Analysis

  • max time kernel
    131s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2025, 04:55 UTC

General

  • Target

    JaffaCakes118_f78e178ac6232c6035fad12062eb1770.html

  • Size

    143KB

  • MD5

    f78e178ac6232c6035fad12062eb1770

  • SHA1

    ca39f3589feedd9ebe01ac5985747a076d9bcd5a

  • SHA256

    bfa36fa0055863b776b254d44ad452810d671fe219e3b04e43f2bc8f32908a04

  • SHA512

    88672bc3385aa9f745a198c69bc2b36792cb8d7c8c3bbfb26f7d95a3a49a1f0fbcaca5fa694723068818fb20634ce55caa3295299a23f4739c4581514bafb39e

  • SSDEEP

    3072:75c2iKxcJy3/hUbBo64uTzaYENYEWYEAqkNJqU5xxortAUHUopiLFuOTjh99ORB+:75c2iKAOeWYENYEWYEkfl543K

Malware Config

Signatures

  • Detected google phishing page
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f78e178ac6232c6035fad12062eb1770.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1920

Network

  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
    Response
    www.blogger.com
    IN CNAME
    blogger.l.google.com
    blogger.l.google.com
    IN A
    142.250.180.9
  • flag-us
    DNS
    sites.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    sites.google.com
    IN A
    Response
    sites.google.com
    IN A
    172.217.169.14
  • flag-us
    DNS
    www.logomaker.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.logomaker.com
    IN A
    Response
    www.logomaker.com
    IN A
    172.67.70.113
    www.logomaker.com
    IN A
    104.26.10.156
    www.logomaker.com
    IN A
    104.26.11.156
  • flag-us
    DNS
    i8.upanh.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    i8.upanh.com
    IN A
    Response
    i8.upanh.com
    IN A
    46.51.221.158
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
    Response
    ajax.googleapis.com
    IN A
    216.58.204.74
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
    Response
    3.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    172.217.16.225
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
    Response
    2.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    172.217.16.225
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
    Response
    apis.google.com
    IN CNAME
    plus.l.google.com
    plus.l.google.com
    IN A
    142.250.178.14
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
    Response
    4.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    172.217.16.225
  • flag-us
    DNS
    js-css-image.googlecode.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    js-css-image.googlecode.com
    IN A
    Response
    js-css-image.googlecode.com
    IN CNAME
    googlecode.l.googleusercontent.com
    googlecode.l.googleusercontent.com
    IN A
    64.233.166.82
  • flag-us
    DNS
    giaoduc.net.vn
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    giaoduc.net.vn
    IN A
    Response
    giaoduc.net.vn
    IN A
    58.187.8.10
    giaoduc.net.vn
    IN A
    123.30.41.185
  • flag-us
    DNS
    dan14vn.googlecode.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    dan14vn.googlecode.com
    IN A
    Response
    dan14vn.googlecode.com
    IN CNAME
    googlecode.l.googleusercontent.com
    googlecode.l.googleusercontent.com
    IN A
    64.233.166.82
  • flag-us
    DNS
    widget.adnet.vn
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widget.adnet.vn
    IN A
    Response
  • flag-us
    DNS
    anhnc.googlecode.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    anhnc.googlecode.com
    IN A
    Response
    anhnc.googlecode.com
    IN CNAME
    googlecode.l.googleusercontent.com
    googlecode.l.googleusercontent.com
    IN A
    64.233.166.82
  • flag-gb
    GET
    http://3.bp.blogspot.com/--oTM4r-XrHU/TtPlqYJYPzI/AAAAAAAABYg/OcAAKQEQAMg/s72-c/Rogueposter2007.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /--oTM4r-XrHU/TtPlqYJYPzI/AAAAAAAABYg/OcAAKQEQAMg/s72-c/Rogueposter2007.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v588"
    Expires: Sun, 12 Jan 2025 04:55:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Rogueposter2007.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Server: fife
    Content-Length: 2100
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://4.bp.blogspot.com/-t74Gq0wNkvM/TvgAPLelkXI/AAAAAAAACZ0/rafdqnGwEyk/s72-c/coduyen.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /-t74Gq0wNkvM/TvgAPLelkXI/AAAAAAAACZ0/rafdqnGwEyk/s72-c/coduyen.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 4.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v1010"
    Expires: Sun, 12 Jan 2025 04:55:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="coduyen.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Server: fife
    Content-Length: 3809
    X-XSS-Protection: 0
  • flag-gb
    GET
    https://apis.google.com/js/plusone.js
    IEXPLORE.EXE
    Remote address:
    142.250.178.14:443
    Request
    GET /js/plusone.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sat, 11 Jan 2025 04:55:51 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "bb74970fe396ae14"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.178.14:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 54256
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Wed, 08 Jan 2025 18:21:47 GMT
    Expires: Thu, 08 Jan 2026 18:21:47 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 15:55:24 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 210845
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_1?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.178.14:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_1?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 14573
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Wed, 08 Jan 2025 18:44:42 GMT
    Expires: Thu, 08 Jan 2026 18:44:42 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 15:55:24 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 209470
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_2?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.178.14:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_2?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 29923
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Wed, 08 Jan 2025 20:46:24 GMT
    Expires: Thu, 08 Jan 2026 20:46:24 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 15:55:24 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 202173
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://apis.google.com/js/rpc:shindig_random.js?onload=init
    IEXPLORE.EXE
    Remote address:
    142.250.178.14:443
    Request
    GET /js/rpc:shindig_random.js?onload=init HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Sat, 11 Jan 2025 04:55:57 GMT
    Expires: Sat, 11 Jan 2025 04:55:57 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "5a11c929aaa9a74e"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.178.14:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 20771
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Wed, 08 Jan 2025 18:18:35 GMT
    Expires: Thu, 08 Jan 2026 18:18:35 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 15:55:24 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 211042
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    http://3.bp.blogspot.com/-g-1w_QEe3kY/TtUVEKtKz4I/AAAAAAAABa8/dpyPKmNP5K0/s72-c/Hugo+3d.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /-g-1w_QEe3kY/TtUVEKtKz4I/AAAAAAAABa8/dpyPKmNP5K0/s72-c/Hugo+3d.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v5af"
    Expires: Sun, 12 Jan 2025 04:55:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Hugo 3d.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Server: fife
    Content-Length: 3882
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://3.bp.blogspot.com/-NCoeUHH77NI/T_17-vYBCuI/AAAAAAAAAVI/w68X40lulXM/s1600/news.gif
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /-NCoeUHH77NI/T_17-vYBCuI/AAAAAAAAAVI/w68X40lulXM/s1600/news.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="news.gif"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 406
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sun, 12 Jan 2025 04:55:51 GMT
    Cache-Control: public, max-age=86400, no-transform
    Age: 1
    ETag: "v23d"
    Content-Type: image/gif
    Vary: Origin
  • flag-gb
    GET
    http://2.bp.blogspot.com/-IG3nrrs95kg/TvAe3mAkZPI/AAAAAAAAAWA/W7dDg69KcJY/s72-c/ln.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /-IG3nrrs95kg/TvAe3mAkZPI/AAAAAAAAAWA/W7dDg69KcJY/s72-c/ln.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Content-Type: image/png
    X-Content-Type-Options: nosniff
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Server: fife
    Content-Length: 1323
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://2.bp.blogspot.com/-k8lNazH9LWc/TsImV8cy0LI/AAAAAAAAA7s/46fE-Hkcdmo/s72-c/cgcd.jpeg
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /-k8lNazH9LWc/TsImV8cy0LI/AAAAAAAAA7s/46fE-Hkcdmo/s72-c/cgcd.jpeg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v3bb"
    Expires: Sun, 12 Jan 2025 04:55:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="cgcd.jpeg"
    X-Content-Type-Options: nosniff
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Server: fife
    Content-Length: 4757
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://4.bp.blogspot.com/--P80DNVZdI4/TuC_7e4tT3I/AAAAAAAAB0I/Vz7QZ8zxb-Y/s72-c/finaldesti.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /--P80DNVZdI4/TuC_7e4tT3I/AAAAAAAAB0I/Vz7QZ8zxb-Y/s72-c/finaldesti.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 4.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v742"
    Expires: Sun, 12 Jan 2025 04:55:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="finaldesti.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Server: fife
    Content-Length: 3946
    X-XSS-Protection: 0
  • flag-gb
    GET
    https://sites.google.com/site/share123vn/jquery.min.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/share123vn/jquery.min.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fjquery.min.js
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sat, 11 Jan 2025 04:55:51 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fjquery.min.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fjquery.min.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js
    Cross-Origin-Resource-Policy: same-site
    Cross-Origin-Opener-Policy: unsafe-none
    Content-Security-Policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'nonce-jF9-LPudGyBssKGlpLxa6Q' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
    IEXPLORE.EXE
    Remote address:
    216.58.204.74:80
    Request
    GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: ajax.googleapis.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
    Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
    Timing-Allow-Origin: *
    Content-Length: 24715
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 04 Jan 2025 17:55:17 GMT
    Expires: Sun, 04 Jan 2026 17:55:17 GMT
    Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
    Age: 558033
    Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
  • flag-us
    GET
    http://www.logomaker.com/logo-images/96cec9c65ddf2aea.gif
    IEXPLORE.EXE
    Remote address:
    172.67.70.113:80
    Request
    GET /logo-images/96cec9c65ddf2aea.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.logomaker.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Content-Length: 0
    Connection: keep-alive
    location: https://www.logomaker.com/logo-images/96cec9c65ddf2aea.gif
    Cache-Control: max-age=31536000
    CF-Cache-Status: EXPIRED
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lnRwjLwdob8JovDFACuhNi54a7zhbiASorXksq0ZubpeaiVn2IdtxlalQDOIIsZyfT2XHHNaZ1cHaG%2BXbRixmOa%2BcZZuSexSbkGZM6vfsBZKQCnckEdTu%2BFJL3I3tjk%2BAwMb"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 9002511d1e454595-LHR
    alt-svc: h3=":443"; ma=86400
    server-timing: cfL4;desc="?proto=TCP&rtt=28759&min_rtt=28759&rtt_var=14379&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=297&delivery_rate=0&cwnd=228&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
  • flag-gb
    GET
    http://3.bp.blogspot.com/-Y5K_r-GurSI/To_7bYhUYoI/AAAAAAAAAfM/MsZIw_hlh0k/s72-c/Heartstrings.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.16.225:80
    Request
    GET /-Y5K_r-GurSI/To_7bYhUYoI/AAAAAAAAAfM/MsZIw_hlh0k/s72-c/Heartstrings.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Content-Type: image/png
    X-Content-Type-Options: nosniff
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Server: fife
    Content-Length: 1323
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://js-css-image.googlecode.com/files/tmlv.js
    IEXPLORE.EXE
    Remote address:
    64.233.166.82:80
    Request
    GET /files/tmlv.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: js-css-image.googlecode.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Content-Type: text/html; charset=UTF-8
    Referrer-Policy: no-referrer
    Content-Length: 1574
    Date: Sat, 11 Jan 2025 04:55:50 GMT
  • flag-gb
    GET
    https://sites.google.com/site/share123vn/news.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/share123vn/news.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fnews.js
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sat, 11 Jan 2025 04:55:51 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fnews.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fnews.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js
    P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
    Cross-Origin-Opener-Policy: unsafe-none
    Cross-Origin-Resource-Policy: same-site
    Content-Security-Policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'nonce-ZAX9ujc4Vc35RYnmb8jm-A' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Set-Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; expires=Sun, 13-Jul-2025 04:55:52 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /static/v1/widgets/1394523530-widget_css_bundle.css HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 6667
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 10 Jan 2025 22:34:44 GMT
    Expires: Sat, 10 Jan 2026 22:34:44 GMT
    Cache-Control: public, max-age=31536000
    Age: 22867
    Last-Modified: Fri, 12 Nov 2021 02:51:58 GMT
    Content-Type: text/css
    Vary: Accept-Encoding
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6542819528888209797&zx=0809aa9c-9fd0-47a8-b960-32e98ed8d47c
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /dyn-css/authorization.css?targetBlogID=6542819528888209797&zx=0809aa9c-9fd0-47a8-b960-32e98ed8d47c HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/css; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Last-Modified: Sat, 11 Jan 2025 04:55:51 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.blogger.com/comment-iframe.g?blogID=6542819528888209797&postID=2206107618372053289&blogspotRpcToken=7568467
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /comment-iframe.g?blogID=6542819528888209797&postID=2206107618372053289&blogspotRpcToken=7568467 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&go=true
    Content-Type: text/html; charset=UTF-8
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Expires: Sat, 11 Jan 2025 04:55:52 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.blogger.com/comment-iframe.g?blogID=6542819528888209797&postID=2206107618372053289&blogspotRpcToken=7568467&bpli=1
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /comment-iframe.g?blogID=6542819528888209797&postID=2206107618372053289&blogspotRpcToken=7568467&bpli=1 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Connection: Keep-Alive
    Host: www.blogger.com
    Response
    HTTP/1.1 301 Moved Permanently
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/html; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Location: /comment/frame/6542819528888209797?po=2206107618372053289
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /comment/frame/6542819528888209797?po=2206107618372053289 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Connection: Keep-Alive
    Host: www.blogger.com
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    x-ua-compatible: IE=edge
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:53 GMT
    P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport
    Content-Security-Policy: script-src 'nonce-KOzPiOD1hdZp5AGUUDyovQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self'
    Cross-Origin-Opener-Policy: same-origin
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Cross-Origin-Resource-Policy: same-site
    reporting-endpoints: default="/_/BloggerCommentUi/web-reports?context=eJzjytHikmII0JBiKL2yk8np1U0mmd5bTI-n3GJ63v6M6RsQS3x9yaQBxE7pM1iDgLj15jnWqUBstPY8qxMQJ_07z1oExIYKl1gdgVi15xKrKRhfZnUB4iKJK6xNQNyfcpVViJvj5uf2PWwCG_pWSCopJeUXxifl5KenpxaVZhanFpWlFsUbGRiZGhgamOsZGsQXGAAApn4_WA"
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Set-Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I; expires=Sun, 13-Jul-2025 04:55:53 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/am=xmCAMw/d=1/excm=_b,_tp,commentformiframeview/ed=1/dg=0/wt=2/ujg=1/rs=AEy-KP0tfnwjP9ERRWrVRAfCVHnKkAuegg/m=_b,_tp
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/am=xmCAMw/d=1/excm=_b,_tp,commentformiframeview/ed=1/dg=0/wt=2/ujg=1/rs=AEy-KP0tfnwjP9ERRWrVRAfCVHnKkAuegg/m=_b,_tp HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
    Report-To: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
    Content-Length: 67356
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 09 Jan 2025 03:00:46 GMT
    Expires: Fri, 09 Jan 2026 03:00:46 GMT
    Cache-Control: public, immutable, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 07:07:14 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 179708
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=_b,_tp/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,ZDZcre,OTA3Ae,ZwDk9d,V3dDOb,mI3LFb,WO9ee,eD1YLc,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,lazG7b,XVMNvd,L1AAkb,KUM7Z,hc6Ubd,lwddkf,gychg,w9hDv,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,A7fCU,mdR7q,wmnU7d,xQtZb,Z5uLle,JNoxi,MI6k7c,kjKdXe,BVgquf,hKSk3e,MdUzUe,zbML3c,zr1jrb,Uas9Hd,pjICDe
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=_b,_tp/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,ZDZcre,OTA3Ae,ZwDk9d,V3dDOb,mI3LFb,WO9ee,eD1YLc,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,lazG7b,XVMNvd,L1AAkb,KUM7Z,hc6Ubd,lwddkf,gychg,w9hDv,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,A7fCU,mdR7q,wmnU7d,xQtZb,Z5uLle,JNoxi,MI6k7c,kjKdXe,BVgquf,hKSk3e,MdUzUe,zbML3c,zr1jrb,Uas9Hd,pjICDe HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
    Report-To: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
    Content-Length: 131210
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 09 Jan 2025 03:00:46 GMT
    Expires: Fri, 09 Jan 2026 03:00:46 GMT
    Cache-Control: public, immutable, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 03:11:42 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 179708
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=VXdfxd,fgib1c,YwHGTd,pxq3x
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=VXdfxd,fgib1c,YwHGTd,pxq3x HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
    Report-To: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
    Content-Length: 154
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 10 Jan 2025 12:45:15 GMT
    Expires: Sat, 10 Jan 2026 12:45:15 GMT
