ocsp.pki.goog/gts1c3
471 B IP
Hash d7982fa2873277d8b95c38946a035e1e
ae6d80e57b6c49948ac459ac7fc3873cf27a63d5
62ff4214c91318cd576f1bd4a2fb8dc7eb4a63d7a5c1aa7beb2a359e5c6610df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
200 OK 50 kB URL User Request GET HTTP/2 nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13257)
Hash f964d436eb6e12bd4db2a07c30329ae9
0e48c92e98c66abaec65da223b8d29eedfe3e09a
0ca1daca6f9b909e23e1fa448dd93ae3a51bf20b3dee00f5560fb16657944c2e
GET /search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 10 Jun 2023 04:24:48 GMT
date: Sat, 10 Jun 2023 04:24:48 GMT
cache-control: private, max-age=0
last-modified: Sat, 18 Mar 2023 07:51:33 GMT
etag: W/"00d7fcc46b06a4362e082302ff66b9b62673fb82b1bc8b8e1d0ae8ddfa31d839"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 50492
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash d7982fa2873277d8b95c38946a035e1e
ae6d80e57b6c49948ac459ac7fc3873cf27a63d5
62ff4214c91318cd576f1bd4a2fb8dc7eb4a63d7a5c1aa7beb2a359e5c6610df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nghiencuukhoahocsupham.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/js/cookienotice.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 17:46:10 GMT
expires: Wed, 14 Jun 2023 17:46:10 GMT
cache-control: public, max-age=604800
last-modified: Wed, 07 Jun 2023 15:50:51 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 211119
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1.bp.blogspot.com/-zRM4vxg9Xvc/UyHcXOZI0AI/AAAAAAAAABg/iW6UAaCyIt4/s72-c/images+%25282%2529.jpg
200 OK 2.6 kB URL GET HTTP/2 1.bp.blogspot.com/-zRM4vxg9Xvc/UyHcXOZI0AI/AAAAAAAAABg/iW6UAaCyIt4/s72-c/images+%25282%2529.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 743e31fdddcf14b0f199497e6bbb7dde
a7761492c8c331f4099f933e7ac2b1346f20f715
3689348fc3fdfcfe051c54b4cf3ca07ae9f1005577c1f94c98288cf6b1982435
GET /-zRM4vxg9Xvc/UyHcXOZI0AI/AAAAAAAAABg/iW6UAaCyIt4/s72-c/images+%25282%2529.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="images (2).jpg"
x-content-type-options: nosniff
server: fife
content-length: 2632
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v18"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash f37f1f8bd72d6fe504e90ff25208fd4e
8d3abb874761bf5c63b0573357ac4f81e4e82080
5e310194ea51e17d531cc6650b9bf41f1c20850de2e2e498fe45081846baddd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-uaMLXcdkcLs/YRaS7LWzPaI/AAAAAAAAaIU/5lztioOczh0Pe_cjeb6QG7a7Qc91ih6QgCLcBGAsYHQ/s0/5jhwn4.gif
200 OK 66 kB URL GET HTTP/2 1.bp.blogspot.com/-uaMLXcdkcLs/YRaS7LWzPaI/AAAAAAAAaIU/5lztioOczh0Pe_cjeb6QG7a7Qc91ih6QgCLcBGAsYHQ/s0/5jhwn4.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type GIF image data, version 89a, 300 x 150\012- data
Hash f1964f49949e4fbd1059c087eb3652ad
a1d0b0af505c3f91d5b661b434fa0720354805bd
cfa9b9411cfc6b6309da9775570b6428a57af0ce486e30ad1089a12cd85db70a
GET /-uaMLXcdkcLs/YRaS7LWzPaI/AAAAAAAAaIU/5lztioOczh0Pe_cjeb6QG7a7Qc91ih6QgCLcBGAsYHQ/s0/5jhwn4.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="5jhwn4.gif"
x-content-type-options: nosniff
server: fife
content-length: 66029
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v6886"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-62mi_FjXoTM/UyWqSH8TOEI/AAAAAAAAAHM/bJuDJfyUq1E/s72-c/Vatli9.bmp
200 OK 1.5 kB URL GET HTTP/2 1.bp.blogspot.com/-62mi_FjXoTM/UyWqSH8TOEI/AAAAAAAAAHM/bJuDJfyUq1E/s72-c/Vatli9.bmp
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash fceafac28427abbaf057243e1302ad35
3ebba4e5d56ffb7374519466525b63568e78b0c8
32fc222db442592ecdfe83ad46572ed2c07debbb871853157e7cb8855a158fdc
GET /-62mi_FjXoTM/UyWqSH8TOEI/AAAAAAAAAHM/bJuDJfyUq1E/s72-c/Vatli9.bmp HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Vatli9.jpg"
x-content-type-options: nosniff
server: fife
content-length: 1540
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v74"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-zgNsIpXxJJE/Ts-oVoylT3I/AAAAAAAAADk/DW6LSIzDvLY/s1600/us.png
200 OK 620 B URL GET HTTP/2 1.bp.blogspot.com/-zgNsIpXxJJE/Ts-oVoylT3I/AAAAAAAAADk/DW6LSIzDvLY/s1600/us.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash e9666fc22c1afdf930f0391868dfaddc
b9122b169b00639bb22d842b1ec491cc65ea7715
ecea7929abaf1136762ab541efa866060771d307d5e482f9a2a69374f4e7b955
GET /-zgNsIpXxJJE/Ts-oVoylT3I/AAAAAAAAADk/DW6LSIzDvLY/s1600/us.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="us.png"
x-content-type-options: nosniff
server: fife
content-length: 620
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v39"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-vmzr8xYY8fs/Ts-oVg2xm6I/AAAAAAAAADY/U3kOPBcRfOY/s1600/vn.png
200 OK 446 B URL GET HTTP/2 1.bp.blogspot.com/-vmzr8xYY8fs/Ts-oVg2xm6I/AAAAAAAAADY/U3kOPBcRfOY/s1600/vn.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash caaa8141eeacf47d0b033e33cb046272
1108a06005b51b1b81a99644949eaf541ce52aa5
1fdd05c061116367cd3460ef182aeea62fea4f2a10eb9dd8ed8c625cafcc8645
GET /-vmzr8xYY8fs/Ts-oVg2xm6I/AAAAAAAAADY/U3kOPBcRfOY/s1600/vn.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vn.png"
x-content-type-options: nosniff
server: fife
content-length: 446
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v36"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh6.googleusercontent.com/-py3UTWU3Nzw/UHehopAwXOI/AAAAAAAAD34/GPkxUEHwl5Q/s15/ico-a.jpg
200 OK 775 B URL GET HTTP/2 lh6.googleusercontent.com/-py3UTWU3Nzw/UHehopAwXOI/AAAAAAAAD34/GPkxUEHwl5Q/s15/ico-a.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 15x15, components 3\012- data
Hash ae323ab808ba8243686fca76867c3537
39d72ab93023607a7c873414c69bc9b33e0880b9
20d172dd6a4a80854ff19a4508058776432c0a03d8bf7eff45a2c873bd1c2420
GET /-py3UTWU3Nzw/UHehopAwXOI/AAAAAAAAD34/GPkxUEHwl5Q/s15/ico-a.jpg HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-a.jpg"
x-content-type-options: nosniff
server: fife
content-length: 775
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:09 GMT
expires: Sun, 11 Jun 2023 01:03:09 GMT
cache-control: public, max-age=86400, no-transform
age: 12100
etag: "vf7e"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh6.googleusercontent.com/-8Q8_bB8Jhf8/UH15SxtVP4I/AAAAAAAAEAw/5A9nHwtU3As/s16/facebook.png
