| www.google.com/jsapi?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png |  142.250.74.164 | | 328 B |
URL www.google.com/jsapi?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png IP142.250.74.164:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash68acd79fb29a50516db07ecd4b01edcd de587579f4f375a7b159776e461fae51181a10b6 aedd47bf40cad1275ae61bb7cb387f75dfadb5e41f0fcedbbd0366ff6aafcd14
GET /jsapi?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://www.gstatic.com/charts/loader.js?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:13 GMT
expires: Wed, 24 Apr 2024 23:08:13 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 328
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js | 142.250.74.42 | | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js IP142.250.74.42:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65168) Hashe85aed5c30d734f1e30646e030d7a817 b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad 8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a
GET /ajax/libs/jquery/1.5.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30082
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:55:58 GMT
expires: Fri, 18 Apr 2025 02:55:58 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 589335
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/show_ads.js | 142.250.74.162 | 200 OK | 11 kB |
URL GET HTTP/2pagead2.googlesyndication.com/pagead/show_ads.js IP142.250.74.162:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (5374) Hashf646a030a17948420f19bcbfa520d35f ccfc9b76ad1feaaa8254b8008485b8d0188aa985 98f73a1eecad46c1cc27215cf6b1a37b45161c50eb7a1e55a9f80d91c121cb99
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:38:13 GMT
expires: Wed, 24 Apr 2024 22:38:13 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 5510643357870208328
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 10551
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fiberhaber.blogspot.com/2012/03?action=getfeed/ | 216.58.207.193 | | 67 kB |
URL fiberhaber.blogspot.com/2012/03?action=getfeed/ IP216.58.207.193:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (601) Hasha42008317510187df4c0eb81cc530747 f433345309150527e4f3166ac79413128438f82e e3a22e318b981fbae81b76c6622a060a9d68d45bc82e0012e7bc9b068611767b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2012/03?action=getfeed/ HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 24 Apr 2024 22:38:12 GMT
date: Wed, 24 Apr 2024 22:38:12 GMT
cache-control: private, max-age=0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
etag: W/"ec2f15740e0ed5b85471796974f45182b578b0ff48e3ffdf9884900db47eb8e0"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 67411
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css | 216.58.207.233 | | 6.6 kB |
URL www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css IP216.58.207.233:0
File typeASCII text, with very long lines (30596) Hashe3f09df1bc175f411d1ec3dfb5afb17b 3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9 1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 04:06:37 GMT
expires: Wed, 23 Apr 2025 04:06:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 07:50:57 GMT
content-type: text/css
vary: Accept-Encoding
age: 153096
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/js/platform.js | 142.250.74.110 | 200 OK | 21 kB |
URL GET HTTP/2apis.google.com/js/platform.js IP142.250.74.110:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE8:68:ED:59:65:88:CD:45:4F:B0:64:88:FF:F3:32:D4:8B:C7:75:F0 ValidityMon, 18 Mar 2024 20:39:12 GMT - Mon, 10 Jun 2024 20:39:11 GMT
File typeJavaScript source, ASCII text, with very long lines (2050) Hashe66acfdb2f1dfcff8c6dba736dd4ab6d 36026360b6c8d750488ef2c739e04969f8c5bcd7 742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21303
date: Wed, 24 Apr 2024 22:38:13 GMT
expires: Wed, 24 Apr 2024 22:38:13 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d8cc7aca923e8ade"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jamu-martin.googlecode.com/files/related-martin.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/2jamu-martin.googlecode.com/files/related-martin.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash50ebeaea93ae525f9f207bbf7ca11cbd 1e50797852a839c9497737b5da788b0d1a566361 cc60f7b2ca41c1bfe4d132442fd59b2034bf4409b8d269e444e95e650255566b
GET /files/related-martin.js HTTP/1.1
Host: jamu-martin.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1584
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fiberhaber.blogspot.com/js/cookienotice.js | 216.58.207.193 | | 2.0 kB |
URL fiberhaber.blogspot.com/js/cookienotice.js IP216.58.207.193:0
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 24 Apr 2024 22:38:13 GMT
expires: Wed, 01 May 2024 22:38:13 GMT
cache-control: public, max-age=604800
last-modified: Wed, 24 Apr 2024 16:53:12 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maskolis.googlecode.com/files/johny-manis.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/3maskolis.googlecode.com/files/johny-manis.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash505faa025496fc1ac69dd0fdee7cc5fb 18660eba7a796ecf6c3131a86468c64860551e1e 74dea237dde774394306ac03f11e4aab950986ab1af1cc4e922bfae8a6978efb
GET /files/johny-manis.js HTTP/1.1
Host: maskolis.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1581
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maskolis.googlecode.com/files/ticker.js | 64.233.165.82 | | 1.6 kB |
URL maskolis.googlecode.com/files/ticker.js IP64.233.165.82:0
CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashd82fa81588e8432de19a189603d9b272 c322a8c503474fb2200ab22c7b7871ae24ba9713 f914eb333c5053141c94a082637b2d22b64168571c50fd0956feee473a50d14f
GET /files/ticker.js HTTP/1.1
