200 OK 23 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (6974)
Hash bbd57f408e58015f7cd4fe726b2725c3
187cf9e427f4f09f4a1d8b949b2a0c6e5e124425
d8c81b5501185cf5f5fbfefc0f41dfb021a957974fa69a43181c96ced9ecd0f0
GET / HTTP/1.1
Host: videoeggs.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 07 Dec 2023 06:29:24 GMT
date: Thu, 07 Dec 2023 06:29:24 GMT
cache-control: private, max-age=0
last-modified: Thu, 07 Dec 2023 04:16:34 GMT
etag: W/"5f0425c73519339268b8e9dda4d6de5e9ca1890fd71f60b85bfd6110092aab48"
x-robots-tag: all,noodp
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 22652
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
videoeggs.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 videoeggs.blogspot.com/js/cookienotice.js
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: videoeggs.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Thu, 07 Dec 2023 06:29:24 GMT
expires: Thu, 14 Dec 2023 06:29:24 GMT
cache-control: public, max-age=604800
last-modified: Thu, 07 Dec 2023 02:07:04 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
200 OK 3.5 kB URL GET HTTP/2 www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Unicode text, UTF-8 text, with very long lines (10473)
Hash 158013acb7e269a3dbe18de855656c97
08fa355584fc849539b3f04589ae6f61eb4a7d98
92e40dc4bbb485a182b796c58e6da7974cb8a6a84fdb4548ace3b85c991f0f94
GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3475
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 06:29:24 GMT
expires: Thu, 07 Dec 2023 06:29:24 GMT
cache-control: public, max-age=0
age: 0
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/blogblog/data/res/403235463-indie_compiled.js
200 OK 47 kB URL GET HTTP/2 resources.blogblog.com/blogblog/data/res/403235463-indie_compiled.js
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (1721)
Hash 5e09a625d98829b4a924d49b95db611a
2fd5eac6602ea8e53e2df6c3f859153229603739
9fc2d4fd976d828b6f2851cfcf31c079139924781cac8f1aae1f59b972f91262
GET /blogblog/data/res/403235463-indie_compiled.js HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 47331
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 20:33:39 GMT
expires: Mon, 11 Dec 2023 20:33:39 GMT
cache-control: public, max-age=604800
last-modified: Mon, 04 Dec 2023 14:55:54 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 208545
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-TMH5R5EN9H
200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-TMH5R5EN9H
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 57be1b5c32e2b7cfcf43c9a35ea8ec9c
fde87eb26f598f769ec274fcbaed19693709fbb1
7d143da223f03bd0319f9711fa7ea1b4ca08fb82f9ac86eafe8f3dab53f7187f
GET /gtag/js?id=G-TMH5R5EN9H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 06:29:24 GMT
expires: Thu, 07 Dec 2023 06:29:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93075
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3257101978-widgets.js
200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/3257101978-widgets.js
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (2258)
Hash 9cc8dc0e6d0f57f11091cd51a13d42b1
d308834c5985e4914ebea6cba0e87454b44317d6
4d1b90c8b8826df2fa0d5cd23a4b1fba3fd769b7748e3905e7fa9e119d8525fa
GET /static/v1/widgets/3257101978-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 01:52:06 GMT
expires: Tue, 03 Dec 2024 01:52:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 00:51:03 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 275838
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEpdtBtCp-oJZlQc-c3038At5wftS86xpYFgzT1HQCb6qFZiYqg1WaswsYaE2HyRSgLxs0JmOlEL-q0Wpb2GyE6zTcpf4tVrqYZIIy0Br-blAmUC1Yxsd1xVOfruAJRw9lZW7MFHecfO_y37BATbEx-bHVQjXpZMUSgu4YDTBbFYN6ENRe8a9qpe3H55YY/w128-h128-p-k-no-nu/55%20Dec.%2006%2023.35_550_700.webp
