ce75c1907de5beff81bf4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 924935dfe678e1cafb56906ef15defec
063dc4e38a869415d29ff059c0e173966c0c96dd
12045f462e3aa1fa3d2c97f1c3c67951dedc6410db5ce75c1907de5beff81bf4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17085
Expires: Sun, 23 Oct 2022 19:55:00 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17085
Expires: Sun, 23 Oct 2022 19:55:00 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17085
Expires: Sun, 23 Oct 2022 19:55:00 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0856e94c-65e7-489a-95b5-cc37407bf90f.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0856e94c-65e7-489a-95b5-cc37407bf90f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 208445a6f07a7259b8a420c062a81998
50d9f1642c3c47504fb2d4086a40ae8fb9479b50
607a81c5d0210faaa103d09fba1e0b9dde333c5142969272b0b5351a779acfa4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0856e94c-65e7-489a-95b5-cc37407bf90f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12031
x-amzn-requestid: 38ca5b87-35e4-46d5-aa1a-15433660ab86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aZGifEXzIAMFdHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63538476-6c2e5d980616d50c0ef8698a;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 05:49:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DpE5uiagdaNLvVqbkou7bVNaLYPZ9vhYawucSE36lWIp65bga3gN2w==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 08:04:17 GMT
age: 25558
etag: "50d9f1642c3c47504fb2d4086a40ae8fb9479b50"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf1513b5-a33f-4b0d-b92b-c82ad8141527.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf1513b5-a33f-4b0d-b92b-c82ad8141527.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5cf985ceb648df52d3cf5eb47c7705bc
8b0c5f567e25d9bf54263bb3c60b12db225feb81
9c8551a2d891562e12b9a30966dbd9221a041669db0cbb4395d6fa56791ef0dc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf1513b5-a33f-4b0d-b92b-c82ad8141527.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8631
x-amzn-requestid: 536a4908-2fd7-4544-9159-ec2acc55a2bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: abRJZH2zoAMFYvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6354623b-4d76adc023701d0228f951d1;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 21:35:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AvTOiWu0BF1Bxb5m_FlJhMqpgoNbJjUfTnZhZePfjqRCL5XVJEglpg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:43:36 GMT
age: 62799
etag: "8b0c5f567e25d9bf54263bb3c60b12db225feb81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa75f7b18-e0d1-4cfe-b763-83c991def199.webp
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa75f7b18-e0d1-4cfe-b763-83c991def199.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bed49abb7a64c9f0717ac283b30bff8b
0f9e4ab8e7ceff21752ea83a243431fc4c78a4e3
ddb5ed6e7b818593ac9819be0a8d376e26ef3b45b417f00ce1d7dbee47465bec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa75f7b18-e0d1-4cfe-b763-83c991def199.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4746
x-amzn-requestid: fa85cf46-7cea-439e-92d5-db3875ff4479
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aIQpNFk5IAMF16Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634cc7d4-245cdd691d0c415d508421ce;Sampled=0
x-amzn-remapped-date: Mon, 17 Oct 2022 03:11:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _-h7oz6Zv1P40jltqN71dpyrUJG_HzVJS8gKby0vgdkaNJ4ljXUwCg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 15:25:14 GMT
age: 85501
etag: "0f9e4ab8e7ceff21752ea83a243431fc4c78a4e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F412682e9-14c9-40e4-bfec-f73f656f5e10.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F412682e9-14c9-40e4-bfec-f73f656f5e10.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 37143b9d51a289f11607b6b0f9ba534a
4b5e283e4397985f837ab28d94c167ddfdb26c7c
d664702a83cac4eaee1710fd03ca41e35d62ae699224490367e605b529e45566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F412682e9-14c9-40e4-bfec-f73f656f5e10.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5348
x-amzn-requestid: d44ded7c-15b6-4c30-a810-4af1edbb9bc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aPYYZEnboAMFcMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634fa102-6bdd3c1a2fa437b106f8ea79;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 07:02:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dx2yJ8T_lM1OMR3h0DUtiV359392U2UyReU6hi4tOxxbvFR0iZ_kAg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 22:01:40 GMT