200 OK 635 B URL GET HTTP/2 lh6.googleusercontent.com/-8Q8_bB8Jhf8/UH15SxtVP4I/AAAAAAAAEAw/5A9nHwtU3As/s16/facebook.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c0af48f28595ac0e0489ea5812128da
1c034683f0e34c090793f8c20c8fd78936f2a927
a650cbf22cc6b9b9fcd3d63076dabe026a32b5976380a93dd75a731c27c67412
GET /-8Q8_bB8Jhf8/UH15SxtVP4I/AAAAAAAAEAw/5A9nHwtU3As/s16/facebook.png HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="facebook.png"
x-content-type-options: nosniff
server: fife
content-length: 635
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12108
etag: "v100c"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh6.googleusercontent.com/-MfUTwAJDVHs/UHehpNyiReI/AAAAAAAAD4I/o0u-CP5al-M/s15/ico-gioithieu.png
200 OK 280 B URL GET HTTP/2 lh6.googleusercontent.com/-MfUTwAJDVHs/UHehpNyiReI/AAAAAAAAD4I/o0u-CP5al-M/s15/ico-gioithieu.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash c5d1cc6b05fc01473c050a0ec086bf45
954ca958779bf7f78bda6cc434658cc0df5f0128
d64e4ca645362b1924c6726b7b3a3d1b4b7dbbee9942134e36c2a44a043a7719
GET /-MfUTwAJDVHs/UHehpNyiReI/AAAAAAAAD4I/o0u-CP5al-M/s15/ico-gioithieu.png HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-gioithieu.png"
x-content-type-options: nosniff
server: fife
content-length: 280
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:02 GMT
expires: Sun, 11 Jun 2023 01:03:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12107
etag: "vf82"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 254550694974af59432c47dadbbfc6ba
c492d12358fbd4afcbfabe64c654202c957a6b48
4d77614794cb3f64946fcf93010be6bca2325daf71a44b7f7450e9bf8b2f2fc3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh6.googleusercontent.com/-mGuMMXcOEkM/UH15S1Px2EI/AAAAAAAAEAo/ICNRZxoRk_g/s16/googlebuzz.png
200 OK 636 B URL GET HTTP/2 lh6.googleusercontent.com/-mGuMMXcOEkM/UH15S1Px2EI/AAAAAAAAEAo/ICNRZxoRk_g/s16/googlebuzz.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dc95e36a9016622079f4e2481cb7385
1eef94e5d2ab07b5def7474d50305f256c17dbce
b32c7928befc34734270143791d9d4e572e53bdc3f0dacb78416f210d59db3ba
GET /-mGuMMXcOEkM/UH15S1Px2EI/AAAAAAAAEAo/ICNRZxoRk_g/s16/googlebuzz.png HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="googlebuzz.png"
x-content-type-options: nosniff
server: fife
content-length: 636
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12108
etag: "v100a"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash fe01981a948962986d66a069a3a76853
6cde45dbc53c81ac5522d676f56e0cdf7c26b6cc
53445e804016f6442c864355287658669fab3d5f51f911a87aebee1f773d5ba1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 976ddc35a5e0905c0323fc1e2de7e1c6
fba04768049a0ab61950c5d63e91d22f08827595
241628b3912a151783f629d6c1b013db421bd00bd3efb99b0e28bf6548be3cc2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint16:37:BF:DE:18:2B:BB:D4:6F:7B:05:89:E7:8F:31:BC:9A:D5:92:87
ValidityFri, 19 May 2023 12:52:45 GMT - Fri, 11 Aug 2023 12:52:44 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Jun 2023 01:50:43 GMT
expires: Sat, 08 Jun 2024 01:50:43 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Jun 2023 21:52:27 GMT
content-type: text/css
vary: Accept-Encoding
age: 95646
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-bFMa5R2nfZI/UH15Udpt_mI/AAAAAAAAEBM/0ME5ciXjQm4/s16/twitter.png
200 OK 654 B URL GET HTTP/2 lh4.googleusercontent.com/-bFMa5R2nfZI/UH15Udpt_mI/AAAAAAAAEBM/0ME5ciXjQm4/s16/twitter.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 807d992b605aead86f99cd8f9c6bc76c
cb629bd773f9348f451a80ee21c6676bcb8d6fc7
b0d33beaa5a786a061af4a2db8af3e943de6124d289388f1bdcc9fd1db97a74f
GET /-bFMa5R2nfZI/UH15Udpt_mI/AAAAAAAAEBM/0ME5ciXjQm4/s16/twitter.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="twitter.png"
x-content-type-options: nosniff
server: fife
content-length: 654
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12108
etag: "v1013"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-5joH5eWvLJE/UHehpUlIUZI/AAAAAAAAD4M/3dUKKd5YczY/s15/ico-h.jpg
200 OK 785 B URL GET HTTP/2 lh5.googleusercontent.com/-5joH5eWvLJE/UHehpUlIUZI/AAAAAAAAD4M/3dUKKd5YczY/s15/ico-h.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 15x15, components 3\012- data
Hash cf49214a586a9871f763227f480dc0c7
b0422038af6016c18697dcd7d4c42651a519ced5
a950c5bbd3100823a8f12c2be1558fd9aa69b3bc6092ccc92c40042184029b93
GET /-5joH5eWvLJE/UHehpUlIUZI/AAAAAAAAD4M/3dUKKd5YczY/s15/ico-h.jpg HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-h.jpg"
x-content-type-options: nosniff
server: fife
content-length: 785
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:02 GMT
expires: Sun, 11 Jun 2023 01:03:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12107
etag: "vf83"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-BmTGLIYo3FU/UHehpyJ-ixI/AAAAAAAAD4U/PCCko5XgXZo/s15/ico-m.jpg
200 OK 785 B URL GET HTTP/2 lh5.googleusercontent.com/-BmTGLIYo3FU/UHehpyJ-ixI/AAAAAAAAD4U/PCCko5XgXZo/s15/ico-m.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 15x15, components 3\012- data
Hash 421492d94b224d54846754907a955100
82cc32a9c186c4e8300aa7096a4e64cfe0efd4fd
95145bca602d906f50ffb6eec55ab931d8c2438ccb4862c92533af0baa0dbe1c
GET /-BmTGLIYo3FU/UHehpyJ-ixI/AAAAAAAAD4U/PCCko5XgXZo/s15/ico-m.jpg HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico-m.jpg"
x-content-type-options: nosniff
server: fife
content-length: 785
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:12:00 GMT
expires: Sun, 11 Jun 2023 01:12:00 GMT
cache-control: public, max-age=86400, no-transform
age: 11569
etag: "vf85"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-txo63fTomGM/UyHcgS9NKCI/AAAAAAAAABo/6eDYmRohg9g/s72-c/images+%25283%2529.jpg
200 OK 2.5 kB URL GET HTTP/3 3.bp.blogspot.com/-txo63fTomGM/UyHcgS9NKCI/AAAAAAAAABo/6eDYmRohg9g/s72-c/images+%25283%2529.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1b3ee31f95587402faeba0908c950450
349295443fd8fb26149c69d61a8a5d175d4acb06
d013ade7b8cdde913c211a6608a48686498a83595ffe8b7c3111bc2849657d72
GET /-txo63fTomGM/UyHcgS9NKCI/AAAAAAAAABo/6eDYmRohg9g/s72-c/images+%25283%2529.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="images (3).jpg"
x-content-type-options: nosniff
server: fife
content-length: 2539
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1a"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.bp.blogspot.com/-EnpvjPoF_X4/UyHcEGcIlkI/AAAAAAAAABQ/d-vBi2GDS8k/s72-c/images+%25281%2529.jpg