Host: maskolis.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1576
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/848617736-widgets.js | 216.58.207.233 | 200 OK | 52 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/848617736-widgets.js IP216.58.207.233:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash70285871f1f1d8f776a0c04a61d21d68 2c140498af2f9a4a8088950d16f675745e556a14 5cc556f7a1301c1c932b1b1f696cbfbc5e131209812b9573204f69b305f05b6c
GET /static/v1/widgets/848617736-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51485
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 01:57:58 GMT
expires: Tue, 22 Apr 2025 01:57:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 00:50:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 247215
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jamu-martin.googlecode.com/files/label.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/2jamu-martin.googlecode.com/files/label.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash90a8ddfb39f1bd38d2a6900187ef8d10 8ef40b44f44c9e15db7ff5f2fe475362092e152a 71323696a41ef19d91082aa468f900ac16fa446ffb5adbe75ef8cc81ab47cc57
GET /files/label.js HTTP/1.1
Host: jamu-martin.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1575
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| johnytemplate.googlecode.com/files/maskolis.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/3johnytemplate.googlecode.com/files/maskolis.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashe362cf3cfeba9015035a2af42108d67a dc1f296f32ed3dbc58408a968d41bfed38c6d77d 42d0b8c2581e6e983afcc82c709749e281d23b1300a435a6e6419c1efca24e23
GET /files/maskolis.js HTTP/1.1
Host: johnytemplate.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1578
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| johnytemplate.googlecode.com/files/page-navigation.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/2johnytemplate.googlecode.com/files/page-navigation.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashb0923bdab42e504331673db9253841a5 9109f5f00f96beaba51ae025756c64c7ed6368f8 5193cab405bc36675312f40bedf631af737d640db2d99c6bb149dfb2ab7e7561
GET /files/page-navigation.js HTTP/1.1
Host: johnytemplate.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1585
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/charts/loader.js?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png | 142.250.74.35 | 200 OK | 18 kB |
URL GET HTTP/2www.gstatic.com/charts/loader.js?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png IP142.250.74.35:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (2186) Hash32bc41d964faa1b95d9c61fc443df579 02d3f83dac14fe996babbfe332779ed182d39d1c 369ae154eab37b7ada7776b934833183bb053ebd1d0255f70ef8944f65cabb0c
GET /charts/loader.js?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fiberhaber.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 18534
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 22:37:00 GMT
expires: Wed, 24 Apr 2024 23:37:00 GMT
cache-control: public, max-age=3600
last-modified: Tue, 04 Apr 2023 17:52:30 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 73
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.blogblog.com/img/icon18_edit_allbkg.gif | 216.58.207.233 | | 162 B |
URL resources.blogblog.com/img/icon18_edit_allbkg.gif IP216.58.207.233:0
File typeGIF image data, version 89a, 18 x 18 Hashc991641178ff05adf0d004298b5eafa9 d8f6ce8ecd92b86d49849360f6b81ceb10b4c941 ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:51:39 GMT
expires: Tue, 30 Apr 2024 01:51:39 GMT
cache-control: public, max-age=604800
last-modified: Mon, 22 Apr 2024 05:50:59 GMT
content-type: image/gif
age: 161194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| bumerang.hurriyet.com.tr/show_ads.js |  83.66.162.14 | | 1.2 kB |
URL bumerang.hurriyet.com.tr/show_ads.js IP83.66.162.14:0 ASN#12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File typeASCII text, with CRLF line terminators Hash1999745c7c5ee8584f1389912d49d448 2d5d03f5e72fa278eea5d88baddf4b258f4f418d 2b46de3afd1e8cc0653c8d4a3e2948694c1837ec796d6c4e221839979bd4e583
GET /show_ads.js HTTP/1.1
Host: bumerang.hurriyet.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Thu, 04 Aug 2016 14:47:25 GMT
Accept-Ranges: bytes
ETag: "8261811d5feed11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
XSrv: BOOM01
Date: Wed, 24 Apr 2024 22:38:11 GMT
Content-Length: 1195
|
|
| maskolis.googlecode.com/files/johny-manis.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/3maskolis.googlecode.com/files/johny-manis.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash505faa025496fc1ac69dd0fdee7cc5fb 18660eba7a796ecf6c3131a86468c64860551e1e 74dea237dde774394306ac03f11e4aab950986ab1af1cc4e922bfae8a6978efb
GET /files/johny-manis.js HTTP/1.1
Host: maskolis.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1581
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| johnytemplate.googlecode.com/files/maskolis.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/3johnytemplate.googlecode.com/files/maskolis.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashe362cf3cfeba9015035a2af42108d67a dc1f296f32ed3dbc58408a968d41bfed38c6d77d 42d0b8c2581e6e983afcc82c709749e281d23b1300a435a6e6419c1efca24e23
GET /files/maskolis.js HTTP/1.1
Host: johnytemplate.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1578
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4.bp.blogspot.com/-Aac_hY6rwsI/T0uEo1UXMnI/AAAAAAAAAVI/1oroDk0GLhc/s1600/Fiberhaber.jpg | 142.250.74.161 | | 6.5 kB |
URL 4.bp.blogspot.com/-Aac_hY6rwsI/T0uEo1UXMnI/AAAAAAAAAVI/1oroDk0GLhc/s1600/Fiberhaber.jpg IP142.250.74.161:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 468x60, components 3 Hasha61490bf78ab5751655711468583007b db920d560f91c6c18b563c3fd31f81e3aab05039 b939b679736b35488cfab871409400e0fb1b58d622a87a9f507079efb501c682