age: 61715
etag: "4b5e283e4397985f837ab28d94c167ddfdb26c7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c95e4a-b411-4326-8723-bceab59b6d74.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c95e4a-b411-4326-8723-bceab59b6d74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7fa30ef7eff515cfddf2f3b7ee67eb85
b488761c8ce781a44dcaf2e515ef548480dcd1bc
47c0e8ea9ef52c5d45dca54eb251d89983fba9937b7cf7872b065de04786f6ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c95e4a-b411-4326-8723-bceab59b6d74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8109
x-amzn-requestid: 39c9edcc-ea64-443e-82b3-230e41edbcb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aFhHBG_HoAMF7Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634baef9-7d6e66cd2012a3e8607f0d28;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 07:12:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -mkpkDB8pmoOQhWZI82RUYjaqQmzCGXNyN5sr1TYXb2kTX16pMGJ_A==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 22:26:56 GMT
age: 60199
etag: "b488761c8ce781a44dcaf2e515ef548480dcd1bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd337e0f9-4135-4fa1-9843-c609356020a9.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd337e0f9-4135-4fa1-9843-c609356020a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bcadefe69587d4ab5bf5ff9e71eb5cab
066fb94a6ae38e57d67001cc319eea17f837d511
45b175a2cecee90b2d0efc16c4139686ffcf34bfac9084fe9e5e1c926dc1330c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd337e0f9-4135-4fa1-9843-c609356020a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10036
x-amzn-requestid: b1f0e0b9-6fc6-4b7c-a9b0-55845cdfd2d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: abR9aEvjIAMF22Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63546388-72742b3a1279d76e2e842930;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 21:41:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e-Q7z6QYQB1CGZ57JUJIf6l7Ofu9nGkF-ONfTrXJb6MMegchNYMqWQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:50:36 GMT
etag: "066fb94a6ae38e57d67001cc319eea17f837d511"
content-type: image/jpeg
age: 62379
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?ptv=131&profileId=184&cb=79500716305
200 OK 162 B URL HTTP/2 bidder.criteo.com/cdb?ptv=131&profileId=184&cb=79500716305
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f71701841b6f9fde7e0dde8cd6375670
af6fdcdd03140fe1c9b09e44349ba7125e32b10a
c7c92a1ba25c50d35ad58156573843dc121077ce15119fd95b060adf62b93e70
POST /cdb?ptv=131&profileId=184&cb=79500716305 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 528
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: http://quangngaisale.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 162
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?ptv=131&profileId=184&cb=76384433764
200 OK 161 B URL HTTP/2 bidder.criteo.com/cdb?ptv=131&profileId=184&cb=76384433764
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 59c93d3fd416a1e546847e1213ec5f39
a0c33c1945c9eb7b617ce17ed6fcef88914fe200
0515dd672ca4a46dc69028e5e2c28c3b43312b151f078727dbd8dc99abde499d
POST /cdb?ptv=131&profileId=184&cb=76384433764 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 528
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: http://quangngaisale.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 161
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?ptv=131&profileId=184&cb=30600993818
200 OK 161 B URL HTTP/2 bidder.criteo.com/cdb?ptv=131&profileId=184&cb=30600993818
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ffab0cb5382e04cd3f0ed25cfa0767e3
098dd1706443f883b6d387755a92b90db9bfaa8a
525fc9bd3e99cea7dde075f65c361671c0d152584e1bb91361886150fed05c2e
POST /cdb?ptv=131&profileId=184&cb=30600993818 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 528
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: http://quangngaisale.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 161
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Sun, 23 Oct 2022 15:10:15 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
static.criteo.net/images/pixel.gif?ch=1
200 OK 43 B URL HTTP/2 static.criteo.net/images/pixel.gif?ch=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /images/pixel.gif?ch=1 HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 09 Dec 2008 16:52:36 GMT
etag: "493ea254-2b"
expires: Wed, 18 Oct 2023 15:10:15 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
goo.gl/6xmUk
403 Forbidden 2.5 kB IP
Hash e0ee3ba9e2c730d6f42d4e1cef9e8e7f