200 OK 2.5 kB URL GET HTTP/3 2.bp.blogspot.com/-EnpvjPoF_X4/UyHcEGcIlkI/AAAAAAAAABQ/d-vBi2GDS8k/s72-c/images+%25281%2529.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 06bafe447d77ca590c4e12f44c4d1d05
46b64f168a2deb63050a410da125f1ffb52c2d70
04b14bb470ef1502c7a509d5339e8cc36dd3ad96c36f4ba177c39b0a3950a97a
GET /-EnpvjPoF_X4/UyHcEGcIlkI/AAAAAAAAABQ/d-vBi2GDS8k/s72-c/images+%25281%2529.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="images (1).jpg"
x-content-type-options: nosniff
server: fife
content-length: 2468
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-PurpaaQv7Y0/UyHcpE8BUZI/AAAAAAAAABw/9BZVchgkQHE/s72-c/images+%25284%2529.jpg
200 OK 2.9 kB URL GET HTTP/3 3.bp.blogspot.com/-PurpaaQv7Y0/UyHcpE8BUZI/AAAAAAAAABw/9BZVchgkQHE/s72-c/images+%25284%2529.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash cbc4110d3bfccf102cbfc76535ca0d88
944c508a29306bf0956fac396f79a6ca7964af55
b96ab09abf5f55ef9361a1c04bea5a1e0c695d67603ea3124975626331408087
GET /-PurpaaQv7Y0/UyHcpE8BUZI/AAAAAAAAABw/9BZVchgkQHE/s72-c/images+%25284%2529.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1c"
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="images (4).jpg"
x-content-type-options: nosniff
date: Sat, 10 Jun 2023 04:24:49 GMT
server: fife
content-length: 2882
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.bp.blogspot.com/-kfDCXkM_tuk/UyRZbJCLRPI/AAAAAAAAADk/WX7k4U0f_78/s72-c/download.gif
200 OK 2.0 kB URL GET HTTP/3 2.bp.blogspot.com/-kfDCXkM_tuk/UyRZbJCLRPI/AAAAAAAAADk/WX7k4U0f_78/s72-c/download.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type GIF image data, version 89a, 72 x 72\012- data
Hash a22606b935486278bbf3fb1d942e3a95
abc1c00fda8bea29faa4179e711206b8c9ac2165
6f1625137103e0a4e4f4579f547ac2213740e34e98d4863084788410ad5b0b42
GET /-kfDCXkM_tuk/UyRZbJCLRPI/AAAAAAAAADk/WX7k4U0f_78/s72-c/download.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="download.gif"
x-content-type-options: nosniff
server: fife
content-length: 1978
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sun, 11 Jun 2023 04:24:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "v39"
content-type: image/gif
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh5.googleusercontent.com/-ndguCUG8K_k/UH5HcOi-TII/AAAAAAAAECs/1S8LT_5hYlw/s13/ico_top.png
200 OK 265 B URL GET HTTP/2 lh5.googleusercontent.com/-ndguCUG8K_k/UH5HcOi-TII/AAAAAAAAECs/1S8LT_5hYlw/s13/ico_top.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type PNG image data, 13 x 11, 8-bit/color RGBA, non-interlaced\012- data
Hash 0448afa68d63b877dbd504d0c146636c
ba121145145a82898fcf29b52e939a8709c77373
93b8d69e8a2a7ee45b830e63c24f284e6acb81a208433b7f57af2422a6154245
GET /-ndguCUG8K_k/UH5HcOi-TII/AAAAAAAAECs/1S8LT_5hYlw/s13/ico_top.png HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ico_top.png"
x-content-type-options: nosniff
server: fife
content-length: 265
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:02 GMT
expires: Sun, 11 Jun 2023 01:03:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12107
etag: "v102b"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 8308f6dea0330937b447c599a29d40e8
4432419d333e24fefd3107ee5fcbbe444131e22b
9286c39fd6051acc7d86c4bc065d8d55a9ac249994efd299342bae44f33934b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/platform.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintDE:E4:50:C7:14:04:EC:D0:70:AC:04:CC:B1:7B:9A:04:98:C0:3C:9A
ValidityFri, 19 May 2023 12:58:17 GMT - Fri, 11 Aug 2023 12:58:16 GMT
File type ASCII text, with very long lines (1576)
Hash 92d41357b57749dd1d8d9f4c74bccae6
3422e31014b34c65af1f22414210c063ef6ec1c6
100b98dc40358e08109ec41e378361e2d5d9207c6fb3e13b1dbad54c07b15d53
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 22282
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Sat, 10 Jun 2023 04:24:49 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9c05d8caf73eec10"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3381873457-widgets.js
200 OK 56 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/3381873457-widgets.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint16:37:BF:DE:18:2B:BB:D4:6F:7B:05:89:E7:8F:31:BC:9A:D5:92:87
ValidityFri, 19 May 2023 12:52:45 GMT - Fri, 11 Aug 2023 12:52:44 GMT
File type ASCII text, with very long lines (2215)
Hash 6adf42b296c324d24b2e05b94a60bde1
81d101b2f93c901f658536dbcac6302a10b504fd
f25e9ec60e38e8e42e761a6016399cb867563e17daf982b5886234fec9471785
GET /static/v1/widgets/3381873457-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56538
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 02:32:06 GMT
expires: Wed, 05 Jun 2024 02:32:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Jun 2023 23:50:54 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 352363
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash f37f1f8bd72d6fe504e90ff25208fd4e
8d3abb874761bf5c63b0573357ac4f81e4e82080
5e310194ea51e17d531cc6650b9bf41f1c20850de2e2e498fe45081846baddd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-yw15nyYdci8/Unozpg9A32I/AAAAAAAAES8/fqqi6885F4I/s200/Luanvanlogo.jpg
404 Not Found 832 B URL GET HTTP/3 3.bp.blogspot.com/-yw15nyYdci8/Unozpg9A32I/AAAAAAAAES8/fqqi6885F4I/s200/Luanvanlogo.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /-yw15nyYdci8/Unozpg9A32I/AAAAAAAAES8/fqqi6885F4I/s200/Luanvanlogo.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sat, 10 Jun 2023 04:24:49 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?alt=json-in-script&callback=getRandomPosts&max-results=999999
200 OK 133 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?alt=json-in-script&callback=getRandomPosts&max-results=999999
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type Unicode text, UTF-8 text, with very long lines (62150)
Size 133 kB (133129 bytes)
Hash 278a8fd20b45197b9a26ccdb9d093b39
8bf91bb1a6c2b4d47ee9d400531d440e695ff02a
85a6d1c697fc53df8a8b63971ab93d1be0f70a23eca06ddd527395467347386f
GET /feeds/posts/default?alt=json-in-script&callback=getRandomPosts&max-results=999999 HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
server: Blogger Render Server 1.0
x-content-type-options: nosniff
x-xss-protection: 0
content-encoding: gzip
content-length: 133129
x-frame-options: SAMEORIGIN
date: Sat, 10 Jun 2023 04:24:49 GMT