GET /-Aac_hY6rwsI/T0uEo1UXMnI/AAAAAAAAAVI/1oroDk0GLhc/s1600/Fiberhaber.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v152"
expires: Thu, 25 Apr 2024 22:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Fiberhaber.jpg"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:13 GMT
server: fife
content-length: 6510
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maskolis.googlecode.com/files/ticker.js | 64.233.165.82 | | 1.6 kB |
URL maskolis.googlecode.com/files/ticker.js IP64.233.165.82:0
CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashd82fa81588e8432de19a189603d9b272 c322a8c503474fb2200ab22c7b7871ae24ba9713 f914eb333c5053141c94a082637b2d22b64168571c50fd0956feee473a50d14f
GET /files/ticker.js HTTP/1.1
Host: maskolis.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1576
date: Wed, 24 Apr 2024 22:38:13 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/js/google_top_exp.js | 142.250.74.162 | | 42 B |
URL pagead2.googlesyndication.com/pagead/js/google_top_exp.js IP142.250.74.162:0
CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hash7f5f2be159837d73b72a4b37616bce44 c93d7f25b530b05c26440d3352213b683d03dcc3 ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Wed, 24 Apr 2024 11:16:15 GMT
expires: Wed, 08 May 2024 11:16:15 GMT
cache-control: public, max-age=1209600
age: 40919
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs | 142.250.74.110 | | 61 kB |
URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs IP142.250.74.110:0
CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE8:68:ED:59:65:88:CD:45:4F:B0:64:88:FF:F3:32:D4:8B:C7:75:F0 ValidityMon, 18 Mar 2024 20:39:12 GMT - Mon, 10 Jun 2024 20:39:11 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash575e42a695a782c950bd57d1cd413c7e 8549b65a7e35bd251ac277315a063c07ea288a2e c3f62bbfcc26082d78406d7f36866969da709db71ef269081374aee5a5b2cf21
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61025
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:22:34 GMT
expires: Tue, 22 Apr 2025 16:22:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 195340
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 3.bp.blogspot.com/-LzmPTNyR6po/TwETZufjSTI/AAAAAAAAATo/oisHmXUjmSY/s1600/arrow_white.gif | 142.250.74.161 | | 83 B |
URL 3.bp.blogspot.com/-LzmPTNyR6po/TwETZufjSTI/AAAAAAAAATo/oisHmXUjmSY/s1600/arrow_white.gif IP142.250.74.161:0
File typeGIF image data, version 89a, 18 x 9 Hash56f3afdd7b2ac71ca9d1b6fc5b269cd6 9edb2bca8ad8aa11e56873a19b805299d76c774e 53644e9c53cf173daa5a01dd84165d7f26c45f24147fbe7a41ba625d196819b3
GET /-LzmPTNyR6po/TwETZufjSTI/AAAAAAAAATo/oisHmXUjmSY/s1600/arrow_white.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="arrow_white.gif"
x-content-type-options: nosniff
server: fife
content-length: 83
x-xss-protection: 0
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 18:59:09 GMT
expires: Thu, 25 Apr 2024 18:59:09 GMT
cache-control: public, max-age=86400, no-transform
age: 13145
etag: "v33c"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/show_ads.js | 142.250.74.162 | 200 OK | 11 kB |
URL GET HTTP/2pagead2.googlesyndication.com/pagead/show_ads.js IP142.250.74.162:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (5374) Hash9a11a4347db685486c35a6b4d7a4a19d 8389cdce11bf0b4b6a90f4dc000bf99100a74d67 32fec1de50338e2d62af32a7813b5eb58a832873665c4da7f9ec2510ea3d48f5
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:38:14 GMT
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 7644330615841701978
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 10551
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4.bp.blogspot.com/-b9FTjjXAbp4/TwEo-YIwe-I/AAAAAAAAAU4/Du-VmpE9hPE/s1600/bg_search.gif | 142.250.74.161 | | 881 B |
URL 4.bp.blogspot.com/-b9FTjjXAbp4/TwEo-YIwe-I/AAAAAAAAAU4/Du-VmpE9hPE/s1600/bg_search.gif IP142.250.74.161:0
File typeGIF image data, version 89a, 55 x 21 Hash214b7856375d0ea7cefa7f1aa5cceb47 d0f15874548dfbef05f171b4205f21c6eb60e4a0 d43130f6f2254ea4c1a0fbc34c9aafc142f253f87ceb5ad2a5cd2ba53f85063c
GET /-b9FTjjXAbp4/TwEo-YIwe-I/AAAAAAAAAU4/Du-VmpE9hPE/s1600/bg_search.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v336"
expires: Thu, 25 Apr 2024 22:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="bg_search.gif"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:14 GMT
server: fife
content-length: 881
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 3.bp.blogspot.com/--SO2CL-0YyY/TxP2pseMsdI/AAAAAAAAEhU/EMb9CinKDm0/s1600/toolbar-div.png | 142.250.74.161 | 200 OK | 214 B |
URL GET HTTP/33.bp.blogspot.com/--SO2CL-0YyY/TxP2pseMsdI/AAAAAAAAEhU/EMb9CinKDm0/s1600/toolbar-div.png IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 2 x 31, 8-bit/color RGB, non-interlaced Hashab15352df718d597ecffdaf3bb255548 5fd3d37605c25353ccc76a4116656a968d4175e7 c9041bbfc86aea2d46d2b846e9687afb5c0141a32d77648beb39fc3aa8d512a1
GET /--SO2CL-0YyY/TxP2pseMsdI/AAAAAAAAEhU/EMb9CinKDm0/s1600/toolbar-div.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1215"
expires: Thu, 25 Apr 2024 22:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="toolbar-div.png"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:14 GMT
server: fife
content-length: 214
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1.bp.blogspot.com/-MT0i0A_ZLQk/TxP2qRsIrAI/AAAAAAAAEhg/lcGBdeEvt5M/s1600/toolbar-bg.png | 142.250.74.161 | 200 OK | 300 B |
URL GET HTTP/31.bp.blogspot.com/-MT0i0A_ZLQk/TxP2qRsIrAI/AAAAAAAAEhg/lcGBdeEvt5M/s1600/toolbar-bg.png IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 50 x 31, 8-bit/color RGB, non-interlaced Hash59e54fd4aed5c883058cb2286b03748c 2810628f8359c1da88274207da0be88d9d4827cf 18623102657d635eb7e63491509e9968f224a476c444263d48239668a4c2ce40
