GET resources.blogblog.com/blogblog/data/res/2894816389-indie_compiled.js
142.250.178.73200 OK 144 kB URL GET resources.blogblog.com/blogblog/data/res/2894816389-indie_compiled.js
IP 142.250.178.73:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.blogger.com
Fingerprint16:9A:06:60:29:C4:42:38:CF:60:0B:12:A8:75:7F:B1:7E:45:48:6E
ValidityMon, 23 Jun 2025 08:40:01 GMT - Mon, 15 Sep 2025 08:40:00 GMT
File type JavaScript source, ASCII text, with very long lines (1934)
Size 144 kB (143573 bytes)
Hash 97c8c1659f966f5dcd190e6191e3eff1
89977f3bb333a96a9aaf362d491b9899ccbf0f5d
3781ddab18565746737a40b20c1d053e659dcafe4cee97704ad702b6f1b520bb
GET /blogblog/data/res/2894816389-indie_compiled.js HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 48883
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Jul 2025 04:11:22 GMT
expires: Mon, 14 Jul 2025 04:11:22 GMT
cache-control: public, max-age=604800
last-modified: Sun, 06 Jul 2025 09:49:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 452124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.blogger.com/img/blogger_logo_round_35.png
142.250.178.73200 OK 2.5 kB URL GET www.blogger.com/img/blogger_logo_round_35.png
IP 142.250.178.73:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.blogger.com
Fingerprint16:9A:06:60:29:C4:42:38:CF:60:0B:12:A8:75:7F:B1:7E:45:48:6E
ValidityMon, 23 Jun 2025 08:40:01 GMT - Mon, 15 Sep 2025 08:40:00 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced
Hash 838622483cbfed35380b4705f19d7cca
7de684136affc969a24d61927afc18905cf2fc36
183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a
GET /img/blogger_logo_round_35.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2531
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 05:20:18 GMT
expires: Thu, 17 Jul 2025 05:20:18 GMT
cache-control: public, max-age=604800
last-modified: Wed, 09 Jul 2025 07:55:43 GMT
content-type: image/png
age: 188788
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET rashcolonizeexpand.com/watch.782287704086.js?key=bc4a19df852a0b3b072638c1bb8be9a8&kw=%5B%22xxxxxxx%22%5D&refer=https%3A%2F%2Ffullxxxxxxhdvideo.blogspot.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=8eb99d37-11bd-472c-af2a-b4321fb6ad7e%3A2%3A1
192.243.59.12307 Temporary Redirect 5.4 kB URL GET rashcolonizeexpand.com/watch.782287704086.js?key=bc4a19df852a0b3b072638c1bb8be9a8&kw=%5B%22xxxxxxx%22%5D&refer=https%3A%2F%2Ffullxxxxxxhdvideo.blogspot.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=8eb99d37-11bd-472c-af2a-b4321fb6ad7e%3A2%3A1
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.782287704086.js?key=bc4a19df852a0b3b072638c1bb8be9a8&kw=%5B%22xxxxxxx%22%5D&refer=https%3A%2F%2Ffullxxxxxxhdvideo.blogspot.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=8eb99d37-11bd-472c-af2a-b4321fb6ad7e%3A2%3A1 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:47 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Access-Control-Allow-Origin: https://fullxxxxxxhdvideo.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://rashcolonizeexpand.com/watch.782287704086.js?dev=e&key=bc4a19df852a0b3b072638c1bb8be9a8&kw=%5B%22xxxxxxx%22%5D&pst=1752313667&rb=&refer=https%3A%2F%2Ffullxxxxxxhdvideo.blogspot.com%2F&res=14.3095&rmtc=t&shu=c33b2fda316a1d4438c0cf96fc9b718a68d8e3b6f7006c081fc0d8da403a5cdb2471d86629f4598b9e6917e1c9b866b2dff9a342e4b24193eec016b7d0aa5fd4000214d34d1d9181878ca52092d15da7a24fe8c33a42189d9d376f&tz=0&uuid=8eb99d37-11bd-472c-af2a-b4321fb6ad7e%3A2%3A1
Set-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNzAzMDUyOSwiayI6ImJjNGExOWRmODUyYTBiM2IwNzI2MzhjMWJiOGJlOWE4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MDk2NDAxLCJwaWQiOjI3OTgwODMsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MiwiYWlkIjoyMywicHQiOjQsInBrIjoiZXVocW4xNmh0IiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2Z1bGx4eHh4eHhoZHZpZGVvLmJsb2dzcG90LmNvbS8iLCJhciI6W119fQ.HXxqWo9F4GPM1_yLpHGBoczKLp35RaHex28NpdQxtx8; expires=Sat, 12 Jul 2025 09:47:47 GMT; path=/; secure; SameSite=None
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0d7703adfc94794c019e06bbd1b1aeeb
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/js/jquery-3.2.1.min.js
104.21.96.1200 OK 130 kB URL GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/js/jquery-3.2.1.min.js
IP 104.21.96.1:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectcreative-sb1.com
FingerprintCD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
ValidityTue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
File type JavaScript source, ASCII text, with very long lines (745)
Size 130 kB (129575 bytes)
Hash e59a2e92b4756cc61e2e4f3082ee1360
c96d002f642bd85adf1e5326bcc0679f9c3ee001
42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2
GET /sb/ssp/interstitial/background_image/1/js/jquery-3.2.1.min.js HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 09 Oct 2023 10:29:55 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WT%2B5Syeg6IQwVpzbwNlAiWNosrLexAFER2hvK%2F1GOAJ0Ka74FqzKWyI4SsUHQANjZn%2FOkfO9PtFlvaVuGbDsQzmSp8O%2Fut2S%2FhKRxoxUMRVjNg%3D%3D"}]}
age: 339003
cf-cache-status: HIT
etag: W/"6523d623-1fa27"
content-encoding: br
cf-ray: 95df9d997b6a0b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5-jStMjvbZyS6mXoAHezjXBKgpqNi7GOLkvxOCnsfJTnnoFkm9Qt9alD23CkY-gpMmUbXwWCo7hGwmOETqBczUDzkaDhc_gmlAJsjYkfDRlhV6SuRVW0fs6qI6b2ejimajSk3fdlu7pP3nDvMHe9wG73q4X-xzQmc8mi6w4k4FnUq8mJGrLxnshzItIay/w128-h128-p-k-no-nu/1000061494.gif
142.250.178.97200 OK 8.7 kB URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5-jStMjvbZyS6mXoAHezjXBKgpqNi7GOLkvxOCnsfJTnnoFkm9Qt9alD23CkY-gpMmUbXwWCo7hGwmOETqBczUDzkaDhc_gmlAJsjYkfDRlhV6SuRVW0fs6qI6b2ejimajSk3fdlu7pP3nDvMHe9wG73q4X-xzQmc8mi6w4k4FnUq8mJGrLxnshzItIay/w128-h128-p-k-no-nu/1000061494.gif
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 128 x 128
Hash d1a4705665f991860353c6a4e3fb36f4
d80b519b9759e54aac2b6f8467905591223f9727
dc429e1dd61fdc72717ba71dafe57fcad797005f06a15138c42152330fc26fdd
GET /img/b/R29vZ2xl/AVvXsEj5-jStMjvbZyS6mXoAHezjXBKgpqNi7GOLkvxOCnsfJTnnoFkm9Qt9alD23CkY-gpMmUbXwWCo7hGwmOETqBczUDzkaDhc_gmlAJsjYkfDRlhV6SuRVW0fs6qI6b2ejimajSk3fdlu7pP3nDvMHe9wG73q4X-xzQmc8mi6w4k4FnUq8mJGrLxnshzItIay/w128-h128-p-k-no-nu/1000061494.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vb6"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1000061494.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 8696
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET praystakeinstinct.com/impr.gif?sid=H4sIAAAAAAAC_1RSPWwcRRSetVPwUyAgSoGEdEUK_nzevzvfkcLCJI4sHNtKglxAM7szex48u7PM7N6er7KwhFKhS0dBsf7OjgVEEdCD0JnOCClHgVzEAtHRIoUW7fkkw5Pm_cw3I33ve-_T_fyMeMjp6cYt1RdS0vlG3a69tikSpgpTW7tbc-y6fa22KZKmf63Wq5zuvu14ft1-vXaTh9tq3rUd23Zsp7YsNI9Ub36CQqQP2069bdd9t-40fPT0_2uTWzDUAuuekZcg2PiFP6MPIMIRkvib69xsZyp960acS5opjS47ej_ZTlSRIL5II20hSo6mr6HMmJDPZ6CSo2kHUN2DqgMEYkxmrjxBkBxNaSLoHp4zDSR4goA9j6I7ApcjCDpCqPYg2GMChAxr60jiB2tKF3TnHKUVOiaXnv4NUYzJpSeXkcSPlqTo1e4omWdCJQa9qITojSA6I6T5MbL-DERxjDD7BIL9QuafriKJD9aNVBDs9KrjcWfBbflzttv253zeaM21Ataea7sNzw1d3vCpPZFIRCNQYyGvjrCQRxby1ELMTmu-3fJDh3rNqM3CBdunvs94YLdbrm3TdriAPKy4D5ClA4RygFDvItW72Bb3x8R69gp0_iPMVgnDLJiMoMtKFJygMAQFJSgEQZERFN3ykEnjmvIBkyYPnGl0p9Erhyrr7NNDlXV4QkD1AJqVByL92OwhzGaH_ciwoaocDbJySANW7qdn5MVKW-sL-Rm2-Wkt8pp-g3pu0Gi7ftCgntek1FtwAzdqNljbhRElhJmZKNIXY3Lr-DFSMSZvfDeLgB7DyGOEYgY0fxW0KEG3SvSTH6Jcyt7EtlhXMK7qgVQdk6qsHqoYTJVIs0vIdqx9eUZemcz7wzct8PBk8R9vYgh1iVSX-Ej8RNCR94a3VUEObqvCkG_X00zEok-rXbiT0YzPfvUe3ymUZivXzeDLd8IKqNKHd7nJVmnCRNIx5OslwRjXy0qHnHy_YjZ5sJGbraVcJ3m6uvHu8kqcam6MUMkIVIzJcz8DoRiTl2_8Ntlz_-rvEHoEnZeI8xMyNYTpLkx6svjX5f4fNx9dhlEEWl7gQWqhyMuhdoOLSykIJL-oaVDC_KcOLvKhptVvKsp9cw8dbYFme0jiEl1doitLUDmAyWeHWapPFn-dShhIaxhIbR0EUsv75xIbUY2du6FttxaajteKuOP5LIwaLb_NmtT2PI7MjLf0_DP_BgAA__8aVfzJxQQAAA==
192.243.59.20200 OK 0 B URL GET praystakeinstinct.com/impr.gif?sid=H4sIAAAAAAAC_1RSPWwcRRSetVPwUyAgSoGEdEUK_nzevzvfkcLCJI4sHNtKglxAM7szex48u7PM7N6er7KwhFKhS0dBsf7OjgVEEdCD0JnOCClHgVzEAtHRIoUW7fkkw5Pm_cw3I33ve-_T_fyMeMjp6cYt1RdS0vlG3a69tikSpgpTW7tbc-y6fa22KZKmf63Wq5zuvu14ft1-vXaTh9tq3rUd23Zsp7YsNI9Ub36CQqQP2069bdd9t-40fPT0_2uTWzDUAuuekZcg2PiFP6MPIMIRkvib69xsZyp960acS5opjS47ej_ZTlSRIL5II20hSo6mr6HMmJDPZ6CSo2kHUN2DqgMEYkxmrjxBkBxNaSLoHp4zDSR4goA9j6I7ApcjCDpCqPYg2GMChAxr60jiB2tKF3TnHKUVOiaXnv4NUYzJpSeXkcSPlqTo1e4omWdCJQa9qITojSA6I6T5MbL-DERxjDD7BIL9QuafriKJD9aNVBDs9KrjcWfBbflzttv253zeaM21Ataea7sNzw1d3vCpPZFIRCNQYyGvjrCQRxby1ELMTmu-3fJDh3rNqM3CBdunvs94YLdbrm3TdriAPKy4D5ClA4RygFDvItW72Bb3x8R69gp0_iPMVgnDLJiMoMtKFJygMAQFJSgEQZERFN3ykEnjmvIBkyYPnGl0p9Erhyrr7NNDlXV4QkD1AJqVByL92OwhzGaH_ciwoaocDbJySANW7qdn5MVKW-sL-Rm2-Wkt8pp-g3pu0Gi7ftCgntek1FtwAzdqNljbhRElhJmZKNIXY3Lr-DFSMSZvfDeLgB7DyGOEYgY0fxW0KEG3SvSTH6Jcyt7EtlhXMK7qgVQdk6qsHqoYTJVIs0vIdqx9eUZemcz7wzct8PBk8R9vYgh1iVSX-Ej8RNCR94a3VUEObqvCkG_X00zEok-rXbiT0YzPfvUe3ymUZivXzeDLd8IKqNKHd7nJVmnCRNIx5OslwRjXy0qHnHy_YjZ5sJGbraVcJ3m6uvHu8kqcam6MUMkIVIzJcz8DoRiTl2_8Ntlz_-rvEHoEnZeI8xMyNYTpLkx6svjX5f4fNx9dhlEEWl7gQWqhyMuhdoOLSykIJL-oaVDC_KcOLvKhptVvKsp9cw8dbYFme0jiEl1doitLUDmAyWeHWapPFn-dShhIaxhIbR0EUsv75xIbUY2du6FttxaajteKuOP5LIwaLb_NmtT2PI7MjLf0_DP_BgAA__8aVfzJxQQAAA==