    Cache-Control: public, immutable, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 03:11:42 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 58239
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,WO9ee,WhJNk,Wt6vjf,XVMNvd,YwHGTd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=p3hmRc,LvGhrf,RqjULd
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,WO9ee,WhJNk,Wt6vjf,XVMNvd,YwHGTd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=p3hmRc,LvGhrf,RqjULd HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
    Report-To: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
    Content-Length: 7375
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 09 Jan 2025 03:15:11 GMT
    Expires: Fri, 09 Jan 2026 03:15:11 GMT
    Cache-Control: public, immutable, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 03:11:42 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 178843
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,LvGhrf,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,WO9ee,WhJNk,Wt6vjf,XVMNvd,YwHGTd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,p3hmRc,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=P6sQOc
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,LvGhrf,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,WO9ee,WhJNk,Wt6vjf,XVMNvd,YwHGTd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,p3hmRc,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=P6sQOc HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I; OTZ=7904456_56_56__56_
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
    Report-To: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
    Content-Length: 712
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 09 Jan 2025 03:15:11 GMT
    Expires: Fri, 09 Jan 2026 03:15:11 GMT
    Cache-Control: public, immutable, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 03:11:42 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 178843
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://sites.google.com/site/share123vn/hover_textcolor.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/share123vn/hover_textcolor.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fhover_textcolor.js
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sat, 11 Jan 2025 04:55:51 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fhover_textcolor.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fhover_textcolor.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js
    Content-Security-Policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'nonce-OKle2gBACLNScTiGEtZICA' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
    Cross-Origin-Resource-Policy: same-site
    Cross-Origin-Opener-Policy: unsafe-none
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/static/v1/jsbin/186635561-comment_from_post_iframe.js
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /static/v1/jsbin/186635561-comment_from_post_iframe.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 6505
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 10 Jan 2025 22:38:06 GMT
    Expires: Sat, 10 Jan 2026 22:38:06 GMT
    Cache-Control: public, max-age=31536000
    Age: 22665
    Last-Modified: Tue, 12 Oct 2021 02:50:22 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/static/v1/widgets/1527282520-widgets.js
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /static/v1/widgets/1527282520-widgets.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 56888
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Wed, 08 Jan 2025 18:43:13 GMT
    Expires: Thu, 08 Jan 2026 18:43:13 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Mon, 27 Sep 2021 08:02:15 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 209558
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,gZjhIf,gychg,hKSk3e,hc6Ubd,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,gZjhIf,gychg,hKSk3e,hc6Ubd,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
    Report-To: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
    Content-Length: 1572
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 09 Jan 2025 04:25:22 GMT
    Expires: Fri, 09 Jan 2026 04:25:22 GMT
    Cache-Control: public, immutable, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 03:11:42 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 174632
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://sites.google.com/site/share123vn/switch-display.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/share123vn/switch-display.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fswitch-display.js
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sat, 11 Jan 2025 04:55:51 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fswitch-display.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fswitch-display.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js
    P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
    Content-Security-Policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'nonce-TPZq5SfRkpO7a57Kmcau8w' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
    Cross-Origin-Resource-Policy: same-site
    Cross-Origin-Opener-Policy: unsafe-none
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Set-Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; expires=Sun, 13-Jul-2025 04:55:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    http://anhnc.googlecode.com/svn/trunk/ver2/ancmedia.js
    IEXPLORE.EXE
    Remote address:
    64.233.166.82:80
    Request
    GET /svn/trunk/ver2/ancmedia.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: anhnc.googlecode.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Content-Type: text/html; charset=UTF-8
    Referrer-Policy: no-referrer
    Content-Length: 1587
    Date: Sat, 11 Jan 2025 04:55:50 GMT
  • flag-gb
    GET
    https://dan14vn.googlecode.com/files/sdropbox.js
    IEXPLORE.EXE
    Remote address:
    64.233.166.82:443
    Request
    GET /files/sdropbox.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: dan14vn.googlecode.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Content-Type: text/html; charset=UTF-8
    Referrer-Policy: no-referrer
    Content-Length: 1578
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://dan14vn.googlecode.com/files/cdropbox.js
    IEXPLORE.EXE
    Remote address:
    64.233.166.82:443
    Request
    GET /files/cdropbox.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: dan14vn.googlecode.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Content-Type: text/html; charset=UTF-8
    Referrer-Policy: no-referrer
    Content-Length: 1578
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-sg
    GET
    http://i8.upanh.com/2013/0814/07//57169781.728x90ads.png
    IEXPLORE.EXE
    Remote address:
    46.51.221.158:80
    Request
    GET /2013/0814/07//57169781.728x90ads.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: i8.upanh.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 308 Permanent Redirect
    location: /2013/0814/07/57169781.728x90ads.png
    refresh: 0;url=/2013/0814/07/57169781.728x90ads.png
    date: Sat, 11 Jan 2025 04:55:50 GMT
    keep-alive: timeout=5
    transfer-encoding: chunked
  • flag-vn
    GET
    http://giaoduc.net.vn/Uploaded/tuannam/2011_12_27/danh%20hoc%20sinh%20_%20giao%20duc%20viet%20nam.jpg
    IEXPLORE.EXE
    Remote address:
    58.187.8.10:80
    Request
    GET /Uploaded/tuannam/2011_12_27/danh%20hoc%20sinh%20_%20giao%20duc%20viet%20nam.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: giaoduc.net.vn
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Access-Control-Allow-Origin: *
    Content-Length: 0
    Server: Universe
    Connection: Keep-Alive
    Location: https://giaoduc.net.vn/Uploaded/tuannam/2011_12_27/danh%20hoc%20sinh%20_%20giao%20duc%20viet%20nam.jpg
    Cache-Control: Private
  • flag-us
    GET
    https://www.logomaker.com/logo-images/96cec9c65ddf2aea.gif
    IEXPLORE.EXE
    Remote address:
    172.67.70.113:443
    Request
    GET /logo-images/96cec9c65ddf2aea.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.logomaker.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Content-Type: image/jpeg
    Content-Length: 735
    Connection: keep-alive
    last-modified: Wed, 12 May 2021 22:25:58 GMT
    etag: "2df-5c2297ea8e980"
    x-content-type-options: nosniff
    x-frame-options: SAMEORIGIN
    content-security-policy: default-src 'self';style-src https: 'self' 'unsafe-inline' *.cookielaw.org *.onetrust.com *.googleapis.com *.gstatic.com *.trustpilot.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.bing.com *.facebook.com;script-src 'self' 'unsafe-inline' blob: 'unsafe-eval' *.cookielaw.org *.onetrust.com *.googleapis.com *.gstatic.com *.trustpilot.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.bing.com *.facebook.com;font-src https: 'self' data: *.cookielaw.org *.onetrust.com *.googleapis.com *.gstatic.com *.trustpilot.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.bing.com *.facebook.com;img-src 'self' data: *;media-src 'self' blob: data: *.cookielaw.org *.onetrust.com *.googleapis.com *.gstatic.com *.trustpilot.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.bing.com *.facebook.com;object-src 'none';base-uri 'none';frame-ancestors 'self';frame-src 'self' *.cookielaw.org *.onetrust.com *.googleapis.com *.gstatic.com *.trustpilot.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.bing.com *.facebook.com *.youtube.com *.slideshare.net *.vimeo.com *.google.com;connect-src 'self' data: *;
    strict-transport-security: max-age=16000000; includeSubDomains; preload;
    x-powered-by: PFOXY 2.0
    Cache-Control: private
    CF-Cache-Status: BYPASS
    Set-Cookie: FE-SERVERID=FE-1-Colo|Z4H52|Z4H52; path=/
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JBkK7wpJidHwNfxCdLSistzAu1pPeQjG%2FTRdTgS0tcI46Ux1Xt6kfoB82W1DyUHfbcYVnyw4QZDWNju0UhhF6Ibk4GYAFbgR0OL8XyBfCbrtl7wDTkS4KzRrd4ERQB2TdU7I"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 900251201b0eef42-LHR
    alt-svc: h3=":443"; ma=86400
    server-timing: cfL4;desc="?proto=TCP&rtt=46169&min_rtt=25868&rtt_var=45387&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3136&recv_bytes=620&delivery_rate=111687&cwnd=253&unsent_bytes=0&cid=cc5442f2ffece6d1&ts=524&x=0"
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r4.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r4.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 436
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:30:54 GMT
    Expires: Sat, 11 Jan 2025 05:20:54 GMT
    Cache-Control: public, max-age=3000
    Age: 1497
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/gsr1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/gsr1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 1739
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:11:09 GMT
    Expires: Sat, 11 Jan 2025 05:01:09 GMT
    Cache-Control: public, max-age=3000
    Age: 2681
    Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:07:32 GMT
    Expires: Sat, 11 Jan 2025 04:57:32 GMT
    Cache-Control: public, max-age=3000
    Age: 2898
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.178.3
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:15:54 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2397
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHiTojcR%2FDm3CTAylT4o25o%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHiTojcR%2FDm3CTAylT4o25o%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:03:21 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3150
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 03:56:16 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3577
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:55:08 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 43
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHiTojcR%2FDm3CTAylT4o25o%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHiTojcR%2FDm3CTAylT4o25o%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:03:21 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3150
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 03:56:16 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3577
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGdE1QgSdYy7EKQp2lG7B7I%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGdE1QgSdYy7EKQp2lG7B7I%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:39:37 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 974
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:33:20 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1352
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC43tOywHj%2BZRL%2FyfPgB5LY
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC43tOywHj%2BZRL%2FyfPgB5LY HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:44:09 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 704
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:55:08 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 43
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:33:20 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1352
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:55:22 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 32
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:55:08 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 43
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:33:20 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1352
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:55:22 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 32
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQChYW4k3T49TxBVstZH9M00
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQChYW4k3T49TxBVstZH9M00 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:54:55 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 56
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:33:20 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1352
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:15:54 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2397
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:33:20 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1352
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGdE1QgSdYy7EKQp2lG7B7I%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGdE1QgSdYy7EKQp2lG7B7I%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:39:37 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 974
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:37:41 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1091
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQChYW4k3T49TxBVstZH9M00
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQChYW4k3T49TxBVstZH9M00 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:54:55 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 56
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D HTTP/1.1
    Cache-Control: max-age = 14400
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:33:20 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1352
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:15:54 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2397
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:37:41 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1091
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:55:08 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 43
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:26:10 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1783
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:15:54 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2397
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D
    IEXPLORE.EXE
    Remote address:
    142.250.178.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 11 Jan 2025 04:26:10 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1783
  • flag-us
    DNS
    accounts.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    accounts.google.com
    IN A
    Response
    accounts.google.com
    IN A
    142.251.173.84
  • flag-be
    GET
    https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Connection: Keep-Alive
    Host: accounts.google.com
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    Content-Security-Policy-Report-Only: frame-ancestors 'self';report-uri https://csp.withgoogle.com/csp/frame-ancestors/a00d54fdef4a77536baac3725d1409f8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Location: https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&osid=1&passive=1209600&ifkv=AeZLP99TLqMSdtejoipr8O2VZWS7EbMftmksj65GONEORbpa07v7n866fc5458qL_PuwO7eTxtOLmQ
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Cross-Origin-Opener-Policy: unsafe-none
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Cross-Origin-Resource-Policy: cross-origin
    Content-Security-Policy: script-src 'nonce-QO0rcFQJV-N5IqKEdf-Rkw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self'
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-be
    GET
    https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&osid=1&passive=1209600&ifkv=AeZLP99TLqMSdtejoipr8O2VZWS7EbMftmksj65GONEORbpa07v7n866fc5458qL_PuwO7eTxtOLmQ
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&osid=1&passive=1209600&ifkv=AeZLP99TLqMSdtejoipr8O2VZWS7EbMftmksj65GONEORbpa07v7n866fc5458qL_PuwO7eTxtOLmQ HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Connection: Keep-Alive
    Host: accounts.google.com
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    X-Frame-Options: DENY
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&ifkv=AVdkyDlSKPoPHiWyDdzl96W0TuTMrrY5c9YxVwAZlr_zMXeDFOzHncLCXRmXzYMZtbKHIo4XC1gisQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2014580722%3A1736571351893739&ddm=1
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
    Content-Security-Policy: script-src 'nonce-gSnY9DJMHcv7fNFN2tzzXw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&ifkv=AVdkyDlSKPoPHiWyDdzl96W0TuTMrrY5c9YxVwAZlr_zMXeDFOzHncLCXRmXzYMZtbKHIo4XC1gisQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2014580722%3A1736571351893739&ddm=1
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&ifkv=AVdkyDlSKPoPHiWyDdzl96W0TuTMrrY5c9YxVwAZlr_zMXeDFOzHncLCXRmXzYMZtbKHIo4XC1gisQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2014580722%3A1736571351893739&ddm=1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Connection: Keep-Alive
    Host: accounts.google.com
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    x-auto-login: realm=com.google&args=continue%3Dhttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%253D/share123vn/jquery.min.js
    x-ua-compatible: IE=edge
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="AccountsSignInUi"
    Cross-Origin-Resource-Policy: same-site
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Report-To: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
    Content-Security-Policy: script-src 'nonce-ozVT6hvpqYWwzi52yjn1iA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self'
    reporting-endpoints: default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNwz1IAmEcB2B54x8hDhEOYkMhFBVUpyHZEGXU1mBDtFRn4plCnHaeQVtDEoVF0QchDQcNgRBNEZVCQUFLfrynRHukDg72NUq_Bx5jgvUZrYbJHqshY7tj7oUPNoXzqU_mxcfFMntGOVtmCta8FVbHnXiF7eGJqcqS-HRTZS9o-a2ybpxYPiUPxt-zdIiOyxyNo6-RowjemvOUwdFUntwY9BZoBb8iBfrDmesCzaK9k9MY3g9zesCuBKch3N7ntIvhJKconqU5adg-olMHTs_p5MHzI50u8MBcpGNULEXawF5XkfqxtlmiOvq0EgWwzdTy9r2Vbm7Vfq5em2yDvvCqGPJLshpS1wNKWFYl2b8UU4OxUFRS1iRFdAgOp2AXnAOCS4wI_7AKjss"