expires: Fri, 09 Jun 2023 17:48:19 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
last-modified: Sat, 18 Mar 2023 07:51:33 GMT
etag: W/"acfcaee7bed8e010583c832bd7ff25d247956027f4b689318c3bd861f0df232d"
content-type: text/javascript; charset=UTF-8
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 47 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint43:CE:FB:9F:15:CF:60:5A:60:72:25:27:C1:45:67:BF:C4:B1:1A:1E
ValidityFri, 19 May 2023 12:53:03 GMT - Fri, 11 Aug 2023 12:53:02 GMT
File type ASCII text, with very long lines (3592)
Hash e70afcec1e25d5977ff4b544e1c1b22f
0526366d290ca5a772c049a11f9bd158ec3a1451
9f649a654ec3ea72522100a06a31f8d95c92f37bbb53139dbfc64c82120066d2
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 10 Jun 2023 04:24:50 GMT
expires: Sat, 10 Jun 2023 04:24:50 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15340254771300502552
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 47277
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 976ddc35a5e0905c0323fc1e2de7e1c6
fba04768049a0ab61950c5d63e91d22f08827595
241628b3912a151783f629d6c1b013db421bd00bd3efb99b0e28bf6548be3cc2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 8748a0f3e1abe3ad036cf9ee28b3d124
44e7298258e112896ee66a631873bdfe6dda3132
b24f245b43de6a0328dfef752fdcf83766d66c475d08b463c062e6202c2121da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 6c61fb42405abc811f67aabeace702b2
0d41286eb5a6f7f82734de50e0fdbc7e752e3d8e
bd7a264bf9a25dd4e67665c894ea85fd985546fb75f9e69da4bbfb5ba2fabab5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 306b8bdba6b631f6f9fc81f517fc82d3
741b439cc675916ebfffe7ad71fd2db1badaef7d
6525cb162e14a8f4420749fdc1d19e4bce1403f85086cf90fffe14a4bb0a1795
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/xBU_oQ4BtkA
472 B URL ocsp.pki.goog/s/gts1d4/xBU_oQ4BtkA
IP
Hash 67c03748cd38453eaaa2e8aecf33b698
bb82221dc48fb7f300f4a7bdcdc52978ff04d526
ffb596d8ddbd22209a5a8e08807d1fb395c86a478d1f1618abf03875f23dc943
POST /s/gts1d4/xBU_oQ4BtkA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.googleusercontent.com/-Na6WNNSGuiI/UHb_aG5hY2I/AAAAAAAAD2k/MA0Js_GJh-Y/s30/bg-menu-foot.jpg
200 OK 369 B URL GET HTTP/3 lh4.googleusercontent.com/-Na6WNNSGuiI/UHb_aG5hY2I/AAAAAAAAD2k/MA0Js_GJh-Y/s30/bg-menu-foot.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 5x30, components 3\012- data
Hash 2c42c10f22f6a30fdb45b5df085db7c1
1897a1cc0c3a31b3e83ea4f6923d78d55cf18555
5383e381832bf2cd18ec207c1cf070e1bf7a8db92deb0dceae8b13b49f0a19e4
GET /-Na6WNNSGuiI/UHb_aG5hY2I/AAAAAAAAD2k/MA0Js_GJh-Y/s30/bg-menu-foot.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bg-menu-foot.jpg"
x-content-type-options: nosniff
server: fife
content-length: 369
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:09 GMT
expires: Sun, 11 Jun 2023 01:03:09 GMT
cache-control: public, max-age=86400, no-transform
age: 12101
etag: "vf69"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh4.googleusercontent.com/-Gru2cLmFwcI/TtTg4D0DuJI/AAAAAAAABGA/RGSalmz0kQA/s18/iconsearchr.gif
200 OK 350 B URL GET HTTP/3 lh4.googleusercontent.com/-Gru2cLmFwcI/TtTg4D0DuJI/AAAAAAAABGA/RGSalmz0kQA/s18/iconsearchr.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type GIF image data, version 89a, 18 x 14\012- data
Hash 3909bab18f8c8ba2920b6fd128c6fcda
e4523d16cea7bc74e000b414e014e34013942fb6
d5519b87fccb32e6bc1bb4af403888c0f4d040032a7c93a4661262adbebf477d
GET /-Gru2cLmFwcI/TtTg4D0DuJI/AAAAAAAABGA/RGSalmz0kQA/s18/iconsearchr.gif HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="iconsearchr.gif"
x-content-type-options: nosniff
server: fife
content-length: 350
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12109
etag: "v22e0"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh6.googleusercontent.com/-ikwqo8Fs1x8/UHzkFs1r5OI/AAAAAAAAD-I/77cKlsVO54Q/s101/hnjn.gif
200 OK 1.4 kB URL GET HTTP/3 lh6.googleusercontent.com/-ikwqo8Fs1x8/UHzkFs1r5OI/AAAAAAAAD-I/77cKlsVO54Q/s101/hnjn.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type GIF image data, version 89a, 2 x 101\012- data
Hash bf82486e75c3fdae4fc0a1f6e37ad675
9352dc212b50da26a8436f486f12282549ee0674
3c08ba93bd8e1722efb7323c7f0a02c4f4c1b120a86651981ed9a20b723d2918
GET /-ikwqo8Fs1x8/UHzkFs1r5OI/AAAAAAAAD-I/77cKlsVO54Q/s101/hnjn.gif HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="hnjn.gif"
x-content-type-options: nosniff
server: fife
content-length: 1417
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12109
etag: "v1e3c"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/-PP-kteLdf8g/UHb-ZUHbgBI/AAAAAAAAD2Q/Xs3Hv2_6IL8/s26/bg-nav-foot.jpg
200 OK 365 B URL GET HTTP/3 lh3.googleusercontent.com/-PP-kteLdf8g/UHb-ZUHbgBI/AAAAAAAAD2Q/Xs3Hv2_6IL8/s26/bg-nav-foot.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1x26, components 3\012- data
Hash 21fbaa3f9256b84b0b697f3004ec632c
4a3341650f7f26df3751b92d00188c86d21c701a
a5cd15aee515109881387d34093c724105c6bd457abf15ece51f7441fd00f03e
GET /-PP-kteLdf8g/UHb-ZUHbgBI/AAAAAAAAD2Q/Xs3Hv2_6IL8/s26/bg-nav-foot.jpg HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bg-nav-foot.jpg"
x-content-type-options: nosniff
server: fife
content-length: 365
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12109
etag: "vf64"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/-eEoX3YdUMGg/UHxDSVpNFcI/AAAAAAAAD9s/gGao2ZhvyNM/s18/hbhjs.png
200 OK 347 B URL GET HTTP/3 lh3.googleusercontent.com/-eEoX3YdUMGg/UHxDSVpNFcI/AAAAAAAAD9s/gGao2ZhvyNM/s18/hbhjs.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash a18ba4e6fb1952ed27d8988a90846533
f6992ef5b5f3389301b61a6773e921d290906999
60b73d70d057e214e29c8ff403e5135569a5da3e01629615abe0e4474379aad8
GET /-eEoX3YdUMGg/UHxDSVpNFcI/AAAAAAAAD9s/gGao2ZhvyNM/s18/hbhjs.png HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="hbhjs.png"
x-content-type-options: nosniff
server: fife
content-length: 347
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:02 GMT
expires: Sun, 11 Jun 2023 01:03:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12108
etag: "vfdb"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
st-n.pc1ads.com/js/adv_out.js
200 OK 34 kB URL GET HTTP/2 st-n.pc1ads.com/js/adv_out.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerLet's Encrypt
Subjectn.pc1ads.com
Fingerprint5C:82:98:AB:E1:E7:65:AE:F0:5E:B5:73:99:2D:7B:60:BF:CF:6E:D7