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC_1RSPWwcRRSetVPwUyAgSoGEdEUK_nzevzvfkcLCJI4sHNtKglxAM7szex48u7PM7N6er7KwhFKhS0dBsf7OjgVEEdCD0JnOCClHgVzEAtHRIoUW7fkkw5Pm_cw3I33ve-_T_fyMeMjp6cYt1RdS0vlG3a69tikSpgpTW7tbc-y6fa22KZKmf63Wq5zuvu14ft1-vXaTh9tq3rUd23Zsp7YsNI9Ub36CQqQP2069bdd9t-40fPT0_2uTWzDUAuuekZcg2PiFP6MPIMIRkvib69xsZyp960acS5opjS47ej_ZTlSRIL5II20hSo6mr6HMmJDPZ6CSo2kHUN2DqgMEYkxmrjxBkBxNaSLoHp4zDSR4goA9j6I7ApcjCDpCqPYg2GMChAxr60jiB2tKF3TnHKUVOiaXnv4NUYzJpSeXkcSPlqTo1e4omWdCJQa9qITojSA6I6T5MbL-DERxjDD7BIL9QuafriKJD9aNVBDs9KrjcWfBbflzttv253zeaM21Ataea7sNzw1d3vCpPZFIRCNQYyGvjrCQRxby1ELMTmu-3fJDh3rNqM3CBdunvs94YLdbrm3TdriAPKy4D5ClA4RygFDvItW72Bb3x8R69gp0_iPMVgnDLJiMoMtKFJygMAQFJSgEQZERFN3ykEnjmvIBkyYPnGl0p9Erhyrr7NNDlXV4QkD1AJqVByL92OwhzGaH_ciwoaocDbJySANW7qdn5MVKW-sL-Rm2-Wkt8pp-g3pu0Gi7ftCgntek1FtwAzdqNljbhRElhJmZKNIXY3Lr-DFSMSZvfDeLgB7DyGOEYgY0fxW0KEG3SvSTH6Jcyt7EtlhXMK7qgVQdk6qsHqoYTJVIs0vIdqx9eUZemcz7wzct8PBk8R9vYgh1iVSX-Ej8RNCR94a3VUEObqvCkG_X00zEok-rXbiT0YzPfvUe3ymUZivXzeDLd8IKqNKHd7nJVmnCRNIx5OslwRjXy0qHnHy_YjZ5sJGbraVcJ3m6uvHu8kqcam6MUMkIVIzJcz8DoRiTl2_8Ntlz_-rvEHoEnZeI8xMyNYTpLkx6svjX5f4fNx9dhlEEWl7gQWqhyMuhdoOLSykIJL-oaVDC_KcOLvKhptVvKsp9cw8dbYFme0jiEl1doitLUDmAyWeHWapPFn-dShhIaxhIbR0EUsv75xIbUY2du6FttxaajteKuOP5LIwaLb_NmtT2PI7MjLf0_DP_BgAA__8aVfzJxQQAAA== HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27028622=1; slecf3645a32b5924b5a336aa372b2f65d92=[6040321]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: iprc_l+2efce7e9b361d76204015a2a9e9df00f=6040321; expires=Sun, 13 Jul 2025 09:46:50 GMT; path=/; secure; SameSite=None
iprc_l:6040321=1; expires=Sun, 13 Jul 2025 09:46:50 GMT; path=/; secure; SameSite=None
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7e9759501b727978bb64ab91a4437ef1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.74.35200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.74.35:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:09:08 GMT
expires: Fri, 10 Jul 2026 10:09:08 GMT
cache-control: public, max-age=31536000
age: 171462
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fullxxxxxxhdvideo.blogspot.com/responsive/sprite_v1_6.css.svg
142.250.178.97200 OK 7.7 kB URL GET fullxxxxxxhdvideo.blogspot.com/responsive/sprite_v1_6.css.svg
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
Fingerprint6B:F0:FF:EB:12:2F:E2:47:6F:73:B9:AD:53:3B:E7:3C:CE:8B:C2:13
ValidityMon, 23 Jun 2025 08:41:07 GMT - Mon, 15 Sep 2025 08:41:06 GMT
File type SVG Scalable Vector Graphics image
Hash d4dcfc8144f556815c7a1d84ed4e959e
22088bd6cdf970dcf7bfab9a74a4768548ca8890
73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c
GET /responsive/sprite_v1_6.css.svg HTTP/1.1
Host: fullxxxxxxhdvideo.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: image/svg+xml
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2244
date: Sat, 12 Jul 2025 09:46:46 GMT
expires: Sat, 19 Jul 2025 09:46:46 GMT
cache-control: public, max-age=604800
last-modified: Sat, 12 Jul 2025 07:54:39 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir1kKX4AfcnzvLpxG5wOhbGBwPI3Cs91dbtiNq4ewIM8KAkmUkOQnFe3rTVW5K_4HU5XofFkHhJXGJYE2DGC8_VmXd-48Uiz5SH4s2BVwmsjpHhH-EPhQuO2SQ1r6Wfq40aIv0Wq2pBVI0kkcHcYdSRtFeF7lHeCQWutXrwCgcsRnFeD2gVxL0wZQ7QxLG/w128-h128-p-k-no-nu/1000061492.gif
142.250.178.97200 OK 14 kB URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir1kKX4AfcnzvLpxG5wOhbGBwPI3Cs91dbtiNq4ewIM8KAkmUkOQnFe3rTVW5K_4HU5XofFkHhJXGJYE2DGC8_VmXd-48Uiz5SH4s2BVwmsjpHhH-EPhQuO2SQ1r6Wfq40aIv0Wq2pBVI0kkcHcYdSRtFeF7lHeCQWutXrwCgcsRnFeD2gVxL0wZQ7QxLG/w128-h128-p-k-no-nu/1000061492.gif
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 128 x 128
Hash 5c07baae14dc0964692b2e51fcb17df4
0f3503db3f4d73cd2ead2b30fdfc11ddcbc81414
16d0aa6f7ffd9edec197c2d2248b7db0d311ad523f041a55a67b96e562eaee87
GET /img/b/R29vZ2xl/AVvXsEir1kKX4AfcnzvLpxG5wOhbGBwPI3Cs91dbtiNq4ewIM8KAkmUkOQnFe3rTVW5K_4HU5XofFkHhJXGJYE2DGC8_VmXd-48Uiz5SH4s2BVwmsjpHhH-EPhQuO2SQ1r6Wfq40aIv0Wq2pBVI0kkcHcYdSRtFeF7lHeCQWutXrwCgcsRnFeD2gVxL0wZQ7QxLG/w128-h128-p-k-no-nu/1000061492.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "va5"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1000061492.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 13812
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pl27131009.profitableratecpm.com/b9d8d38c663767a5b7c0e7c8b1c3966d/invoke.js
192.243.61.227200 OK 26 kB URL GET pl27131009.profitableratecpm.com/b9d8d38c663767a5b7c0e7c8b1c3966d/invoke.js
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectprofitableratecpm.com
FingerprintF0:1C:19:8E:0A:66:67:96:FE:65:D1:76:02:CD:A0:DD:D4:3B:88:9E
ValidityFri, 06 Jun 2025 21:52:23 GMT - Thu, 04 Sep 2025 21:52:22 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (25575), with no line terminators
Hash 04e7b03911f77dad071790ad391f1dc9
a264f02cc55f4b3115c9f094e84bc87a8aab5e5f
07f50b1767c7a5aa444579c6448660c31275196b34a150fd0ac29f8282b680c6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /b9d8d38c663767a5b7c0e7c8b1c3966d/invoke.js HTTP/1.1
Host: pl27131009.profitableratecpm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:46 GMT
Content-Type: application/javascript
Content-Length: 9527
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: pl27131009.profitableratecpm.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 4b147a24d42fee9328fd215e70223e06
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fanimate.css&l=79249&fd=545
192.243.59.20200 OK 0 B URL GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fanimate.css&l=79249&fd=545
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fanimate.css&l=79249&fd=545 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27028622=1; slecf3645a32b5924b5a336aa372b2f65d92=[6040321]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:49 GMT
Content-Length: 0
Connection: keep-alive
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET praystakeinstinct.com/pixel/sbs?c=1
192.243.61.227200 OK 0 B URL GET praystakeinstinct.com/pixel/sbs?c=1
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27028622=1; slecf3645a32b5924b5a336aa372b2f65d92=[6040321]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:50 GMT
Content-Length: 0
Connection: keep-alive
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET pl27129103.profitableratecpm.com/46/87/c7/4687c7290bd006ccb5d4006ab83c1eaa.js
192.243.61.227200 OK 104 kB URL GET pl27129103.profitableratecpm.com/46/87/c7/4687c7290bd006ccb5d4006ab83c1eaa.js
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectprofitableratecpm.com
FingerprintF0:1C:19:8E:0A:66:67:96:FE:65:D1:76:02:CD:A0:DD:D4:3B:88:9E
ValidityFri, 06 Jun 2025 21:52:23 GMT - Thu, 04 Sep 2025 21:52:22 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 104 kB (104209 bytes)
Hash c222184b6ac26045a7d29751cc65c4dd
a74c639b6a67b671f31bb403cc7cd196cb418d31
76f727f09218b2f562400618c1dc840f9707435b9c6eb98a766d22895dedeb86
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /46/87/c7/4687c7290bd006ccb5d4006ab83c1eaa.js HTTP/1.1
Host: pl27129103.profitableratecpm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:46 GMT
Content-Type: application/javascript
Content-Length: 32885
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: pl27129103.profitableratecpm.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 53b15adaa70bbe588baaa98ea0adaf25
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET blogger.googleusercontent.com/img/a/AVvXsEh2yqRVMymPtMW4zvv0D0FU4zojNjzbP55Vdo3wPLBLkFyqnOwBZhsnlEXhfEJ3G985auTlzd7rhuV-0sGFd6v-qr-4PLjYQY_sb-LAzYjtabpLKaBCbLWXmnxP0OELnbGev3DLDlrffGxJ1-0v9PUXZKhOS81V0IPwPFbVmSZvBNEzwbEMTfwiA-jxMnf7=w1600
142.250.178.97200 OK 1.3 MB URL GET blogger.googleusercontent.com/img/a/AVvXsEh2yqRVMymPtMW4zvv0D0FU4zojNjzbP55Vdo3wPLBLkFyqnOwBZhsnlEXhfEJ3G985auTlzd7rhuV-0sGFd6v-qr-4PLjYQY_sb-LAzYjtabpLKaBCbLWXmnxP0OELnbGev3DLDlrffGxJ1-0v9PUXZKhOS81V0IPwPFbVmSZvBNEzwbEMTfwiA-jxMnf7=w1600
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 540 x 315
Size 1.3 MB (1304033 bytes)
Hash 3a108f8f891100272be4647e31517d70
908ab0fc2e665778d2fa66b084b94afa369dd5d8
dcce4eb07a9271aaf44e8b5e2334efb6057466c85fc416212651fd05f41ebfb1
GET /img/a/AVvXsEh2yqRVMymPtMW4zvv0D0FU4zojNjzbP55Vdo3wPLBLkFyqnOwBZhsnlEXhfEJ3G985auTlzd7rhuV-0sGFd6v-qr-4PLjYQY_sb-LAzYjtabpLKaBCbLWXmnxP0OELnbGev3DLDlrffGxJ1-0v9PUXZKhOS81V0IPwPFbVmSZvBNEzwbEMTfwiA-jxMnf7=w1600 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vd1"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="xxxgif-amazing-lena-paul-fucked-deep-and-fast-xxx-gif-porn.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 1304033
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET professionaltrafficmonitor.com/stats
3.126.213.67200 OK 40 B URL GET professionaltrafficmonitor.com/stats
IP 3.126.213.67:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerAmazon
Subjectprotrafficinspector.com
Fingerprint5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
ValidityTue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 67087e4fe86145a306cc4bda7141bba0