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    Set-Cookie: __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K; Expires=Mon, 11-Jan-2027 04:55:51 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Location: https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&osid=1&passive=1209600&ifkv=AeZLP98pfcIcTKiYvM_-1R3SUx3Ah8xEJvWB0TqhYz70yHiCMmCOA3hdqe9bEBtJTz2kyJIKUinkDg
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Cross-Origin-Opener-Policy: unsafe-none
    Content-Security-Policy: script-src 'nonce-zGBNxQThKz-auP_JDrhF_A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self'
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Cross-Origin-Resource-Policy: cross-origin
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-be
    GET
    https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&osid=1&passive=1209600&ifkv=AeZLP98pfcIcTKiYvM_-1R3SUx3Ah8xEJvWB0TqhYz70yHiCMmCOA3hdqe9bEBtJTz2kyJIKUinkDg
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&osid=1&passive=1209600&ifkv=AeZLP98pfcIcTKiYvM_-1R3SUx3Ah8xEJvWB0TqhYz70yHiCMmCOA3hdqe9bEBtJTz2kyJIKUinkDg HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    X-Frame-Options: DENY
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&ifkv=AVdkyDkPyv0-IeQj3a-MnDpdY1MjjF86a5FBpk9UO28wHC_z2E0qSQciPi0b_R_B_luv1pUvqTmTPQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-468359544%3A1736571351636381&ddm=1
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
    Content-Security-Policy: script-src 'nonce-tIBDfefGFsFRHopi0D86cA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&ifkv=AVdkyDkPyv0-IeQj3a-MnDpdY1MjjF86a5FBpk9UO28wHC_z2E0qSQciPi0b_R_B_luv1pUvqTmTPQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-468359544%3A1736571351636381&ddm=1
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&ifkv=AVdkyDkPyv0-IeQj3a-MnDpdY1MjjF86a5FBpk9UO28wHC_z2E0qSQciPi0b_R_B_luv1pUvqTmTPQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-468359544%3A1736571351636381&ddm=1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    x-auto-login: realm=com.google&args=continue%3Dhttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%253D/share123vn/switch-display.js
    x-ua-compatible: IE=edge
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Cross-Origin-Resource-Policy: same-site
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="AccountsSignInUi"
    Report-To: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
    Content-Security-Policy: script-src 'nonce-fDi1fqjdSOCb-pGk1vBfqA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self'
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    reporting-endpoints: default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNwz1IAnEYB2D5wxshDhEOYkMhFBVU54VkQ5RRW4MN0VJp4pkHcXedZ9DWkH1hX_RBSIPQEAiNEZVCQUHTqXdKtEfq4GBRY_R74LEmWa_VaZnodlpyrnvmm_9gkziX-WRBfFqosBeU9ApTsR6ssgbuJqpsH89sNZbC59sae0XHT4114fjSOfkx8a7TMfLXeRrD0F-eFLyzFyiHI5kC-TAaLNIyfilF-sXpmyLNoLvDoFF8GDLoETuTBg3izqFBeyinDIrhRdagNLYNm9SOU7Mm-fHyxKQrPLKX6BRVR4nWscdboj6sb5SpgaF0mSLYamt--97KNrVsH2zqzDUQklcCYliQNFFbi6iypAlSeDGuReNiTFBXBTXAc7yHc3Oefs4bULh_jb6OJQ"
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Connection: Keep-Alive
    Host: accounts.google.com
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Location: https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&osid=1&passive=1209600&ifkv=AeZLP9-F-0jCJCcm5N1W4qymdvfB67TXI89BGhUcnkrjmgD7FSqzumAokoiwp2ppKWHPqpYr4r1qhw
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Content-Security-Policy: script-src 'nonce-PCDTbqYl5SoRZmiltX8xlg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self'
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
    Cross-Origin-Opener-Policy: unsafe-none
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Cross-Origin-Resource-Policy: cross-origin
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-be
    GET
    https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&osid=1&passive=1209600&ifkv=AeZLP9-F-0jCJCcm5N1W4qymdvfB67TXI89BGhUcnkrjmgD7FSqzumAokoiwp2ppKWHPqpYr4r1qhw
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&osid=1&passive=1209600&ifkv=AeZLP9-F-0jCJCcm5N1W4qymdvfB67TXI89BGhUcnkrjmgD7FSqzumAokoiwp2ppKWHPqpYr4r1qhw HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Connection: Keep-Alive
    Host: accounts.google.com
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    X-Frame-Options: DENY
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&ifkv=AVdkyDm6Pvvp1vN047nHqJdb-5Q3uc1K2CHd6MgQFQpE-ytoK0HcuUApbt0Iyf3FMrqhz_-_fbTqiw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273485502%3A1736571351931186&ddm=1
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
    Content-Security-Policy: script-src 'nonce-f6dnDf17GeyBy2ZuJ5MvAA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&ifkv=AVdkyDm6Pvvp1vN047nHqJdb-5Q3uc1K2CHd6MgQFQpE-ytoK0HcuUApbt0Iyf3FMrqhz_-_fbTqiw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273485502%3A1736571351931186&ddm=1
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&ifkv=AVdkyDm6Pvvp1vN047nHqJdb-5Q3uc1K2CHd6MgQFQpE-ytoK0HcuUApbt0Iyf3FMrqhz_-_fbTqiw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273485502%3A1736571351931186&ddm=1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Cookie: NID=520=qzOrDV2f2haMTIUzfKoObnEvp2ft0dOZCjwY31XcAMv1vOQDSe5eHE9zFps8CN_qQ0I9ZVa0x29oZOVrkIEM94Z7m7WLuMGQG7azqDUnlGWcQt4rbqeLqb9ArbpovwgIX20hhbzeJOhd3_8R7vUknCNm_ltkF_3YDWXVucQ3R9J36WyF; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Connection: Keep-Alive
    Host: accounts.google.com
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    x-auto-login: realm=com.google&args=continue%3Dhttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%253D/share123vn/hover_textcolor.js
    x-ua-compatible: IE=edge
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Report-To: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
    Content-Security-Policy: script-src 'nonce--uv9mlCgEwDr1QAu-XO5IA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self'
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="AccountsSignInUi"
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Cross-Origin-Resource-Policy: same-site
    reporting-endpoints: default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNwz1IAnEYB2D5xxshDhEOYkMhFBVU54VkQ5RRW4MN0VLdJZ4pxGnnGbQ1JFFYGH0Q0iA0BELQElEpFBQ0-XF3EjVH6uBgUaP0e-AxJ9iA2W6a7rObco575ln6ZDO4mPliIj4tV9gLyvkKU7AuVlkD9-JVdoCnlhpL4fNtjb2i7bfGenFq9Yy8GH_P0xHyVwWaRF-zQBG8sxYph-OZInkwKJZoDb8jJfrDuZsSzaOzW6MJfBjV6BF7EhqN4G5So30MpzSK4nlWozR2junUhbMLOnnx4linSzy0GnSCis2gLex3GzSI9e0yNdCXLlMAOyxtbz872db262T9o8Ux7AuvCyG_JKshdTOghGVVkv0rMTUYC0UlZUNSBJ7jXZyTcw1xbiHC_QOt5Y7C"
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Location: https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&osid=1&passive=1209600&ifkv=AVdkyDlTMklMtocGSHvtGLHgKWTq72a6FiveC-qDyOqJSymEoJb-0e0xSvKr4jDjLevSgnGkduRY
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Cross-Origin-Resource-Policy: cross-origin
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
    Content-Security-Policy: script-src 'nonce-rAWEPC9NDgOkmNSc73jCzQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self'
    Cross-Origin-Opener-Policy: unsafe-none
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-be
    GET
    https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&osid=1&passive=1209600&ifkv=AVdkyDlTMklMtocGSHvtGLHgKWTq72a6FiveC-qDyOqJSymEoJb-0e0xSvKr4jDjLevSgnGkduRY
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&osid=1&passive=1209600&ifkv=AVdkyDlTMklMtocGSHvtGLHgKWTq72a6FiveC-qDyOqJSymEoJb-0e0xSvKr4jDjLevSgnGkduRY HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    X-Frame-Options: DENY
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&ifkv=AVdkyDnwGsE8FISwFnRsourwzXr0LBHCsq7ahugKzPKAy_GH0fehtiHT5UUgWsiR_ZtHEjq7h_rN&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1073236767%3A1736571352204110&ddm=1
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
    Content-Security-Policy: script-src 'nonce-B-AWLo7-GAtCELp908gCQA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&ifkv=AVdkyDnwGsE8FISwFnRsourwzXr0LBHCsq7ahugKzPKAy_GH0fehtiHT5UUgWsiR_ZtHEjq7h_rN&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1073236767%3A1736571352204110&ddm=1
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&ifkv=AVdkyDnwGsE8FISwFnRsourwzXr0LBHCsq7ahugKzPKAy_GH0fehtiHT5UUgWsiR_ZtHEjq7h_rN&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1073236767%3A1736571352204110&ddm=1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    X-Frame-Options: DENY
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    x-auto-login: realm=com.google&args=continue%3Dhttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%253D/share123vn/news.js
    x-ua-compatible: IE=edge
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Report-To: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
    Content-Security-Policy: script-src 'nonce-TzW73Vo8kv8i7NTSmm9Cjg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self'
    Cross-Origin-Resource-Policy: same-site
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="AccountsSignInUi"
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    reporting-endpoints: default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNwz1IAnEYB2D7wxshDhEOYkMhFBVU54VkQ5RBm4MN0VJ5iWcKcWfnGbRFJH1gkfRBSIPUEAiNEZVCQUGTH3cKtUd6g4NFjdHvgcecZANmu8nbZzflHffMs_DBpnE--8kEfFqssReUCjWmYEOosybuJersAE8tBkvj863BXtH2Y7BenFo-Ix8m3gt0hPx1kSYx8FekKN5ZS5TH8WyJPBgWyrSCX9Ey_eLMTZlm0dmt0QQ-jGr0iD1JjUZw91CjfZTTGsXwPKdRBjvHdOpC75xOPrw81ukKU9YKnaBiq9AG9rsrNIiNrSo1MZCpUgg7LG1v39u51vad1MVmi2M4IK_6I0FRUiPqekiRJVWUgktxNRyPxERlTVT8PMe7OCfnGuLc_ij3D472jf8"
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&go=true
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&go=true HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Location: https://www.blogger.com/comment-iframe.g?blogID=6542819528888209797&postID=2206107618372053289&blogspotRpcToken=7568467&bpli=1
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Cross-Origin-Resource-Policy: cross-origin
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Cross-Origin-Opener-Policy: unsafe-none
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
    Content-Security-Policy: script-src 'nonce-5PiAskOBXJC7QqqfIOTV9w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self'
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-be
    GET
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:57 GMT
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /o/cspreport
    Content-Security-Policy: script-src 'nonce-wNZi_xH5CRvM-NZRmRLi0g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
    Cross-Origin-Resource-Policy: same-site
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-us
    DNS
    lh3.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh3.googleusercontent.com
    IN A
    Response
    lh3.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    142.250.200.33
  • flag-gb
    GET
    https://lh3.googleusercontent.com/-ruEi4Da_eUo/UD2toEwlIcI/AAAAAAAAAx0/E9_31Jdip6o/s1900/bg_all_page.gif
    IEXPLORE.EXE
    Remote address:
    142.250.200.33:443
    Request
    GET /-ruEi4Da_eUo/UD2toEwlIcI/AAAAAAAAAx0/E9_31Jdip6o/s1900/bg_all_page.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh3.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="bg_all_page.gif"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 98
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sun, 12 Jan 2025 04:55:51 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v506"
    Content-Type: image/gif
    Vary: Origin
    Age: 1
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
    Response
    lh4.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    142.250.200.33
  • flag-us
    DNS
    lh6.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh6.googleusercontent.com
    IN A
    Response
    lh6.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    142.250.200.33
  • flag-gb
    GET
    https://lh4.googleusercontent.com/-eDch893wUfs/UD2tqpAgpEI/AAAAAAAAAy4/BphPqa-iO7w/s128/process.png
    IEXPLORE.EXE
    Remote address:
    142.250.200.33:443
    Request
    GET /-eDch893wUfs/UD2tqpAgpEI/AAAAAAAAAy4/BphPqa-iO7w/s128/process.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh4.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="process.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 759
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:55:50 GMT
    Expires: Sun, 12 Jan 2025 04:55:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v32e"
    Content-Type: image/png
    Vary: Origin
    Age: 2
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://lh6.googleusercontent.com/-f4C0PvUIAR4/UD2tohAGTuI/AAAAAAAAAyE/tx68V7Rp1ok/s1900/bg_top.gif
    IEXPLORE.EXE
    Remote address:
    142.250.200.33:443
    Request
    GET /-f4C0PvUIAR4/UD2tohAGTuI/AAAAAAAAAyE/tx68V7Rp1ok/s1900/bg_top.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh6.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="bg_top.gif"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 563
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:55:51 GMT
    Expires: Sun, 12 Jan 2025 04:55:51 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v503"
    Content-Type: image/gif
    Vary: Origin
    Age: 1
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    www.youtube.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.youtube.com
    IN A
    Response
    www.youtube.com
    IN CNAME
    youtube-ui.l.google.com
    youtube-ui.l.google.com
    IN A
    172.217.169.14
    youtube-ui.l.google.com
    IN A
    216.58.201.110
    youtube-ui.l.google.com
    IN A
    142.250.200.14
    youtube-ui.l.google.com
    IN A
    216.58.213.14
    youtube-ui.l.google.com
    IN A
    142.250.187.238
    youtube-ui.l.google.com
    IN A
    142.250.180.14
    youtube-ui.l.google.com
    IN A
    142.250.200.46
    youtube-ui.l.google.com
    IN A
    172.217.169.46
    youtube-ui.l.google.com
    IN A
    216.58.204.78
    youtube-ui.l.google.com
    IN A
    142.250.178.14
    youtube-ui.l.google.com
    IN A
    142.250.187.206
    youtube-ui.l.google.com
    IN A
    172.217.16.238
    youtube-ui.l.google.com
    IN A
    172.217.169.78
    youtube-ui.l.google.com
    IN A
    142.250.179.238
  • flag-us
    DNS
    s0.adnet.vn
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    s0.adnet.vn
    IN A
    Response
  • flag-gb
    GET
    http://www.youtube.com/embed/rMHZ8MwgOUk
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:80
    Request
    GET /embed/rMHZ8MwgOUk HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Content-Type: application/binary
    X-Content-Type-Options: nosniff
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Location: https://www.youtube.com/embed/rMHZ8MwgOUk
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
  • flag-gb
    GET
    https://www.youtube.com/embed/rMHZ8MwgOUk
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /embed/rMHZ8MwgOUk HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    X-Content-Type-Options: nosniff
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:52 GMT
    Strict-Transport-Security: max-age=31536000
    Content-Security-Policy: require-trusted-types-for 'script'
    Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main"
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
    Cross-Origin-Resource-Policy: cross-origin
    P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    Set-Cookie: YSC=f0fC97XuADk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
    Set-Cookie: __Secure-ROLLOUT_TOKEN=CJrJ9petpMy5eBC2wOe08OyKAxi2wOe08OyKAw%3D%3D; Domain=youtube.com; Expires=Thu, 10-Jul-2025 04:55:52 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned
    Set-Cookie: VISITOR_INFO1_LIVE=tNfWmYyjVqs; Domain=.youtube.com; Expires=Thu, 10-Jul-2025 04:55:52 GMT; Path=/; Secure; HttpOnly; SameSite=none
    Set-Cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgHw%3D%3D; Domain=.youtube.com; Expires=Thu, 10-Jul-2025 04:55:52 GMT; Path=/; Secure; HttpOnly; SameSite=none
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.youtube.com/s/player/3ede36f2/www-player.css
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /s/player/3ede36f2/www-player.css HTTP/1.1
    Accept: text/css, */*
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=f0fC97XuADk; __Secure-ROLLOUT_TOKEN=CJrJ9petpMy5eBC2wOe08OyKAxi2wOe08OyKAw%3D%3D; VISITOR_INFO1_LIVE=tNfWmYyjVqs; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgHw%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 62099
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 10 Jan 2025 03:33:24 GMT
    Expires: Sat, 10 Jan 2026 03:33:24 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT
    Content-Type: text/css
    Vary: Accept-Encoding, Origin
    Age: 91348
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/base.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /s/player/3ede36f2/player_ias.vflset/en_US/base.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=f0fC97XuADk; __Secure-ROLLOUT_TOKEN=CJrJ9petpMy5eBC2wOe08OyKAxi2wOe08OyKAw%3D%3D; VISITOR_INFO1_LIVE=tNfWmYyjVqs; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgHw%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 815781
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 10 Jan 2025 03:33:18 GMT
    Expires: Sat, 10 Jan 2026 03:33:18 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding, Origin
    Age: 91354
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    POST
    https://www.youtube.com/api/stats/qoe?cpn=dZ_6qNrn2poqrKxN&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C127326%2C26443548%2C7111%2C36343%2C9954%2C34656%2C46919%2C12193%2C19100%2C27818%2C18053%2C591%2C7505%2C5541%2C1823%2C3186%2C7706%2C6942%2C408%2C20473%2C8%2C10631%2C9243%2C1581%2C1690%2C14%2C3943%2C2%2C120%2C366%2C1684%2C4903%2C3025%2C2981%2C5921%2C4263%2C681%2C6266%2C2049%2C1258%2C3476%2C2706%2C2261%2C7764%2C2035%2C251%2C1524%2C233%2C39%2C4252%2C916%2C31%2C3313%2C436%2C2%2C3481%2C189%2C4343%2C1892&cl=713071505&seq=1&event=streamingstats&docid=rMHZ8MwgOUk&cbr=IE&cbrver=11.0&c=WEB_EMBEDDED_PLAYER&cver=1.20250107.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=6.1&cplatform=DESKTOP&vps=0.000:N,0.001:ER&cmt=0.001:0.000,0.001:0.000&error=0.001:auth::0.000:0;a6s.0;r.Video_unavailablesr.This_video_is_unavailable&vis=0.001:0&bh=0.001:0.000&qclc=ChBkWl82cU5ybjJwb3FyS3hOEAE
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    POST /api/stats/qoe?cpn=dZ_6qNrn2poqrKxN&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C127326%2C26443548%2C7111%2C36343%2C9954%2C34656%2C46919%2C12193%2C19100%2C27818%2C18053%2C591%2C7505%2C5541%2C1823%2C3186%2C7706%2C6942%2C408%2C20473%2C8%2C10631%2C9243%2C1581%2C1690%2C14%2C3943%2C2%2C120%2C366%2C1684%2C4903%2C3025%2C2981%2C5921%2C4263%2C681%2C6266%2C2049%2C1258%2C3476%2C2706%2C2261%2C7764%2C2035%2C251%2C1524%2C233%2C39%2C4252%2C916%2C31%2C3313%2C436%2C2%2C3481%2C189%2C4343%2C1892&cl=713071505&seq=1&event=streamingstats&docid=rMHZ8MwgOUk&cbr=IE&cbrver=11.0&c=WEB_EMBEDDED_PLAYER&cver=1.20250107.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=6.1&cplatform=DESKTOP&vps=0.000:N,0.001:ER&cmt=0.001:0.000,0.001:0.000&error=0.001:auth::0.000:0;a6s.0;r.Video_unavailablesr.This_video_is_unavailable&vis=0.001:0&bh=0.001:0.000&qclc=ChBkWl82cU5ybjJwb3FyS3hOEAE HTTP/1.1
    Accept: */*
    X-Goog-Visitor-Id: Cgt0TmZXbVl5alZxcyjY84e8BjIKCgJHQhIEGgAgHw%3D%3D