200 OK 4.9 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEpdtBtCp-oJZlQc-c3038At5wftS86xpYFgzT1HQCb6qFZiYqg1WaswsYaE2HyRSgLxs0JmOlEL-q0Wpb2GyE6zTcpf4tVrqYZIIy0Br-blAmUC1Yxsd1xVOfruAJRw9lZW7MFHecfO_y37BATbEx-bHVQjXpZMUSgu4YDTBbFYN6ENRe8a9qpe3H55YY/w128-h128-p-k-no-nu/55%20Dec.%2006%2023.35_550_700.webp
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 128x128, components 3\012- data
Hash a26b7a9abf7cb611b0bca9e42d8642f3
969a800704a9a1e68fea8bcf018b09f4a5b7ac8f
5bf29b30ad701cc06a2fdb182f8c81e7f6a8741eae300c59f5b611187f0f88b9
GET /img/b/R29vZ2xl/AVvXsEhEpdtBtCp-oJZlQc-c3038At5wftS86xpYFgzT1HQCb6qFZiYqg1WaswsYaE2HyRSgLxs0JmOlEL-q0Wpb2GyE6zTcpf4tVrqYZIIy0Br-blAmUC1Yxsd1xVOfruAJRw9lZW7MFHecfO_y37BATbEx-bHVQjXpZMUSgu4YDTBbFYN6ENRe8a9qpe3H55YY/w128-h128-p-k-no-nu/55%20Dec.%2006%2023.35_550_700.webp HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v1549"
expires: Fri, 08 Dec 2023 06:29:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="55 Dec. 06 23.35_550_700.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 06:29:25 GMT
server: fife
content-length: 4879
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGfyJxCesOAWN8o3zfSqUn1G-xO8iGE-2gsjgN68XAsGvK4PB6JfcH0KEquV9_jj1DVx4UaNqvr7XRrVhoMXw1JQmyLikb4I-Lni8ug4MeEIrrge5VClBAz67K1cAPcQw7u4ZKtEOPfA1hUYUlCuVeVNLeACjjJpzNuE2Xk8Y-PLQlMa58guUMczqhwV45/w128-h128-p-k-no-nu/56%20Dec.%2006%2023.46_707_384.webp
200 OK 4.9 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGfyJxCesOAWN8o3zfSqUn1G-xO8iGE-2gsjgN68XAsGvK4PB6JfcH0KEquV9_jj1DVx4UaNqvr7XRrVhoMXw1JQmyLikb4I-Lni8ug4MeEIrrge5VClBAz67K1cAPcQw7u4ZKtEOPfA1hUYUlCuVeVNLeACjjJpzNuE2Xk8Y-PLQlMa58guUMczqhwV45/w128-h128-p-k-no-nu/56%20Dec.%2006%2023.46_707_384.webp
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 128x128, components 3\012- data
Hash ed40d3997a9d2b51e3e9a71a8e4a4994
7c3ba07c9e6b1124f8daf7897c9380ef26a5ecd9
e1e2aaf3d830597110e717f5df5254af97a9f068ea70ffdf0d0c62d059f78ab8
GET /img/b/R29vZ2xl/AVvXsEjGfyJxCesOAWN8o3zfSqUn1G-xO8iGE-2gsjgN68XAsGvK4PB6JfcH0KEquV9_jj1DVx4UaNqvr7XRrVhoMXw1JQmyLikb4I-Lni8ug4MeEIrrge5VClBAz67K1cAPcQw7u4ZKtEOPfA1hUYUlCuVeVNLeACjjJpzNuE2Xk8Y-PLQlMa58guUMczqhwV45/w128-h128-p-k-no-nu/56%20Dec.%2006%2023.46_707_384.webp HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v154b"
expires: Fri, 08 Dec 2023 06:29:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="56 Dec. 06 23.46_707_384.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 06:29:25 GMT
server: fife
content-length: 4901
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ5tgXqgIrgEmjAZeL0oir_eBjosbnFCkJGC3YJu3ZS9c-SvisxpfWUfZUZ5nGxQCex4a6CuDpwZSxfUxIwz5DgTgqj8xsUVf4wzfOFAyvWGhNzpjGyb7KYjcN7Imm4VC6uWHnklBxR8ouHYrnuKtMOZ3bMdELHGyEExb0-rogSWkqDrEcLgd-a4X4vfS_/w128-h128-p-k-no-nu/57%20Dec.%2006%2023.55_776_556.webp
200 OK 7.1 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ5tgXqgIrgEmjAZeL0oir_eBjosbnFCkJGC3YJu3ZS9c-SvisxpfWUfZUZ5nGxQCex4a6CuDpwZSxfUxIwz5DgTgqj8xsUVf4wzfOFAyvWGhNzpjGyb7KYjcN7Imm4VC6uWHnklBxR8ouHYrnuKtMOZ3bMdELHGyEExb0-rogSWkqDrEcLgd-a4X4vfS_/w128-h128-p-k-no-nu/57%20Dec.%2006%2023.55_776_556.webp
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 128x128, components 3\012- data
Hash dc4f12554a21ef66a7bcbff2111ac2f6
f11678dea26570d21f3b1facf4785b954171c4a0
b24dda64713edd202f252f7d74111c2c6da3a6bfbe2c5fce10fe89b1d84c2944
GET /img/b/R29vZ2xl/AVvXsEgZ5tgXqgIrgEmjAZeL0oir_eBjosbnFCkJGC3YJu3ZS9c-SvisxpfWUfZUZ5nGxQCex4a6CuDpwZSxfUxIwz5DgTgqj8xsUVf4wzfOFAyvWGhNzpjGyb7KYjcN7Imm4VC6uWHnklBxR8ouHYrnuKtMOZ3bMdELHGyEExb0-rogSWkqDrEcLgd-a4X4vfS_/w128-h128-p-k-no-nu/57%20Dec.%2006%2023.55_776_556.webp HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v154d"
expires: Fri, 08 Dec 2023 06:29:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="57 Dec. 06 23.55_776_556.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 06:29:25 GMT