1f8d8ae20e8be7e6b4d8936e48154609a6ab3fcc
da652446665af75950ac2b7a1817c0c3081ab1f274e3f0622b6409ea885510db
GET /6xmUk HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://quangngaisale.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 23 Oct 2022 15:10:15 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000
content-security-policy: script-src 'nonce-Ov5PdbnALPBM_TPy9_I8Kg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-ZWVVyA8EU8k/Ubq5YPyChvI/AAAAAAAAAcE/YZAquUPfd6Y/s500-c/1346745751-chongvaosin-tam-eva.jpg
404 Not Found 1.0 kB URL HTTP/1.1 2.bp.blogspot.com/-ZWVVyA8EU8k/Ubq5YPyChvI/AAAAAAAAAcE/YZAquUPfd6Y/s500-c/1346745751-chongvaosin-tam-eva.jpg
IP
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash dd7c24891c913317b31930c44ecceab4
10320ac30abfad7337ec616b3b75349f686e71a2
9fe90c15edf7bc2832d4296fff513df1a8f4b04a5c1423e8b48cad1bdc9c6e4b
GET /-ZWVVyA8EU8k/Ubq5YPyChvI/AAAAAAAAAcE/YZAquUPfd6Y/s500-c/1346745751-chongvaosin-tam-eva.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:15 GMT
Server: fife
Content-Length: 1000
X-XSS-Protection: 0
2.bp.blogspot.com/-gTsR90HWeFI/Ubq43Ok9RNI/AAAAAAAAAb8/R-hEEF71_2M/s500-c/daigiasoctrang4-5615a.jpg
404 Not Found 1.0 kB URL HTTP/1.1 2.bp.blogspot.com/-gTsR90HWeFI/Ubq43Ok9RNI/AAAAAAAAAb8/R-hEEF71_2M/s500-c/daigiasoctrang4-5615a.jpg
IP
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash dd7c24891c913317b31930c44ecceab4
10320ac30abfad7337ec616b3b75349f686e71a2
9fe90c15edf7bc2832d4296fff513df1a8f4b04a5c1423e8b48cad1bdc9c6e4b
GET /-gTsR90HWeFI/Ubq43Ok9RNI/AAAAAAAAAb8/R-hEEF71_2M/s500-c/daigiasoctrang4-5615a.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:15 GMT
Server: fife
Content-Length: 1000
X-XSS-Protection: 0
4.bp.blogspot.com/-tk6VzPASOOk/Ubq6IIGhvbI/AAAAAAAAAcQ/6D9HNKSYKXA/s500-c/1357370353vohaitameva2jpg1357434513.jpg
404 Not Found 1.0 kB URL HTTP/1.1 4.bp.blogspot.com/-tk6VzPASOOk/Ubq6IIGhvbI/AAAAAAAAAcQ/6D9HNKSYKXA/s500-c/1357370353vohaitameva2jpg1357434513.jpg
IP
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash dd7c24891c913317b31930c44ecceab4
10320ac30abfad7337ec616b3b75349f686e71a2
9fe90c15edf7bc2832d4296fff513df1a8f4b04a5c1423e8b48cad1bdc9c6e4b
GET /-tk6VzPASOOk/Ubq6IIGhvbI/AAAAAAAAAcQ/6D9HNKSYKXA/s500-c/1357370353vohaitameva2jpg1357434513.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:15 GMT
Server: fife
Content-Length: 1000
X-XSS-Protection: 0
1.bp.blogspot.com/-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/s500-c/3-1370839383621.jpg
404 Not Found 1.0 kB URL HTTP/1.1 1.bp.blogspot.com/-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/s500-c/3-1370839383621.jpg
IP
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash dd7c24891c913317b31930c44ecceab4
10320ac30abfad7337ec616b3b75349f686e71a2
9fe90c15edf7bc2832d4296fff513df1a8f4b04a5c1423e8b48cad1bdc9c6e4b
GET /-_6rKn3yv_PQ/Ubq4PQESJnI/AAAAAAAAAb0/vqKtlpKdZPo/s500-c/3-1370839383621.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:15 GMT
Server: fife
Content-Length: 1000
X-XSS-Protection: 0
3.bp.blogspot.com/-9XAOEV3G4rE/Ubq2m8vvARI/AAAAAAAAAbc/lmDAapnIKwA/s500-c/cu_dan1.jpg
404 Not Found 1.0 kB URL HTTP/1.1 3.bp.blogspot.com/-9XAOEV3G4rE/Ubq2m8vvARI/AAAAAAAAAbc/lmDAapnIKwA/s500-c/cu_dan1.jpg
IP
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash dd7c24891c913317b31930c44ecceab4
10320ac30abfad7337ec616b3b75349f686e71a2
9fe90c15edf7bc2832d4296fff513df1a8f4b04a5c1423e8b48cad1bdc9c6e4b
GET /-9XAOEV3G4rE/Ubq2m8vvARI/AAAAAAAAAbc/lmDAapnIKwA/s500-c/cu_dan1.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:15 GMT
Server: fife
Content-Length: 1000
X-XSS-Protection: 0
1.bp.blogspot.com/-RCyCQ41S8L8/Ubq3mIMFdmI/AAAAAAAAAbs/1ESCVSdFOwc/s500-c/28106943thumb.jpg
404 Not Found 1.0 kB URL HTTP/1.1 1.bp.blogspot.com/-RCyCQ41S8L8/Ubq3mIMFdmI/AAAAAAAAAbs/1ESCVSdFOwc/s500-c/28106943thumb.jpg
IP
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash dd7c24891c913317b31930c44ecceab4
10320ac30abfad7337ec616b3b75349f686e71a2
9fe90c15edf7bc2832d4296fff513df1a8f4b04a5c1423e8b48cad1bdc9c6e4b
GET /-RCyCQ41S8L8/Ubq3mIMFdmI/AAAAAAAAAbs/1ESCVSdFOwc/s500-c/28106943thumb.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:15 GMT
Server: fife
Content-Length: 1000
X-XSS-Protection: 0
4.bp.blogspot.com/-9RjRPkbZoS4/Ubq7KZTpztI/AAAAAAAAAcg/Py9brs2Iqfw/s500-c/thu_choi_nha_go_tien_ty_o_hai_phong__tin_tuc_viet__1.jpg
404 Not Found 1.0 kB URL HTTP/1.1 4.bp.blogspot.com/-9RjRPkbZoS4/Ubq7KZTpztI/AAAAAAAAAcg/Py9brs2Iqfw/s500-c/thu_choi_nha_go_tien_ty_o_hai_phong__tin_tuc_viet__1.jpg