GET /-MT0i0A_ZLQk/TxP2qRsIrAI/AAAAAAAAEhg/lcGBdeEvt5M/s1600/toolbar-bg.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1218"
expires: Thu, 25 Apr 2024 22:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="toolbar-bg.png"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:14 GMT
server: fife
content-length: 300
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4.bp.blogspot.com/-6h8pUdpCB40/TxP2p-e_taI/AAAAAAAAEhY/SvDggmPFZqw/s1600/showcase-bg.png | 142.250.74.161 | 200 OK | 395 B |
URL GET HTTP/34.bp.blogspot.com/-6h8pUdpCB40/TxP2p-e_taI/AAAAAAAAEhY/SvDggmPFZqw/s1600/showcase-bg.png IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 50 x 129, 8-bit/color RGB, non-interlaced Hash58dc44e40004b5c6d1c0c50547815735 67b6a3e0f6cd23d5dc69c59ed6aa0dbb90964594 f713a41d8cc057d5432a5b2fe0d607b515837a9cf004cf026b9c7c6299b3f1d1
GET /-6h8pUdpCB40/TxP2p-e_taI/AAAAAAAAEhY/SvDggmPFZqw/s1600/showcase-bg.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1216"
expires: Thu, 25 Apr 2024 22:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="showcase-bg.png"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:14 GMT
server: fife
content-length: 395
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1.bp.blogspot.com/-kmhya2YU7jE/Tv9JVye66xI/AAAAAAAAAP8/S0ZeuQ910Ow/s1600/field-bg.gif | 142.250.74.161 | 200 OK | 184 B |
URL GET HTTP/31.bp.blogspot.com/-kmhya2YU7jE/Tv9JVye66xI/AAAAAAAAAP8/S0ZeuQ910Ow/s1600/field-bg.gif IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeGIF image data, version 89a, 301 x 21 Hashf24b356b5376b6ff922358e9bf86e4ac 812babda4e1cf4df487b271a20318b9ecf3e2c73 224a69fe06037f95fa6f92c590fefcd33db7a3dbd4bb0ba6b090247b53ac82b5
GET /-kmhya2YU7jE/Tv9JVye66xI/AAAAAAAAAP8/S0ZeuQ910Ow/s1600/field-bg.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v32d"
expires: Thu, 25 Apr 2024 22:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="field-bg.gif"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:14 GMT
server: fife
content-length: 184
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/feeds/posts/default/-/spor?orderby=updated&alt=json-in-script&callback=labelthumbs | 216.58.207.193 | 200 OK | 66 kB |
URL GET HTTP/3fiberhaber.blogspot.com/feeds/posts/default/-/spor?orderby=updated&alt=json-in-script&callback=labelthumbs IP216.58.207.193:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeUnicode text, UTF-8 text, with very long lines (62716) Hasha9db8d4814985bae2d310d34ff435426 9436beb323e417aeb95861fc9802f94d579c5e46 6d4c382ed4e309085462bbbbf29c8c124c7e8019dce1e6b3d7892ccd8373f2a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/default/-/spor?orderby=updated&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"4dc45478c6065f6dc7bd56e3009a208a8fc328f61d845839440c758314c25805"
date: Wed, 24 Apr 2024 22:38:13 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
content-encoding: gzip
content-length: 66182
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/feeds/posts/default/-/haber?orderby=updated&alt=json-in-script&callback=labelthumbs | 216.58.207.193 | | 69 kB |
URL fiberhaber.blogspot.com/feeds/posts/default/-/haber?orderby=updated&alt=json-in-script&callback=labelthumbs IP216.58.207.193:0
File typeUnicode text, UTF-8 text, with very long lines (62716) Hash3a5f4f1d5d088d4ed1f565520ff07526 65b0d371d6c0035b305a93f0e83b02f0d16011f3 42ee8239a24e6b3eee63ff6551a59dcfe90fb1d8fbdb4882ba4f1c20a7897302
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/default/-/haber?orderby=updated&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"a43fb7fbe2e9de84fadb3e7e1b53eae1b6f7677ac8999a51b2b1f40ba190a576"
date: Wed, 24 Apr 2024 22:38:13 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
content-encoding: gzip
content-length: 69378
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/feeds/posts/default/-/teknoloji?orderby=updated&alt=json-in-script&callback=labelthumbs | 216.58.207.193 | | 70 kB |
URL fiberhaber.blogspot.com/feeds/posts/default/-/teknoloji?orderby=updated&alt=json-in-script&callback=labelthumbs IP216.58.207.193:0
File typeUnicode text, UTF-8 text, with very long lines (62716) Hash343424a602f08e4991d83d16e0325045 773d5d24724fc0a10eb7187760a9cb59b341ce5e 6d918bbec88dbfa5183419cb9e871a17c632903135f507d1199a033d4b784da6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/default/-/teknoloji?orderby=updated&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"ec24a75f52ca40f78e43675b361bdddd72d81b3331a08783058722174736f20f"
date: Wed, 24 Apr 2024 22:38:13 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
content-encoding: gzip
content-length: 69591
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/feeds/posts/default/-/sa%C4%9Fl%C4%B1k?orderby=updated&alt=json-in-script&callback=labelthumbs | 216.58.207.193 | | 76 kB |
URL fiberhaber.blogspot.com/feeds/posts/default/-/sa%C4%9Fl%C4%B1k?orderby=updated&alt=json-in-script&callback=labelthumbs IP216.58.207.193:0
File typeUnicode text, UTF-8 text, with very long lines (62716) Hashec4e452fe93ff9f737b759a3de6245df 4f8b88f5d57dec808a292a0b516b9aeb82df49e6 c3cee0d7db3c638894bf6b06ca897c99093ede00101bcbaf0b1e582222d84077
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/default/-/sa%C4%9Fl%C4%B1k?orderby=updated&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"46b62b38b9e54b0cdcea9b25b628fe538d7c087d96186edd12f7c5af799997f2"
date: Wed, 24 Apr 2024 22:38:13 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
content-encoding: gzip
content-length: 75974
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/feeds/posts/default/-/medya?orderby=updated&alt=json-in-script&callback=labelthumbs | 216.58.207.193 | 200 OK | 72 kB |