server: fife
content-length: 7135
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwpA_DR8GHSlw7hajU6Yycwyj1i67mqnGH_zLr-oI8Hb4GDfbHeKjEp7eTqXW7ZnMitR78hvKCb-2SzeTVW4WPo_FiVF69bWCWX7-naKr7Oik2v4zd2nIbUcBpDwkLx6bPv5f_XTDcxSH6bD-M5bPsURi5wE6OsXsifvC6O7maSCF8GtASnW0K6vw1y3AY/w128-h128-p-k-no-nu/GAsxS-bakAAAfkX_1022_660.webp
200 OK 7.6 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwpA_DR8GHSlw7hajU6Yycwyj1i67mqnGH_zLr-oI8Hb4GDfbHeKjEp7eTqXW7ZnMitR78hvKCb-2SzeTVW4WPo_FiVF69bWCWX7-naKr7Oik2v4zd2nIbUcBpDwkLx6bPv5f_XTDcxSH6bD-M5bPsURi5wE6OsXsifvC6O7maSCF8GtASnW0K6vw1y3AY/w128-h128-p-k-no-nu/GAsxS-bakAAAfkX_1022_660.webp
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 128x128, components 3\012- data
Hash fd833d9bde37cb33136d2dbead20c968
e662102ae1827464d965b9ac53046dff04eed725
e3dec54137b102233e6cf7c728ed29823c61590beea083b4f1068dbbeddc7ec7
GET /img/b/R29vZ2xl/AVvXsEgwpA_DR8GHSlw7hajU6Yycwyj1i67mqnGH_zLr-oI8Hb4GDfbHeKjEp7eTqXW7ZnMitR78hvKCb-2SzeTVW4WPo_FiVF69bWCWX7-naKr7Oik2v4zd2nIbUcBpDwkLx6bPv5f_XTDcxSH6bD-M5bPsURi5wE6OsXsifvC6O7maSCF8GtASnW0K6vw1y3AY/w128-h128-p-k-no-nu/GAsxS-bakAAAfkX_1022_660.webp HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v156f"
expires: Fri, 08 Dec 2023 06:29:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="GAsxS-bakAAAfkX_1022_660.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 06:29:25 GMT
server: fife
content-length: 7593
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEij1-t-CFJpP2L9T3ycA8Op3UkKFDv-Gl25Fc-c8rIUQsdGsK54hLQZtgc-LhOcemwNa2buhWVyBNY9frCF8MXLK8VAP0vKaB5PJWZ-r0o0h2w4GApsc5Y_6x15mYkgEfseVKMUT9HHYJ9d3wrwpGT7QLH9xnIjuXHxQ0w_VGxSRMK4cwl8pkfuaRTX6qss/w128-h128-p-k-no-nu/58%20Dec.%2007%2000.22_550_320.webp
200 OK 6.0 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEij1-t-CFJpP2L9T3ycA8Op3UkKFDv-Gl25Fc-c8rIUQsdGsK54hLQZtgc-LhOcemwNa2buhWVyBNY9frCF8MXLK8VAP0vKaB5PJWZ-r0o0h2w4GApsc5Y_6x15mYkgEfseVKMUT9HHYJ9d3wrwpGT7QLH9xnIjuXHxQ0w_VGxSRMK4cwl8pkfuaRTX6qss/w128-h128-p-k-no-nu/58%20Dec.%2007%2000.22_550_320.webp
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 128x128, components 3\012- data
Hash 4cffe2f9c864d19789fde88e4e342498
0eb77e739fa78b7c8a1ab20b613071bf18b170bc
96afb37134c5461e49da7115e468f944df129797dcbfb00b680176282e25583c
GET /img/b/R29vZ2xl/AVvXsEij1-t-CFJpP2L9T3ycA8Op3UkKFDv-Gl25Fc-c8rIUQsdGsK54hLQZtgc-LhOcemwNa2buhWVyBNY9frCF8MXLK8VAP0vKaB5PJWZ-r0o0h2w4GApsc5Y_6x15mYkgEfseVKMUT9HHYJ9d3wrwpGT7QLH9xnIjuXHxQ0w_VGxSRMK4cwl8pkfuaRTX6qss/w128-h128-p-k-no-nu/58%20Dec.%2007%2000.22_550_320.webp HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v154f"
expires: Fri, 08 Dec 2023 06:29:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="58 Dec. 07 00.22_550_320.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 06:29:25 GMT
server: fife
content-length: 6016
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cupidirresolute.com/3f/9e/36/3f9e365cce679cc68853b492bea462fd.js
200 OK 24 kB URL GET HTTP/1.1 cupidirresolute.com/3f/9e/36/3f9e365cce679cc68853b492bea462fd.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcupidirresolute.com
Fingerprint0B:39:9E:8D:F3:17:2C:61:FD:6E:8C:7C:E6:8F:29:01:8E:31:D3:68
ValidityTue, 28 Nov 2023 11:37:39 GMT - Mon, 26 Feb 2024 11:37:38 GMT
File type ASCII text, with very long lines (61955), with no line terminators
Hash 04d4b7d51e5f99be326a3aacdb928cbc
9b2dca7d1d960bdfbac3a0ade3ce817f8d7f81b5
497febe01c9b16006a0c8da01900c9f0cccd2a53c40253039223991de5563a13
GET /3f/9e/36/3f9e365cce679cc68853b492bea462fd.js HTTP/1.1
Host: cupidirresolute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 06:29:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fa439920f618cfe5c4f6bf90abfef0ec
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cupidirresolute.com/1a/a6/9e/1aa69e64a0c27bde50f0b05fce716320.js