IP
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash dd7c24891c913317b31930c44ecceab4
10320ac30abfad7337ec616b3b75349f686e71a2
9fe90c15edf7bc2832d4296fff513df1a8f4b04a5c1423e8b48cad1bdc9c6e4b
GET /-9RjRPkbZoS4/Ubq7KZTpztI/AAAAAAAAAcg/Py9brs2Iqfw/s500-c/thu_choi_nha_go_tien_ty_o_hai_phong__tin_tuc_viet__1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 15:10:15 GMT
Server: fife
Content-Length: 1000
X-XSS-Protection: 0
goo.gl/oT0kF
403 Forbidden 852 B IP
Hash 32dc4cac2c4c05c54109a7995d8c0357
bcc0eb1c2b2fbba4f09ef56b1bad684dcc14f953
81cdaefed80f5d2ef3d66af5979db7fe3baa4fa4f7ccec40b9ac9293da25e131
GET /oT0kF HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://quangngaisale.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 23 Oct 2022 15:10:15 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000
content-security-policy: script-src 'nonce-dzvj5750RmC6a25dXSJgpA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none; report-to="DurableDeepLinkUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"DurableDeepLinkUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/DurableDeepLinkUi/external"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 293aef73ed556f6b68b055473832cae2
946a41f06a31e4ca37f81d900616be13ef43a749
1d788765b519775588fc59b82a19b3d1d689f9a8a21b7551573d4f7d31108bd9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 780
Cache-Control: max-age=130169
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "6354afc4-138"
Expires: Tue, 25 Oct 2022 03:19:44 GMT
Last-Modified: Sun, 23 Oct 2022 03:06:44 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 312
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:14 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=mt9ACV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czklMkJveGpkNm5JUnJxV3YlMkZLTyUyQjVCTjJCNWNSaFJTRWVFT3dOJTJCZ21lT0ExVA; expires=Fri, 17 Nov 2023 15:10:15 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 267081
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash c13213af96fc5bafa37593a161bd96d4
2a292020f5a4fcd04444d1ce6a1b393bafff82c9
d5cb2d8846a89b70e0d87a7eb516efdcd739ea12b243b0bca12acf4eeb7cd2a2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2824
Cache-Control: max-age=153459
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "635502c2-139"
Expires: Tue, 25 Oct 2022 09:47:55 GMT
Last-Modified: Sun, 23 Oct 2022 09:00:50 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 313
goo.gl/oyiFK
403 Forbidden 1.1 kB IP
Hash 327ac9aac915722e5496515227256130
b21e7a4329420fba2c520c4d30f5610c177a30e8
e737b2beb3fd07ebc05cd652781abb46fde50d75eb7a0dcfcf455c0b5a340679
GET /oyiFK HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://quangngaisale.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 23 Oct 2022 15:10:15 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-tF_3dcI5rYnzyaxLhm-cJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.lfstmedia.com/~cdn/JS/02/4.2.1/modules/banner.js
200 OK 3.6 kB URL HTTP/1.1 cdn.lfstmedia.com/~cdn/JS/02/4.2.1/modules/banner.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1921)
Hash 413e602c888e7022f782c4cfcf17f938
f24bc6821082808f003c7ef67090732c78533dd9
8757faaba88478c128d0556ab65d6e32d90ec690e045af401941ca5a449385b4
GET /~cdn/JS/02/4.2.1/modules/banner.js HTTP/1.1
Host: cdn.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Content-Encoding: gzip
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 504
Cache-Control: max-age=600
Content-Type: application/javascript
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: W/"624636ae-209c"
Expires: Sun, 23 Oct 2022 15:20:15 GMT
Last-Modified: Thu, 31 Mar 2022 23:18:06 GMT
Server: ECS (ska/F716)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 3574
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=61925
date: Sun, 23 Oct 2022 15:10:15 GMT
X-Firefox-Spdy: h2
ads.lfstmedia.com/gate/ext_bid/slot72486?adkey=da2&ad_size=728x90&jsonp=LSM_SlotObj_1.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=1&__offsetX=4820&__offsetY=175&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537830819&__pp=1
200 OK 118 B URL HTTP/1.1 ads.lfstmedia.com/gate/ext_bid/slot72486?adkey=da2&ad_size=728x90&jsonp=LSM_SlotObj_1.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=1&__offsetX=4820&__offsetY=175&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537830819&__pp=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash a19cc977e9d69c1775bef1d35a196145
2568ee12d2bba2b0955eecb8b5a746b58017ab8e