ValidityFri, 31 Mar 2023 11:22:11 GMT - Thu, 29 Jun 2023 11:22:10 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 25b8ce6444556203e51aea6757a512ae
cb70a407b62f68d10393373410fd0be2dbea86bc
b8293cbd6b5e6dfd040e545db8bc1be1fe87c7f9635eb07925f1ed8208bdd50f
GET /js/adv_out.js HTTP/1.1
Host: st-n.pc1ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 10 Jun 2023 04:24:50 GMT
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 12:26:34 GMT
etag: W/"6481c8fa-158c0"
expires: Sat, 10 Jun 2023 04:25:50 GMT
cache-control: max-age=60
cache: REVALIDATED
x-id: osix-up-gc4
x-nginx: nginx-be
content-encoding: gzip
x-id-fe: osix-up-gc4
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-zJIbSjA0Vpc/UHwi-xtFy4I/AAAAAAAAD9M/12JPXvcuwqw/s32/njnm.gif
200 OK 1.1 kB URL GET HTTP/3 lh5.googleusercontent.com/-zJIbSjA0Vpc/UHwi-xtFy4I/AAAAAAAAD9M/12JPXvcuwqw/s32/njnm.gif
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type GIF image data, version 89a, 1 x 32\012- data
Hash 2ad8604fa28b55b128771ab1abacd209
7779512a1d718d32ef6fc97df860e468dc56a873
a7152fc6f791a158c5e473e7d622cd80b678ea8661e7ce77582c22d81d16e1eb
GET /-zJIbSjA0Vpc/UHwi-xtFy4I/AAAAAAAAD9M/12JPXvcuwqw/s32/njnm.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="njnm.gif"
x-content-type-options: nosniff
server: fife
content-length: 1148
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12109
etag: "v1f81"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/-Tie8MX__wvA/UHehq5XkyzI/AAAAAAAAD4w/fOZkTtYvAQk/s48/li-right.jpg
200 OK 490 B URL GET HTTP/3 lh3.googleusercontent.com/-Tie8MX__wvA/UHehq5XkyzI/AAAAAAAAD4w/fOZkTtYvAQk/s48/li-right.jpg
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 2x48, components 3\012- data
Hash f4d8d6301c5dd1fdc603c57a76267285
38c9f0086e07a39f61a662d21326a3a29d72a74f
b6781c596174ddb2166de8937d2bd1f98069fef05f7dfbe70ee873a3f1b7352e
GET /-Tie8MX__wvA/UHehq5XkyzI/AAAAAAAAD4w/fOZkTtYvAQk/s48/li-right.jpg HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="li-right.jpg"
x-content-type-options: nosniff
server: fife
content-length: 490
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12109
etag: "vf8c"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?max-results=20&orderby=published&alt=json-in-script&callback=showposts
200 OK 12 kB URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/feeds/posts/default?max-results=20&orderby=published&alt=json-in-script&callback=showposts
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type Unicode text, UTF-8 text, with very long lines (62176)
Hash 9fe79ac54cc6df4f1fa534aa89391965
7ae4fb43ff08f57b07a4a2b45526d011b7220f46
92713e985abea819e87766b74e60d28270156a0a9ee986c43c4fe708f2b01bce
GET /feeds/posts/default?max-results=20&orderby=published&alt=json-in-script&callback=showposts HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
server: Blogger Render Server 1.0
x-content-type-options: nosniff
x-xss-protection: 0
content-encoding: gzip
content-length: 12423
x-frame-options: SAMEORIGIN
date: Sat, 10 Jun 2023 04:24:50 GMT
expires: Fri, 09 Jun 2023 17:48:19 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
last-modified: Sat, 18 Mar 2023 07:51:33 GMT
etag: W/"7c967ccaebd9455cdfe321ef6a5090ad255b423885fabb7824e800f5cf270f80"
content-type: text/javascript; charset=UTF-8
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.sangkiengiaovien.com//feeds/posts/default/-//Ki%E1%BA%BFm%20ti%E1%BB%81n%20online?orderby=published&alt=json-in-script&callback=showrecentpostswiththumbs
200 OK 26 kB URL GET HTTP/2 www.sangkiengiaovien.com//feeds/posts/default/-//Ki%E1%BA%BFm%20ti%E1%BB%81n%20online?orderby=published&alt=json-in-script&callback=showrecentpostswiththumbs
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectwww.sangkiengiaovien.com
FingerprintD4:7B:82:09:36:04:F8:93:50:FA:A2:4C:3B:71:32:58:87:0F:6C:3E
ValiditySat, 22 Apr 2023 16:01:00 GMT - Fri, 21 Jul 2023 16:46:49 GMT
File type Unicode text, UTF-8 text, with very long lines (59940)
Hash a88b45251485b4daf75a95ac210f20a2
120e5df2f8240fc7060e73b2a80296e9a79dffcf
8c046ca1f617e4b068bb05c42eae0086d1da9eaac5ac8d0a41248c54626ea4e1
GET //feeds/posts/default/-//Ki%E1%BA%BFm%20ti%E1%BB%81n%20online?orderby=published&alt=json-in-script&callback=showrecentpostswiththumbs HTTP/1.1
Host: www.sangkiengiaovien.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"15609c9c6a3dc50b9d2d39363e63c27657687e98a4893ad91286030434833215"
date: Sat, 10 Jun 2023 04:24:50 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sat, 10 Jun 2023 04:24:51 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Fri, 09 Jun 2023 15:40:18 GMT
content-encoding: gzip
content-length: 25903
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash ce0035936997c1555b1ff99d49eea795
fedb6b2dee2b19d5bd44b3d9e7a46dc73bb7fbf9
415ab7d7536068e0e69ddff28adcf77c8e254c56abcdeb4967dcb6d2b3cc6cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/8c7583ff/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.6 kB URL GET HTTP/3 www.youtube.com/s/player/8c7583ff/fetch-polyfill.vflset/fetch-polyfill.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (552)
Hash 949e94fed78d252b728cdc2aa6ddc56a
d2bfdd653bb3da592097fb4ddb6eabbdc3060562
ac8177161c3038b07597ec544de3c00f46e1a0aa6b4b4c045ff0495553cc5069
GET /s/player/8c7583ff/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2625
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 19:06:58 GMT
expires: Thu, 06 Jun 2024 19:06:58 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Jun 2023 02:05:35 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 206272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/lh6NpaV-ukM
200 OK 79 kB URL GET HTTP/3 www.youtube.com/embed/lh6NpaV-ukM
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58412)
Hash e7b8e55d755fd4b96374d51f5ea41389
e7ca6af7332202a88f0ac731b1534d5f6d3e2a9b
25ecc84b339b05e97c654bcd9e98090ab2ec6239b5eaeeb5391a331416850ef2
GET /embed/lh6NpaV-ukM HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 Jun 2023 04:24:50 GMT
strict-transport-security: max-age=31536000
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=WqoMUbd1WM4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=nGqbX2OHQg8; Domain=.youtube.com; Expires=Thu, 07-Dec-2023 04:24:50 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+319; expires=Mon, 09-Jun-2025 04:24:50 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/8c7583ff/www-embed-player.vflset/www-embed-player.js