200 OK 15 kB URL GET HTTP/1.1 cupidirresolute.com/1a/a6/9e/1aa69e64a0c27bde50f0b05fce716320.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcupidirresolute.com
Fingerprint0B:39:9E:8D:F3:17:2C:61:FD:6E:8C:7C:E6:8F:29:01:8E:31:D3:68
ValidityTue, 28 Nov 2023 11:37:39 GMT - Mon, 26 Feb 2024 11:37:38 GMT
File type ASCII text, with very long lines (42203), with no line terminators
Hash 727f9e9d23a9c04e054b431ade16774f
5142c9df88df7949e5d30ed3873dfb7179a1d8f5
424b3c52c7570aecc5baf55da8bf7646aab660499a0d88dc53c188b096f9739e
GET /1a/a6/9e/1aa69e64a0c27bde50f0b05fce716320.js HTTP/1.1
Host: cupidirresolute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 06:29:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3394d693aac060fef8236296bdc062b6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
videoeggs.blogspot.com/responsive/sprite_v1_6.css.svg
200 OK 2.2 kB URL GET HTTP/3 videoeggs.blogspot.com/responsive/sprite_v1_6.css.svg
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7657)
Hash d4dcfc8144f556815c7a1d84ed4e959e
22088bd6cdf970dcf7bfab9a74a4768548ca8890
73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c
GET /responsive/sprite_v1_6.css.svg HTTP/1.1
Host: videoeggs.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 20:20:05 GMT
expires: Tue, 12 Dec 2023 20:20:05 GMT
cache-control: public, max-age=604800
last-modified: Tue, 05 Dec 2023 05:59:45 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 122960
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 03:54:00 GMT
expires: Wed, 04 Dec 2024 03:54:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 182126
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 04:57:34 GMT
expires: Fri, 06 Dec 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 5512
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw&options=w1600
200 OK 228 kB URL GET HTTP/3 themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw&options=w1600
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Sunset afterglow and twlight dunes in White Sands National Monument, software=Picasa], baseline, precision 8, 1600x1067, components 3\012- data
Size 228 kB (228521 bytes)
Hash e66ef1f4c654be20558150214aa2b85a
ad1dfbefad9a21e48aeeac1bae9f8a5b8ea1ef3c
6a5482e0dc4e77a6be20281b13d7ef4d8b67521e73b66bc633ea4e4242934be9
GET /image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw&options=w1600 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 08 Dec 2023 06:29:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 06:29:26 GMT
server: fife
content-length: 228521
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 6b8442f4e540f7d308475f9b831dfc56
e610d0c4e853b50160d97bff0535498627c5e784
ebca9adaacec7e34a2b4aba18b89d9473e0b7b3521943137a6bff506b95d0abb
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 07 Dec 2023 06:29:26 GMT
Last-Modified: Thu, 07 Dec 2023 05:11:08 GMT
Server: ECAcc (ska/F6A0)
X-Cache: Miss from cloudfront
Via: 1.1 f6020f10d519a41b0c116dad7dcb2798.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: 0d1ierY4al4xvwH6YgjVfcHJIsAhoOiSCMzAkKgPlBSIcKcxHAhWtQ==
Age: 4699
cupidirresolute.com/1a803627c84e309dfa9fc1073daf0730/invoke.js
200 OK 11 kB URL GET HTTP/1.1 cupidirresolute.com/1a803627c84e309dfa9fc1073daf0730/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcupidirresolute.com
Fingerprint0B:39:9E:8D:F3:17:2C:61:FD:6E:8C:7C:E6:8F:29:01:8E:31:D3:68
ValidityTue, 28 Nov 2023 11:37:39 GMT - Mon, 26 Feb 2024 11:37:38 GMT
File type exported SGML document, ASCII text, with very long lines (29598), with no line terminators
Hash 705a9cd5c4933517b2ea6b4e5ed28d81
cc76586a1110267445547e17185af2e6074fb232
278b9d6ccbb27d3cd18c615d38ee351956d15ccb09211e6e1161c542ff39653e
GET /1a803627c84e309dfa9fc1073daf0730/invoke.js HTTP/1.1