URL GET HTTP/3fiberhaber.blogspot.com/feeds/posts/default/-/medya?orderby=updated&alt=json-in-script&callback=labelthumbs IP216.58.207.193:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeUnicode text, UTF-8 text, with very long lines (62716) Hash5dcc6f3ada5c7b98f6b43665ca3f617b ab67aad96f683261a0d4054b75e6d2ab9af760fb 389188f84e1f8d496eb45b56a5bab12e4c929543127e43c39954fcc2cce04c80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/default/-/medya?orderby=updated&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"1812fecb430689fba7c9c2aeb5a5273030e39046ee8711120f758ef66e9540d4"
date: Wed, 24 Apr 2024 22:38:13 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
content-encoding: gzip
content-length: 72237
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/feeds/posts/default/-/kad%C4%B1n?orderby=updated&alt=json-in-script&callback=labelthumbs | 216.58.207.193 | | 74 kB |
URL fiberhaber.blogspot.com/feeds/posts/default/-/kad%C4%B1n?orderby=updated&alt=json-in-script&callback=labelthumbs IP216.58.207.193:0
File typeUnicode text, UTF-8 text, with very long lines (62716) Hashfa7c118ba8523ce55f21c6084946fc1c a43bbcdb76b61c7eb2d3174c1abf2907279ecaa7 6e6de5f5f63967d019a8d22ae142ade6f046c862805ee7d02c90010022478e96
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/default/-/kad%C4%B1n?orderby=updated&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"508e56a051e94bc47a837c98093ed36c03c08e2cfcf60c790b3bac7ee74e0fa6"
date: Wed, 24 Apr 2024 22:38:13 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
content-encoding: gzip
content-length: 73532
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=6135058303496388438&zx=0d47e9c4-18ea-4753-98bf-b898a8c807d5 | 216.58.207.233 | 200 OK | 21 B |
URL GET HTTP/3www.blogger.com/dyn-css/authorization.css?targetBlogID=6135058303496388438&zx=0d47e9c4-18ea-4753-98bf-b898a8c807d5 IP216.58.207.233:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=6135058303496388438&zx=0d47e9c4-18ea-4753-98bf-b898a8c807d5 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 22:38:14 GMT
last-modified: Wed, 24 Apr 2024 22:38:14 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/navbar.g?targetBlogID=6135058303496388438&blogName=Fiber+Haber&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://fiberhaber.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=https://fiberhaber.blogspot.com/&vt=-6114178246881220262&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ | 216.58.207.233 | | 2.6 kB |
URL www.blogger.com/navbar.g?targetBlogID=6135058303496388438&blogName=Fiber+Haber&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://fiberhaber.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=https://fiberhaber.blogspot.com/&vt=-6114178246881220262&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ IP216.58.207.233:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3170) Hashc6af48bd988193cd4ac26e3c862d30eb 503f83b7e2723bd1aedb10aa3316bfb763d6c1af a5bdac301efe3a45a2775d1287c164b7c78cfd4ea43806209c775c3acb6f3934
GET /navbar.g?targetBlogID=6135058303496388438&blogName=Fiber+Haber&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://fiberhaber.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=https://fiberhaber.blogspot.com/&vt=-6114178246881220262&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 22:38:14 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2564
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 3.bp.blogspot.com/-GaWGIBFtNrU/TqNhP_emgFI/AAAAAAAAA1s/75Dk7vIboCw/s1600/midle2_h2.gif | 142.250.74.161 | | 134 B |
URL 3.bp.blogspot.com/-GaWGIBFtNrU/TqNhP_emgFI/AAAAAAAAA1s/75Dk7vIboCw/s1600/midle2_h2.gif IP142.250.74.161:0
File typeGIF image data, version 89a, 5 x 30 Hash867e8b378ed658299b4f8b03f5458db1 9d356c39e4d2188d38705d11edfabcefc2428450 aa848672920a219c1c8ab59785a4079c5550ba35470f24f5d9bc9d25f023d331
GET /-GaWGIBFtNrU/TqNhP_emgFI/AAAAAAAAA1s/75Dk7vIboCw/s1600/midle2_h2.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v509"
expires: Thu, 25 Apr 2024 22:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="midle2_h2.gif"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:14 GMT
server: fife
content-length: 134
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/icons_peach.png | 216.58.207.233 | 200 OK | 907 B |
URL GET HTTP/3resources.blogblog.com/img/navbar/icons_peach.png IP216.58.207.233:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=6135058303496388438&blogName=Fiber+Haber&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://fiberhaber.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=https://fiberhaber.blogspot.com/&vt=-6114178246881220262&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Ffiberhaber.blogspot.com&pfname=&rpctoken=12530986 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typePNG image data, 46 x 20, 8-bit colormap, non-interlaced Hash3718077fe5eb689b0ded987a52881d06 f0ce5596ef43f850c400cbbc0556697fb3e7b232 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:31:43 GMT
expires: Tue, 30 Apr 2024 16:31:43 GMT
cache-control: public, max-age=604800
last-modified: Tue, 23 Apr 2024 05:52:51 GMT
content-type: image/png
age: 108391
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| resources.blogblog.com/img/navbar/arrows-light.png | 216.58.207.233 | | 117 B |
URL resources.blogblog.com/img/navbar/arrows-light.png IP216.58.207.233:0
File typePNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced Hash25c2b0cfe0ad4dcda4a0e3727d091d80 b9d16f4311e64648b7970baf00cb9841e3c3351b bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:45:58 GMT
expires: Tue, 30 Apr 2024 08:45:58 GMT
cache-control: public, max-age=604800
last-modified: Mon, 22 Apr 2024 10:52:08 GMT
content-type: image/png
age: 136336
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| johnytemplate.googlecode.com/files/page-navigation.js | 64.233.165.82 | 404 Not Found | 1.6 kB |