200 OK 94 kB URL GET HTTP/3 www.youtube.com/s/player/8c7583ff/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (660)
Hash 632f7d13942b75f192c8d685ec7a99e2
c46d43cdd37a2b3b5ec684494cecd9e5bf9d4539
67dbfdd99ccb28a4a3c9e81045fb6c245cbc3bed2889a754653df96054f9e736
GET /s/player/8c7583ff/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 94356
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 19:06:58 GMT
expires: Thu, 06 Jun 2024 19:06:58 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Jun 2023 02:05:35 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 206272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dl.dropboxusercontent.com/u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js
404 Not Found 761 kB URL GET HTTP/2 dl.dropboxusercontent.com/u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerDigiCert Inc
Subjectdl.dropbox.com
FingerprintF7:BA:5F:D1:73:A5:04:E6:AC:52:C4:92:6F:20:23:8D:FD:B3:3F:D0
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (628)
Size 761 kB (760622 bytes)
Hash 63350808262f06cc60694300a841832e
edaa105b57fb928efc9e8e7b19aadbd7102cc7f9
725fa19da1b5960969cac125e12d50afbb4a4e6cf59b5e20d61d96521f084767
GET /u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 10 Jun 2023 04:24:49 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 138567ff83004ed4bee943fb4ca82bb8
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash cfa2f4faaa3c178ca36297b0c4264e37
7a77047e893a983873f15a67f94b2be4b114be43
faebb1831224e4843915d60cdc5f707ea6de1fd82d1e3b9620bc5c9b611729b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash cfa2f4faaa3c178ca36297b0c4264e37
7a77047e893a983873f15a67f94b2be4b114be43
faebb1831224e4843915d60cdc5f707ea6de1fd82d1e3b9620bc5c9b611729b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 17:31:32 GMT
expires: Wed, 05 Jun 2024 17:31:32 GMT
cache-control: public, max-age=31536000
age: 298398
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
st-n.pc2ads.com/js/adv_out.js
200 OK 50 kB URL GET HTTP/2 st-n.pc2ads.com/js/adv_out.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerLet's Encrypt
Subjectn.pc2ads.com
Fingerprint29:98:2C:71:B8:89:E0:1F:89:56:36:C7:85:F4:03:8E:CA:5E:02:7A
ValidityFri, 31 Mar 2023 11:23:24 GMT - Thu, 29 Jun 2023 11:23:23 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 9dd1e11b60497e79695838f383f8e880
ca49931bfa56d47be29284c4954d4ff907d6b5c2
93ebd65ec142c8d546b3f67bf089abe4c2c110d38a91a5fbec123dad6dd4940f
GET /js/adv_out.js HTTP/1.1
Host: st-n.pc2ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 10 Jun 2023 04:24:50 GMT
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 12:26:34 GMT
etag: W/"6481c8fa-158c0"
expires: Sat, 10 Jun 2023 04:25:50 GMT
cache-control: max-age=60
cache: REVALIDATED
x-id: osix-up-gc4
x-nginx: nginx-be
content-encoding: gzip
x-id-fe: osix-up-gc4
X-Firefox-Spdy: h2
dl.dropboxusercontent.com/u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js
404 Not Found 592 B URL GET HTTP/2 dl.dropboxusercontent.com/u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerDigiCert Inc
Subjectdl.dropbox.com
FingerprintF7:BA:5F:D1:73:A5:04:E6:AC:52:C4:92:6F:20:23:8D:FD:B3:3F:D0
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (628)
Hash e5e7c8070e496361fe2027b8b7cbaac9
3c3b031c8fa48e3a4f5ae6f18cab1ff1b12f83c8
322d5539e4d73a6743dff721f92f3c10d69089eabf391e673996e30ca06253ec
GET /u/66256041/Menu/Namkna-blogspot-menu-doc/jquery.min.v1.4.1.js HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 10 Jun 2023 04:24:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 7a9f19e854f443489612248a2ea2afcc
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/8c7583ff/player_ias.vflset/en_US/remote.js
200 OK 33 kB URL GET HTTP/3 www.youtube.com/s/player/8c7583ff/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (538)
Hash 020de964e7b0daa2f6e9b28112a002aa
0f237fa1acab12a1a251af9b544550e779195294
d525360f11ed392a17f8b1bc7e5a9512d0caf1626d51ac97b80887fd5284db7a
GET /s/player/8c7583ff/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33423
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 19:08:32 GMT
expires: Thu, 06 Jun 2024 19:08:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Jun 2023 02:05:35 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 206179
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 039bd5f5536d1b489d46e52d9cd5a21e
88770d7c23bb9aefa7d8fad6262332c0a682a0d3
6195b2c8747988942a35a477b811d323d137e697b23c6670d093a1b10c4879c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 039bd5f5536d1b489d46e52d9cd5a21e
88770d7c23bb9aefa7d8fad6262332c0a682a0d3
6195b2c8747988942a35a477b811d323d137e697b23c6670d093a1b10c4879c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/8c7583ff/player_ias.vflset/en_US/embed.js
200 OK 8.2 kB URL GET HTTP/3 www.youtube.com/s/player/8c7583ff/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (3391)
Hash acba5d2077371222a67ed314760aee24
8c8a215845c7f3781119b81b58fa67648c56e71e
978c7646c40e9b8a25a30209bb00cac2d2815da1145a380abdb91629d2f224e5
GET /s/player/8c7583ff/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 8195
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 19:08:32 GMT
expires: Thu, 06 Jun 2024 19:08:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Jun 2023 02:05:35 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 206179
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
n.pc1ads.com/a?Id=275813&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=4&ajax=0&domain=n.pc1ads.com&unq=1&show_num=1&cookies=1&_c=e30%3D&RNum=8793&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KNX8KAbWLCgMKBZXl7wrHCrGp4d8KWwrDCsnDCkX5zwpHCknbCisKKecKHwobCmMOG&client_info=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%3D&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwVCVFMSVCQiU4OW5oJTIwTmdoJUUxJUJCJTg3JTIwQW4iLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=0&bver=5