Host: cupidirresolute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 06:29:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 57e8b7c27ef6bda771e98e22afedba60
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a4517f963bca60f9a2e71a6fdcb6ef04
75e50123dbffa1d0cdbb76d5227a28ee89524389
754f2bf08e4d5b5de6a8bc55cfe66c0a7e53666c9a6bea23d65fcf45f2b89aa0
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:26 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://videoeggs.blogspot.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1; expires=Sun, 04 Dec 2033 06:29:26 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a4517f963bca60f9a2e71a6fdcb6ef04
75e50123dbffa1d0cdbb76d5227a28ee89524389
754f2bf08e4d5b5de6a8bc55cfe66c0a7e53666c9a6bea23d65fcf45f2b89aa0
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Cookie: uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:26 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://videoeggs.blogspot.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cupidirresolute.com/ba06daaaacb2ab8a9ffb500a83b0225b/invoke.js
200 OK 11 kB URL GET HTTP/1.1 cupidirresolute.com/ba06daaaacb2ab8a9ffb500a83b0225b/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcupidirresolute.com
Fingerprint0B:39:9E:8D:F3:17:2C:61:FD:6E:8C:7C:E6:8F:29:01:8E:31:D3:68
ValidityTue, 28 Nov 2023 11:37:39 GMT - Mon, 26 Feb 2024 11:37:38 GMT
File type exported SGML document, ASCII text, with very long lines (29601), with no line terminators
Hash 1a701ad652f4d3fca1cab3c4f468c035
d9dccc95f78048c848bb1cc78683b784d27345de
24d750bf02d24f780ae6d16bb2e18a5d3396e448ef91256a9f64887717c310ff
GET /ba06daaaacb2ab8a9ffb500a83b0225b/invoke.js HTTP/1.1
Host: cupidirresolute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 06:29:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5187b4217c0e07fa9aae8260bd15a843
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.blogger.com/img/blogger_logo_round_35.png
200 OK 2.5 kB URL GET HTTP/3 www.blogger.com/img/blogger_logo_round_35.png
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 838622483cbfed35380b4705f19d7cca
7de684136affc969a24d61927afc18905cf2fc36
183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a
GET /img/blogger_logo_round_35.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2531
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 22:03:22 GMT
expires: Mon, 11 Dec 2023 22:03:22 GMT
cache-control: public, max-age=604800
last-modified: Mon, 04 Dec 2023 14:55:54 GMT
content-type: image/png
age: 203164
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
semicolonrichsieve.com/pixel/purst?dl=0&th=0&sc=0&rs=2635&rd=2635&fd=1389&bv=23.12.v.1&tmpl=70
200 OK 0 B URL GET HTTP/1.1 semicolonrichsieve.com/pixel/purst?dl=0&th=0&sc=0&rs=2635&rd=2635&fd=1389&bv=23.12.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectsemicolonrichsieve.com
FingerprintE8:A4:25:54:56:69:72:E0:37:17:3E:3A:3C:A2:E0:DC:DE:7C:DE:92
ValidityTue, 28 Nov 2023 08:18:19 GMT - Mon, 26 Feb 2024 08:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2635&rd=2635&fd=1389&bv=23.12.v.1&tmpl=70 HTTP/1.1
Host: semicolonrichsieve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:26 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 15155217326d39df32b52435708e74b3
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 07 Dec 2023 06:29:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6E6790cW8SDK%2FC2xvjT5%2FVBo0BnF5s3sTXhVQTuWEXMb%2FPPlaeU8cKcouvFCpT0%2BgKDE%2FGX4cnfxd1lZXPTefEmcJHrd4llgj0Kswoz%2FuD6Ar8N882cK8Ymnk05wgEOqyI%2BYEOFgLqXn%2BGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6d94d5cb4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rotateportion.com/watch.1483221731448.js?key=1a803627c84e309dfa9fc1073daf0730&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 rotateportion.com/watch.1483221731448.js?key=1a803627c84e309dfa9fc1073daf0730&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectrotateportion.com