    X-YouTube-Client-Name: 56
    X-YouTube-Client-Version: 1.20250107.01.00
    X-YouTube-Device: cbr=IE&cbrver=11.0&ceng=Trident&cengver=7.0&cos=Windows&cosver=6.1&cplatform=DESKTOP
    X-YouTube-Page-CL: 713071505
    X-YouTube-Page-Label: youtube.player.web_20250107_01_RC00
    X-YouTube-Utc-Offset: 0
    X-YouTube-Ad-Signals: dt=1736571351778&flash=0&frm=2&u_tz&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&bc=1&bih=-12245933&biw=-12245933&brdim=397%2C1192%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C420%2C315&vis=1&wgl=true&ca_type=image
    Content-Type: application/x-www-form-urlencoded
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: www.youtube.com
    Content-Length: 226
    Connection: Keep-Alive
    Cache-Control: no-cache
    Cookie: YSC=f0fC97XuADk; __Secure-ROLLOUT_TOKEN=CJrJ9petpMy5eBC2wOe08OyKAxi2wOe08OyKAw%3D%3D; VISITOR_INFO1_LIVE=tNfWmYyjVqs; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgHw%3D%3D
    Response
    HTTP/1.1 204 No Content
    Content-Type: text/html; charset=UTF-8
    Date: Sat, 11 Jan 2025 04:55:54 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, must-revalidate
    X-Content-Type-Options: nosniff
    Server: Video Stats Server
    Content-Length: 0
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    POST
    https://www.youtube.com/youtubei/v1/log_event?alt=json
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    POST /youtubei/v1/log_event?alt=json HTTP/1.1
    Accept: */*
    X-Goog-Request-Time: 1736571354731
    Content-Type: application/json
    X-Goog-Visitor-Id: Cgt0TmZXbVl5alZxcyjY84e8BjIKCgJHQhIEGgAgHw%3D%3D
    X-YouTube-Client-Name: 56
    X-YouTube-Client-Version: 1.20250107.01.00
    X-YouTube-Device: cbr=IE&cbrver=11.0&ceng=Trident&cengver=7.0&cos=Windows&cosver=6.1&cplatform=DESKTOP
    X-YouTube-Page-CL: 713071505
    X-YouTube-Page-Label: youtube.player.web_20250107_01_RC00
    X-YouTube-Utc-Offset: 0
    X-YouTube-Ad-Signals: dt=1736571351635&flash=0&frm=2&u_tz&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&bc=1&bih=-12245933&biw=-12245933&brdim=397%2C1192%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C420%2C315&vis=1&wgl=true&ca_type=image
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: www.youtube.com
    Content-Length: 10535
    Connection: Keep-Alive
    Cache-Control: no-cache
    Cookie: YSC=f0fC97XuADk; __Secure-ROLLOUT_TOKEN=CJrJ9petpMy5eBC2wOe08OyKAxi2wOe08OyKAw%3D%3D; VISITOR_INFO1_LIVE=tNfWmYyjVqs; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgHw%3D%3D
    Response
    HTTP/1.1 200 OK
    Content-Type: application/json; charset=UTF-8
    Vary: Origin
    Vary: X-Origin
    Vary: Referer
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:56 GMT
    Server: scaffolding on HTTPServer2
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.youtube.com/s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=f0fC97XuADk; __Secure-ROLLOUT_TOKEN=CJrJ9petpMy5eBC2wOe08OyKAxi2wOe08OyKAw%3D%3D; VISITOR_INFO1_LIVE=tNfWmYyjVqs; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgHw%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 118631
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 10 Jan 2025 09:36:06 GMT
    Expires: Sat, 10 Jan 2026 09:36:06 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding, Origin
    Age: 69586
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/embed.js
    IEXPLORE.EXE
    Remote address:
    172.217.169.14:443
    Request
    GET /s/player/3ede36f2/player_ias.vflset/en_US/embed.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=f0fC97XuADk; __Secure-ROLLOUT_TOKEN=CJrJ9petpMy5eBC2wOe08OyKAxi2wOe08OyKAw%3D%3D; VISITOR_INFO1_LIVE=tNfWmYyjVqs; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgHw%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 10934
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 10 Jan 2025 12:36:28 GMT
    Expires: Sat, 10 Jan 2026 12:36:28 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding, Origin
    Age: 58766
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    googleads.g.doubleclick.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    googleads.g.doubleclick.net
    IN A
    Response
    googleads.g.doubleclick.net
    IN A
    172.217.169.34
  • flag-us
    DNS
    static.doubleclick.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    static.doubleclick.net
    IN A
    Response
    static.doubleclick.net
    IN A
    142.250.187.230
  • flag-gb
    GET
    https://googleads.g.doubleclick.net/pagead/id
    IEXPLORE.EXE
    Remote address:
    172.217.169.34:443
    Request
    GET /pagead/id HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    Access-Control-Allow-Credentials: true
    Date: Sat, 11 Jan 2025 04:55:53 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Server: cafe
    Content-Length: 0
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    IEXPLORE.EXE
    Remote address:
    172.217.169.34:443
    Request
    GET /pagead/id?slf_rd=1 HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Access-Control-Allow-Credentials: true
    Content-Type: application/json; charset=UTF-8
    Date: Sat, 11 Jan 2025 04:55:53 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    X-Content-Type-Options: nosniff
    Content-Disposition: attachment; filename="f.txt"
    Content-Encoding: gzip
    Server: cafe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://static.doubleclick.net/instream/ad_status.js
    IEXPLORE.EXE
    Remote address:
    142.250.187.230:443
    Request
    GET /instream/ad_status.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: static.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"
    Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
    Timing-Allow-Origin: *
    Content-Length: 29
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 11 Jan 2025 04:47:08 GMT
    Expires: Sat, 11 Jan 2025 05:02:08 GMT
    Cache-Control: public, max-age=900
    Age: 525
    Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT
    Content-Type: text/javascript
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    jnn-pa.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    jnn-pa.googleapis.com
    IN A
    Response
    jnn-pa.googleapis.com
    IN A
    142.250.200.42
    jnn-pa.googleapis.com
    IN A
    142.250.178.10
    jnn-pa.googleapis.com
    IN A
    172.217.16.234
    jnn-pa.googleapis.com
    IN A
    142.250.179.234
    jnn-pa.googleapis.com
    IN A
    172.217.169.10
    jnn-pa.googleapis.com
    IN A
    216.58.201.106
    jnn-pa.googleapis.com
    IN A
    142.250.200.10
    jnn-pa.googleapis.com
    IN A
    142.250.180.10
    jnn-pa.googleapis.com
    IN A
    216.58.213.10
    jnn-pa.googleapis.com
    IN A
    216.58.204.74
    jnn-pa.googleapis.com
    IN A
    142.250.187.202
    jnn-pa.googleapis.com
    IN A
    142.250.187.234
    jnn-pa.googleapis.com
    IN A
    172.217.169.42
  • flag-gb
    POST
    https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
    IEXPLORE.EXE
    Remote address:
    142.250.200.42:443
    Request
    POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
    Accept: */*
    X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
    Content-Type: application/json+protobuf
    X-User-Agent: grpc-web-javascript/0.1
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: jnn-pa.googleapis.com
    Content-Length: 24
    Connection: Keep-Alive
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Content-Type: application/json+protobuf; charset=UTF-8
    Vary: Origin
    Vary: X-Origin
    Vary: Referer
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:54 GMT
    Server: ESF
    Cache-Control: private
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    POST
    https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
    IEXPLORE.EXE
    Remote address:
    142.250.200.42:443
    Request
    POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
    Accept: */*
    X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
    Content-Type: application/json+protobuf
    X-User-Agent: grpc-web-javascript/0.1
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: jnn-pa.googleapis.com
    Content-Length: 947
    Connection: Keep-Alive
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Content-Type: application/json+protobuf; charset=UTF-8
    Vary: Origin
    Vary: X-Origin
    Vary: Referer
    Content-Encoding: gzip
    Date: Sat, 11 Jan 2025 04:55:54 GMT
    Server: ESF
    Cache-Control: private
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-us
    DNS
    www.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.google.com
    IN A
    Response
    www.google.com
    IN A
    142.250.187.196
  • flag-gb
    GET
    https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
    IEXPLORE.EXE
    Remote address:
    142.250.187.196:443
    Request
    GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=ffnlezhh6kcd
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Content-Type: text/javascript; charset=utf-8
    Cross-Origin-Embedder-Policy: require-corp
    Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
    Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
    Expires: Sat, 11 Jan 2025 04:55:55 GMT
    Date: Sat, 11 Jan 2025 04:55:55 GMT
    Cache-Control: private, max-age=300
    Cross-Origin-Resource-Policy: same-site
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
    IEXPLORE.EXE
    Remote address:
    142.250.187.196:443
    Request
    GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Content-Type: text/javascript; charset=utf-8
    Expires: Sat, 11 Jan 2025 04:55:54 GMT
    Date: Sat, 11 Jan 2025 04:55:54 GMT
    Cache-Control: private, max-age=300
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
    Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=ffnlezhh6kcd
    IEXPLORE.EXE
    Remote address:
    142.250.187.196:443
    Request
    GET /recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=ffnlezhh6kcd HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Embedder-Policy: require-corp
    Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
    Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:55:54 GMT
    Content-Security-Policy: script-src 'nonce-jpDYm7Y-2Ixf5TxU1AYdHA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.google.com/js/bg/Lun4LrmyM5hoQ5tJGD0ays7SwWyNPgAu369r1pUn0UA.js
    IEXPLORE.EXE
    Remote address:
    142.250.187.196:443
    Request
    GET /js/bg/Lun4LrmyM5hoQ5tJGD0ays7SwWyNPgAu369r1pUn0UA.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=ffnlezhh6kcd
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs"
    Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
    Content-Length: 11473
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 04 Jan 2025 18:00:46 GMT
    Expires: Sun, 04 Jan 2026 18:00:46 GMT
    Cache-Control: public, max-age=31536000
    Age: 557709
    Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    www.facebook.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.facebook.com
    IN A
    Response
    www.facebook.com
    IN CNAME
    star-mini.c10r.facebook.com
    star-mini.c10r.facebook.com
    IN A
    157.240.221.35
  • flag-gb
    GET
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:80
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Sat, 11 Jan 2025 04:55:57 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:80
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Sat, 11 Jan 2025 04:55:57 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:443
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html;charset=utf-8
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7458517185696828797"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7458517185696828797"}]}
    cross-origin-opener-policy: same-origin-allow-popups
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    X-FB-Debug: ODhg50cpih8jpQ8TH5unbHl6hEgJYVHKiGkpIWCNSqfrc8WDE0MbB3RyM32l6/8RdDWz+HFkya1/66sZ/31Q0g==
    Date: Sat, 11 Jan 2025 04:55:57 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=27, rtx=1, c=10, mss=1357, tbw=3223, tp=-1, tpl=-1, uplat=22, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:443
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html;charset=utf-8
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7458517186027411404"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7458517186027411404"}]}
    cross-origin-opener-policy: same-origin-allow-popups
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    X-FB-Debug: qEeasdqk+I+AgrE8Jh2O+NIrYP/j6PZB0Y4bY5hfvZxINsG+gC9SP+FBX6LKkMbEwY8Zc6aFHQG4g8HkBmvRIw==
    Date: Sat, 11 Jan 2025 04:55:57 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=27, rtx=1, c=10, mss=1357, tbw=3222, tp=-1, tpl=-1, uplat=21, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 0
  • flag-us
    DNS
    ssl.gstatic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ssl.gstatic.com
    IN A
    Response
    ssl.gstatic.com
    IN A
    142.250.200.3
  • flag-gb
    GET
    https://ssl.gstatic.com/accounts/o/2254111616-postmessagerelay.js
    IEXPLORE.EXE
    Remote address:
    142.250.200.3:443
    Request
    GET /accounts/o/2254111616-postmessagerelay.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: ssl.gstatic.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="federated-signon-mpm-access"
    Report-To: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
    Content-Length: 4652
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 04 Jan 2025 17:56:17 GMT
    Expires: Sun, 04 Jan 2026 17:56:17 GMT
    Cache-Control: public, max-age=31536000
    Age: 557980
    Last-Modified: Thu, 19 Dec 2024 23:06:57 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    crl.microsoft.com
    Remote address:
    8.8.8.8:53
    Request
    crl.microsoft.com
    IN A
    Response
    crl.microsoft.com
    IN CNAME
    crl.www.ms.akadns.net
    crl.www.ms.akadns.net
    IN CNAME
    a1363.dscg.akamai.net
    a1363.dscg.akamai.net
    IN A
    2.19.117.18
    a1363.dscg.akamai.net
    IN A
    2.19.117.22
  • flag-gb
    GET
    http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
    Remote address:
    2.19.117.18:80
    Request
    GET /pki/crl/products/MicRooCerAut2011_2011_03_22.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    If-Modified-Since: Thu, 11 Jul 2024 01:45:51 GMT
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: crl.microsoft.com
    Response
    HTTP/1.1 200 OK
    Content-Length: 1036
    Content-Type: application/octet-stream
    Content-MD5: +oTkvMkqpdtzWrUHEQQM3g==
    Last-Modified: Thu, 12 Dec 2024 00:06:56 GMT
    ETag: 0x8DD1A40E476D877
    Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
    x-ms-request-id: 3eebf016-b01e-005d-6835-4c5d6e000000
    x-ms-version: 2009-09-19
    x-ms-lease-status: unlocked
    x-ms-blob-type: BlockBlob
    Date: Sat, 11 Jan 2025 04:56:21 GMT
    Connection: keep-alive
  • flag-us
    DNS
    www.microsoft.com
    iexplore.exe
    Remote address:
    8.8.8.8:53
    Request
    www.microsoft.com
    IN A
    Response
    www.microsoft.com
    IN CNAME
    www.microsoft.com-c-3.edgekey.net
    www.microsoft.com-c-3.edgekey.net
    IN CNAME
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    IN CNAME
    e13678.dscb.akamaiedge.net
    e13678.dscb.akamaiedge.net
    IN A
    92.123.241.137
  • flag-gb
    GET
    http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl
    Remote address:
    92.123.241.137:80
    Request
    GET /pkiops/crl/MicCodSigPCA2011_2011-07-08.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    If-Modified-Since: Sun, 18 Aug 2024 00:23:49 GMT
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: www.microsoft.com
    Response
    HTTP/1.1 200 OK
    Content-Length: 1078
    Content-Type: application/octet-stream
    Content-MD5: PjrtHAukbJio72s77Ag5mA==
    Last-Modified: Thu, 31 Oct 2024 23:26:09 GMT
    ETag: 0x8DCFA0366D6C4CA
    x-ms-request-id: 31ef5126-e01e-0022-1aee-2b92f5000000
    x-ms-version: 2009-09-19
    x-ms-lease-status: unlocked
    x-ms-blob-type: BlockBlob
    X-EdgeConnect-Origin-MEX-Latency: 142
    Date: Sat, 11 Jan 2025 04:56:21 GMT
    Connection: keep-alive
    TLS_version: UNKNOWN
    ms-cv: CASMicrosoftCV2d7681c0.0
    ms-cv-esi: CASMicrosoftCV2d7681c0.0
    X-RTag: RT
  • flag-be
    GET
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:56:59 GMT
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /o/cspreport
    Content-Security-Policy: script-src 'nonce-O0WubQ6aHgse-oOcD7h0EQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
    Cross-Origin-Resource-Policy: same-site
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-be
    GET
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    142.251.173.84:443
    Request
    GET /o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: NID=520=lDuOiiwEheA0fZ5QRHDMk7k4_8eY4A-mle4woQOgh_m1tsUZ_rwh9-5VjYKQGit4zaBwJYlxsbYzkjjqxeE3gCLI_Lj6BqpprOTLGcf3U7J2ZXhQmI7Tu10oP04qoMoF4Ul5m7W2kiaO38wXvPj7Sc5YoMY2UKd0ADIRC4VQPiodEeHogzrh; __Host-GAPS=1:AkfWeKwPTIuxSVpx4yJwEIDuqgvCFg:9i42TmJdoOZbpC5K
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:57:59 GMT
    Cross-Origin-Resource-Policy: same-site
    Content-Security-Policy: script-src 'nonce-1L-loJfNwAR5Zf3zFLn65Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /o/cspreport
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://googleads.g.doubleclick.net/pagead/id
    IEXPLORE.EXE
    Remote address:
    172.217.169.34:443
    Request
    GET /pagead/id HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    Access-Control-Allow-Credentials: true
    Date: Sat, 11 Jan 2025 04:57:54 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Server: cafe
    Content-Length: 0
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    IEXPLORE.EXE
    Remote address:
    172.217.169.34:443
    Request
    GET /pagead/id?slf_rd=1 HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/rMHZ8MwgOUk
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Access-Control-Allow-Credentials: true
    Content-Type: application/json; charset=UTF-8
    Date: Sat, 11 Jan 2025 04:57:54 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    X-Content-Type-Options: nosniff
    Content-Disposition: attachment; filename="f.txt"
    Content-Encoding: gzip
    Server: cafe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://www.blogger.com/_/BloggerCommentUi/gen204/?tmambps=-1&rtembps=-1&rttms=-1
    IEXPLORE.EXE
    Remote address:
    142.250.180.9:443
    Request
    GET /_/BloggerCommentUi/gen204/?tmambps=-1&rtembps=-1&rttms=-1 HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: NID=520=mGCZ6-PNIpBQfMgex7ZkqfVDGQGoPDU6qtammcNC6MGe7jBuwKNGVbv-gTcv4SzikRnMWLxIF4MFhMFqQ8lCn6Mo8WLIzOjUv1il93E1F2wzk8gbqzDhnR8zcp52OToYICSQU78r4Q7oGQuviztKh-HFS98SeNFpaIDHuYsvk0I; OTZ=7904456_56_56__56_
    Response
    HTTP/1.1 204 No Content
    Content-Type: text/html; charset=utf-8
    Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 11 Jan 2025 04:57:54 GMT
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Content-Security-Policy: script-src 'nonce-u7Dwp0MpNVaBQ2MFNiENZQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self'
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • 172.217.16.225:80
    http://3.bp.blogspot.com/--oTM4r-XrHU/TtPlqYJYPzI/AAAAAAAABYg/OcAAKQEQAMg/s72-c/Rogueposter2007.jpg
    http
    IEXPLORE.EXE
    615 B
    2.8kB
    6
    5