014b5734d92f053909461c7b54cf88c06532bf35
e8c80256e23a3eaf66f64982099a114c0b9411cbc70d0204ab7b009ee6f94a3f
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:46 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://fullxxxxxxhdvideo.blogspot.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET weirdopt.com/ad/advertisers.js
185.196.197.71200 OK 0 B URL GET weirdopt.com/ad/advertisers.js
IP 185.196.197.71:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectweirdopt.com
Fingerprint1A:27:71:C0:8E:44:D4:6B:F5:AA:49:F0:F1:AF:E5:5F:30:23:A4:D4
ValidityTue, 01 Jul 2025 15:18:37 GMT - Mon, 29 Sep 2025 15:18:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ad/advertisers.js HTTP/1.1
Host: weirdopt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:46 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 07e7c70a5a37b5ca7c6f1d462e1ac002
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.storageimagedisplay.com/si/56/2e/61/562e61d246ea51456dbc6923816f7bbc/1723680005.png
45.133.44.1200 OK 194 kB URL GET cdn.storageimagedisplay.com/si/56/2e/61/562e61d246ea51456dbc6923816f7bbc/1723680005.png
IP 45.133.44.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.storageimagedisplay.com
Fingerprint06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9
ValidityThu, 10 Jul 2025 02:33:11 GMT - Wed, 08 Oct 2025 02:33:10 GMT
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced
Size 194 kB (193846 bytes)
Hash b1b4b94611a185e45daec44d7685025f
7cda73a508402d93ee2cb2b1a921a9492210df4c
69ededc75b0c01168a32d1ad917135fb734590cb25ec7ea0ef9cb2ba1dea2a8e
GET /si/56/2e/61/562e61d246ea51456dbc6923816f7bbc/1723680005.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:47 GMT
content-type: image/png
content-length: 193846
server: nginx/1.21.6
last-modified: Thu, 15 Aug 2024 00:00:07 GMT
etag: "66bd4507-2f536"
expires: Mon, 14 Jul 2025 09:46:47 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.storageimagedisplay.com/cti/e7/6b/ab/e76bab4f2d982b2fce8f40f0c620a057/1716370665.jpg
45.133.44.1200 OK 98 kB URL GET cdn.storageimagedisplay.com/cti/e7/6b/ab/e76bab4f2d982b2fce8f40f0c620a057/1716370665.jpg
IP 45.133.44.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.storageimagedisplay.com
Fingerprint06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9
ValidityThu, 10 Jul 2025 02:33:11 GMT - Wed, 08 Oct 2025 02:33:10 GMT
File type JPEG image data, baseline, precision 8, 728x90, components 3
Hash 264024802286edac6209acefec445518
4fcf6606c488b7d2d620162eb2d290982fc85543
c25eb70c0f316ce0fd83c4cd90116d3484dc1595072a2370aeb92355a79aae0e
GET /cti/e7/6b/ab/e76bab4f2d982b2fce8f40f0c620a057/1716370665.jpg HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:48 GMT
content-type: image/jpeg
content-length: 97797
server: nginx/1.21.6
last-modified: Wed, 22 May 2024 09:37:53 GMT
etag: "664dbcf1-17e05"
expires: Mon, 14 Jul 2025 09:46:48 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET preferencenail.com/sfp.js
185.196.197.72200 OK 85 kB URL GET preferencenail.com/sfp.js
IP 185.196.197.72:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpreferencenail.com
FingerprintF9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3
ValidityTue, 01 Jul 2025 15:11:38 GMT - Mon, 29 Sep 2025 15:11:37 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 46a6fef91632b94d14252fe324c1585f
387cebbd261b8fe947fe9805875300f2ceeb5cfd
36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5
GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:46 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28254
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f05b108a7f4f6ddc6d125890f99bcee4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET eradisciplinemomentary.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYgcRRitngREPfiD5OBpjioy2zPT82cOwRgjwWR3zUb24Km6qnu2stVdbVX39OyAsrgQcnPUixEPtW92s6hBohcvKjIriCwI6dseshfBm16EHDxJzw6MftDfT78qeO99dWs3OyFNZPR49ZoaCSnpUqvmVl9YFzFXuaku36jW3Zp7vrou4rZ3vjoskx68Um96NffF6hsB21RLDbfuunW3Xr0sdBCq4dIMhUju9eq1nlvzGrV6y8NQ_382mQNDHfDBCXkWghdP_R6-A8GmiKP7lwKzmark5dejTNJUaQz4wdvxZqzyGNGiDbWDMD6Yn4YyBSGfVqDig7kCqMFeqQC-KEjl3EP48cGcJvzB_ilTXyKI4fMnkQ-mCOQUgk7B1A4Ef0AAxrG8gji6u6x0TrdOUVqiBTn76G-IvCBnHz6HOPr6ohTD6pqSWSpUbDAMLcRwCtGfIskOkY4qEPkhWPoBBP-NLD26ijjaWzFSQXA7Uy_CKahxkJWfcJCFDrLEQcSPq57b9VidNtthj7OO61HP44Hv9roN16U91kHGSlpjpMkYTI7B9DYSvY1N8VFBnMfPQWc_wWxYGO7ApAVx3trGgFvkAUFuCHJKkAuCPCXIB3afS9Mw9i6XJvPr89qY16adqLS_S_dV2g9iAqrH0NzuieRdswOWnpmMQsMnqkzUT-2E-tzuJifkmdI653PzFzaD46rf413e7LJ2u9lpd2jL7zA36LCuX2fNXrvNYYSFMJWZKyNRkGuHD5CIgrz07Rn49BBGHoKJCmhWB80t6IbFKP4xzKQczmKDDwQPVM2Xqm8SldaYisCVRZKeRbrl7MoT8vxsnWu3_kTAji4MP0m_v_n-P2DaItEWN8XPBH15e3Jd5WTvusoN-WYlSUUkRrRc9VpK0-DMl28GW7nS_MolM_7iVVYCZXvvRmDSqzTmIu4b8tVFwXmgLyvNAvLDFbMe-KuZ2biY6ThLrq6-dvlKlOjAGKHiKagoCLlzH0wU5Olf3ps949p3H0LoKXRmEWVHZB5gyTZMsuBuFIGWC9xPKsgzO9ENf_FTCgIZLGbqW5j_zP6in2ha3qbC7prb6OsKaLqDOLIYaIuBtKByDJM9MUkTfXTh1ztlfAZfVia-1JU9X2r5cWnxH6c-G3FcbTX8ZrvbbQdhm4dN3mw0ea_lBj2P9tpez2shNcWGXnrs3wAAAP__-jE3OqkEAAA=
172.240.127.234200 OK 0 B URL GET eradisciplinemomentary.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYgcRRitngREPfiD5OBpjioy2zPT82cOwRgjwWR3zUb24Km6qnu2stVdbVX39OyAsrgQcnPUixEPtW92s6hBohcvKjIriCwI6dseshfBm16EHDxJzw6MftDfT78qeO99dWs3OyFNZPR49ZoaCSnpUqvmVl9YFzFXuaku36jW3Zp7vrou4rZ3vjoskx68Um96NffF6hsB21RLDbfuunW3Xr0sdBCq4dIMhUju9eq1nlvzGrV6y8NQ_382mQNDHfDBCXkWghdP_R6-A8GmiKP7lwKzmark5dejTNJUaQz4wdvxZqzyGNGiDbWDMD6Yn4YyBSGfVqDig7kCqMFeqQC-KEjl3EP48cGcJvzB_ilTXyKI4fMnkQ-mCOQUgk7B1A4Ef0AAxrG8gji6u6x0TrdOUVqiBTn76G-IvCBnHz6HOPr6ohTD6pqSWSpUbDAMLcRwCtGfIskOkY4qEPkhWPoBBP-NLD26ijjaWzFSQXA7Uy_CKahxkJWfcJCFDrLEQcSPq57b9VidNtthj7OO61HP44Hv9roN16U91kHGSlpjpMkYTI7B9DYSvY1N8VFBnMfPQWc_wWxYGO7ApAVx3trGgFvkAUFuCHJKkAuCPCXIB3afS9Mw9i6XJvPr89qY16adqLS_S_dV2g9iAqrH0NzuieRdswOWnpmMQsMnqkzUT-2E-tzuJifkmdI653PzFzaD46rf413e7LJ2u9lpd2jL7zA36LCuX2fNXrvNYYSFMJWZKyNRkGuHD5CIgrz07Rn49BBGHoKJCmhWB80t6IbFKP4xzKQczmKDDwQPVM2Xqm8SldaYisCVRZKeRbrl7MoT8vxsnWu3_kTAji4MP0m_v_n-P2DaItEWN8XPBH15e3Jd5WTvusoN-WYlSUUkRrRc9VpK0-DMl28GW7nS_MolM_7iVVYCZXvvRmDSqzTmIu4b8tVFwXmgLyvNAvLDFbMe-KuZ2biY6ThLrq6-dvlKlOjAGKHiKagoCLlzH0wU5Olf3ps949p3H0LoKXRmEWVHZB5gyTZMsuBuFIGWC9xPKsgzO9ENf_FTCgIZLGbqW5j_zP6in2ha3qbC7prb6OsKaLqDOLIYaIuBtKByDJM9MUkTfXTh1ztlfAZfVia-1JU9X2r5cWnxH6c-G3FcbTX8ZrvbbQdhm4dN3mw0ea_lBj2P9tpez2shNcWGXnrs3wAAAP__-jE3OqkEAAA=
IP 172.240.127.234:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecteradisciplinemomentary.com
Fingerprint2E:C8:EB:E6:FA:72:D6:F1:97:7D:DC:2F:E9:79:64:83:A5:36:AF:03
ValidityThu, 10 Jul 2025 21:27:10 GMT - Wed, 08 Oct 2025 21:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC_1RSTYgcRRitngREPfiD5OBpjioy2zPT82cOwRgjwWR3zUb24Km6qnu2stVdbVX39OyAsrgQcnPUixEPtW92s6hBohcvKjIriCwI6dseshfBm16EHDxJzw6MftDfT78qeO99dWs3OyFNZPR49ZoaCSnpUqvmVl9YFzFXuaku36jW3Zp7vrou4rZ3vjoskx68Um96NffF6hsB21RLDbfuunW3Xr0sdBCq4dIMhUju9eq1nlvzGrV6y8NQ_382mQNDHfDBCXkWghdP_R6-A8GmiKP7lwKzmark5dejTNJUaQz4wdvxZqzyGNGiDbWDMD6Yn4YyBSGfVqDig7kCqMFeqQC-KEjl3EP48cGcJvzB_ilTXyKI4fMnkQ-mCOQUgk7B1A4Ef0AAxrG8gji6u6x0TrdOUVqiBTn76G-IvCBnHz6HOPr6ohTD6pqSWSpUbDAMLcRwCtGfIskOkY4qEPkhWPoBBP-NLD26ijjaWzFSQXA7Uy_CKahxkJWfcJCFDrLEQcSPq57b9VidNtthj7OO61HP44Hv9roN16U91kHGSlpjpMkYTI7B9DYSvY1N8VFBnMfPQWc_wWxYGO7ApAVx3trGgFvkAUFuCHJKkAuCPCXIB3afS9Mw9i6XJvPr89qY16adqLS_S_dV2g9iAqrH0NzuieRdswOWnpmMQsMnqkzUT-2E-tzuJifkmdI653PzFzaD46rf413e7LJ2u9lpd2jL7zA36LCuX2fNXrvNYYSFMJWZKyNRkGuHD5CIgrz07Rn49BBGHoKJCmhWB80t6IbFKP4xzKQczmKDDwQPVM2Xqm8SldaYisCVRZKeRbrl7MoT8vxsnWu3_kTAji4MP0m_v_n-P2DaItEWN8XPBH15e3Jd5WTvusoN-WYlSUUkRrRc9VpK0-DMl28GW7nS_MolM_7iVVYCZXvvRmDSqzTmIu4b8tVFwXmgLyvNAvLDFbMe-KuZ2biY6ThLrq6-dvlKlOjAGKHiKagoCLlzH0wU5Olf3ps949p3H0LoKXRmEWVHZB5gyTZMsuBuFIGWC9xPKsgzO9ENf_FTCgIZLGbqW5j_zP6in2ha3qbC7prb6OsKaLqDOLIYaIuBtKByDJM9MUkTfXTh1ztlfAZfVia-1JU9X2r5cWnxH6c-G3FcbTX8ZrvbbQdhm4dN3mw0ea_lBj2P9tpez2shNcWGXnrs3wAAAP__-jE3OqkEAAA= HTTP/1.1
Host: eradisciplinemomentary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27030510=1; nlecb9d8d38c663767a5b7c0e7c8b1c3966d=[5474022,5474029]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:47 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 0
Host: eradisciplinemomentary.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9be1b7f4d9de548b14e8c1f79bb071c5
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRSetVPwUyAgSoGEdEUK_nze25_zLSkiQn4UkT8lQS6gmdmZPQ-e3Vlmdm_PV1lYQqnQpaOgWH9nxwKiCOhB6ExnhJSjQC5igehokUKL7nyS4Un73vv2m5G-9837dLs8Ij5Kenjruh5Ipehy2HQbr63KjOvKNm7cbbTcpnuusSqzdnCu0Z8m03u75QdN9_XGFRGv62XPbbluy201LksjEt1fnrGQ-cOo1YzcZuA1W2GAvvk_tqUDSx3w3hF5CZJPXvgz-QAyHiNLv7ko7Hqh87cupaWihTbo8b33s_VMVxnSkzYxDpJsb34a2k4I-XwBOtubTwDd25lOACYnZOHME7Bsby4TrLd7rJQpiAyMP4-qN4ZQY0g6Rqy3IPljAsQcN24iSx_c0KaiG8csnbITcurp35DVhJx6chpZ-uiCkv3GHa3KQurMop_UkP0xZHeMvNxHMViArPYRF59A8l_I8tNryNKdm1ZpSH54tuWL1orXCZZcLwqWAhF2ljqMR0uRF_pe7IkwoO7MIpmMQa2DcvpJB2XioMwdpPywEbidIG5Rv51EPF5xAxoEXDA36niuS6N4BWU81T5EkQ8RqyFis4ncbGJd3p8Q59kzMOWPsGs1LHdgC4Ier1EJgsoSVJSgkgRVQVD16l2urGfrB1zZkrXm1ZtXvx7portNd3XRFRkBNUMYXu_I_GO7hbhYHA0Sy0d6migr6hFlvN7Oj8iLU2-dL9RnWBeHjcRvByH1PRZGXsBC6vttSv0Vj3lJO-SRBytrSLswc2QgJ-T6_mPkckLe-G4RjO7Dqn3EcgG0fBW0qkHXagyyH5JSqf4s1nhPcqGbTOmuzXXRjHUKrmvkxSkUG862OiKvzN77wzcdiPjg_D_-LBCbGrmp8ZH8iaCr7o1u64rs3NaVJd_ezAuZygGd7sKdghZi8av3xEalDb960Q6_fCeeEtP24V1hi2s04zLrWvL1Bcm5MJe1iQX5_qpdFexWadculCYr82u33r18Nc2NsFbqbAwqJ-S5n4FYTsjLl36b7Xlw9ndIM4Ypa6TlAZkH4nwTNj84_9fpwR9XHp2G1QRGnfAsd1CV9ch47OSnkgRKnGDKatj_YHbSjwyd3qay3rb30DUOaLGFLK3RMzV6qgZVQ9hycVTk5uD8r3MLmXJGTBlnhymj7h9bbOVhI_SY3-502iJp88TnvufzKHRFFNCoHURBiMJO1szyM_8GAAD__-Y9bBfFBAAA