URL GET HTTP/2johnytemplate.googlecode.com/files/page-navigation.js IP64.233.165.82:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.googlecode.com FingerprintFC:E5:9E:4A:AE:B4:3B:8B:59:5B:E4:C7:5A:56:F7:92:FE:2C:DC:1B ValidityMon, 18 Mar 2024 20:31:14 GMT - Mon, 10 Jun 2024 20:31:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashb0923bdab42e504331673db9253841a5 9109f5f00f96beaba51ae025756c64c7ed6368f8 5193cab405bc36675312f40bedf631af737d640db2d99c6bb149dfb2ab7e7561
GET /files/page-navigation.js HTTP/1.1
Host: johnytemplate.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1585
date: Wed, 24 Apr 2024 22:38:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/platform:gapi.iframes.style.common.js | 142.250.74.110 | 200 OK | 21 kB |
URL GET HTTP/3apis.google.com/js/platform:gapi.iframes.style.common.js IP142.250.74.110:443
Requested byhttps://www.blogger.com/navbar.g?targetBlogID=6135058303496388438&blogName=Fiber+Haber&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://fiberhaber.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=https://fiberhaber.blogspot.com/&vt=-6114178246881220262&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Ffiberhaber.blogspot.com&pfname=&rpctoken=12530986 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2050) Hash7ef4bc18139bcdbdd14c5b58b0955a67 afe44fd9a877f81a3c36f571c0fc934324c6cbd7 192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21313
date: Wed, 24 Apr 2024 22:38:14 GMT
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "1df5d68c1707a051"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pagead2.googlesyndication.com/pagead/show_ads.js | 142.250.74.162 | 200 OK | 11 kB |
URL GET HTTP/2pagead2.googlesyndication.com/pagead/show_ads.js IP142.250.74.162:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJavaScript source, ASCII text, with very long lines (5374) Hashea39909e97c81f7eb346aa2002bbba49 d942429d520928903ae9964a4284126691da8133 05800578fbfda913b98dd9f37dbb7b7140a54bcf1e847e91da22507ebb0cd239
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:38:14 GMT
expires: Wed, 24 Apr 2024 22:38:14 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 110427722182607368
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 10550
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs | 142.250.74.110 | | 46 kB |
URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs IP142.250.74.110:0
CertificateIssuerGoogle Trust Services LLC Subject*.apis.google.com FingerprintE8:68:ED:59:65:88:CD:45:4F:B0:64:88:FF:F3:32:D4:8B:C7:75:F0 ValidityMon, 18 Mar 2024 20:39:12 GMT - Mon, 10 Jun 2024 20:39:11 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash4d1bd282f5a3799d4e2880cf69af9269 2ede61be138a7beaa7d6214aa278479dce258adb 5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:22:36 GMT
expires: Tue, 22 Apr 2025 16:22:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 195338
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4.bp.blogspot.com/-GSW7MPAS1FA/TwANMdXOSkI/AAAAAAAAARE/XBShBuqqHAc/s1600/arrow_bg.GIF | 142.250.74.161 | 200 OK | 806 B |
URL GET HTTP/34.bp.blogspot.com/-GSW7MPAS1FA/TwANMdXOSkI/AAAAAAAAARE/XBShBuqqHAc/s1600/arrow_bg.GIF IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeGIF image data, version 89a, 5 x 5 Hashc44626e59bfb689aad80192fe82bdcf5 1535912f2adb196076825d94c7ff7f1eee9b677f a0ab63a2842b22d892b3797f3eb2d468bead485fc89f0289ced42aa437119d6c
GET /-GSW7MPAS1FA/TwANMdXOSkI/AAAAAAAAARE/XBShBuqqHAc/s1600/arrow_bg.GIF HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v33e"
expires: Thu, 25 Apr 2024 22:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="arrow_bg.GIF"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:14 GMT
server: fife
content-length: 806
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1.bp.blogspot.com/-ni1miSlutYA/TwlmnlqeDdI/AAAAAAAAEb8/5gdEyqHzg-s/s1600/enewsp.gif | 142.250.74.161 | 200 OK | 3.0 kB |
URL GET HTTP/31.bp.blogspot.com/-ni1miSlutYA/TwlmnlqeDdI/AAAAAAAAEb8/5gdEyqHzg-s/s1600/enewsp.gif IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeGIF image data, version 89a, 289 x 64 Hashb1d30ed9e5d586cd58e999eeb75f299f ce8a36129c5284814576a73cd24994e53fd8f6ea 59dad38438271feea81b79900779bd20a70419d6a80caac1ce84b2653fd5097f
GET /-ni1miSlutYA/TwlmnlqeDdI/AAAAAAAAEb8/5gdEyqHzg-s/s1600/enewsp.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2b37"
expires: Thu, 25 Apr 2024 22:38:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="enewsp.gif"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:15 GMT
server: fife
content-length: 3034
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| img.youtube.com/vi/a6yNkuwqVvw/default.jpg | 142.250.74.110 | 404 Not Found | 1.1 kB |
URL GET HTTP/3img.youtube.com/vi/a6yNkuwqVvw/default.jpg IP142.250.74.110:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hashe2ddfee11ae7edcae257da47f3a78a70 6e902fa6302eb30cd204579bca6a59b37233e262 20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/a6yNkuwqVvw/default.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
vary: Origin
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: image/jpeg
date: Wed, 24 Apr 2024 22:38:15 GMT
expires: Wed, 24 Apr 2024 22:38:45 GMT
cache-control: public, max-age=30
x-content-type-options: nosniff
server: sffe
content-length: 1097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 3.bp.blogspot.com/-yIYR5hmNYRw/Twhu4a2P3yI/AAAAAAAAEak/nMGqgVDK0IM/s1600/searchbar.png | 142.250.74.161 | 200 OK | 229 B |
URL GET HTTP/33.bp.blogspot.com/-yIYR5hmNYRw/Twhu4a2P3yI/AAAAAAAAEak/nMGqgVDK0IM/s1600/searchbar.png IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 20 x 30, 8-bit/color RGB, non-interlaced Hashc1390baa535da3c85fc452e49a060587 7fcfb0c60addc0da7a7cbc455b0e5b0db5afe2ea 05565c3de5dd1c42cdfbf2cfce14bb088e848d9da08f9ebe4c6acd131d14ea62