f3b6365d860357a53647586a20db51e096554a48a5b71aeb38d8a6491498c53f
GET /gate/ext_bid/slot72486?adkey=da2&ad_size=728x90&jsonp=LSM_SlotObj_1.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=1&__offsetX=4820&__offsetY=175&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537830819&__pp=1 HTTP/1.1
Host: ads.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 23 Oct 2022 15:10:15 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72486&msgCode=1005
200 OK 118 B URL HTTP/1.1 cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72486&msgCode=1005
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash fbc8abca88ca16c0dd05eb667cd23297
f45f1ad05d0cd757080c6acab9939cddb2d43681
6276c077ccaefe8f4f601377bd58e2364d5780041d88811decf49c1abedd83ce
GET /~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72486&msgCode=1005 HTTP/1.1
Host: cdn.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Age: 3558658
Cache-Control: max-age=31536000
Content-Type: text/html
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "5adfcf2e-92+gzip"
Expires: Mon, 23 Oct 2023 15:10:15 GMT
Last-Modified: Wed, 25 Apr 2018 00:43:26 GMT
Server: ECS (ska/F708)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 118
ads.lfstmedia.com/gate/ext_bid/slot72485?adkey=de2&ad_size=300x250&jsonp=LSM_SlotObj_3.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=3&__offsetX=5379&__offsetY=5338&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537831487&__pp=1
200 OK 118 B URL HTTP/1.1 ads.lfstmedia.com/gate/ext_bid/slot72485?adkey=de2&ad_size=300x250&jsonp=LSM_SlotObj_3.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=3&__offsetX=5379&__offsetY=5338&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537831487&__pp=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 56e1319aea05635266d8bd9ed9b3a68b
137c9994d7a7b4f5d4cb9645db239da5bcf5475c
b88907b4769a6e3ff416842321379f62b16d2be077ab874e578ede30e6a144fb
GET /gate/ext_bid/slot72485?adkey=de2&ad_size=300x250&jsonp=LSM_SlotObj_3.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=3&__offsetX=5379&__offsetY=5338&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537831487&__pp=1 HTTP/1.1
Host: ads.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 23 Oct 2022 15:10:15 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ads.lfstmedia.com/gate/ext_bid/slot72546?adkey=fce&ad_size=300x250&jsonp=LSM_SlotObj_4.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=4&__offsetX=5379&__offsetY=11206&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537831785&__pp=1
200 OK 118 B URL HTTP/1.1 ads.lfstmedia.com/gate/ext_bid/slot72546?adkey=fce&ad_size=300x250&jsonp=LSM_SlotObj_4.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=4&__offsetX=5379&__offsetY=11206&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537831785&__pp=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash d2cb9cfc3e53bedbdacfb67bb1a548a8
acf32718428df6c5dfdcff64df42bdb9ba6e242c
7f05dc444f3fde09f83951594da8bbc4db4d60c634d2ae4c2f465db7e82030bc
GET /gate/ext_bid/slot72546?adkey=fce&ad_size=300x250&jsonp=LSM_SlotObj_4.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=4&__offsetX=5379&__offsetY=11206&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537831785&__pp=1 HTTP/1.1
Host: ads.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 23 Oct 2022 15:10:15 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 372
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 23 Oct 2022 15:10:15 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: http://quangngaisale.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ads.lfstmedia.com/gate/ext_bid/slot72548?adkey=a62&ad_size=728x90&jsonp=LSM_SlotObj_2.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=2&__offsetX=1152&__offsetY=9343&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537830891&__pp=1
200 OK 118 B URL HTTP/1.1 ads.lfstmedia.com/gate/ext_bid/slot72548?adkey=a62&ad_size=728x90&jsonp=LSM_SlotObj_2.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=2&__offsetX=1152&__offsetY=9343&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537830891&__pp=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0b144b9a56c2041a856fb84af99940fd
7ba5134a439166f55d8388b15dc865875abd761f
c4bf1461d5d1850b6d9d3085b93c763dbb3e3103feff38c126f7f3871a434c69
GET /gate/ext_bid/slot72548?adkey=a62&ad_size=728x90&jsonp=LSM_SlotObj_2.onLoad&__location=http%3A%2F%2Fquangngaisale.blogspot.com%2F&__referrer=&__screen=1280x1024&__flash=0.0.0&__position=2&__offsetX=1152&__offsetY=9343&__visibility=1&__wn=0&__sf=0&__fif=0&__if=0&__modules=banner&__bgver=4.2.1&__stamp=1666537830891&__pp=1 HTTP/1.1