    HTTP Request

    GET http://3.bp.blogspot.com/--oTM4r-XrHU/TtPlqYJYPzI/AAAAAAAABYg/OcAAKQEQAMg/s72-c/Rogueposter2007.jpg

    HTTP Response

    200
  • 172.217.16.225:80
    http://4.bp.blogspot.com/-t74Gq0wNkvM/TvgAPLelkXI/AAAAAAAACZ0/rafdqnGwEyk/s72-c/coduyen.jpg
    http
    IEXPLORE.EXE
    653 B
    4.5kB
    7
    7

    HTTP Request

    GET http://4.bp.blogspot.com/-t74Gq0wNkvM/TvgAPLelkXI/AAAAAAAACZ0/rafdqnGwEyk/s72-c/coduyen.jpg

    HTTP Response

    200
  • 142.250.178.14:443
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_0?le=scs
    tls, http
    IEXPLORE.EXE
    7.6kB
    168.1kB
    77
    132

    HTTP Request

    GET https://apis.google.com/js/plusone.js

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_0?le=scs

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_1?le=scs

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_2?le=scs

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/js/rpc:shindig_random.js?onload=init

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.5oZHy0SiJxw.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA/cb=gapi.loaded_0?le=scs

    HTTP Response

    200
  • 172.217.16.225:80
    http://3.bp.blogspot.com/-NCoeUHH77NI/T_17-vYBCuI/AAAAAAAAAVI/w68X40lulXM/s1600/news.gif
    http
    IEXPLORE.EXE
    1.1kB
    6.5kB
    9
    10

    HTTP Request

    GET http://3.bp.blogspot.com/-g-1w_QEe3kY/TtUVEKtKz4I/AAAAAAAABa8/dpyPKmNP5K0/s72-c/Hugo+3d.jpg

    HTTP Response

    200

    HTTP Request

    GET http://3.bp.blogspot.com/-NCoeUHH77NI/T_17-vYBCuI/AAAAAAAAAVI/w68X40lulXM/s1600/news.gif

    HTTP Response

    200
  • 142.250.178.14:443
    apis.google.com
    tls
    IEXPLORE.EXE
    752 B
    4.6kB
    10
    9
  • 172.217.16.225:80
    http://2.bp.blogspot.com/-IG3nrrs95kg/TvAe3mAkZPI/AAAAAAAAAWA/W7dDg69KcJY/s72-c/ln.jpg
    http
    IEXPLORE.EXE
    602 B
    1.8kB
    6
    5

    HTTP Request

    GET http://2.bp.blogspot.com/-IG3nrrs95kg/TvAe3mAkZPI/AAAAAAAAAWA/W7dDg69KcJY/s72-c/ln.jpg

    HTTP Response

    404
  • 172.217.16.225:80
    http://2.bp.blogspot.com/-k8lNazH9LWc/TsImV8cy0LI/AAAAAAAAA7s/46fE-Hkcdmo/s72-c/cgcd.jpeg
    http
    IEXPLORE.EXE
    651 B
    5.5kB
    7
    7

    HTTP Request

    GET http://2.bp.blogspot.com/-k8lNazH9LWc/TsImV8cy0LI/AAAAAAAAA7s/46fE-Hkcdmo/s72-c/cgcd.jpeg

    HTTP Response

    200
  • 172.217.16.225:80
    http://4.bp.blogspot.com/--P80DNVZdI4/TuC_7e4tT3I/AAAAAAAAB0I/Vz7QZ8zxb-Y/s72-c/finaldesti.jpg
    http
    IEXPLORE.EXE
    656 B
    4.7kB
    7
    7

    HTTP Request

    GET http://4.bp.blogspot.com/--P80DNVZdI4/TuC_7e4tT3I/AAAAAAAAB0I/Vz7QZ8zxb-Y/s72-c/finaldesti.jpg

    HTTP Response

    200
  • 172.217.169.14:443
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fjquery.min.js
    tls, http
    IEXPLORE.EXE
    1.7kB
    9.2kB
    13
    15

    HTTP Request

    GET https://sites.google.com/site/share123vn/jquery.min.js

    HTTP Response

    302

    HTTP Request

    GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fjquery.min.js

    HTTP Response

    302
  • 216.58.204.74:80
    http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
    http
    IEXPLORE.EXE
    1.0kB
    26.5kB
    16
    22

    HTTP Request

    GET http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js

    HTTP Response

    200
  • 172.67.70.113:80
    http://www.logomaker.com/logo-images/96cec9c65ddf2aea.gif
    http
    IEXPLORE.EXE
    625 B
    2.0kB
    7
    5

    HTTP Request

    GET http://www.logomaker.com/logo-images/96cec9c65ddf2aea.gif

    HTTP Response

    301
  • 216.58.204.74:80
    ajax.googleapis.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 172.67.70.113:80
    www.logomaker.com
    IEXPLORE.EXE
    466 B
    92 B
    10
    2
  • 172.217.16.225:80
    http://3.bp.blogspot.com/-Y5K_r-GurSI/To_7bYhUYoI/AAAAAAAAAfM/MsZIw_hlh0k/s72-c/Heartstrings.jpg
    http
    IEXPLORE.EXE
    612 B
    1.8kB
    6
    5

    HTTP Request

    GET http://3.bp.blogspot.com/-Y5K_r-GurSI/To_7bYhUYoI/AAAAAAAAAfM/MsZIw_hlh0k/s72-c/Heartstrings.jpg

    HTTP Response

    404
  • 64.233.166.82:80
    http://js-css-image.googlecode.com/files/tmlv.js
    http
    IEXPLORE.EXE
    547 B
    1.9kB
    6
    4

    HTTP Request

    GET http://js-css-image.googlecode.com/files/tmlv.js

    HTTP Response

    404
  • 64.233.166.82:80
    anhnc.googlecode.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 172.217.169.14:443
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fnews.js
    tls, http
    IEXPLORE.EXE
    1.5kB
    9.6kB
    13
    15

    HTTP Request

    GET https://sites.google.com/site/share123vn/news.js

    HTTP Response

    302

    HTTP Request

    GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fnews.js

    HTTP Response

    302
  • 142.250.180.9:443
    https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css
    tls, http
    IEXPLORE.EXE
    1.2kB
    12.4kB
    14
    15

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css

    HTTP Response

    200
  • 142.250.180.9:443
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,LvGhrf,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,WO9ee,WhJNk,Wt6vjf,XVMNvd,YwHGTd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,p3hmRc,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=P6sQOc
    tls, http
    IEXPLORE.EXE
    14.3kB
    251.0kB
    119
    207

    HTTP Request

    GET https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6542819528888209797&zx=0809aa9c-9fd0-47a8-b960-32e98ed8d47c

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/comment-iframe.g?blogID=6542819528888209797&postID=2206107618372053289&blogspotRpcToken=7568467

    HTTP Response

    302

    HTTP Request

    GET https://www.blogger.com/comment-iframe.g?blogID=6542819528888209797&postID=2206107618372053289&blogspotRpcToken=7568467&bpli=1

    HTTP Response

    301

    HTTP Request

    GET https://www.blogger.com/comment/frame/6542819528888209797?po=2206107618372053289

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/am=xmCAMw/d=1/excm=_b,_tp,commentformiframeview/ed=1/dg=0/wt=2/ujg=1/rs=AEy-KP0tfnwjP9ERRWrVRAfCVHnKkAuegg/m=_b,_tp