Fingerprint96:4F:1F:9B:7A:D2:00:E2:E4:F0:C3:A0:5D:76:B4:08:45:22:14:73
ValidityTue, 28 Nov 2023 08:17:05 GMT - Mon, 26 Feb 2024 08:17:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1483221731448.js?key=1a803627c84e309dfa9fc1073daf0730&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1 HTTP/1.1
Host: rotateportion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:26 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://videoeggs.blogspot.com
Access-Control-Allow-Origin: https://videoeggs.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://rotateportion.com/watch.1483221731448.js?key=1a803627c84e309dfa9fc1073daf0730&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=0d1688e26f1b8ba5faf5505e14d15fd9140732d8151a3f02fa1c2551fd5d8e7bcc655354e9754b5169fccd550453d741387d1e76d726aca79ab509de09b745cc1f8c54b7e6bf76fe4acb49234d138b70604b39e31490e7a7e96fcc782c84c8f59f20c4&pst=1701930626&rmtc=t
Set-Cookie: u_pl=16524246; expires=Fri, 08 Dec 2023 06:29:26 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.ls62YKzWh-zvWw-Yo_ZWx7fKqFeuSoyhEi7g0kUuY-E; expires=Thu, 07 Dec 2023 06:30:26 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 26f39b78cbcf8e546e0766fc3dbc7817
Strict-Transport-Security: max-age=0; includeSubdomains
marecreateddew.com/watch.389790129831.js?key=ba06daaaacb2ab8a9ffb500a83b0225b&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 marecreateddew.com/watch.389790129831.js?key=ba06daaaacb2ab8a9ffb500a83b0225b&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectmarecreateddew.com
Fingerprint1D:7B:54:E8:A4:32:C5:E0:0A:30:19:B9:B6:09:AD:16:0D:0B:D0:F9
ValidityTue, 28 Nov 2023 10:33:17 GMT - Mon, 26 Feb 2024 10:33:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.389790129831.js?key=ba06daaaacb2ab8a9ffb500a83b0225b&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1 HTTP/1.1
Host: marecreateddew.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 06:29:26 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://videoeggs.blogspot.com
Access-Control-Allow-Origin: https://videoeggs.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://marecreateddew.com/watch.389790129831.js?key=ba06daaaacb2ab8a9ffb500a83b0225b&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=8d3bc9b964882a99c39d19ac026875436a773671683f62bb2525d7c7d5edc25d6c255eed4f5ebc2e23e0667a2fdd0621b06ebc0f7c585fd7fc1d981dd549a51280737e654d9e6365c2987af1f5cdd7c59e852b94d82ba2226613eecd556686&pst=1701930626&rmtc=t
Set-Cookie: u_pl=19834443; expires=Fri, 08 Dec 2023 06:29:26 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxOTgzNDQ0MywiayI6ImJhMDZkYWFhYWNiMmFiOGE5ZmZiNTAwYTgzYjAyMjViIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoyNzA1NjA5LCJwaWQiOjE1NTk2LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjIsImFpZCI6MzIsInB0Ijo0LCJwayI6Im1qa2pqeGdmYjIiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly92aWRlb2VnZ3MuYmxvZ3Nwb3QuY29tLyIsImFyIjpbXX19.OFAy0y8q-KgZu4X1jM1WbHT-7OZlQotsH1WZUcc86rw; expires=Thu, 07 Dec 2023 06:30:26 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6317b195da7341e41b4430356bf70b27
Strict-Transport-Security: max-age=0; includeSubdomains
rotateportion.com/watch.1483221731448.js?key=1a803627c84e309dfa9fc1073daf0730&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=0d1688e26f1b8ba5faf5505e14d15fd9140732d8151a3f02fa1c2551fd5d8e7bcc655354e9754b5169fccd550453d741387d1e76d726aca79ab509de09b745cc1f8c54b7e6bf76fe4acb49234d138b70604b39e31490e7a7e96fcc782c84c8f59f20c4&pst=1701930626&rmtc=t
200 OK 2.1 kB URL GET HTTP/1.1 rotateportion.com/watch.1483221731448.js?key=1a803627c84e309dfa9fc1073daf0730&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=0d1688e26f1b8ba5faf5505e14d15fd9140732d8151a3f02fa1c2551fd5d8e7bcc655354e9754b5169fccd550453d741387d1e76d726aca79ab509de09b745cc1f8c54b7e6bf76fe4acb49234d138b70604b39e31490e7a7e96fcc782c84c8f59f20c4&pst=1701930626&rmtc=t