Host: ads.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 23 Oct 2022 15:10:15 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 05c88ffbfe3fc2e8935e301949c55d0a
0613a47b3b862af79e7ca9031f2b294d83f69593
7d3ae2c9c29095cbb6f08395b7cbaebc3dd4297dba8428fc37ec1170fd6c2b68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4665
Cache-Control: max-age=136585
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "6354b9a7-1d7"
Expires: Tue, 25 Oct 2022 05:06:39 GMT
Last-Modified: Sun, 23 Oct 2022 03:48:55 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 05c88ffbfe3fc2e8935e301949c55d0a
0613a47b3b862af79e7ca9031f2b294d83f69593
7d3ae2c9c29095cbb6f08395b7cbaebc3dd4297dba8428fc37ec1170fd6c2b68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5872
Cache-Control: max-age=137792
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "6354b9a7-1d7"
Expires: Tue, 25 Oct 2022 05:26:47 GMT
Last-Modified: Sun, 23 Oct 2022 03:48:55 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 05c88ffbfe3fc2e8935e301949c55d0a
0613a47b3b862af79e7ca9031f2b294d83f69593
7d3ae2c9c29095cbb6f08395b7cbaebc3dd4297dba8428fc37ec1170fd6c2b68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4665
Cache-Control: max-age=136585
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "6354b9a7-1d7"
Expires: Tue, 25 Oct 2022 05:06:39 GMT
Last-Modified: Sun, 23 Oct 2022 03:48:55 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 05c88ffbfe3fc2e8935e301949c55d0a
0613a47b3b862af79e7ca9031f2b294d83f69593
7d3ae2c9c29095cbb6f08395b7cbaebc3dd4297dba8428fc37ec1170fd6c2b68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5872
Cache-Control: max-age=137792
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "6354b9a7-1d7"
Expires: Tue, 25 Oct 2022 05:26:47 GMT
Last-Modified: Sun, 23 Oct 2022 03:48:55 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72548&msgCode=1005
200 OK 118 B URL HTTP/1.1 cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72548&msgCode=1005
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash fbc8abca88ca16c0dd05eb667cd23297
f45f1ad05d0cd757080c6acab9939cddb2d43681
6276c077ccaefe8f4f601377bd58e2364d5780041d88811decf49c1abedd83ce
GET /~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72548&msgCode=1005 HTTP/1.1
Host: cdn.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Age: 3558658
Cache-Control: max-age=31536000
Content-Type: text/html
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "5adfcf2e-92+gzip"
Expires: Mon, 23 Oct 2023 15:10:15 GMT
Last-Modified: Wed, 25 Apr 2018 00:43:26 GMT
Server: ECS (ska/F708)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 118
cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72485&msgCode=1005
200 OK 118 B URL HTTP/1.1 cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72485&msgCode=1005
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash fbc8abca88ca16c0dd05eb667cd23297
f45f1ad05d0cd757080c6acab9939cddb2d43681
6276c077ccaefe8f4f601377bd58e2364d5780041d88811decf49c1abedd83ce
GET /~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72485&msgCode=1005 HTTP/1.1
Host: cdn.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Age: 3558658
Cache-Control: max-age=31536000
Content-Type: text/html
Date: Sun, 23 Oct 2022 15:10:15 GMT
Etag: "5adfcf2e-92+gzip"
Expires: Mon, 23 Oct 2023 15:10:15 GMT
Last-Modified: Wed, 25 Apr 2018 00:43:26 GMT
Server: ECS (ska/F708)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 118
c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d341def60044&cmd=bid
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d341def60044&cmd=bid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 29880318b1bed30eb766e110d787d62b
f615ca6d38c5388712d6e0826848152ea1bdade6
6109ab722c8c6faa5b9570955b194e831f9b55256cd5cfbcd4188fa75a422e85
GET /bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d341def60044&cmd=bid HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: http://quangngaisale.blogspot.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d346dbd20046&cmd=bid
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d346dbd20046&cmd=bid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f32db9c799b19ed3568f3189f7ce3682
99da447d0d615981f430e47882f7b0f76db8d757
e8070ee016aa16a752b56889ec45a85e2641e0e45e175bc71a3f775f5985dcd3