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=_b,_tp/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,ZDZcre,OTA3Ae,ZwDk9d,V3dDOb,mI3LFb,WO9ee,eD1YLc,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,lazG7b,XVMNvd,L1AAkb,KUM7Z,hc6Ubd,lwddkf,gychg,w9hDv,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,A7fCU,mdR7q,wmnU7d,xQtZb,Z5uLle,JNoxi,MI6k7c,kjKdXe,BVgquf,hKSk3e,MdUzUe,zbML3c,zr1jrb,Uas9Hd,pjICDe

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=VXdfxd,fgib1c,YwHGTd,pxq3x

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,WO9ee,WhJNk,Wt6vjf,XVMNvd,YwHGTd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=p3hmRc,LvGhrf,RqjULd

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,LvGhrf,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,WO9ee,WhJNk,Wt6vjf,XVMNvd,YwHGTd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,fgib1c,gZjhIf,gychg,hKSk3e,hc6Ubd,hhhU8,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,p3hmRc,pjICDe,pxq3x,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=P6sQOc

    HTTP Response

    200
  • 172.217.169.14:443
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fhover_textcolor.js
    tls, http
    IEXPLORE.EXE
    1.7kB
    9.2kB
    13
    15

    HTTP Request

    GET https://sites.google.com/site/share123vn/hover_textcolor.js

    HTTP Response

    302

    HTTP Request

    GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fhover_textcolor.js

    HTTP Response

    302
  • 142.250.180.9:443
    https://www.blogger.com/static/v1/jsbin/186635561-comment_from_post_iframe.js
    tls, http
    IEXPLORE.EXE
    1.3kB
    12.2kB
    14
    15

    HTTP Request

    GET https://www.blogger.com/static/v1/jsbin/186635561-comment_from_post_iframe.js

    HTTP Response

    200
  • 142.250.180.9:443
    https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,gZjhIf,gychg,hKSk3e,hc6Ubd,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk
    tls, http
    IEXPLORE.EXE
    3.8kB
    67.9kB
    36
    56

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/1527282520-widgets.js

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_US.jXJSRNXnqks.es5.O/ck=boq-blogger.BloggerCommentUi.VPUR_3QK3rg.L.I11.O/am=xmCAMw/d=1/exm=A7fCU,BVgquf,EFQ78c,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,e5qFLc,eD1YLc,gZjhIf,gychg,hKSk3e,hc6Ubd,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,pjICDe,vfuNJf,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,zbML3c,zr1jrb/excm=_b,_tp,commentformiframeview/ed=1/wt=2/ujg=1/rs=AEy-KP0dwbE31S1lzl9zSOnkeS3VMY8BDQ/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk

    HTTP Response

    200
  • 172.217.169.14:443
    https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fswitch-display.js
    tls, http
    IEXPLORE.EXE
    1.5kB
    9.5kB
    13
    15

    HTTP Request

    GET https://sites.google.com/site/share123vn/switch-display.js

    HTTP Response

    302

    HTTP Request

    GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fshare123vn%2Fswitch-display.js

    HTTP Response

    302
  • 64.233.166.82:80
    http://anhnc.googlecode.com/svn/trunk/ver2/ancmedia.js
    http
    IEXPLORE.EXE
    553 B
    1.9kB
    6
    4

    HTTP Request

    GET http://anhnc.googlecode.com/svn/trunk/ver2/ancmedia.js

    HTTP Response

    404
  • 64.233.166.82:80
    anhnc.googlecode.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 64.233.166.82:443
    https://dan14vn.googlecode.com/files/sdropbox.js
    tls, http
    IEXPLORE.EXE
    1.1kB
    6.7kB
    12
    11

    HTTP Request

    GET https://dan14vn.googlecode.com/files/sdropbox.js

    HTTP Response

    404
  • 64.233.166.82:443
    https://dan14vn.googlecode.com/files/cdropbox.js
    tls, http
    IEXPLORE.EXE
    1.1kB
    6.7kB
    11
    10

    HTTP Request

    GET https://dan14vn.googlecode.com/files/cdropbox.js

    HTTP Response

    404
  • 46.51.221.158:80
    i8.upanh.com
    IEXPLORE.EXE
    190 B
    132 B
    4
    3
  • 46.51.221.158:80
    http://i8.upanh.com/2013/0814/07//57169781.728x90ads.png
    http
    IEXPLORE.EXE
    572 B
    443 B
    6
    4

    HTTP Request

    GET http://i8.upanh.com/2013/0814/07//57169781.728x90ads.png

    HTTP Response

    308
  • 58.187.8.10:80
    giaoduc.net.vn
    IEXPLORE.EXE
    152 B
    3
  • 58.187.8.10:80
    http://giaoduc.net.vn/Uploaded/tuannam/2011_12_27/danh%20hoc%20sinh%20_%20giao%20duc%20viet%20nam.jpg
    http
    IEXPLORE.EXE
    1.6kB
    1.1kB
    19
    13

    HTTP Request

    GET http://giaoduc.net.vn/Uploaded/tuannam/2011_12_27/danh%20hoc%20sinh%20_%20giao%20duc%20viet%20nam.jpg

    HTTP Response

    301
  • 172.67.70.113:443
    https://www.logomaker.com/logo-images/96cec9c65ddf2aea.gif
    tls, http
    IEXPLORE.EXE
    1.1kB
    6.8kB
    11
    13

    HTTP Request

    GET https://www.logomaker.com/logo-images/96cec9c65ddf2aea.gif

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r4.crl
    http
    IEXPLORE.EXE
    604 B
    4.1kB
    8
    6

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200

    HTTP Request

    GET http://c.pki.goog/r/r4.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/gsr1.crl
    http
    IEXPLORE.EXE
    350 B
    2.6kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/gsr1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67
    http
    IEXPLORE.EXE
    1.2kB
    4.6kB
    11
    8

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHiTojcR%2FDm3CTAylT4o25o%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67
    http
    IEXPLORE.EXE
    1.2kB
    3.8kB
    10
    7

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHiTojcR%2FDm3CTAylT4o25o%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1tnto7KpsAhA%2BCjutvD67

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC43tOywHj%2BZRL%2FyfPgB5LY
    http
    IEXPLORE.EXE
    1.1kB
    4.6kB
    9
    8

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGdE1QgSdYy7EKQp2lG7B7I%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC43tOywHj%2BZRL%2FyfPgB5LY

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS
    http
    IEXPLORE.EXE
    1.1kB
    3.8kB
    9
    7

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS
    http
    IEXPLORE.EXE
    1.2kB
    3.8kB
    10
    7

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDQHFkpJVehgBDuGMMGYHaS

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    http
    IEXPLORE.EXE
    844 B
    3.1kB
    8
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQChYW4k3T49TxBVstZH9M00

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    http
    IEXPLORE.EXE
    890 B
    3.1kB
    9
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi
    http
    IEXPLORE.EXE
    840 B
    3.1kB
    8
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGdE1QgSdYy7EKQp2lG7B7I%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D
    http
    IEXPLORE.EXE
    922 B
    3.1kB
    9
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQChYW4k3T49TxBVstZH9M00

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECAUAyvUUMLWCt%2Ftp0Ge%2FnU%3D

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi
    http
    IEXPLORE.EXE
    838 B
    3.1kB
    8
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQD4ZvdMc2VaVBBsza0qVaGi

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D
    http
    IEXPLORE.EXE
    892 B
    3.1kB
    9
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGYSZpbsHfUdCjrSLn2WLsM%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D

    HTTP Response

    200
  • 142.250.178.3:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D
    http
    IEXPLORE.EXE
    786 B
    1.6kB
    7
    4

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDREXAZkIcRFgn9FoWvtnQ0

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACED%2BqlTn3J439Eh%2BkaOauLws%3D

    HTTP Response

    200
  • 142.251.173.84:443
    https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&ifkv=AVdkyDlSKPoPHiWyDdzl96W0TuTMrrY5c9YxVwAZlr_zMXeDFOzHncLCXRmXzYMZtbKHIo4XC1gisQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2014580722%3A1736571351893739&ddm=1
    tls, http
    IEXPLORE.EXE
    6.5kB
    173.3kB
    76
    138

    HTTP Request

    GET https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/jquery.min.js&osid=1&passive=1209600&ifkv=AeZLP99TLqMSdtejoipr8O2VZWS7EbMftmksj65GONEORbpa07v7n866fc5458qL_PuwO7eTxtOLmQ

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fjquery.min.js&ifkv=AVdkyDlSKPoPHiWyDdzl96W0TuTMrrY5c9YxVwAZlr_zMXeDFOzHncLCXRmXzYMZtbKHIo4XC1gisQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2014580722%3A1736571351893739&ddm=1

    HTTP Response

    200
  • 142.251.173.84:443
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    tls, http
    IEXPLORE.EXE
    20.2kB
    521.9kB
    226
    431

    HTTP Request

    GET https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/switch-display.js&osid=1&passive=1209600&ifkv=AeZLP98pfcIcTKiYvM_-1R3SUx3Ah8xEJvWB0TqhYz70yHiCMmCOA3hdqe9bEBtJTz2kyJIKUinkDg

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fswitch-display.js&ifkv=AVdkyDkPyv0-IeQj3a-MnDpdY1MjjF86a5FBpk9UO28wHC_z2E0qSQciPi0b_R_B_luv1pUvqTmTPQ&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-468359544%3A1736571351636381&ddm=1

    HTTP Response

    200

    HTTP Request

    GET https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/hover_textcolor.js&osid=1&passive=1209600&ifkv=AeZLP9-F-0jCJCcm5N1W4qymdvfB67TXI89BGhUcnkrjmgD7FSqzumAokoiwp2ppKWHPqpYr4r1qhw

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fhover_textcolor.js&ifkv=AVdkyDm6Pvvp1vN047nHqJdb-5Q3uc1K2CHd6MgQFQpE-ytoK0HcuUApbt0Iyf3FMrqhz_-_fbTqiw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273485502%3A1736571351931186&ddm=1

    HTTP Response

    200

    HTTP Request

    GET https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/InteractiveLogin?continue=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&followup=https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path%3D/share123vn/news.js&osid=1&passive=1209600&ifkv=AVdkyDlTMklMtocGSHvtGLHgKWTq72a6FiveC-qDyOqJSymEoJb-0e0xSvKr4jDjLevSgnGkduRY

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&followup=https%3A%2F%2Fsites.google.com%2Fsite%2Fsites%2Fsystem%2Ferrors%2FWebspaceNotFound%3Fpath%3D%2Fshare123vn%2Fnews.js&ifkv=AVdkyDnwGsE8FISwFnRsourwzXr0LBHCsq7ahugKzPKAy_GH0fehtiHT5UUgWsiR_ZtHEjq7h_rN&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1073236767%3A1736571352204110&ddm=1

    HTTP Response

    200

    HTTP Request

    GET https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D6542819528888209797%26postID%3D2206107618372053289%26blogspotRpcToken%3D7568467%26bpli%3D1&go=true

    HTTP Response

    302

    HTTP Request

    GET https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__

    HTTP Response

    200
  • 142.251.173.84:443
    accounts.google.com
    tls
    IEXPLORE.EXE
    788 B
    4.6kB
    10
    9
  • 142.250.200.33:443
    lh3.googleusercontent.com
    tls
    IEXPLORE.EXE
    756 B
    9.7kB
    10
    11
  • 142.250.200.33:443
    https://lh3.googleusercontent.com/-ruEi4Da_eUo/UD2toEwlIcI/AAAAAAAAAx0/E9_31Jdip6o/s1900/bg_all_page.gif
    tls, http
    IEXPLORE.EXE
    1.2kB
    10.3kB
    11
    12

    HTTP Request

    GET https://lh3.googleusercontent.com/-ruEi4Da_eUo/UD2toEwlIcI/AAAAAAAAAx0/E9_31Jdip6o/s1900/bg_all_page.gif

    HTTP Response

    200
  • 142.250.200.33:443
    lh4.googleusercontent.com
    tls
    IEXPLORE.EXE
    762 B
    9.8kB
    10
    12
  • 142.250.200.33:443
    https://lh4.googleusercontent.com/-eDch893wUfs/UD2tqpAgpEI/AAAAAAAAAy4/BphPqa-iO7w/s128/process.png
    tls, http
    IEXPLORE.EXE
    1.2kB
    12.3kB
    12
    13

    HTTP Request

    GET https://lh4.googleusercontent.com/-eDch893wUfs/UD2tqpAgpEI/AAAAAAAAAy4/BphPqa-iO7w/s128/process.png

    HTTP Response

    200
  • 142.250.200.33:443
    lh6.googleusercontent.com
    tls
    IEXPLORE.EXE
    762 B
    9.8kB
    10
    12
  • 142.250.200.33:443
    https://lh6.googleusercontent.com/-f4C0PvUIAR4/UD2tohAGTuI/AAAAAAAAAyE/tx68V7Rp1ok/s1900/bg_top.gif
    tls, http
    IEXPLORE.EXE
    1.2kB
    10.8kB
    11
    12

    HTTP Request

    GET https://lh6.googleusercontent.com/-f4C0PvUIAR4/UD2tohAGTuI/AAAAAAAAAyE/tx68V7Rp1ok/s1900/bg_top.gif

    HTTP Response

    200
  • 172.217.169.14:80
    www.youtube.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 172.217.169.14:80
    http://www.youtube.com/embed/rMHZ8MwgOUk
    http
    IEXPLORE.EXE
    549 B
    1.0kB
    6
    5

    HTTP Request

    GET http://www.youtube.com/embed/rMHZ8MwgOUk

    HTTP Response

    301
  • 172.217.169.14:443
    https://www.youtube.com/youtubei/v1/log_event?alt=json
    tls, http
    IEXPLORE.EXE
    33.0kB
    981.5kB
    378
    721

    HTTP Request

    GET https://www.youtube.com/embed/rMHZ8MwgOUk

    HTTP Response

    200

    HTTP Request

    GET https://www.youtube.com/s/player/3ede36f2/www-player.css

    HTTP Response

    200

    HTTP Request

    GET https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/base.js

    HTTP Response

    200

    HTTP Request

    POST https://www.youtube.com/api/stats/qoe?cpn=dZ_6qNrn2poqrKxN&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C127326%2C26443548%2C7111%2C36343%2C9954%2C34656%2C46919%2C12193%2C19100%2C27818%2C18053%2C591%2C7505%2C5541%2C1823%2C3186%2C7706%2C6942%2C408%2C20473%2C8%2C10631%2C9243%2C1581%2C1690%2C14%2C3943%2C2%2C120%2C366%2C1684%2C4903%2C3025%2C2981%2C5921%2C4263%2C681%2C6266%2C2049%2C1258%2C3476%2C2706%2C2261%2C7764%2C2035%2C251%2C1524%2C233%2C39%2C4252%2C916%2C31%2C3313%2C436%2C2%2C3481%2C189%2C4343%2C1892&cl=713071505&seq=1&event=streamingstats&docid=rMHZ8MwgOUk&cbr=IE&cbrver=11.0&c=WEB_EMBEDDED_PLAYER&cver=1.20250107.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=6.1&cplatform=DESKTOP&vps=0.000:N,0.001:ER&cmt=0.001:0.000,0.001:0.000&error=0.001:auth::0.000:0;a6s.0;r.Video_unavailablesr.This_video_is_unavailable&vis=0.001:0&bh=0.001:0.000&qclc=ChBkWl82cU5ybjJwb3FyS3hOEAE