192.243.59.20200 OK 0 B URL GET praystakeinstinct.com/ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRSetVPwUyAgSoGEdEUK_nze25_zLSkiQn4UkT8lQS6gmdmZPQ-e3Vlmdm_PV1lYQqnQpaOgWH9nxwKiCOhB6ExnhJSjQC5igehokUKL7nyS4Un73vv2m5G-9837dLs8Ij5Kenjruh5Ipehy2HQbr63KjOvKNm7cbbTcpnuusSqzdnCu0Z8m03u75QdN9_XGFRGv62XPbbluy201LksjEt1fnrGQ-cOo1YzcZuA1W2GAvvk_tqUDSx3w3hF5CZJPXvgz-QAyHiNLv7ko7Hqh87cupaWihTbo8b33s_VMVxnSkzYxDpJsb34a2k4I-XwBOtubTwDd25lOACYnZOHME7Bsby4TrLd7rJQpiAyMP4-qN4ZQY0g6Rqy3IPljAsQcN24iSx_c0KaiG8csnbITcurp35DVhJx6chpZ-uiCkv3GHa3KQurMop_UkP0xZHeMvNxHMViArPYRF59A8l_I8tNryNKdm1ZpSH54tuWL1orXCZZcLwqWAhF2ljqMR0uRF_pe7IkwoO7MIpmMQa2DcvpJB2XioMwdpPywEbidIG5Rv51EPF5xAxoEXDA36niuS6N4BWU81T5EkQ8RqyFis4ncbGJd3p8Q59kzMOWPsGs1LHdgC4Ier1EJgsoSVJSgkgRVQVD16l2urGfrB1zZkrXm1ZtXvx7portNd3XRFRkBNUMYXu_I_GO7hbhYHA0Sy0d6migr6hFlvN7Oj8iLU2-dL9RnWBeHjcRvByH1PRZGXsBC6vttSv0Vj3lJO-SRBytrSLswc2QgJ-T6_mPkckLe-G4RjO7Dqn3EcgG0fBW0qkHXagyyH5JSqf4s1nhPcqGbTOmuzXXRjHUKrmvkxSkUG862OiKvzN77wzcdiPjg_D_-LBCbGrmp8ZH8iaCr7o1u64rs3NaVJd_ezAuZygGd7sKdghZi8av3xEalDb960Q6_fCeeEtP24V1hi2s04zLrWvL1Bcm5MJe1iQX5_qpdFexWadculCYr82u33r18Nc2NsFbqbAwqJ-S5n4FYTsjLl36b7Xlw9ndIM4Ypa6TlAZkH4nwTNj84_9fpwR9XHp2G1QRGnfAsd1CV9ch47OSnkgRKnGDKatj_YHbSjwyd3qay3rb30DUOaLGFLK3RMzV6qgZVQ9hycVTk5uD8r3MLmXJGTBlnhymj7h9bbOVhI_SY3-502iJp88TnvufzKHRFFNCoHURBiMJO1szyM_8GAAD__-Y9bBfFBAAA
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRSetVPwUyAgSoGEdEUK_nze25_zLSkiQn4UkT8lQS6gmdmZPQ-e3Vlmdm_PV1lYQqnQpaOgWH9nxwKiCOhB6ExnhJSjQC5igehokUKL7nyS4Un73vv2m5G-9837dLs8Ij5Kenjruh5Ipehy2HQbr63KjOvKNm7cbbTcpnuusSqzdnCu0Z8m03u75QdN9_XGFRGv62XPbbluy201LksjEt1fnrGQ-cOo1YzcZuA1W2GAvvk_tqUDSx3w3hF5CZJPXvgz-QAyHiNLv7ko7Hqh87cupaWihTbo8b33s_VMVxnSkzYxDpJsb34a2k4I-XwBOtubTwDd25lOACYnZOHME7Bsby4TrLd7rJQpiAyMP4-qN4ZQY0g6Rqy3IPljAsQcN24iSx_c0KaiG8csnbITcurp35DVhJx6chpZ-uiCkv3GHa3KQurMop_UkP0xZHeMvNxHMViArPYRF59A8l_I8tNryNKdm1ZpSH54tuWL1orXCZZcLwqWAhF2ljqMR0uRF_pe7IkwoO7MIpmMQa2DcvpJB2XioMwdpPywEbidIG5Rv51EPF5xAxoEXDA36niuS6N4BWU81T5EkQ8RqyFis4ncbGJd3p8Q59kzMOWPsGs1LHdgC4Ier1EJgsoSVJSgkgRVQVD16l2urGfrB1zZkrXm1ZtXvx7portNd3XRFRkBNUMYXu_I_GO7hbhYHA0Sy0d6migr6hFlvN7Oj8iLU2-dL9RnWBeHjcRvByH1PRZGXsBC6vttSv0Vj3lJO-SRBytrSLswc2QgJ-T6_mPkckLe-G4RjO7Dqn3EcgG0fBW0qkHXagyyH5JSqf4s1nhPcqGbTOmuzXXRjHUKrmvkxSkUG862OiKvzN77wzcdiPjg_D_-LBCbGrmp8ZH8iaCr7o1u64rs3NaVJd_ezAuZygGd7sKdghZi8av3xEalDb960Q6_fCeeEtP24V1hi2s04zLrWvL1Bcm5MJe1iQX5_qpdFexWadculCYr82u33r18Nc2NsFbqbAwqJ-S5n4FYTsjLl36b7Xlw9ndIM4Ypa6TlAZkH4nwTNj84_9fpwR9XHp2G1QRGnfAsd1CV9ch47OSnkgRKnGDKatj_YHbSjwyd3qay3rb30DUOaLGFLK3RMzV6qgZVQ9hycVTk5uD8r3MLmXJGTBlnhymj7h9bbOVhI_SY3-502iJp88TnvufzKHRFFNCoHURBiMJO1szyM_8GAAD__-Y9bBfFBAAA HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27028622=1; slecf3645a32b5924b5a336aa372b2f65d92=[6040321]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:48 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: a98f55ba8b1bb9bece9d50e139476a6c
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F3a%2Ffb%2F42%2F3afb429f1f81cca1b8c0759baff80b11%2F1698575610.html&l=1356&fd=572
192.243.59.20200 OK 0 B URL GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F3a%2Ffb%2F42%2F3afb429f1f81cca1b8c0759baff80b11%2F1698575610.html&l=1356&fd=572
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F3a%2Ffb%2F42%2F3afb429f1f81cca1b8c0759baff80b11%2F1698575610.html&l=1356&fd=572 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27028622=1; slecf3645a32b5924b5a336aa372b2f65d92=[6040321]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:49 GMT
Content-Length: 0
Connection: keep-alive
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.10200 OK 17 kB URL GET fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.10:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintDC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B
ValidityMon, 23 Jun 2025 08:41:28 GMT - Mon, 15 Sep 2025 08:41:27 GMT
File type ASCII text, with very long lines (1572)
Hash e9d2e14beb088f37fae98294940a9dcd
1dafc3c55550249c8c2d782d5616c7b445c8e005
f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Jul 2025 09:46:49 GMT
date: Sat, 12 Jul 2025 09:46:49 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.storageimagedisplay.com/si/00/d7/d1/00d7d1b1ea92df591710243358bd44a3372128381dc5a04c3839c0db4bfafbe5.png
45.133.44.1200 OK 77 kB URL GET cdn.storageimagedisplay.com/si/00/d7/d1/00d7d1b1ea92df591710243358bd44a3372128381dc5a04c3839c0db4bfafbe5.png
IP 45.133.44.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.storageimagedisplay.com
Fingerprint06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9
ValidityThu, 10 Jul 2025 02:33:11 GMT - Wed, 08 Oct 2025 02:33:10 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3
Hash 25d78236f701099186ee43bb67d7e4df
64a18115aa4409aa0cd097f4fac29ac388642f5e
82bc795ae422eb5e77ac365417244fa49dd1bf9a4bc1d40505f522c825215b7c
GET /si/00/d7/d1/00d7d1b1ea92df591710243358bd44a3372128381dc5a04c3839c0db4bfafbe5.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: image/png
content-length: 76866
server: nginx/1.21.6
last-modified: Tue, 01 Jul 2025 13:52:44 GMT
etag: "6863e82c-12c42"
expires: Mon, 14 Jul 2025 09:46:49 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBTVJnARv1ilchfZg-zg3mL8GILIWauQoSFCcdE0FlVlM378BvsF-hB3qsPcZAjrT7xrWBzA_NzSCvSbzQ1oajBEGmqpd56FUBYExdL8pYfV6t2RW4DKQzF6afO6hm-OlHPeYKFxPbFZflvpyUgMZf9Y85yO2xa5AKeEMTYZ8We8Ktc-wR_LfBW_BB95UL/w945-h600-p-k-no-nu/1000061506.gif
142.250.178.97200 OK 53 kB URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBTVJnARv1ilchfZg-zg3mL8GILIWauQoSFCcdE0FlVlM378BvsF-hB3qsPcZAjrT7xrWBzA_NzSCvSbzQ1oajBEGmqpd56FUBYExdL8pYfV6t2RW4DKQzF6afO6hm-OlHPeYKFxPbFZflvpyUgMZf9Y85yO2xa5AKeEMTYZ8We8Ktc-wR_LfBW_BB95UL/w945-h600-p-k-no-nu/1000061506.gif
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 430 x 242
Hash 42f6664b6bd9a0c0b4c66f2c87ff2761
5de30e8785e82476ba3dd279892a3e995a0b58c1
591305765393f933e866c2df8a6cfd9551f0428a90a075f19877eeca4c7f2897
GET /img/b/R29vZ2xl/AVvXsEgBTVJnARv1ilchfZg-zg3mL8GILIWauQoSFCcdE0FlVlM378BvsF-hB3qsPcZAjrT7xrWBzA_NzSCvSbzQ1oajBEGmqpd56FUBYExdL8pYfV6t2RW4DKQzF6afO6hm-OlHPeYKFxPbFZflvpyUgMZf9Y85yO2xa5AKeEMTYZ8We8Ktc-wR_LfBW_BB95UL/w945-h600-p-k-no-nu/1000061506.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vcb"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1000061506.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 52687
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.highperformanceformat.com/bc4a19df852a0b3b072638c1bb8be9a8/invoke.js
172.240.108.68200 OK 27 kB URL GET www.highperformanceformat.com/bc4a19df852a0b3b072638c1bb8be9a8/invoke.js
IP 172.240.108.68:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecthighperformanceformat.com
Fingerprint23:20:DD:39:19:DD:B5:DE:95:95:30:3E:F2:A7:E5:D4:79:0C:ED:D5
ValidityThu, 12 Jun 2025 21:44:55 GMT - Wed, 10 Sep 2025 21:44:54 GMT
File type JavaScript source, ASCII text, with very long lines (27355), with no line terminators
Hash 902a1ee9399fed35965a399e5a30cda7
6a2907ce6a1a670631c8c8b8ebd4586865f96fd7
f49b1b86dd858358455b955a14d2e4e3df8e0b295e5fdc10561edb77558fbf8b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /bc4a19df852a0b3b072638c1bb8be9a8/invoke.js HTTP/1.1
Host: www.highperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:46 GMT
Content-Type: application/javascript
Content-Length: 11492
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 2
Host: www.highperformanceformat.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 1ab6e8d0b1fc62f7fc00a03767b94516
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET www.blogger.com/static/v1/widgets/3071540258-widgets.js
142.250.178.73200 OK 148 kB URL GET www.blogger.com/static/v1/widgets/3071540258-widgets.js
IP 142.250.178.73:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.blogger.com
Fingerprint16:9A:06:60:29:C4:42:38:CF:60:0B:12:A8:75:7F:B1:7E:45:48:6E
ValidityMon, 23 Jun 2025 08:40:01 GMT - Mon, 15 Sep 2025 08:40:00 GMT
File type JavaScript source, ASCII text, with very long lines (4176)
Size 148 kB (147635 bytes)
Hash 5fe14d68d2dff3b3106af332b51f3cfa
9a92fade36bddb50684b53942b47011bc569b5d9
995f1aff2c867899f291473410af7c42f2e66d5aa89d70a0d9196fba09bba870
GET /static/v1/widgets/3071540258-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 52113
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 02:09:57 GMT
expires: Fri, 10 Jul 2026 02:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 09 Jul 2025 05:51:12 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 200209