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectrotateportion.com
Fingerprint96:4F:1F:9B:7A:D2:00:E2:E4:F0:C3:A0:5D:76:B4:08:45:22:14:73
ValidityTue, 28 Nov 2023 08:17:05 GMT - Mon, 26 Feb 2024 08:17:04 GMT
File type HTML document, ASCII text, with very long lines (2536)
Hash 0ce21177849dbffacd4e8a89711d1abe
ccd7a9ba712d09b8fe8853567bdb6020a8743e13
de33053970522cbe7d4aaf65aad770d62d83ec12ca41634667d38dc077119feb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1483221731448.js?key=1a803627c84e309dfa9fc1073daf0730&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=0d1688e26f1b8ba5faf5505e14d15fd9140732d8151a3f02fa1c2551fd5d8e7bcc655354e9754b5169fccd550453d741387d1e76d726aca79ab509de09b745cc1f8c54b7e6bf76fe4acb49234d138b70604b39e31490e7a7e96fcc782c84c8f59f20c4&pst=1701930626&rmtc=t HTTP/1.1
Host: rotateportion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
Referer: https://videoeggs.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=16524246; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjUyNDI0NiwiayI6IjFhODAzNjI3Yzg0ZTMwOWRmYTlmYzEwNzNkYWYwNzMwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjM1OTQ1LCJwaWQiOjE1NTk2LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjIsImFpZCI6NSwicHQiOjQsInBrIjoieHd4amdjYzciLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly92aWRlb2VnZ3MuYmxvZ3Nwb3QuY29tLyIsImFyIjpbXX19.ls62YKzWh-zvWw-Yo_ZWx7fKqFeuSoyhEi7g0kUuY-E
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://videoeggs.blogspot.com
Access-Control-Allow-Origin: https://videoeggs.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1; expires=Thu, 14 Dec 2023 06:29:27 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
uncs=1; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
pdhtkv5=true; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
uncs5=1; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f2ec3d5d194f18869a5cd3f0f77c2f0c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
marecreateddew.com/watch.389790129831.js?key=ba06daaaacb2ab8a9ffb500a83b0225b&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=8d3bc9b964882a99c39d19ac026875436a773671683f62bb2525d7c7d5edc25d6c255eed4f5ebc2e23e0667a2fdd0621b06ebc0f7c585fd7fc1d981dd549a51280737e654d9e6365c2987af1f5cdd7c59e852b94d82ba2226613eecd556686&pst=1701930626&rmtc=t
200 OK 2.5 kB URL GET HTTP/1.1 marecreateddew.com/watch.389790129831.js?key=ba06daaaacb2ab8a9ffb500a83b0225b&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=8d3bc9b964882a99c39d19ac026875436a773671683f62bb2525d7c7d5edc25d6c255eed4f5ebc2e23e0667a2fdd0621b06ebc0f7c585fd7fc1d981dd549a51280737e654d9e6365c2987af1f5cdd7c59e852b94d82ba2226613eecd556686&pst=1701930626&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectmarecreateddew.com
Fingerprint1D:7B:54:E8:A4:32:C5:E0:0A:30:19:B9:B6:09:AD:16:0D:0B:D0:F9
ValidityTue, 28 Nov 2023 10:33:17 GMT - Mon, 26 Feb 2024 10:33:16 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (3134)
Hash 37226ae8e378b0efadf574dd2860618e
ef014652389bd70a2cd0ed5d98845e19ef823f26
8cd902713fc705b3e75a5a07a818c4ddb7661600f9e27f8c22a55f3dfcddf5c8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.389790129831.js?key=ba06daaaacb2ab8a9ffb500a83b0225b&kw=%5B%22videoeggs%22%2C%22-%22%2C%22today%22%2C%22leaked%22%2C%22videos%22%5D&refer=https%3A%2F%2Fvideoeggs.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1&shu=8d3bc9b964882a99c39d19ac026875436a773671683f62bb2525d7c7d5edc25d6c255eed4f5ebc2e23e0667a2fdd0621b06ebc0f7c585fd7fc1d981dd549a51280737e654d9e6365c2987af1f5cdd7c59e852b94d82ba2226613eecd556686&pst=1701930626&rmtc=t HTTP/1.1