    HTTP Response

    204

    HTTP Request

    POST https://www.youtube.com/youtubei/v1/log_event?alt=json

    HTTP Response

    200
  • 172.217.169.14:443
    https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/embed.js
    tls, http
    IEXPLORE.EXE
    4.2kB
    145.9kB
    61
    109

    HTTP Request

    GET https://www.youtube.com/s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js

    HTTP Response

    200

    HTTP Request

    GET https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/embed.js

    HTTP Response

    200
  • 172.217.169.14:443
    www.youtube.com
    tls
    IEXPLORE.EXE
    706 B
    7.1kB
    9
    10
  • 172.217.169.14:443
    www.youtube.com
    tls
    IEXPLORE.EXE
    706 B
    7.1kB
    9
    10
  • 172.217.169.34:443
    googleads.g.doubleclick.net
    tls
    IEXPLORE.EXE
    718 B
    4.8kB
    9
    9
  • 172.217.169.34:443
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    tls, http
    IEXPLORE.EXE
    1.4kB
    6.7kB
    11
    13

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id

    HTTP Response

    302

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

    HTTP Response

    200
  • 142.250.187.230:443
    https://static.doubleclick.net/instream/ad_status.js
    tls, http
    IEXPLORE.EXE
    1.1kB
    6.3kB
    10
    10

    HTTP Request

    GET https://static.doubleclick.net/instream/ad_status.js

    HTTP Response

    200
  • 142.250.187.230:443
    static.doubleclick.net
    tls
    IEXPLORE.EXE
    759 B
    4.8kB
    10
    9
  • 142.250.200.42:443
    https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
    tls, http
    IEXPLORE.EXE
    3.8kB
    53.8kB
    31
    49

    HTTP Request

    POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

    HTTP Response

    200

    HTTP Request

    POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

    HTTP Response

    200
  • 142.250.187.196:443
    https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
    tls, http
    IEXPLORE.EXE
    1.6kB
    6.0kB
    12
    12

    HTTP Request

    GET https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF

    HTTP Response

    200
  • 142.250.187.196:443
    https://www.google.com/js/bg/Lun4LrmyM5hoQ5tJGD0ays7SwWyNPgAu369r1pUn0UA.js
    tls, http
    IEXPLORE.EXE
    3.7kB
    51.0kB
    28
    45

    HTTP Request

    GET https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu

    HTTP Response

    200

    HTTP Request

    GET https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=ffnlezhh6kcd

    HTTP Response

    200

    HTTP Request

    GET https://www.google.com/js/bg/Lun4LrmyM5hoQ5tJGD0ays7SwWyNPgAu369r1pUn0UA.js

    HTTP Response

    200
  • 157.240.221.35:80
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    http
    IEXPLORE.EXE
    726 B
    946 B
    7
    6

    HTTP Request

    GET http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80

    HTTP Response

    301
  • 157.240.221.35:80
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    http
    IEXPLORE.EXE
    726 B
    946 B
    7
    6

    HTTP Request

    GET http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80

    HTTP Response

    301
  • 157.240.221.35:443
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    tls, http
    IEXPLORE.EXE
    1.3kB
    6.8kB
    13
    13

    HTTP Request

    GET https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80

    HTTP Response

    200
  • 157.240.221.35:443
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80
    tls, http
    IEXPLORE.EXE
    1.4kB
    7.1kB
    15
    14

    HTTP Request

    GET https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2FShare123.vn&layout=standard&show_faces=true&width=53&action=like&colorscheme=light&height=80

    HTTP Response

    200
  • 142.250.200.3:443
    https://ssl.gstatic.com/accounts/o/2254111616-postmessagerelay.js
    tls, http
    IEXPLORE.EXE
    1.4kB
    10.4kB
    12
    13

    HTTP Request

    GET https://ssl.gstatic.com/accounts/o/2254111616-postmessagerelay.js

    HTTP Response

    200
  • 142.250.200.3:443
    ssl.gstatic.com
    tls
    IEXPLORE.EXE
    752 B
    4.6kB
    10
    9
  • 58.187.8.10:443
    giaoduc.net.vn
    tls
    IEXPLORE.EXE
    965 B
    5.2kB
    14
    12
  • 123.30.41.185:80
    giaoduc.net.vn
    IEXPLORE.EXE
    466 B
    132 B
    10
    3
  • 123.30.41.185:443
    giaoduc.net.vn
    tls
    IEXPLORE.EXE
    755 B
    3.7kB
    9
    8
  • 2.19.117.18:80
    http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
    http
    399 B
    1.7kB
    4
    4

    HTTP Request

    GET http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl

    HTTP Response

    200
  • 92.123.241.137:80
    http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl
    http
    393 B
    1.8kB
    4
    4

    HTTP Request

    GET http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl

    HTTP Response

    200
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    799 B
    7.9kB
    10
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.8kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    785 B
    7.9kB
    9
    13
  • 142.251.173.84:443
    accounts.google.com
    tls
    IEXPLORE.EXE
    650 B
    4.5kB
    7
    8
  • 142.251.173.84:443
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__
    tls, http
    IEXPLORE.EXE
    2.3kB
    7.4kB
    12
    14

    HTTP Request

    GET https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__

    HTTP Response

    200

    HTTP Request

    GET https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.5oZHy0SiJxw.O%2Fd%3D1%2Frs%3DAHpOoo-Hry6DG-RE4t9kNz_t6hiwmwXOmA%2Fm%3D__features__

    HTTP Response

    200
  • 172.217.169.34:443
    googleads.g.doubleclick.net
    tls
    IEXPLORE.EXE
    652 B
    4.7kB
    7
    7
  • 172.217.169.34:443
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    tls, http
    IEXPLORE.EXE
    1.4kB
    6.7kB
    9
    12

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id

    HTTP Response

    302

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

    HTTP Response

    200
  • 142.250.180.9:443
    https://www.blogger.com/_/BloggerCommentUi/gen204/?tmambps=-1&rtembps=-1&rttms=-1
    tls, http
    IEXPLORE.EXE
    1.3kB
    5.8kB
    8
    9

    HTTP Request

    GET https://www.blogger.com/_/BloggerCommentUi/gen204/?tmambps=-1&rtembps=-1&rttms=-1

    HTTP Response

    204
  • 142.250.180.9:443
    www.blogger.com
    tls
    IEXPLORE.EXE
    692 B
    4.5kB
    8
    8
  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    61 B
    108 B
    1
    1

    DNS Request

    www.blogger.com

    DNS Response

    142.250.180.9

  • 8.8.8.8:53
    sites.google.com
    dns
    IEXPLORE.EXE
    62 B
    78 B
    1
    1

    DNS Request

    sites.google.com

    DNS Response

    172.217.169.14

  • 8.8.8.8:53
    www.logomaker.com
    dns
    IEXPLORE.EXE
    63 B
    111 B
    1
    1

    DNS Request

    www.logomaker.com

    DNS Response

    172.67.70.113
    104.26.10.156
    104.26.11.156

  • 8.8.8.8:53
    i8.upanh.com
    dns
    IEXPLORE.EXE
    58 B
    74 B
    1
    1

    DNS Request

    i8.upanh.com

    DNS Response

    46.51.221.158

  • 8.8.8.8:53
    ajax.googleapis.com
    dns
    IEXPLORE.EXE
    65 B
    81 B
    1
    1

    DNS Request

    ajax.googleapis.com

    DNS Response

    216.58.204.74

  • 8.8.8.8:53
    3.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    3.bp.blogspot.com

    DNS Response

    172.217.16.225

  • 8.8.8.8:53
    2.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    2.bp.blogspot.com

    DNS Response

    172.217.16.225

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    61 B
    98 B
    1
    1

    DNS Request

    apis.google.com

    DNS Response

    142.250.178.14

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    4.bp.blogspot.com

    DNS Response

    172.217.16.225

  • 8.8.8.8:53
    js-css-image.googlecode.com
    dns
    IEXPLORE.EXE
    73 B
    134 B
    1
    1

    DNS Request

    js-css-image.googlecode.com

    DNS Response

    64.233.166.82

  • 8.8.8.8:53
    giaoduc.net.vn
    dns
    IEXPLORE.EXE
    60 B
    92 B
    1
    1

    DNS Request

    giaoduc.net.vn

    DNS Response

    58.187.8.10
    123.30.41.185

  • 8.8.8.8:53
    dan14vn.googlecode.com
    dns
    IEXPLORE.EXE
    68 B
    129 B
    1
    1

    DNS Request

    dan14vn.googlecode.com

    DNS Response

    64.233.166.82

  • 8.8.8.8:53
    widget.adnet.vn
    dns
    IEXPLORE.EXE
    61 B
    123 B
    1
    1

    DNS Request

    widget.adnet.vn

  • 8.8.8.8:53
    anhnc.googlecode.com
    dns
    IEXPLORE.EXE
    66 B
    127 B
    1
    1

    DNS Request

    anhnc.googlecode.com

    DNS Response

    64.233.166.82

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.178.3

  • 8.8.8.8:53
    accounts.google.com
    dns
    IEXPLORE.EXE
    65 B
    81 B
    1
    1

    DNS Request

    accounts.google.com

    DNS Response

    142.251.173.84

  • 8.8.8.8:53
    lh3.googleusercontent.com
    dns
    IEXPLORE.EXE
    71 B
    116 B
    1
    1

    DNS Request

    lh3.googleusercontent.com

    DNS Response

    142.250.200.33

  • 8.8.8.8:53
    lh4.googleusercontent.com
    dns
    IEXPLORE.EXE
    71 B
    116 B
    1
    1

    DNS Request

    lh4.googleusercontent.com

    DNS Response

    142.250.200.33

  • 8.8.8.8:53
    lh6.googleusercontent.com
    dns
    IEXPLORE.EXE
    71 B
    116 B
    1
    1

    DNS Request

    lh6.googleusercontent.com

    DNS Response

    142.250.200.33

  • 8.8.8.8:53
    www.youtube.com
    dns
    IEXPLORE.EXE
    61 B
    319 B
    1
    1

    DNS Request

    www.youtube.com

    DNS Response

    172.217.169.14
    216.58.201.110
    142.250.200.14
    216.58.213.14
    142.250.187.238
    142.250.180.14
    142.250.200.46
    172.217.169.46
    216.58.204.78
    142.250.178.14
    142.250.187.206
    172.217.16.238
    172.217.169.78
    142.250.179.238

  • 8.8.8.8:53
    s0.adnet.vn
    dns
    IEXPLORE.EXE
    57 B
    119 B
    1
    1

    DNS Request

    s0.adnet.vn

  • 8.8.8.8:53
    googleads.g.doubleclick.net
    dns
    IEXPLORE.EXE
    73 B
    89 B
    1
    1

    DNS Request

    googleads.g.doubleclick.net

    DNS Response

    172.217.169.34

  • 8.8.8.8:53
    static.doubleclick.net
    dns
    IEXPLORE.EXE
    68 B
    84 B
    1
    1

    DNS Request

    static.doubleclick.net

    DNS Response

    142.250.187.230

  • 8.8.8.8:53
    jnn-pa.googleapis.com
    dns
    IEXPLORE.EXE
    67 B
    275 B
    1
    1

    DNS Request

    jnn-pa.googleapis.com

    DNS Response

    142.250.200.42
    142.250.178.10
    172.217.16.234
    142.250.179.234
    172.217.169.10
    216.58.201.106
    142.250.200.10
    142.250.180.10
    216.58.213.10
    216.58.204.74
    142.250.187.202
    142.250.187.234
    172.217.169.42

  • 8.8.8.8:53
    www.google.com
    dns
    IEXPLORE.EXE
    60 B
    76 B
    1
    1

    DNS Request

    www.google.com

    DNS Response

    142.250.187.196

  • 8.8.8.8:53
    www.facebook.com
    dns
    IEXPLORE.EXE
    62 B
    107 B
    1
    1

    DNS Request

    www.facebook.com

    DNS Response

    157.240.221.35

  • 8.8.8.8:53
    ssl.gstatic.com
    dns
    IEXPLORE.EXE
    61 B
    77 B
    1
    1

    DNS Request

    ssl.gstatic.com

    DNS Response

    142.250.200.3

  • 8.8.8.8:53
    crl.microsoft.com
    dns
    63 B
    162 B
    1
    1

    DNS Request

    crl.microsoft.com

    DNS Response

    2.19.117.18
    2.19.117.22

  • 8.8.8.8:53
    www.microsoft.com
    dns
    iexplore.exe
    63 B
    230 B
    1
    1

    DNS Request

    www.microsoft.com

    DNS Response

    92.123.241.137

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    dc1ecefb0cf599e27b2b1a59a3152826

    SHA1

    3ffbc73e7c268ba0663caafc5878c6283d56e65f

    SHA256

    fcafb7de8ffcf05472705ec76832f5de9170371d2d95306a413f6dc63f3ee176

    SHA512

    f62436c6ff88829d54f5d94bb54362a78f1b901fb4c0378f27cddf48a6b0e577f45aa599170ba9bd9bf2acdf44b4d7fb541414118ca79291a94b97950fae83f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6DA548C7E5915679F87E910D6581DEF1_DA783F5F6B4EACF017C07E5A0C9B6E7D

    Filesize

    471B

    MD5

    fdaaff306f9908166f3fec130e798df8

    SHA1

    0ab422ed789b50e706ba69c9f787443dd5e6f9f7

    SHA256

    4bffcf6a3521fd5825a18d7fe6eedd7549facf2f7953c6e05b81fd3a9bb81a55

    SHA512

    1b1d4ee0c4d003b072987d0a67efc691f516ad1933b2df5409b411420f33e7692a15bc4b0a4405ae2e558a59effd4da610a49de2cc89785135568bb8ba829e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    65bb6c64db79f5b8d3b7060723722ac2

    SHA1

    9892c6c56fd3ed486e59eb68f8fce3c1d4bcd949

    SHA256

    c79e966e5f597d72dbb28ef8c2d5af9ac0585668e65f595b181f72dfe173e89f

    SHA512

    49c2d9a6d6b5ba510c6377ff4abd8f21ed632f3e487a4ead5ea1b8d7e08527df0a076a302da73312bd3ad48844d8545c10c3be89157a2cd5226edfe906be9a8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    80cb0eb1be2d030ef4a4bb9d8983826d

    SHA1

    b678fadcc501a19697922b0509f4345c2743a25f

    SHA256

    2f54c644734c5cb093caeecd320bcc260ba2adf420734f18d84b40db9f033d28

    SHA512

    082f0fbd5a395ed15d98d43a7834f211fe9306f72bd46922dc608b2ab7e6db3870279779f7c121cbbda89ca14351d467fa30e59d0eb715b4833d7e7de74dd282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    44462f90044e287999ff56c8f963aceb

    SHA1

    131606f25fc6adb3e543b7f9f8417b9a17874cc5

    SHA256

    2e11aac4a0b0fee1ae9717415331ec783af6f15db689563ffe424782eca2eb5e

    SHA512

    7b6a97c1bfaecac1bfc77e5d00434d6e7440af3a5d7bf56d467d57027d21b7ca418272e220e9ee2709feeae7b6e665fe0868564bd99cab4b8a6dd972fd7823aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8e1edf183bb46ac4bba440d78ebf9cda