GET /bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d346dbd20046&cmd=bid HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: http://quangngaisale.blogspot.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d341def60044&cmd=bid
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d341def60044&cmd=bid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cbf7da8a26db32e8c762546942d11ed6
8864bce308b85a8a18ba5ab2cc7147f9e4843f34
20df7d9ecd6a5de59a7e25a393d7cf0a688a093cc7535fdcf55c76ecf0acf4f4
GET /bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d341def60044&cmd=bid HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: http://quangngaisale.blogspot.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d346dbd20046&cmd=bid
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d346dbd20046&cmd=bid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9a8730816657d6aed69185be9c9f3142
d99e7f3e673e3bbf93629dddcb084ecd8d214a32
8f37eba9819fe323096e4dbf09c0c0be6f9993446d884776c6aaaaf94dcc67ef
GET /bidRequest?dcn=8a96912a017676d23203d34088160040&pos=8a96912a017676d23203d346dbd20046&cmd=bid HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: http://quangngaisale.blogspot.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=635559674ca1c77d&bkl=0&bl=5&pdt=1160&sid=635559674ca1c77d&pub=ra-50bf825e7229eea5&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=quangngaisale.blogspot.com&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=1&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=tintuc%2Ctin%20tuc%2Ctin%20tuc%20trong%20ngay%2Ctin%20tuc%20online%2Ctin%20the%20thao%2Ctin%20the%20gioi%2Ctin%20viet%20nam%2Ctin%20tuc%20vietnam%2Cvietnamnet%2C24h%2Cvietnamnet%2Cdantri%2Cthanhnien%2Cthanh%20nien%2Ctuoitre%2Ctuoi%20tre%2Ctien%20phong%2CQuangNgaiSale&colc=1666537831886&jsl=1&uvs=63555967c21b983b000&skipb=1&callback=addthis.cbs.jsonp__300250440353390
200 OK 87 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=635559674ca1c77d&bkl=0&bl=5&pdt=1160&sid=635559674ca1c77d&pub=ra-50bf825e7229eea5&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=quangngaisale.blogspot.com&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=1&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=tintuc%2Ctin%20tuc%2Ctin%20tuc%20trong%20ngay%2Ctin%20tuc%20online%2Ctin%20the%20thao%2Ctin%20the%20gioi%2Ctin%20viet%20nam%2Ctin%20tuc%20vietnam%2Cvietnamnet%2C24h%2Cvietnamnet%2Cdantri%2Cthanhnien%2Cthanh%20nien%2Ctuoitre%2Ctuoi%20tre%2Ctien%20phong%2CQuangNgaiSale&colc=1666537831886&jsl=1&uvs=63555967c21b983b000&skipb=1&callback=addthis.cbs.jsonp__300250440353390
IP
File type ASCII text, with no line terminators
Hash 6b724095ce406429e71468611d6ef982
75937ed8cc4a18ab47c0e4eb7d03195c86151c85
c4c0cc6c9761d64e9a5c9de472a8e84fc44c2ba7346e992fc7bc3498047e2e3d
GET /live/red_lojson/300lo.json?si=635559674ca1c77d&bkl=0&bl=5&pdt=1160&sid=635559674ca1c77d&pub=ra-50bf825e7229eea5&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=quangngaisale.blogspot.com&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=1&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=tintuc%2Ctin%20tuc%2Ctin%20tuc%20trong%20ngay%2Ctin%20tuc%20online%2Ctin%20the%20thao%2Ctin%20the%20gioi%2Ctin%20viet%20nam%2Ctin%20tuc%20vietnam%2Cvietnamnet%2C24h%2Cvietnamnet%2Cdantri%2Cthanhnien%2Cthanh%20nien%2Ctuoitre%2Ctuoi%20tre%2Ctien%20phong%2CQuangNgaiSale&colc=1666537831886&jsl=1&uvs=63555967c21b983b000&skipb=1&callback=addthis.cbs.jsonp__300250440353390 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 87
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Sun, 23 Oct 2022 15:10:15 GMT
X-Firefox-Spdy: h2
quangngaisale.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 quangngaisale.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: quangngaisale.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Cookie: __atuvc=1%7C43; __atuvs=63555967c21b983b000
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Sun, 23 Oct 2022 15:10:15 GMT
Date: Sun, 23 Oct 2022 15:10:15 GMT
Cache-Control: private, max-age=86400
Last-Modified: Mon, 13 Dec 2021 03:34:51 GMT
ETag: W/"2de27d8bb8af0e4c6adc06adf33377ec21c22db33a7d7e8a36548e99de6c03cd"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
v1.addthisedge.com/live/boost/ra-50bf825e7229eea5/_ate.track.config_resp
200 OK 154 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-50bf825e7229eea5/_ate.track.config_resp
IP
File type ASCII text, with no line terminators
Hash 1798455c51e19a1de93e52339a502e8d
a0457d200050e575fe5fce342ef18826773a19a2
3f695eaf6f5245ffc8385edd6ed3d174509a3faedc9b9e14e4bffb1f0a881fb0