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fullxxxxxxhdvideo.blogspot.com/js/cookienotice.js
142.250.178.97200 OK 6.5 kB URL GET fullxxxxxxhdvideo.blogspot.com/js/cookienotice.js
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
Fingerprint6B:F0:FF:EB:12:2F:E2:47:6F:73:B9:AD:53:3B:E7:3C:CE:8B:C2:13
ValidityMon, 23 Jun 2025 08:41:07 GMT - Mon, 15 Sep 2025 08:41:06 GMT
File type JavaScript source, ASCII text
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: fullxxxxxxhdvideo.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sat, 12 Jul 2025 09:46:46 GMT
expires: Sat, 19 Jul 2025 09:46:46 GMT
cache-control: public, max-age=604800
last-modified: Sat, 12 Jul 2025 07:54:39 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.74.35200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.74.35:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:09:08 GMT
expires: Fri, 10 Jul 2026 10:09:08 GMT
cache-control: public, max-age=31536000
age: 171458
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fstyle.css&l=2536&fd=518
192.243.59.20200 OK 0 B URL GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fstyle.css&l=2536&fd=518
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fcss%2Fstyle.css&l=2536&fd=518 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27028622=1; slecf3645a32b5924b5a336aa372b2f65d92=[6040321]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:49 GMT
Content-Length: 0
Connection: keep-alive
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBAEKpO3-fqyhWW1GEz0H6AA0yAE4V3XeDAH1CNlPsbECedDocqLHn8jdbeg9vtBk4wXsksAYObfCF2GX92YkVkPHlJTBv7zIh6hA1pWVYZHkO2X_CKiXtok2TFYNFp9nVFGr2tKzUovSKkzndMrIqKQBqQI52y6pYAA77FMe6_Fahqz7oFA6H6Sil-l8l/w128-h128-p-k-no-nu/1000061489.gif
142.250.178.97200 OK 8.3 kB URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBAEKpO3-fqyhWW1GEz0H6AA0yAE4V3XeDAH1CNlPsbECedDocqLHn8jdbeg9vtBk4wXsksAYObfCF2GX92YkVkPHlJTBv7zIh6hA1pWVYZHkO2X_CKiXtok2TFYNFp9nVFGr2tKzUovSKkzndMrIqKQBqQI52y6pYAA77FMe6_Fahqz7oFA6H6Sil-l8l/w128-h128-p-k-no-nu/1000061489.gif
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 128 x 128
Hash 624f925b03580536ae4fcc5e92a97c75
0e469c7708d1ef6dbdabdccabc3547d1d3f58636
437fd80beff63a361079d6c956945b69edb02db87cbd558c1d11d55442628d74
GET /img/b/R29vZ2xl/AVvXsEjBAEKpO3-fqyhWW1GEz0H6AA0yAE4V3XeDAH1CNlPsbECedDocqLHn8jdbeg9vtBk4wXsksAYObfCF2GX92YkVkPHlJTBv7zIh6hA1pWVYZHkO2X_CKiXtok2TFYNFp9nVFGr2tKzUovSKkzndMrIqKQBqQI52y6pYAA77FMe6_Fahqz7oFA6H6Sil-l8l/w128-h128-p-k-no-nu/1000061489.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "v8a"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1000061489.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 8261
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET flushpersist.com/pxf.gif?uuid=13e17284-0294-4e58-8bd9-92532c2e54a0&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=4687c7290bd006ccb5d4006ab83c1eaa&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
192.243.61.225200 OK 0 B URL GET flushpersist.com/pxf.gif?uuid=13e17284-0294-4e58-8bd9-92532c2e54a0&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=4687c7290bd006ccb5d4006ab83c1eaa&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
IP 192.243.61.225:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectflushpersist.com
Fingerprint9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A
ValidityTue, 01 Jul 2025 15:12:33 GMT - Mon, 29 Sep 2025 15:12:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=13e17284-0294-4e58-8bd9-92532c2e54a0&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=4687c7290bd006ccb5d4006ab83c1eaa&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: flushpersist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:48 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Host: flushpersist.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: caac85032e3c102313b71b515bfcb970
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET professionaltrafficmonitor.com/stats
3.126.213.67200 OK 40 B URL GET professionaltrafficmonitor.com/stats
IP 3.126.213.67:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerAmazon
Subjectprotrafficinspector.com
Fingerprint5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
ValidityTue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 67087e4fe86145a306cc4bda7141bba0
014b5734d92f053909461c7b54cf88c06532bf35
e8c80256e23a3eaf66f64982099a114c0b9411cbc70d0204ab7b009ee6f94a3f
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:46 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://fullxxxxxxhdvideo.blogspot.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; expires=Tue, 10 Jul 2035 09:46:46 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET professionaltrafficmonitor.com/stats
3.126.213.67200 OK 40 B URL GET professionaltrafficmonitor.com/stats
IP 3.126.213.67:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerAmazon
Subjectprotrafficinspector.com
Fingerprint5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
ValidityTue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 67087e4fe86145a306cc4bda7141bba0
014b5734d92f053909461c7b54cf88c06532bf35
e8c80256e23a3eaf66f64982099a114c0b9411cbc70d0204ab7b009ee6f94a3f
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:46 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://fullxxxxxxhdvideo.blogspot.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2
142.250.74.35200 OK 20 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2
IP 142.250.74.35:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 20408, version 1.0
Hash e8730678d4610fa908d3cba1ef0b4ddf
1efcbee909ce74bf04878d74867f12a1e41ae7a4
e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:06:16 GMT
expires: Fri, 10 Jul 2026 10:06:16 GMT
cache-control: public, max-age=31536000
age: 171630
last-modified: Thu, 29 May 2025 23:49:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.storageimagedisplay.com/si/17/04/61/1704611e80c4229eea5f0a01af6f1921b5fbb38e046f95b9781de41cca7fe6b9.png
45.133.44.1200 OK 28 kB URL GET cdn.storageimagedisplay.com/si/17/04/61/1704611e80c4229eea5f0a01af6f1921b5fbb38e046f95b9781de41cca7fe6b9.png
IP 45.133.44.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.storageimagedisplay.com
Fingerprint06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9
ValidityThu, 10 Jul 2025 02:33:11 GMT - Wed, 08 Oct 2025 02:33:10 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x300, components 3
Hash d20d50fa5e175b9c8d9e7cda6e84fcf4
ae7b0e570747f68e33bd6d756eb98ebc2682e8e6
b4306272e2d0bba47068da0e757340b48fe117329d5239d1fe7e7ad1f83afc92
GET /si/17/04/61/1704611e80c4229eea5f0a01af6f1921b5fbb38e046f95b9781de41cca7fe6b9.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: image/png
content-length: 28216
server: nginx/1.21.6
last-modified: Tue, 01 Jul 2025 13:57:17 GMT
etag: "6863e93d-6e38"
expires: Mon, 14 Jul 2025 09:46:49 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwlZAHQ4224Yh4VkTyI5OOCIRz09L-rE5MAPL34Ma1xx5kzTFJOmrtJf_x9ZSRYhUT8cc-JMjx5tZrCvC3-LvS7Vmw8SvqHKVWXGB9-9bQvgiZ7eW3FHoP4-AUYejRsuhx95HeAa_jKs9OXkgKHT_K7spy-vK0_VjQlfTFcbbKy-5SpraWHieROm8PLDH_/w128-h128-p-k-no-nu/1000061490.gif
142.250.178.97200 OK 8.5 kB URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwlZAHQ4224Yh4VkTyI5OOCIRz09L-rE5MAPL34Ma1xx5kzTFJOmrtJf_x9ZSRYhUT8cc-JMjx5tZrCvC3-LvS7Vmw8SvqHKVWXGB9-9bQvgiZ7eW3FHoP4-AUYejRsuhx95HeAa_jKs9OXkgKHT_K7spy-vK0_VjQlfTFcbbKy-5SpraWHieROm8PLDH_/w128-h128-p-k-no-nu/1000061490.gif
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 128 x 128
Hash cb52db03cfcb2a19dac12e3d7dd69206
b0c80d5190c838c1f7f01627441e9bfdcbcaf8aa
7a23ec85a43443a4b29df512b25cacc8ec0bc33034fd8f7060f5358a4459baab
GET /img/b/R29vZ2xl/AVvXsEhwlZAHQ4224Yh4VkTyI5OOCIRz09L-rE5MAPL34Ma1xx5kzTFJOmrtJf_x9ZSRYhUT8cc-JMjx5tZrCvC3-LvS7Vmw8SvqHKVWXGB9-9bQvgiZ7eW3FHoP4-AUYejRsuhx95HeAa_jKs9OXkgKHT_K7spy-vK0_VjQlfTFcbbKy-5SpraWHieROm8PLDH_/w128-h128-p-k-no-nu/1000061490.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "v90"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1000061490.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 8542
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZeA9q5GcN31Nd8rfiBhBC6My2drGggq6FRUVHdHW_u1zGNHcjSDJfNaJEBwHbByOOfrMEHpIgk4e8Wv1jcbzkYtaHwIt02w8D_mVvg_SyITuXPnoGnP260YygoGWp8rqOnKNN5GdyfqIZi3b-_mEu61fRJIr0MwpHncNwzH3eIxoooWvTLf1NBpIzo9Ks/w128-h128-p-k-no-nu/1000061507.gif
142.250.178.97200 OK 15 kB URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZeA9q5GcN31Nd8rfiBhBC6My2drGggq6FRUVHdHW_u1zGNHcjSDJfNaJEBwHbByOOfrMEHpIgk4e8Wv1jcbzkYtaHwIt02w8D_mVvg_SyITuXPnoGnP260YygoGWp8rqOnKNN5GdyfqIZi3b-_mEu61fRJIr0MwpHncNwzH3eIxoooWvTLf1NBpIzo9Ks/w128-h128-p-k-no-nu/1000061507.gif
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 128 x 128
Hash 3fd3bf4d89efd6f4682b24f335a8929e
fb4d4710162b81e4b3801279ee9e642af32f0558
df02112176e3a6bfae1a95cabd9b5036095d450401d3f4e89899f3908030e75c