GET /-yIYR5hmNYRw/Twhu4a2P3yI/AAAAAAAAEak/nMGqgVDK0IM/s1600/searchbar.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v11a9"
expires: Thu, 25 Apr 2024 22:38:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="searchbar.png"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:15 GMT
server: fife
content-length: 229
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/feeds/posts/default/-/medya?orderby=updated&alt=json-in-script&callback=labelthumbs | 216.58.207.193 | 200 OK | 72 kB |
URL GET HTTP/3fiberhaber.blogspot.com/feeds/posts/default/-/medya?orderby=updated&alt=json-in-script&callback=labelthumbs IP216.58.207.193:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeUnicode text, UTF-8 text, with very long lines (62716) Hash5dcc6f3ada5c7b98f6b43665ca3f617b ab67aad96f683261a0d4054b75e6d2ab9af760fb 389188f84e1f8d496eb45b56a5bab12e4c929543127e43c39954fcc2cce04c80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /feeds/posts/default/-/medya?orderby=updated&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
server: blogger-renderd
x-content-type-options: nosniff
x-xss-protection: 0
content-encoding: gzip
content-length: 72237
x-frame-options: SAMEORIGIN
date: Wed, 24 Apr 2024 22:38:15 GMT
expires: Wed, 24 Apr 2024 22:38:16 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
etag: W/"1812fecb430689fba7c9c2aeb5a5273030e39046ee8711120f758ef66e9540d4"
content-type: text/javascript; charset=UTF-8
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 1.bp.blogspot.com/_tUdwiyEcqV4/TVC03_zE8dI/AAAAAAAAAtk/nTn2KMo01WI/s1600/arrow_circle.gif | 142.250.74.161 | | 48 B |
URL 1.bp.blogspot.com/_tUdwiyEcqV4/TVC03_zE8dI/AAAAAAAAAtk/nTn2KMo01WI/s1600/arrow_circle.gif IP142.250.74.161:0
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeGIF image data, version 89a, 5 x 5 Hash12dab92d7f09ce3dbb29faf1dc952417 7c25c353d2ae4526b8d699c68ac844d1ce9e063e bafc491199175b7d46e9c1c6c8525f517d0497d2474ce43d8ef894a2489b0d2d
GET /_tUdwiyEcqV4/TVC03_zE8dI/AAAAAAAAAtk/nTn2KMo01WI/s1600/arrow_circle.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v845"
expires: Thu, 25 Apr 2024 22:38:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="arrow_circle.gif"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:15 GMT
server: fife
content-length: 48
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4.bp.blogspot.com/-DIJ0uDyKsoE/TxQgtoTLX4I/AAAAAAAAEi0/y5z_93X37PU/s1600/footer-bg.png | 142.250.74.161 | 200 OK | 463 B |
URL GET HTTP/34.bp.blogspot.com/-DIJ0uDyKsoE/TxQgtoTLX4I/AAAAAAAAEi0/y5z_93X37PU/s1600/footer-bg.png IP142.250.74.161:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 159 x 87, 8-bit/color RGB, non-interlaced Hash199e7b7ab6f90c9d538e311462f96e52 98be93fd90122784b9ff1394007a5cd3c9dfe39b 9d78b1980c3e1bb086dee19e5f37ec108f2b1f97dede6e5f287f7ce3f2fe65ed
GET /-DIJ0uDyKsoE/TxQgtoTLX4I/AAAAAAAAEi0/y5z_93X37PU/s1600/footer-bg.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v122d"
expires: Thu, 25 Apr 2024 22:38:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="footer-bg.png"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 22:38:15 GMT
server: fife
content-length: 463
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/2012/03/?action=getFeed&widgetId=Feed2&widgetType=Feed&responseType=js&xssi_token=AOuZoY7Pf3hnBFmSUqBexBxQXfF7Affuag%3A1713998291794 | 216.58.207.193 | 200 OK | 845 B |
URL GET HTTP/3fiberhaber.blogspot.com/2012/03/?action=getFeed&widgetId=Feed2&widgetType=Feed&responseType=js&xssi_token=AOuZoY7Pf3hnBFmSUqBexBxQXfF7Affuag%3A1713998291794 IP216.58.207.193:443
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeASCII text, with very long lines (1711) Hashba035d2ef48cda9a71c78193d07c4f8c 4b9d37a8dfd31be43624e13123a20e0a4ac1686f f3c7b476852542a8c2ffca7e4cbd3a885153af8bfba2f4aebfff2fbd1e8fdfd2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2012/03/?action=getFeed&widgetId=Feed2&widgetType=Feed&responseType=js&xssi_token=AOuZoY7Pf3hnBFmSUqBexBxQXfF7Affuag%3A1713998291794 HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Wed, 24 Apr 2024 22:38:15 GMT
date: Wed, 24 Apr 2024 22:38:15 GMT
cache-control: private, max-age=0
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
etag: "0d47e9c4-18ea-4753-98bf-b898a8c807d5"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 845
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fiberhaber.blogspot.com/favicon.ico | 216.58.207.193 | | 767 B |
URL fiberhaber.blogspot.com/favicon.ico IP216.58.207.193:0
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashadb77098351dd6c15cb5cc8704078362 767a92dce054f013075ba52a2fd66c67cd485ddf ad79bac18d846f4e8c403ab2cb68522287d759a76eecd80b0374a10662f31582
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: fiberhaber.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fiberhaber.blogspot.com/2012/03?action=getfeed/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Wed, 24 Apr 2024 22:38:16 GMT
date: Wed, 24 Apr 2024 22:38:16 GMT
cache-control: private, max-age=86400
last-modified: Tue, 05 Mar 2024 22:28:21 GMT
etag: W/"ec2f15740e0ed5b85471796974f45182b578b0ff48e3ffdf9884900db47eb8e0"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 767
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| rsm.haber365.com/N/1330676473_22_ocalan.jpg |  0.0.0.0 | | 0 B |
URL GET rsm.haber365.com/N/1330676473_22_ocalan.jpg IP0.0.0.0:0
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /N/1330676473_22_ocalan.jpg HTTP/1.1
Host: rsm.haber365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| img.internethaber.com/news/213830.jpg | 195.142.105.13 | 404 Not Found | 0 B |
URL GET HTTP/2img.internethaber.com/news/213830.jpg IP195.142.105.13:443 ASN#199484 SAGLAYICI Teknoloji Bilisim Yayincilik Hiz. Ticaret Ltd. Sti.