GET /live/boost/ra-50bf825e7229eea5/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
etag: 659743217
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 154
cache-control: public, max-age=60, s-maxage=86400
date: Sun, 23 Oct 2022 15:10:15 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72546&msgCode=1005
200 OK 118 B URL HTTP/1.1 cdn.lfstmedia.com/~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72546&msgCode=1005
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash fbc8abca88ca16c0dd05eb667cd23297
f45f1ad05d0cd757080c6acab9939cddb2d43681
6276c077ccaefe8f4f601377bd58e2364d5780041d88811decf49c1abedd83ce
GET /~cdn/Ads/ad_shared/static/406.html?requestUri=%2Fgate%2Fext_bid%2Fslot72546&msgCode=1005 HTTP/1.1
Host: cdn.lfstmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Age: 3558659
Cache-Control: max-age=31536000
Content-Type: text/html
Date: Sun, 23 Oct 2022 15:10:16 GMT
Etag: "5adfcf2e-92+gzip"
Expires: Mon, 23 Oct 2023 15:10:16 GMT
Last-Modified: Wed, 25 Apr 2018 00:43:26 GMT
Server: ECS (ska/F708)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 118
dnacdn.net/dna
200 OK 470 B IP
File type JSON data\012- , ASCII text, with very long lines (531), with no line terminators
Hash 981ff3e3a57a9b41ade97a771709a31a
475dbf09af9705d1350dae14e53477aa20eb6c16
324d1f05f2193187840d8ffed743cab1dc3db8c899d1c205661cf85cbe575fa9
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=mt9ACV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czklMkJveGpkNm5JUnJxV3YlMkZLTyUyQjVCTjJCNWNSaFJTRWVFT3dOJTJCZ21lT0ExVA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=Joot1F80M0RITmhlJTJCZkMwOUJGQlhaMUN2czklMkJveGpkNm5JUnJxV3YlMkZLTyUyQjVCTjJUYmElMkJVZzNvTHRJM2dqd1VySEFKUw; expires=Fri, 17 Nov 2023 15:10:16 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 341070
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 338
Origin: http://quangngaisale.blogspot.com
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 23 Oct 2022 15:10:16 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: http://quangngaisale.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 44 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 110c4bb864c33a4a6452c15d1b6d2e76
2153475ec199d993e313d7aec628dba12a59e3f4
23dfd7b07a52e6a8665dc5aeb43791b2d8567e9cd1fb740ffad0ff772d54f29c
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 52579
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 15:10:14 GMT
content-type: text/javascript
last-modified: Sat, 01 Oct 2022 02:55:29 GMT
etag: W/"6337ac21-1e358"
expires: Mon, 24 Oct 2022 15:10:14 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn4.iconfinder.com/data/icons/colorful/128/red-29.png
404 Not Found 0 B URL HTTP/2 cdn4.iconfinder.com/data/icons/colorful/128/red-29.png
IP
GET /data/icons/colorful/128/red-29.png HTTP/1.1
Host: cdn4.iconfinder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://quangngaisale.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 23 Oct 2022 15:10:14 GMT
via: 1.1 vegur
cf-cache-status: HIT
expires: Mon, 23 Oct 2023 15:10:14 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75eb65fd1e31b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=quangngaisale.blogspot.com
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=quangngaisale.blogspot.com
IP
GET /syncframe?origin=publishertag&topUrl=quangngaisale.blogspot.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://quangngaisale.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:14 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=73842b43-5978-41a5-9c8f-6f568025e64e; expires=Fri, 17 Nov 2023 15:10:14 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 270497
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
goo.gl/ncoLY
403 Forbidden 0 B IP
GET /ncoLY HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://quangngaisale.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 23 Oct 2022 15:10:15 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none; report-to="DurableDeepLinkUi"
content-security-policy: script-src 'nonce-aT270NM-gq0NyZG_8K3oJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport
report-to: {"group":"DurableDeepLinkUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/DurableDeepLinkUi/external"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 23 Oct 2022 15:10:15 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 74600
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
142.250.74.161
185.235.84.102
23.36.76.226
78.46.18.209
93.184.220.29
104.21.233.185