GET /img/b/R29vZ2xl/AVvXsEgZeA9q5GcN31Nd8rfiBhBC6My2drGggq6FRUVHdHW_u1zGNHcjSDJfNaJEBwHbByOOfrMEHpIgk4e8Wv1jcbzkYtaHwIt02w8D_mVvg_SyITuXPnoGnP260YygoGWp8rqOnKNN5GdyfqIZi3b-_mEu61fRJIr0MwpHncNwzH3eIxoooWvTLf1NBpIzo9Ks/w128-h128-p-k-no-nu/1000061507.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vbf"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1000061507.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 15079
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET eradisciplinemomentary.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYgcxR-tngT-_PXgB5KDpzmqyGzPTM-XOQRjjAQ3u2s2sgdP1VXds5Wt7mqruqdnR5DFhbDHUS9GPNS-2c2iBolevKjIrCCyIKRve8heBG96EXLwJD0ZGP1B_z76VcF771e397Mz0kRGT9euq5GQki61am71hQ0Rc5Wb6srNat2tuRerGyJuexerwzLpwSv1pldzX6y-EbAttdRw665bd-vVq0IHoRouzVCI5F6vXuu5Na9Rq7c8DPV_Z5M5MNQBH5yRZyF48dRv4TsQbIo4un8lMFupSl5-PcokTZXGgB-9HW_FKo8RLdpQOwjjo_lpKFMQ8kkFKj6aK4AaHJQK4IuCVC48hB8fzWnCHxw-ZupLBDF8_iTywRSBnELQKZjaheAPCMA4VlYRR3dXlM7p9mOUlmhBzj_6CyIvyPmHzyGOvrosxbC6rmSWChUbDEMLMZxC9KdIsmOkowpEfgyWfgDBfyVLj5YRRwerRioIbmfqRTgFNQ6y8hMOstBBljiI-GnVc7seq9NmO-xx1nE96nk88N1et-G6tMc6yFhJa4w0GYPJMZjeQaJ3sCU-LIjz_wvQ2Y8wmxaGOzBpQZy3djDgFnlAkBuCnBLkgiBPCfKBPeTSNIy9y6XJ_Pq8Nua1aScq7e_TQ5X2g5iA6jE0twciedfsgqXnJqPQ8IkqE_VTO6E-t_vJGXmmtM75zPyJreC06vd4lze7rN1udtod2vI7zA06rOvXWbPXbnMYYSFMZebKSBTk-vEDJKIgL31zDj49hpHHYKICmtVBcwu6aTGKfwgzKYez2OQDwQNV86Xqm0SlNaYicGWRpOeRbjv78ow8P1vn-u3fEbCTS8OP0-9uvf83mLZItMUt8RNBX-5NbqicHNxQuSFfryapiMSIlqteT2kanPvizWA7V5pfu2LGn7_KSqBs790MTLpMYy7iviFfXhacB_qq0iwg318zG4G_lpnNy5mOs2R57bWr16JEB8YIFU9BRUHInftgoiBP__ze7BnXvt2D0FPozCLKTsg8wJIdmGTB3SgCLRe4nzjIMzvRDX_xUwoCGSxm6luYf83-op9oWt6mwu6bPfR1BTTdRRxZDLTFQFpQOYbJnpikiT659MudMj6FLysTX-rKgS-1_GhmcZn-gBGn1VbDb7a73XYQtnnY5M1Gk_dabtDzaK_t9bwWUlNs6qX__RMAAP__Sn0Y4KkEAAA=
172.240.127.234200 OK 0 B URL GET eradisciplinemomentary.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYgcxR-tngT-_PXgB5KDpzmqyGzPTM-XOQRjjAQ3u2s2sgdP1VXds5Wt7mqruqdnR5DFhbDHUS9GPNS-2c2iBolevKjIrCCyIKRve8heBG96EXLwJD0ZGP1B_z76VcF771e397Mz0kRGT9euq5GQki61am71hQ0Rc5Wb6srNat2tuRerGyJuexerwzLpwSv1pldzX6y-EbAttdRw665bd-vVq0IHoRouzVCI5F6vXuu5Na9Rq7c8DPV_Z5M5MNQBH5yRZyF48dRv4TsQbIo4un8lMFupSl5-PcokTZXGgB-9HW_FKo8RLdpQOwjjo_lpKFMQ8kkFKj6aK4AaHJQK4IuCVC48hB8fzWnCHxw-ZupLBDF8_iTywRSBnELQKZjaheAPCMA4VlYRR3dXlM7p9mOUlmhBzj_6CyIvyPmHzyGOvrosxbC6rmSWChUbDEMLMZxC9KdIsmOkowpEfgyWfgDBfyVLj5YRRwerRioIbmfqRTgFNQ6y8hMOstBBljiI-GnVc7seq9NmO-xx1nE96nk88N1et-G6tMc6yFhJa4w0GYPJMZjeQaJ3sCU-LIjz_wvQ2Y8wmxaGOzBpQZy3djDgFnlAkBuCnBLkgiBPCfKBPeTSNIy9y6XJ_Pq8Nua1aScq7e_TQ5X2g5iA6jE0twciedfsgqXnJqPQ8IkqE_VTO6E-t_vJGXmmtM75zPyJreC06vd4lze7rN1udtod2vI7zA06rOvXWbPXbnMYYSFMZebKSBTk-vEDJKIgL31zDj49hpHHYKICmtVBcwu6aTGKfwgzKYez2OQDwQNV86Xqm0SlNaYicGWRpOeRbjv78ow8P1vn-u3fEbCTS8OP0-9uvf83mLZItMUt8RNBX-5NbqicHNxQuSFfryapiMSIlqteT2kanPvizWA7V5pfu2LGn7_KSqBs790MTLpMYy7iviFfXhacB_qq0iwg318zG4G_lpnNy5mOs2R57bWr16JEB8YIFU9BRUHInftgoiBP__ze7BnXvt2D0FPozCLKTsg8wJIdmGTB3SgCLRe4nzjIMzvRDX_xUwoCGSxm6luYf83-op9oWt6mwu6bPfR1BTTdRRxZDLTFQFpQOYbJnpikiT659MudMj6FLysTX-rKgS-1_GhmcZn-gBGn1VbDb7a73XYQtnnY5M1Gk_dabtDzaK_t9bwWUlNs6qX__RMAAP__Sn0Y4KkEAAA=
IP 172.240.127.234:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecteradisciplinemomentary.com
Fingerprint2E:C8:EB:E6:FA:72:D6:F1:97:7D:DC:2F:E9:79:64:83:A5:36:AF:03
ValidityThu, 10 Jul 2025 21:27:10 GMT - Wed, 08 Oct 2025 21:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC_1RSTYgcxR-tngT-_PXgB5KDpzmqyGzPTM-XOQRjjAQ3u2s2sgdP1VXds5Wt7mqruqdnR5DFhbDHUS9GPNS-2c2iBolevKjIrCCyIKRve8heBG96EXLwJD0ZGP1B_z76VcF771e397Mz0kRGT9euq5GQki61am71hQ0Rc5Wb6srNat2tuRerGyJuexerwzLpwSv1pldzX6y-EbAttdRw665bd-vVq0IHoRouzVCI5F6vXuu5Na9Rq7c8DPV_Z5M5MNQBH5yRZyF48dRv4TsQbIo4un8lMFupSl5-PcokTZXGgB-9HW_FKo8RLdpQOwjjo_lpKFMQ8kkFKj6aK4AaHJQK4IuCVC48hB8fzWnCHxw-ZupLBDF8_iTywRSBnELQKZjaheAPCMA4VlYRR3dXlM7p9mOUlmhBzj_6CyIvyPmHzyGOvrosxbC6rmSWChUbDEMLMZxC9KdIsmOkowpEfgyWfgDBfyVLj5YRRwerRioIbmfqRTgFNQ6y8hMOstBBljiI-GnVc7seq9NmO-xx1nE96nk88N1et-G6tMc6yFhJa4w0GYPJMZjeQaJ3sCU-LIjz_wvQ2Y8wmxaGOzBpQZy3djDgFnlAkBuCnBLkgiBPCfKBPeTSNIy9y6XJ_Pq8Nua1aScq7e_TQ5X2g5iA6jE0twciedfsgqXnJqPQ8IkqE_VTO6E-t_vJGXmmtM75zPyJreC06vd4lze7rN1udtod2vI7zA06rOvXWbPXbnMYYSFMZebKSBTk-vEDJKIgL31zDj49hpHHYKICmtVBcwu6aTGKfwgzKYez2OQDwQNV86Xqm0SlNaYicGWRpOeRbjv78ow8P1vn-u3fEbCTS8OP0-9uvf83mLZItMUt8RNBX-5NbqicHNxQuSFfryapiMSIlqteT2kanPvizWA7V5pfu2LGn7_KSqBs790MTLpMYy7iviFfXhacB_qq0iwg318zG4G_lpnNy5mOs2R57bWr16JEB8YIFU9BRUHInftgoiBP__ze7BnXvt2D0FPozCLKTsg8wJIdmGTB3SgCLRe4nzjIMzvRDX_xUwoCGSxm6luYf83-op9oWt6mwu6bPfR1BTTdRRxZDLTFQFpQOYbJnpikiT659MudMj6FLysTX-rKgS-1_GhmcZn-gBGn1VbDb7a73XYQtnnY5M1Gk_dabtDzaK_t9bwWUlNs6qX__RMAAP__Sn0Y4KkEAAA= HTTP/1.1
Host: eradisciplinemomentary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl27030510=1; nlecb9d8d38c663767a5b7c0e7c8b1c3966d=[5474022,5474029]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:47 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 0
Host: eradisciplinemomentary.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: fbe21d2febae626a716ff9e8ef4c82e4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET fullxxxxxxhdvideo.blogspot.com/favicon.ico
142.250.178.97200 OK 3.6 kB URL GET fullxxxxxxhdvideo.blogspot.com/favicon.ico
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
Fingerprint6B:F0:FF:EB:12:2F:E2:47:6F:73:B9:AD:53:3B:E7:3C:CE:8B:C2:13
ValidityMon, 23 Jun 2025 08:41:07 GMT - Mon, 15 Sep 2025 08:41:06 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: fullxxxxxxhdvideo.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=13e17284-0294-4e58-8bd9-92532c2e54a0%3A1%3A1; pp_main_4687c7290bd006ccb5d4006ab83c1eaa=1; sb_main_f3645a32b5924b5a336aa372b2f65d92=1; sb_count_f3645a32b5924b5a336aa372b2f65d92=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=eradisciplinemomentary.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Sat, 12 Jul 2025 09:46:48 GMT
date: Sat, 12 Jul 2025 09:46:48 GMT
cache-control: private, max-age=86400
last-modified: Thu, 10 Jul 2025 15:24:11 GMT
etag: W/"8cf1fbc7f5ea2604952b52ff9cb8544f57f41510225047c4433baa8dfe502a91"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/css/style.css
104.21.96.1200 OK 2.5 kB URL GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/css/style.css
IP 104.21.96.1:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectcreative-sb1.com
FingerprintCD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
ValidityTue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
Hash 99c4d51e8d827c6ef4c5da4a4c9c361c
4858f7d40be16dceba76dd1104054633d723ae6e
6a8d79e72f05bf80fdabc33023c2002d93f89a6e55dd75d5fb7da2d78436a3b0
GET /sb/ssp/interstitial/background_image/1/css/style.css HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 14 Nov 2023 10:12:37 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"65534815-9e8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FpRrujvM0QEqYWx9ZrxbWu%2F7DxEN7U%2F6cNP9XKT37J2PD3dPRBUjnfKzzyJmtx2UiBNV4qdJ9E3xHYWrLP4CLk0qmhyjZP29UN6UnLWGkyRIPQ%3D%3D"}]}
cf-ray: 95df9d98fb100b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fjs%2Fscript.js&l=569&fd=488
192.243.59.20200 OK 0 B URL GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fjs%2Fscript.js&l=569&fd=488
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Fbackground_image%2F1%2Fjs%2Fscript.js&l=569&fd=488 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27028622=1; slecf3645a32b5924b5a336aa372b2f65d92=[6040321]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:49 GMT
Content-Length: 0
Connection: keep-alive
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET fullxxxxxxhdvideo.blogspot.com/
142.250.178.97200 OK 153 kB URL User Request GET fullxxxxxxhdvideo.blogspot.com/
IP 142.250.178.97:443
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
Fingerprint6B:F0:FF:EB:12:2F:E2:47:6F:73:B9:AD:53:3B:E7:3C:CE:8B:C2:13
ValidityMon, 23 Jun 2025 08:41:07 GMT - Mon, 15 Sep 2025 08:41:06 GMT
File type HTML document, ASCII text, with very long lines (16914)
Size 153 kB (153294 bytes)
Hash be3c6aab2070925634e1a02c4ffb5683
d785fb503aba74fea82f5883a9ef976c08d7eef0
f00dae20c5bd3f26438fd64e5e6355df2d7837c013727016d06459bc9a41ffb8
GET / HTTP/1.1
Host: fullxxxxxxhdvideo.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 12 Jul 2025 09:46:45 GMT
date: Sat, 12 Jul 2025 09:46:45 GMT
cache-control: private, max-age=0
last-modified: Thu, 10 Jul 2025 15:24:11 GMT
etag: W/"8cf1fbc7f5ea2604952b52ff9cb8544f57f41510225047c4433baa8dfe502a91"
x-robots-tag: all,noodp
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 23923
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/css/animate.css
104.21.96.1200 OK 79 kB URL GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/css/animate.css
IP 104.21.96.1:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectcreative-sb1.com
FingerprintCD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
ValidityTue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/ssp/interstitial/background_image/1/css/animate.css HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: text/css
server: cloudflare