200 OK 149 B URL GET HTTP/2 n.pc1ads.com/a?Id=275813&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=4&ajax=0&domain=n.pc1ads.com&unq=1&show_num=1&cookies=1&_c=e30%3D&RNum=8793&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KNX8KAbWLCgMKBZXl7wrHCrGp4d8KWwrDCsnDCkX5zwpHCknbCisKKecKHwobCmMOG&client_info=eyJ3aW4iOnsidyI6MTI4MCwiaCI6MTAyNH0sInNjcmVlbiI6eyJ3aWR0aCI6MTI4MCwiaGVpZ2h0IjoxMDI0LCJjb2xvckRlcHRoIjoyNCwicGl4ZWxEZXB0aCI6MjR9LCJuYXZpZ2F0b3IiOnsibGFuZ3VhZ2UiOiJlbi1VUyIsImJyb3dzZXJMYW5ndWFnZSI6IiIsInN5c3RlbUxhbmd1YWdlIjoiIiwidXNlckxhbmd1YWdlIjoiIiwicGxhdGZvcm0iOiJMaW51eCB4ODZfNjQiLCJ2ZW5kb3IiOiIiLCJ0aW1lWm9uZSI6MCwiZGF0ZSI6IjIwMjMtMDYtMTBUMDQ6MjQ6NDkuOTgyWiIsImhvdXIiOjQsIndpZHRoIjoxMjgwLCJoZWlnaHQiOjEwMjQsInBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImZsYXNoVmVyc2lvbiI6ZmFsc2UsImNvbm5lY3Rpb25UeXBlIjoidW5kZWYifX0%3D&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwVCVFMSVCQiU4OW5oJTIwTmdoJUUxJUJCJTg3JTIwQW4iLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=0&bver=5
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerLet's Encrypt
Subjectn.pc1ads.com
Fingerprint5C:82:98:AB:E1:E7:65:AE:F0:5E:B5:73:99:2D:7B:60:BF:CF:6E:D7
ValidityFri, 31 Mar 2023 11:22:11 GMT - Thu, 29 Jun 2023 11:22:10 GMT
File type ASCII text, with no line terminators
Hash 1ef0ede109c38f04bf1c0a18d8a03e5d
872dd351c215f41ff72dae480956b865bb220d8e
bf7ef21ef04486cffcffe0d33d7f22d25028b8c3bde3504eba0435a41bb0825a
GET /a?Id=275813&uid=ssp-493b38d4-49c2-194b-96b0-96b0-6d8b7bea1b&sync=0&hours=4&ajax=0&domain=n.pc1ads.com&unq=1&show_num=1&cookies=1&_c=e30%3D&RNum=8793&docurl_=aHV2c3c_NTZ2cHJ0cXtxwoTChXx6woJ1fcKFesKLwo7CisKDfcKKTMKBwozCkMKJwpbClMKUwppVwovCmMKXWsKfwpLCj8KhwpPCmWHCn8KVwpfCm8KjZ8KNX8KAbWLCgMKBZXl7wrHCrGp4d8KWwrDCsnDCkX5zwpHCknbCisKKecKHwobCmMOG&client_info=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%3D&doc_inf=eyJ0aXRsZSI6Ik5DS0hTUFVEJTIwLSUyMCVDNCU5MCVFMSVCQiU4MSUyMHQlQzMlQTBpJTIwbmdoaSVDMyVBQW4lMjBjJUUxJUJCJUE5dSUyMGtob2ElMjBoJUUxJUJCJThEYyUyMHMlQzYlQjAlMjBwaCVFMSVCQSVBMW0lMjAlRTElQkIlQTluZyUyMGQlRTElQkIlQTVuZyUyMHRvJUMzJUEwbiUyMHQlRTElQkElQURwJTNBJTIwVCVFMSVCQiU4OW5oJTIwTmdoJUUxJUJCJTg3JTIwQW4iLCJkZXNjcmlwdGlvbiI6IiIsImNoYXJTZXQiOiJVVEYtOCJ9&set=e30%3D&ver=8&bln=0&bver=5 HTTP/1.1
Host: n.pc1ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3
date: Sat, 10 Jun 2023 04:25:01 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 648d86782bde8cdad1f84871db069b8b
0bbf16e28ab151906a446efd842b6e74ea80754d
39fee46d2df5b8a7024f2a8a5ab7eee986e6fd12589006df57c75b08bf812c4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
200 OK 5.2 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 5224, version 1.0\012- data
Hash a835084624425dacc5e188c6973c1594
1bef196929bffcabdc834c0deefda104eb7a3318
0dfa6a82824cf2be6bb8543de6ef56b87daae5dd63f9e68c88f02697f94af740
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 20:08:48 GMT
expires: Wed, 05 Jun 2024 20:08:48 GMT
cache-control: public, max-age=31536000
age: 288963
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 32 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash b49747df3ba92cc7738e48ae690aafc2
ecaae8bdf96f8f48be0df18f2fc0a2991fed9e60
ffa9b4f681c9fd8cc8561e0e08df00f03e03fc8def4a9639250478fed5b88888
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 10 Jun 2023 04:24:51 GMT
server: ESF
cache-control: private
content-length: 31897
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/BqbBBigLGMI_8n0ENPHl-A4LePB1t5RlUxvFXJxc2c4.js
200 OK 15 kB URL GET HTTP/2 www.google.com/js/th/BqbBBigLGMI_8n0ENPHl-A4LePB1t5RlUxvFXJxc2c4.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintA8:95:C3:CB:D6:3F:BC:0A:7D:FF:36:72:5E:2F:56:26:9F:EB:77:0E
ValidityFri, 19 May 2023 12:58:13 GMT - Fri, 11 Aug 2023 12:58:12 GMT
File type ASCII text, with very long lines (37720)
Hash 3b1c88e9fea5bc54659c6b3b27a929dd
46fa60a15918912852ff68524f3171b33cd16f9d
06a6c106280b18c23ff27d0434f1e5f80e0b78f075b79465531bc55c9c5cd9ce
GET /js/th/BqbBBigLGMI_8n0ENPHl-A4LePB1t5RlUxvFXJxc2c4.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14866
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 05:06:10 GMT
expires: Thu, 06 Jun 2024 05:06:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Jun 2023 09:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 256721
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 808227e24280a2a141a32ffb6622ffd5
7db6745aa452ef8d9fef04ff19d5e1f7400ee772
a053912edd4b7abb30d325278618de3638ae1959bb34cc1828a5651b23d98b6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AGIKgqPweV-XYdFRKjV6u8RMY2D-TkSUU2_2Gg64t3pyMA=s68-c-k-c0x00ffffff-no-rj
200 OK 1.2 kB URL GET HTTP/2 yt3.ggpht.com/ytc/AGIKgqPweV-XYdFRKjV6u8RMY2D-TkSUU2_2Gg64t3pyMA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 1e7639cdacb6630a2d3988d7827cce44
d940e4715e8ee8b07cd210c730fa55899917953e
4ba54288973154f357178634f154d9a8ccd49d5f334ffd180d6c54109aa21292
GET /ytc/AGIKgqPweV-XYdFRKjV6u8RMY2D-TkSUU2_2Gg64t3pyMA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 1157
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:51 GMT
expires: Sun, 11 Jun 2023 04:24:51 GMT
cache-control: public, max-age=86400, no-transform
etag: "vdfc"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash df893f12f5cf31daedf4910ffcc872c8
bbd271b0e76cd11d6a00327914b74882c95655fb
134d16adfc51baecc40c9fba86cc6c2d37b489435c99878912d1948543a0337b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/lh6NpaV-ukM/default.webp
200 OK 1.2 kB URL GET HTTP/2 i.ytimg.com/vi_webp/lh6NpaV-ukM/default.webp
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint88:9C:B5:85:13:CD:6F:2F:4A:D3:4E:57:DC:0C:99:02:CF:58:E0:C7
ValidityFri, 19 May 2023 12:53:00 GMT - Fri, 11 Aug 2023 12:52:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash af1c3413d385686eee66777066d97570
58a329165ad784e1b9ee1c18ff5fcb22c7e5b465
86d73efe15c560d179ea66accf69c9a3c36e359ccd43c14c6bbb27e93594989b
GET /vi_webp/lh6NpaV-ukM/default.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 1180
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Jun 2023 04:24:51 GMT
expires: Sat, 10 Jun 2023 06:24:51 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/webp
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 867098685e7b7157296e6a0fe1d20787
0ad13b8afa73089409a14c985cf3e1013772b606
12855eb40a9834ca052037ef1c1fd57f23a8e293fd14c8bcdcfea216d1536bbe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 04:24:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 10 Jun 2023 04:24:51 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d7bf8745e33dd5e5498035c730c1e7e1