    SHA1

    3810d5f22ea509a3f968380586af2792135d5b9a

    SHA256

    728c62d2876e5db6ffeaf7ff19efdd0864ecaac9d864c7bb478083ba29de1157

    SHA512

    9e8d05e586663e2fb99bc0f1b4ca3f46ef4d58da6cdd468c88b6d349ee6c26c9fc4d6416f42fc7e8cf9d3e55fcc4c8be72f0574812a5cf84d02f128778096587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f759d3bca0e466852e30b25fa5644e76

    SHA1

    9013084cb0bdfa82e470c4e73a99a4bd7d18dd4e

    SHA256

    d052c28a734c3ed8d505ae6a39970d301c46f55c9580501ed9c5a8ffa2b62861

    SHA512

    d2fbd89f9153f3c89f76f4aebb740786f0682b0818dabe6d159a407065326965aed8d02c30fbfdfdd1004da61eafe6141258635c3fd5f52f7518e06b2a24bfa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    412e0b9560de94a29b1098b32fdb45d7

    SHA1

    11b31a92172616f40c09aa16c8c8f0635e8b9c0d

    SHA256

    023620116ba36b6f51dd786bf57a13be7e12686d6465ab847ccc05a95de1c7ea

    SHA512

    4cdc942e4f28d80130273eb2a89df0da553e6453c5e6838cb7b3f368a4c97611f45f25e297c3265e93d7af3ba4bf1705a423de5ec6c19c283e483a3b0eb95b7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75ad88b951da0edec186ca304bbc400a

    SHA1

    1e2938bd0e26f4c291edf95ddc3682cb52609c60

    SHA256

    6cdb346417d51875358f5498b58cf4ce8364577d9ec581da0f7b6b89360fc2f1

    SHA512

    2f8da9511976895c704a299039956f7cab31bb299a0059fcfb569bba3051d8084c24ba1f3191621971a902a10daec0d4ce91fafa77d4e7900257e7a6837c3fcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a1acebbec0620f0a6ef60900148329b

    SHA1

    ca24535acdc554aa92ebd15835afd3cecaa5c8fb

    SHA256

    a92df35ab445237a27b2b5849691b6b1d6460376349b3c648f764d6a301f2c89

    SHA512

    1311334aae3e3edc230802ebf71c350ae1fafc63e4f1c532c6b79a2f8cea36b8ebf176b987801c61180cb656e7b6405a4230d07d0f656dcf9c5f2e2669707dee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    089ca790ba910272143767d738ec7ce0

    SHA1

    4e65da2181416cc19711ee852b52c0f8308943d4

    SHA256

    56cc1065f2a9942cb8d0c22d7be27ddd762a498284c8f3de2276fec04e693cc2

    SHA512

    12696cd25362364c3be8ef07f1b9427405f50398836088c6508a8981a640179bc0f49b0d4d7e1a55b18bc6398ccd14bd73eb0f0da22312bfc7bdf7249104921d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43953526cc622bd8304b081afc146d8b

    SHA1

    a503619d501584a1c70196f82cd1e104e79cbbd8

    SHA256

    d68f3f80643ba2afbdc4e5d799fb5bb6194130a63f197f55cd085f33ea738cac

    SHA512

    1c609ea6231f1dcaab8a2410b3b85805f85d1d402da135b14eacc54816fa0d4b4f1077d93e21151f0e26c317e80df8a6d4afba7e393c4e597c51f18d4b259b5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe6ad27333ddb62baa419c1de44f52f0

    SHA1

    d159a4574314f3e22050fa4aa20d8cf32cbf37c7

    SHA256

    ad1d7d49046a58442aab4efb606138c298d2dc38ebf2ba152399b4e71cd7e28a

    SHA512

    50772a1c1edd744031408c2278083ccf6d919079154fb4092276b5ae894e6a763b5324b31970b1ebc5b654f8a5c9fd324b5b5ee375ef4e68d63858bbeadf9546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89073ef7176606048283bf8a633993e9

    SHA1

    073e7a4396d010240d9a7f9aa4b86fc54e8a6b8a

    SHA256

    bf585b3c7e783ad7f6786bda77f117d1d16657b7cae57a4cb95a1c42d3f6a0d2

    SHA512

    7ad98eb56ae65b9adfb4ab0d9dc6952fdb0eef91e234cd46c0880aad4915401ebc5bdfd9a14d003468e3bc12f2c2f7cd474a92dfdab57595875d47fd47263f5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98640f164c8aa5af9025af7015e805a0

    SHA1

    adbef1981dbf2477b9170dbe8e6d9efa35726ef5

    SHA256

    0a77f50c619e2e01d8272c819979e8dfa6631f456e26be9a338785d3963f3251

    SHA512

    cfd46d0be8b3298bd49c90a788be19bd135ed82f76d75f0cb11926915a5de6977759494075039560db8df9479bd2610f0f441bc89c22658f86bf0ab29ee1e73c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6eda537058b3b68d69de4eaa55f4ba58

    SHA1

    72f0358aebe00b542e1478561f8ca0a40a9409c4

    SHA256

    a40acc2775ac97aea59bbbdeca12463061a3744a311ce144fe326f0750339d98

    SHA512

    bfab99bd26c68fdbaa47aeb6732bd8714848a11788b9cafb94e14a4d8a9f04ff6c86b55cbe361503b15d14a16fee36437936ddc1c2b55ca8c1977ec488d068b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed19f078fc03fe4d7816d1f1343bc561

    SHA1

    9cff0af05216cf1391fff27abff8fbab8eedb71b

    SHA256

    4a311326bcbb3a365e32a70e6ef17f48f0ff146b4dad4faf3f90f20f00855d33

    SHA512

    51cc808345f45f844c29a3246cc5e5fdcdda0efc3100f8da035a2a5310270139f49c3ba1838c3682ac7e4a6d9b2721a71fcf5d59f0d3e896146f4b57b7a53199

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    238267cf3fd3d4dcfc4d9667bf30aa8f

    SHA1

    4308a5fc77c2c633feed29febd852b1c79653a67

    SHA256

    67e2c76e23afe203a86cd80ee218aebe8d69f2f140d9a6f02834fbb8f58ac34b

    SHA512

    8fc80e0e23232fa0caad62d7ccb7653d257138731a634d7b1a456abc6070db583b7bc0767d709466c0d62aac602a8655bc55c4e05373aca1fa55d3caeaef2cea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7426dc3f79e34e59d49e6e65f56f9c09

    SHA1

    4b714dfff1f7c34a2f435d17147c34736ed1dbd4

    SHA256

    f6d90fbb84d9964f95e338694ace89eecbad1cd0d43050d36566dcd4fc3f4564

    SHA512

    4c4587a30a05f7d2d035ce42571902415791a4b221979cb83f1efd54b09d2ab933f878f08833b53da4d9102a2b5d8f912075bb63d3ecfe305c7bcdf3795961b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b182517864a007c12edfb81adbb61f57

    SHA1

    c544b32e4fb9f6eb7ead8a43264b4b5a16218fdd

    SHA256

    428bbac19263214db963ed254fc4e4ea34f3712b6c102b4e36ed8c7d0301fd12

    SHA512

    7d031ff296ab824517f0c1b6886f653fd6bc0160fd363bd801e36118d813984afd1f9a61cd6026fe8fb671715804cecf0ad8d34b698aa25e8d83527ff06aecb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab9b507d1f68b04d6d58d7e750979711

    SHA1

    cf851c6355e3870da21af7346da9937a3408170a

    SHA256

    6483b9c60073cde0c6433a80c636117b12fd627b19fe0165e318fd24ebfb09ce

    SHA512

    671b92995b924e733ad802bfe2ca52bddd3d7d0ec8c67a792547e64c8086bc7cd2010e1c2e9427a3e19ca1fa4de31a8ae3c312be6c34ec229eaa787f670c338d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d23d3f385e55b287e451c71649295b8

    SHA1

    1cfa123987a94b707f3fd3741b3f48ea7d064e50

    SHA256

    bee15dc459c17ad73f6d207d4029c6041b7fbf5d96d5e0bffe0779b22d892d20

    SHA512

    61c88ab8bd0bdb7e6b56b63d9bc945bbd7050216a4ca8fee050a4a68baf9bdcb2424158ed839a97ee6aff350028a3db8ea4e967d9d3ad7454465b9f21f1b3eb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e399aeb500d39b13a857738ef872f67

    SHA1

    e48ba9fe851a12f98325f3c7637a71f9cc9a2546

    SHA256

    2e2c5eb88d5420f9885039290320a391ba959b19e14cbca977c6f1336a04ef9d

    SHA512

    e6352ad5392b44ce7ca09380c3b10308bab3006c308638fbfb91fda44a18d5a366dfb4f43d1e621132afeee6fec9009e05180a002487b0a634af9ac68eefd111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42f859f92a617e3c22e654ba94cbe6d5

    SHA1

    cc731c027d33b858f2cbd3b263bf9c339280e8fa

    SHA256

    7789a96266d520e10f748b78928e70190995800b406ea96dc32125fa384358f6

    SHA512

    e2c52fb16dbfbd36632659b265a0cd84ceeae410ab7238386c8ae9feed153fa354548769bcfa0dc0ea21074813d74e9e1ba6be74ca24ba3c0d9a4bcf013941bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4d891b4b02007d24a27c0ae9e464370

    SHA1

    0dadda2beca714d0665d5d30b550616eb76b3ed0

    SHA256

    c445a18b82c9f09bb3dccffff02b3f8522ef6ea6ee462db0d201dd6a17363769

    SHA512

    a9332574058e0c8d59f66cad9d4fac48f533a92ab352cba95ced6fc5377b81da034b1ee523c9bb9e72f1d6ad2861ae23be5884de85d8e2d10a88271c9634c729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85a948c7f75104ce89f59845e880c755

    SHA1

    ed7b53c74a662d9842ee7ec4441f2404788c2adc

    SHA256

    38462fb9078adc24caa8af2ba7a4b29297c9fa6100eba254a564742188c46f62

    SHA512

    f7d2b9c60c9accb10bff355ba3572ff26fb9f40b2065e85a7cf652d4861efa55f9a465dbc95872e55991f499370ad4ba550556db73cea61dd2d6da6a9c8fd93f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf80e36a14468ba91e46d0ab2170fcaa

    SHA1

    2bf4f45e1a9d3b012e6bad079bebf242d5dd1f45

    SHA256

    eafadcfe58bfb9512141d5c5d36642d92a18eacd0586483bd194e65717ebb51b

    SHA512

    7be3dd91406e1baa14ee8ad057d5fd88d7e63f185feb7f7f517796e7c44bd3c7db3eca161920960ec223fe548c8f7a9a3f48c6d1c1268910029d490e6a996bd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55185631076678f1bfdb9ed59263bc11

    SHA1

    eae9b04fe43ebd34fe42ab92168437c731e74e2a

    SHA256

    1987e38156f286e69f11d7395ac011a7f63a06ea857019c45719a5b2b3ffa811

    SHA512

    04c4fe83c8dff5e873b8a3bd85f3eeb3af9a2bca617d1b4ec22ebd79676cae77f422ca61919f6a55587bdcf19a17039e50e1824b1139f41f8347c6d53645c340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    97d1ad9c80d270897434bc541f80932f

    SHA1

    124631a793bcf6a013f92b7ba70a972560445cc8

    SHA256

    a958d44371b3395748138b75ef27e5aceaab8f5bee7e3e36898165531d91ca62

    SHA512

    bd33c5a541c4c4f1bfd65a9f34a19ab7e144442d718677851264c97494a2c06ee1892a47336b701e209e182ffe25d4a47d860710656dbc25112664e7b3f522e9

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\9S89P32V\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\9S89P32V\www.youtube[1].xml

    Filesize

    228B

    MD5

    5360493c494fa9802c628b843dd34b31

    SHA1

    802f234e024944e9cda4be035e29f0c8c916b99e

    SHA256

    2f50a3ed0b473aa39a68cb7a8c823eeec342d47278e79405afe5503c381e7342

    SHA512

    c36ec8e144e3501486cd56bbbff41bf3d7c7a1fbdc6a383f7ab01f10747f642d2f26b96a21afe4a819a8ac49f807622ecf0c513646bde8d28d532f3491580a5c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\9S89P32V\www.youtube[1].xml

    Filesize

    575B

    MD5

    e8147b8461c209788c1f24bce4960991

    SHA1

    d5aa2309d96d183516b4e45152eee1b047aa9bb2

    SHA256

    f9a8b98c06874218221d56939de370d785e606973dbe183d9942dc09b4d7dafe

    SHA512

    a7dc30eb79bdd4cd362fa919d26ae2bb413b3eff5ce3d26f3449c9aac12bf5ffd6f2f90814b7668c953152a72566e958b03efbab88431620bfb091be3f2ac09f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EB0KZ1Y4\cb=gapi[1].js

    Filesize

    58KB

    MD5

    b103bb58d9e7cecaa60bdf377d328918

    SHA1

    0f094c307bceef833a64f408d2f749a10f79de44

    SHA256

    81dcd274347bd909cf132d3c8bcc9924e41921c33eca07fd6fe5e2a59ca4f5b7

    SHA512

    b1a4fa329b76df7c861771e1dc36749155895dff623cd916811f2af8c95f3bcf9fe75a3b9a56833f066a227444982ff4883459e24f7eead79b521c2ffdcaa844

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EB0KZ1Y4\recaptcha__en[1].js

    Filesize

    547KB

    MD5

    19ddac3be88eda2c8263c5d52fa7f6bd

    SHA1

    c81720778f57c56244c72ce6ef402bb4de5f9619

    SHA256

    b261530f05e272e18b5b5c86d860c4979c82b5b6c538e1643b3c94fc9ba76dd6

    SHA512

    393015b8c7f14d5d4bdb9cceed7cd1477a7db07bc7c40bae7d0a48a2adfa7d56f9d1c3e4ec05c92fde152e72ffa6b75d8bf724e1f63f9bc21421125667afb05c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WCATT3E5\plusone[1].js

    Filesize

    62KB

    MD5

    2e4a448a27b8a58d75f607c7bdcca6f2

    SHA1

    31cf764c6c2240148eaaa2b9816e1219a273d0bc

    SHA256

    d3696859f3485d8aa6f8a4d0054d64fc1ee614e57725221dd1c97b930f02bc3e

    SHA512

    09ca4d8b6a0fc653490921befcb3d752e150ac9abf24d1fdd49c9453fe2baf969b76433a45121451ef642ea3f73f9c62871cdde5e07976ffdc03ee5200e4d35a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WCATT3E5\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    2a64803c4545d283d7a51e71f82a64a0

    SHA1

    d1e190bc4ab6a900cddff5891650f5ddc390e9db

    SHA256

    0a5518064275c2fba33ba69c84f584819aafdc9faa0ce3689c8687fc41f58ed1

    SHA512

    82bd924261272ed025d4938d7e7d5ccd9c6ebfa571b1b6816bf56341ebb70ef9faee807d83ba491a2ddea86e795780ce097fce4957d432d3b44497f5e6e16576

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WUBCGJ0A\2254111616-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c264799bac4a96a4cd63eb09f0476a74

    SHA1

    d8a1077bf625dac9611a37bfb4e6c0cd07978f4c

    SHA256

    17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d

    SHA512

    6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9

  • C:\Users\Admin\AppData\Local\Temp\CabAECA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAECB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.