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGlobalSign nv-sa Subject*.internethaber.com Fingerprint00:FB:61:F6:10:50:26:4B:1D:3D:E9:B7:BF:70:29:98:85:FD:B3:CA ValidityTue, 16 May 2023 22:44:59 GMT - Sun, 16 Jun 2024 22:44:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news/213830.jpg HTTP/1.1
Host: img.internethaber.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 24 Apr 2024 22:38:15 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
x-request-id: cMkQiz3_CaC8YDcs0M-wW
x-rocket-node: edge125.ist.tr.eu.rocketcdn.com
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| img.internethaber.com/news/237896.jpg | 195.142.105.13 | 404 Not Found | 0 B |
URL GET HTTP/2img.internethaber.com/news/237896.jpg IP195.142.105.13:443 ASN#199484 SAGLAYICI Teknoloji Bilisim Yayincilik Hiz. Ticaret Ltd. Sti.
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGlobalSign nv-sa Subject*.internethaber.com Fingerprint00:FB:61:F6:10:50:26:4B:1D:3D:E9:B7:BF:70:29:98:85:FD:B3:CA ValidityTue, 16 May 2023 22:44:59 GMT - Sun, 16 Jun 2024 22:44:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news/237896.jpg HTTP/1.1
Host: img.internethaber.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 24 Apr 2024 22:38:15 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
x-request-id: t4q--cSqgtQa3wAIdW9bg
x-rocket-node: edge125.ist.tr.eu.rocketcdn.com
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| rsm.haber365.com/N/1330668655_43_yulya_lale.jpg | 0.0.0.0 | | 0 B |
URL GET rsm.haber365.com/N/1330668655_43_yulya_lale.jpg IP0.0.0.0:0
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /N/1330668655_43_yulya_lale.jpg HTTP/1.1
Host: rsm.haber365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| img.internethaber.com/news/239837.jpg | 195.142.105.13 | 404 Not Found | 0 B |
URL GET HTTP/2img.internethaber.com/news/239837.jpg IP195.142.105.13:443 ASN#199484 SAGLAYICI Teknoloji Bilisim Yayincilik Hiz. Ticaret Ltd. Sti.
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGlobalSign nv-sa Subject*.internethaber.com Fingerprint00:FB:61:F6:10:50:26:4B:1D:3D:E9:B7:BF:70:29:98:85:FD:B3:CA ValidityTue, 16 May 2023 22:44:59 GMT - Sun, 16 Jun 2024 22:44:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news/239837.jpg HTTP/1.1
Host: img.internethaber.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 24 Apr 2024 22:38:15 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
x-request-id: W3QDmu51FN1UDashUiQDX
x-rocket-node: edge125.ist.tr.eu.rocketcdn.com
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| rsm.haber365.com/N/1326726350_22_abdullahgul.jpg | 0.0.0.0 | | 0 B |
URL GET rsm.haber365.com/N/1326726350_22_abdullahgul.jpg IP0.0.0.0:0
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /N/1326726350_22_abdullahgul.jpg HTTP/1.1
Host: rsm.haber365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| img.internethaber.com/news/240799.jpg | 195.142.105.13 | 404 Not Found | 0 B |
URL GET HTTP/2img.internethaber.com/news/240799.jpg IP195.142.105.13:443 ASN#199484 SAGLAYICI Teknoloji Bilisim Yayincilik Hiz. Ticaret Ltd. Sti.
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGlobalSign nv-sa Subject*.internethaber.com Fingerprint00:FB:61:F6:10:50:26:4B:1D:3D:E9:B7:BF:70:29:98:85:FD:B3:CA ValidityTue, 16 May 2023 22:44:59 GMT - Sun, 16 Jun 2024 22:44:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news/240799.jpg HTTP/1.1
Host: img.internethaber.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 24 Apr 2024 22:38:15 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
x-request-id: lVekU2szU76TyhQ-homhW
x-rocket-node: edge125.ist.tr.eu.rocketcdn.com
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| img.internethaber.com/news/238260.jpg | 195.142.105.13 | 404 Not Found | 0 B |
URL GET HTTP/2img.internethaber.com/news/238260.jpg IP195.142.105.13:443 ASN#199484 SAGLAYICI Teknoloji Bilisim Yayincilik Hiz. Ticaret Ltd. Sti.
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/ CertificateIssuerGlobalSign nv-sa Subject*.internethaber.com Fingerprint00:FB:61:F6:10:50:26:4B:1D:3D:E9:B7:BF:70:29:98:85:FD:B3:CA ValidityTue, 16 May 2023 22:44:59 GMT - Sun, 16 Jun 2024 22:44:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news/238260.jpg HTTP/1.1
Host: img.internethaber.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 24 Apr 2024 22:38:15 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
x-request-id: Llar1pts8GQ0g7oeYntfy
x-rocket-node: edge125.ist.tr.eu.rocketcdn.com
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| image.haber7.com/haber/haber7/photos/2010/100820120228073505377.jpg | 0.0.0.0 | | 0 B |
URL GET image.haber7.com/haber/haber7/photos/2010/100820120228073505377.jpg IP0.0.0.0:0
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /haber/haber7/photos/2010/100820120228073505377.jpg HTTP/1.1
Host: image.haber7.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| image.haber7.com/haber/haber7/photos/2010/685120110916102005437.jpg | 0.0.0.0 | | 0 B |
URL GET image.haber7.com/haber/haber7/photos/2010/685120110916102005437.jpg IP0.0.0.0:0
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /haber/haber7/photos/2010/685120110916102005437.jpg HTTP/1.1
Host: image.haber7.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| image.haber7.com/haber/haber7/photos/2010/460020120227021905107.jpg | 0.0.0.0 | | 0 B |
URL GET image.haber7.com/haber/haber7/photos/2010/460020120227021905107.jpg IP0.0.0.0:0
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /haber/haber7/photos/2010/460020120227021905107.jpg HTTP/1.1
Host: image.haber7.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| image.haber7.com/haber/haber7/photos/2010/788720120113010601907.jpg | 0.0.0.0 | | 0 B |
URL GET image.haber7.com/haber/haber7/photos/2010/788720120113010601907.jpg IP0.0.0.0:0
Requested byhttps://fiberhaber.blogspot.com/2012/03?action=getfeed/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /haber/haber7/photos/2010/788720120113010601907.jpg HTTP/1.1
Host: image.haber7.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0