585dd462ebcd30a6af7c0bd808fe6d86b3ac25d3
dd6802166dd766ff3d12dc9b6a96c96c7095d1522b9cccd5ddcd24c0901e38a6
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1019
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 10 Jun 2023 04:24:51 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/generate_204?1mo37g
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?1mo37g
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?1mo37g HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sat, 10 Jun 2023 04:24:52 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nghiencuukhoahocsupham.blogspot.com/favicon.ico
200 OK 412 B URL GET HTTP/3 nghiencuukhoahocsupham.blogspot.com/favicon.ico
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint2F:A0:D5:AD:44:A5:5F:5A:3C:2C:02:18:3F:CD:C2:C3:AC:E3:56:53
ValidityFri, 19 May 2023 12:56:47 GMT - Fri, 11 Aug 2023 12:56:46 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: nghiencuukhoahocsupham.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Cookie: SC_unique_275813=1; SC_showNum_275813=1; SC_oneDay_Expires_275813=1686457490145
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon
expires: Sat, 10 Jun 2023 04:24:52 GMT
date: Sat, 10 Jun 2023 04:24:52 GMT
cache-control: private, max-age=86400
last-modified: Sat, 18 Mar 2023 07:51:33 GMT
etag: W/"00d7fcc46b06a4362e082302ff66b9b62673fb82b1bc8b8e1d0ae8ddfa31d839"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1686371093273
Content-Type: application/json
X-Goog-Visitor-Id: CgtuR3FiWDJPSFFnOCiS9o-kBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230606.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1686371090384&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 14031
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sat, 10 Jun 2023 04:24:53 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+307; expires=Mon, 09-Jun-2025 04:24:53 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 10 Jun 2023 04:24:53 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1686371104766
Content-Type: application/json
X-Goog-Visitor-Id: CgtuR3FiWDJPSFFnOCiS9o-kBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230606.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1686371090384&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 684
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sat, 10 Jun 2023 04:25:05 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+233; expires=Mon, 09-Jun-2025 04:25:05 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 10 Jun 2023 04:25:05 GMT
cache-control: private
lh4.googleusercontent.com/-M9bTXv6l8y8/UHzxNGfvszI/AAAAAAAAD_Q/vifUw8RtPbg/s12/RSS.png
200 OK 601 B URL GET HTTP/3 lh4.googleusercontent.com/-M9bTXv6l8y8/UHzxNGfvszI/AAAAAAAAD_Q/vifUw8RtPbg/s12/RSS.png
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 0fa7fcd5c7c5092792aa30bef9f5c879
141b82b11f8c299762215fcb11d9420a021752df
5456a1a24cc37d72704b661976fac091886851f45183e33a2b4bdea91a1d6929
GET /-M9bTXv6l8y8/UHzxNGfvszI/AAAAAAAAD_Q/vifUw8RtPbg/s12/RSS.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="RSS.png"
x-content-type-options: nosniff
server: fife
content-length: 601
x-xss-protection: 0
date: Sat, 10 Jun 2023 01:03:01 GMT
expires: Sun, 11 Jun 2023 01:03:01 GMT
cache-control: public, max-age=86400, no-transform
age: 12109
etag: "vff4"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/dyn-css/authorization.css?targetBlogID=1631668450721642768&zx=23a8c00f-3d87-42ef-9df0-ffb113f1d336
200 OK 1 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=1631668450721642768&zx=23a8c00f-3d87-42ef-9df0-ffb113f1d336
IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint16:37:BF:DE:18:2B:BB:D4:6F:7B:05:89:E7:8F:31:BC:9A:D5:92:87
ValidityFri, 19 May 2023 12:52:45 GMT - Fri, 11 Aug 2023 12:52:44 GMT
File type ASCII text, with no line terminators
Hash 1d78758685e5e2f4efeeb490f8521abd
ef7e6794ca9c6a06b54b66f279237fb8daaaeea8
a80e516bfb196e1c48a9acbe39da8fceb6bc82e0d991b8a990b8f3239c7efaed
GET /dyn-css/authorization.css?targetBlogID=1631668450721642768&zx=23a8c00f-3d87-42ef-9df0-ffb113f1d336 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 Jun 2023 04:24:50 GMT
last-modified: Sat, 10 Jun 2023 04:24:50 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 21:40:21 GMT
expires: Wed, 05 Jun 2024 21:40:21 GMT
cache-control: public, max-age=31536000
age: 283469
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/8c7583ff/www-player.css
200 OK 419 kB URL GET HTTP/3 www.youtube.com/s/player/8c7583ff/www-player.css
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Size 419 kB (418657 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/player/8c7583ff/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49230
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 19:05:05 GMT
expires: Thu, 06 Jun 2024 19:05:05 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Jun 2023 02:05:35 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 206385
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/8c7583ff/player_ias.vflset/en_US/base.js
200 OK 2.4 MB URL GET HTTP/3 www.youtube.com/s/player/8c7583ff/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/lh6NpaV-ukM
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Size 2.4 MB (2389497 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/player/8c7583ff/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/lh6NpaV-ukM
Cookie: YSC=WqoMUbd1WM4; VISITOR_INFO1_LIVE=nGqbX2OHQg8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 760051
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 19:08:31 GMT
expires: Thu, 06 Jun 2024 19:08:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Jun 2023 02:05:35 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 206179
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dinhvioto.net/keyword.js
0 B IP
Requested by https://nghiencuukhoahocsupham.blogspot.com/search/label/T%E1%BB%89nh%20Ngh%E1%BB%87%20An
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /keyword.js HTTP/1.1
Host: dinhvioto.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nghiencuukhoahocsupham.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
172.217.21.161
185.244.209.62
0.0.0.0
31.172.81.228