last-modified: Mon, 09 Oct 2023 10:29:56 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"6523d624-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rRpsqpDjxxxnd7YX%2FU31yu9b6LPxM48A2jdhxqYBVTFdN6jRNXdnOqbBCg2p9HD3ldqawfFVAg6P%2BQcGoXuVTh18R6Y8YrPv%2F1Mi4lFp726VnQ%3D%3D"}]}
cf-ray: 95df9d98fb060b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/img/close.svg
104.21.96.1200 OK 1.3 kB URL GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/img/close.svg
IP 104.21.96.1:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectcreative-sb1.com
FingerprintCD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
ValidityTue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
File type SVG Scalable Vector Graphics image
Hash 369850b9873659adf0951d845f57dba1
a64257186daa33b6b318943a457b6cf8d80b26b6
9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21
GET /sb/ssp/interstitial/background_image/1/img/close.svg HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: image/svg+xml
server: cloudflare
last-modified: Mon, 09 Oct 2023 10:29:53 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JLwbZ%2B4FxZA4eidsGgprLix%2FoL9CRs3nYRKsqtGSiKsKCM2Thylm%2FimYyYYjuPB%2FMjPns7Ug6IHfhvETFi3EdNH%2FxmRq%2BsQhKFxo7TCYqLDdaA%3D%3D"}]}
age: 339003
cf-cache-status: HIT
etag: W/"6523d621-4ff"
content-encoding: br
cf-ray: 95df9d997b600b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/js/script.js
104.21.96.1200 OK 569 B URL GET cdn.creative-sb1.com/sb/ssp/interstitial/background_image/1/js/script.js
IP 104.21.96.1:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectcreative-sb1.com
FingerprintCD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
ValidityTue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
Hash f27e073eb67b2adf1f2192d35c0926f1
f2f86e7b02a549ad8ee59d30a181697c280b8bce
1ba076492d27e6cf42d837bc452fac345bb9e2a0416464a27291c2c7b75f699e
GET /sb/ssp/interstitial/background_image/1/js/script.js HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 09 Oct 2023 11:38:58 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uBkYndbmHxMc5M%2FfMI1SGJfH89zVSw7fH4BIVCM%2FW5Mzv%2FRTthimrgk5IC0UgLZdrVL%2Boht21esdpvjbHcNePKcpD86ucYHvGz9F6FYLbVPSuA%3D%3D"}]}
cf-cache-status: MISS
etag: W/"6523e652-239"
content-encoding: br
cf-ray: 95df9d9a0bdc0b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/playfairdisplay/v39/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKfsunDXbtM.woff2
142.250.74.35200 OK 22 kB URL GET fonts.gstatic.com/s/playfairdisplay/v39/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKfsunDXbtM.woff2
IP 142.250.74.35:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 22408, version 1.0
Hash d732eee9ac953b62aa7abacb7ca18649
ca6dcf16f13bc11db08f25dd278627696c34c157
261bed972344a5969d5fcb4fa00eecaa1741b8ce6e56867f169625e12bf4194b
GET /s/playfairdisplay/v39/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKfsunDXbtM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:12:30 GMT
expires: Fri, 10 Jul 2026 10:12:30 GMT
cache-control: public, max-age=31536000
age: 171256
last-modified: Thu, 29 May 2025 18:55:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.74.35200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.74.35:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:09:08 GMT
expires: Fri, 10 Jul 2026 10:09:08 GMT
cache-control: public, max-age=31536000
age: 171458
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET preferencenail.com/sfp.js
185.196.197.72200 OK 85 kB URL GET preferencenail.com/sfp.js
IP 185.196.197.72:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpreferencenail.com
FingerprintF9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3
ValidityTue, 01 Jul 2025 15:11:38 GMT - Mon, 29 Sep 2025 15:11:37 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 46a6fef91632b94d14252fe324c1585f
387cebbd261b8fe947fe9805875300f2ceeb5cfd
36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5
GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:46 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28254
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: a827ab5d17198ea1f197061d917566c4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET rashcolonizeexpand.com/watch.782287704086.js?dev=e&key=bc4a19df852a0b3b072638c1bb8be9a8&kw=%5B%22xxxxxxx%22%5D&pst=1752313667&rb=&refer=https%3A%2F%2Ffullxxxxxxhdvideo.blogspot.com%2F&res=14.3095&rmtc=t&shu=c33b2fda316a1d4438c0cf96fc9b718a68d8e3b6f7006c081fc0d8da403a5cdb2471d86629f4598b9e6917e1c9b866b2dff9a342e4b24193eec016b7d0aa5fd4000214d34d1d9181878ca52092d15da7a24fe8c33a42189d9d376f&tz=0&uuid=8eb99d37-11bd-472c-af2a-b4321fb6ad7e%3A2%3A1
192.243.59.12200 OK 5.4 kB URL GET rashcolonizeexpand.com/watch.782287704086.js?dev=e&key=bc4a19df852a0b3b072638c1bb8be9a8&kw=%5B%22xxxxxxx%22%5D&pst=1752313667&rb=&refer=https%3A%2F%2Ffullxxxxxxhdvideo.blogspot.com%2F&res=14.3095&rmtc=t&shu=c33b2fda316a1d4438c0cf96fc9b718a68d8e3b6f7006c081fc0d8da403a5cdb2471d86629f4598b9e6917e1c9b866b2dff9a342e4b24193eec016b7d0aa5fd4000214d34d1d9181878ca52092d15da7a24fe8c33a42189d9d376f&tz=0&uuid=8eb99d37-11bd-472c-af2a-b4321fb6ad7e%3A2%3A1
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
File type JavaScript source, ASCII text, with very long lines (4520)
Hash 1cb637a04af0115259f814d9079aec37
19a15126bc256f4f2768b1f337d12ee99aa15876
a427635c4da82838e0277bc0ad7fa9aa9bf3b5f838f8112c871f7329a98a5a22
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.782287704086.js?dev=e&key=bc4a19df852a0b3b072638c1bb8be9a8&kw=%5B%22xxxxxxx%22%5D&pst=1752313667&rb=&refer=https%3A%2F%2Ffullxxxxxxhdvideo.blogspot.com%2F&res=14.3095&rmtc=t&shu=c33b2fda316a1d4438c0cf96fc9b718a68d8e3b6f7006c081fc0d8da403a5cdb2471d86629f4598b9e6917e1c9b866b2dff9a342e4b24193eec016b7d0aa5fd4000214d34d1d9181878ca52092d15da7a24fe8c33a42189d9d376f&tz=0&uuid=8eb99d37-11bd-472c-af2a-b4321fb6ad7e%3A2%3A1 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
Referer: https://fullxxxxxxhdvideo.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.HXxqWo9F4GPM1_yLpHGBoczKLp35RaHex28NpdQxtx8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:47 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Access-Control-Allow-Origin: https://fullxxxxxxhdvideo.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=8eb99d37-11bd-472c-af2a-b4321fb6ad7e:2:1; expires=Sat, 19 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
pdhtkv23=true; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
uncs23=1; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
u_pl27030529=1; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f8935ffff739af1fc2ed4529f824604a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
142.250.178.99200 OK 12 kB URL GET www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
IP 142.250.178.99:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (10473)
Hash a1a2e5bd3af1cf7d730f15dd7e308a1b
6ab91a37884d5f70808157c5cb6ed7345d8f537a
d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e
GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3475
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Jul 2025 09:46:46 GMT
expires: Sat, 12 Jul 2025 09:46:46 GMT
cache-control: public, max-age=0
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pl27129121.profitableratecpm.com/f3/64/5a/f3645a32b5924b5a336aa372b2f65d92.js
172.240.108.84200 OK 67 kB URL GET pl27129121.profitableratecpm.com/f3/64/5a/f3645a32b5924b5a336aa372b2f65d92.js
IP 172.240.108.84:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectprofitableratecpm.com
FingerprintF0:1C:19:8E:0A:66:67:96:FE:65:D1:76:02:CD:A0:DD:D4:3B:88:9E
ValidityFri, 06 Jun 2025 21:52:23 GMT - Thu, 04 Sep 2025 21:52:22 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 1b89ad8dbdaf1555a1eefe954b22371d
ca3abf585d937bf59ecf3dfd5bd452f6784c29c3
98356b1bfa97fb7fd64831e885bc754f9aada88bcd2806460210a9a670069b6a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f3/64/5a/f3645a32b5924b5a336aa372b2f65d92.js HTTP/1.1
Host: pl27129121.profitableratecpm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:46 GMT
Content-Type: application/javascript
Content-Length: 23991
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 4
Host: pl27129121.profitableratecpm.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: b1bf5d1dfc206f3126afbc43c10f3fce
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET wearychallengeraise.com/pixel/purst?dl=0&th=0&sc=0&rs=1851&rd=1851&fd=579&bv=25.7.6656&tmpl=70
192.243.61.227200 OK 0 B URL GET wearychallengeraise.com/pixel/purst?dl=0&th=0&sc=0&rs=1851&rd=1851&fd=579&bv=25.7.6656&tmpl=70
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectwearychallengeraise.com
FingerprintC2:9A:4F:D1:20:4F:D6:7B:AD:D9:F3:AE:DB:94:98:E2:A5:BE:EF:8B
ValidityThu, 19 Jun 2025 03:13:57 GMT - Wed, 17 Sep 2025 03:13:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1851&rd=1851&fd=579&bv=25.7.6656&tmpl=70 HTTP/1.1
Host: wearychallengeraise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:47 GMT
Content-Length: 0
Connection: keep-alive
Host: wearychallengeraise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET professionaltrafficmonitor.com/stats
3.126.213.67200 OK 40 B URL GET professionaltrafficmonitor.com/stats
IP 3.126.213.67:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerAmazon
Subjectprotrafficinspector.com
Fingerprint5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
ValidityTue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 29f054947208bc41915046a3c86483ee
6f4dcd9c8196a559ef17127f4e1cb035c961706e
5db80c659cfbaf423c6086debc30d56a1131815d74f664feedee9e9ea704f0b6
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:46 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://fullxxxxxxhdvideo.blogspot.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=8eb99d37-11bd-472c-af2a-b4321fb6ad7e:2:1; expires=Tue, 10 Jul 2035 09:46:46 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET eradisciplinemomentary.com/ntv.json?key=b9d8d38c663767a5b7c0e7c8b1c3966d&vstc=2&rb=
172.240.127.234200 OK 8.1 kB URL GET eradisciplinemomentary.com/ntv.json?key=b9d8d38c663767a5b7c0e7c8b1c3966d&vstc=2&rb=
IP 172.240.127.234:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecteradisciplinemomentary.com
Fingerprint2E:C8:EB:E6:FA:72:D6:F1:97:7D:DC:2F:E9:79:64:83:A5:36:AF:03
ValidityThu, 10 Jul 2025 21:27:10 GMT - Wed, 08 Oct 2025 21:27:09 GMT
Hash 5c3dad837bb0c483272d57cb2617c67f
3535a36103b7b5c626086219d8a36283adc509f2
e6b7ae68a99c816472450bd54d07a1f188a1544bd5b80bd5c5aa927fe5bb1950
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=b9d8d38c663767a5b7c0e7c8b1c3966d&vstc=2&rb= HTTP/1.1
Host: eradisciplinemomentary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:47 GMT
Content-Type: application/json
Content-Length: 8085
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://fullxxxxxxhdvideo.blogspot.com
access-control-allow-credentials: true
set-cookie: pdhtkv=true; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
pdhtkv49=true; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
uncs49=1; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
u_pl27030510=1; expires=Sun, 13 Jul 2025 09:46:47 GMT; path=/; secure; SameSite=None
nlecb9d8d38c663767a5b7c0e7c8b1c3966d=[5474022,5474029]; expires=Sat, 12 Jul 2025 09:46:52 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 18
Host: eradisciplinemomentary.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e7c18fa0b11131ba683a95280c9f661a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBUzigMmREVLH4AR24clr0uMqTqvdzaFEetAQGnZ-cetsE2UiKibpGkC0A3_OBiY8GzoFvo5Sl1lJvXpW-FxEzGuqnjFRDwdrKdbSwtfnjxG1XVL_rTwaPSnprLzK-GBn48wHaJD-cLwLX0c_J5pwVTy3g0GOAHCqjY-lH5Yt79db78u0vWlFA-ROfs924/w128-h128-p-k-no-nu/1000061505.gif
142.250.178.97200 OK 13 kB URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBUzigMmREVLH4AR24clr0uMqTqvdzaFEetAQGnZ-cetsE2UiKibpGkC0A3_OBiY8GzoFvo5Sl1lJvXpW-FxEzGuqnjFRDwdrKdbSwtfnjxG1XVL_rTwaPSnprLzK-GBn48wHaJD-cLwLX0c_J5pwVTy3g0GOAHCqjY-lH5Yt79db78u0vWlFA-ROfs924/w128-h128-p-k-no-nu/1000061505.gif
IP 142.250.178.97:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type GIF image data, version 89a, 128 x 128
Hash ad58566d3f83bbd6dafe7c4e498036d7
75c886bc94a1fd067de02c0b5e67af01cbe3e636
8b18e72a1e9132e99739a31336112c0ba188c94daee65e599cf858e4092946da
GET /img/b/R29vZ2xl/AVvXsEjBUzigMmREVLH4AR24clr0uMqTqvdzaFEetAQGnZ-cetsE2UiKibpGkC0A3_OBiY8GzoFvo5Sl1lJvXpW-FxEzGuqnjFRDwdrKdbSwtfnjxG1XVL_rTwaPSnprLzK-GBn48wHaJD-cLwLX0c_J5pwVTy3g0GOAHCqjY-lH5Yt79db78u0vWlFA-ROfs924/w128-h128-p-k-no-nu/1000061505.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vbf"
expires: Sun, 13 Jul 2025 09:46:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1000061505.gif"
x-content-type-options: nosniff
date: Sat, 12 Jul 2025 09:46:47 GMT
server: fife
content-length: 12616
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET flushpersist.com/pxf.gif?uuid=13e17284-0294-4e58-8bd9-92532c2e54a0&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=f3645a32b5924b5a336aa372b2f65d92&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
192.243.61.225200 OK 0 B URL GET flushpersist.com/pxf.gif?uuid=13e17284-0294-4e58-8bd9-92532c2e54a0&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=f3645a32b5924b5a336aa372b2f65d92&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
IP 192.243.61.225:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectflushpersist.com
Fingerprint9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A
ValidityTue, 01 Jul 2025 15:12:33 GMT - Mon, 29 Sep 2025 15:12:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=13e17284-0294-4e58-8bd9-92532c2e54a0&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=f3645a32b5924b5a336aa372b2f65d92&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: flushpersist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 12 Jul 2025 09:46:48 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Host: flushpersist.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: fff9f1b67a5a6416414b10d475936a73
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/sbar.json?key=f3645a32b5924b5a336aa372b2f65d92&uuid=13e17284-0294-4e58-8bd9-92532c2e54a0%3A1%3A1
192.243.59.20200 OK 6.3 kB URL GET praystakeinstinct.com/sbar.json?key=f3645a32b5924b5a336aa372b2f65d92&uuid=13e17284-0294-4e58-8bd9-92532c2e54a0%3A1%3A1
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectpraystakeinstinct.com
Fingerprint08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
ValiditySat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Hash f212da471b87946f2b140159f782e945
9a59e59f24fb811e82495f93e1ddf47cd9c39032
72cbfece0ae079185948d3e179ed9889927d5017b4652852d6a852e42cf5fd23
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=f3645a32b5924b5a336aa372b2f65d92&uuid=13e17284-0294-4e58-8bd9-92532c2e54a0%3A1%3A1 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 12 Jul 2025 09:46:48 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Access-Control-Allow-Origin: https://fullxxxxxxhdvideo.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=13e17284-0294-4e58-8bd9-92532c2e54a0:1:1; expires=Sat, 19 Jul 2025 09:46:48 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 13 Jul 2025 09:46:48 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 13 Jul 2025 09:46:48 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Sun, 13 Jul 2025 09:46:48 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Sun, 13 Jul 2025 09:46:48 GMT; path=/; secure; SameSite=None
u_pl27028622=1; expires=Sun, 13 Jul 2025 09:46:48 GMT; path=/; secure; SameSite=None
slecf3645a32b5924b5a336aa372b2f65d92=[6040321]; expires=Sat, 12 Jul 2025 09:46:53 GMT; path=/; secure; SameSite=None
Host: praystakeinstinct.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0eb213daad9a1a3956244c43fbf34a23
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET cdn.show-sb.com/sb/au/3a/fb/42/3afb429f1f81cca1b8c0759baff80b11/1698575610.html
104.21.95.140200 OK 1.4 kB URL GET cdn.show-sb.com/sb/au/3a/fb/42/3afb429f1f81cca1b8c0759baff80b11/1698575610.html
IP 104.21.95.140:443
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerGoogle Trust Services
Subjectshow-sb.com
FingerprintDF:A8:5A:11:E9:7E:8B:0E:2E:08:20:FB:02:FE:C4:E3:E7:97:E8:3A
ValidityThu, 12 Jun 2025 07:26:41 GMT - Wed, 10 Sep 2025 08:25:04 GMT
File type HTML document, ASCII text
Hash f573728dd24850e679d2f18c02bb0daa
aed77a988b90e06ceb55dd70a653472ae34c88dd
28f7cce0994cf9fc353e61df45beaff264ac061f0158a84e090981c64f016c87
GET /sb/au/3a/fb/42/3afb429f1f81cca1b8c0759baff80b11/1698575610.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fullxxxxxxhdvideo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:49 GMT
content-type: text/html
server: cloudflare
last-modified: Sun, 29 Oct 2023 10:33:35 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sdzV0fc%2FroVSFpA76TA7Ojqml57eOUpDFWngpM30iaQ3aV%2BNSBuc3Ge%2FfF3Bl5NvejIbq9cSwq%2Bx7bYHWlUvNfqKwJAk1tJU91Bj5L0%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 95df9d952d7c56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.storageimagedisplay.com/si/1d/62/25/1d6225d66d5bd968e7b77209c927dfe9/1723679893.png
45.133.44.1200 OK 25 kB URL GET cdn.storageimagedisplay.com/si/1d/62/25/1d6225d66d5bd968e7b77209c927dfe9/1723679893.png
IP 45.133.44.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://fullxxxxxxhdvideo.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.storageimagedisplay.com
Fingerprint06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9
ValidityThu, 10 Jul 2025 02:33:11 GMT - Wed, 08 Oct 2025 02:33:10 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash cb663b173ae83d945499f983bb3820dc
b3bcb164ed70b4993016361e3b3eff95c677d053
eb831e37802a503e1b79704ab2dd8bf5cf480583cb2fd1ad973b865102358926
GET /si/1d/62/25/1d6225d66d5bd968e7b77209c927dfe9/1723679893.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fullxxxxxxhdvideo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Jul 2025 09:46:47 GMT
content-type: image/png
content-length: 25396
server: nginx/1.21.6
last-modified: Wed, 14 Aug 2024 23:58:15 GMT
etag: "66bd4497-6334"
expires: Mon, 14 Jul 2025 09:46:47 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2