Host: marecreateddew.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
Referer: https://videoeggs.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=19834443; ain=eyJhbGciOiJIUzI1NiJ9.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.OFAy0y8q-KgZu4X1jM1WbHT-7OZlQotsH1WZUcc86rw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 06:29:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://videoeggs.blogspot.com
Access-Control-Allow-Origin: https://videoeggs.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1; expires=Thu, 14 Dec 2023 06:29:27 GMT; secure; SameSite=None
iprc3f26ca56bf264e3b2a466b6b364551f0=3569682; expires=Thu, 07 Dec 2023 10:29:27 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
uncs=1; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
pdhtkv32=true; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
uncs32=1; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fae8f16068dfa03f42e83fd69be960fc
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
friendshipmale.com/sfp.js
200 OK 28 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 06:29:26 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: bd2d712ae8d5120b44736defc3865c49
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 07 Dec 2023 06:29:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vuKzfJl4RiFhRW5ugRp1%2BNFwog4NvXF4lio4rmoTXg5LO7vbT9nXRUfujNRJx4kHcPwqV2gY6a%2B4X9%2BaH8ill%2B1FR%2B0IX5zzVvzQqN4yE%2FgdX8A5jbbkPHmqmmNdy8zZS9d0Tz8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6d799e770fd-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.cloudimagesb.com/bi/d8/94/1a/d8941a3639374cf395e663d4c349533a/1660319001.jpg
200 OK 18 kB URL GET HTTP/2 cdn.cloudimagesb.com/bi/d8/94/1a/d8941a3639374cf395e663d4c349533a/1660319001.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash e9ea875abfe0cb6192636905b73bab52
700bb767392b03cab2a0585e5dde991da314f608
ede9ad2d2ee771c05df83cd74c9a74a7d796fce8b41c602058106ef23b4054f7
GET /bi/d8/94/1a/d8941a3639374cf395e663d4c349533a/1660319001.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:27 GMT
content-type: image/jpeg
content-length: 18189
server: nginx/1.21.6
last-modified: Fri, 12 Aug 2022 15:43:29 GMT
etag: "62f67521-470d"
expires: Sat, 09 Dec 2023 06:29:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/e7/7f/66/e77f66a1bf85e2e04ab5cc04da0f3a33/1658915540.gif
200 OK 5.8 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/e7/7f/66/e77f66a1bf85e2e04ab5cc04da0f3a33/1658915540.gif
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type GIF image data, version 89a, 320 x 50\012- data
Hash 9435690825affab0d3786533519f2e39
20e7701821ca04cce18bb07b53f5b80bf4d9ff8c
42f117a4284f3aafdf140b07a569992be9f36b2d84257697bcf940fdab35245f
GET /cti/e7/7f/66/e77f66a1bf85e2e04ab5cc04da0f3a33/1658915540.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:27 GMT
content-type: image/gif
content-length: 5817
server: nginx/1.21.6
last-modified: Wed, 27 Jul 2022 09:52:28 GMT
etag: "62e10adc-16b9"
expires: Sat, 09 Dec 2023 06:29:27 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1aa69e64a0c27bde50f0b05fce716320&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1aa69e64a0c27bde50f0b05fce716320&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1aa69e64a0c27bde50f0b05fce716320&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:27 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 09c8ae1c0caff4d0b6b8f9ca0e55d847
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=3f9e365cce679cc68853b492bea462fd&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=3f9e365cce679cc68853b492bea462fd&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=3f9e365cce679cc68853b492bea462fd&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:27 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a6cee18bd531a92a05c443fe1adad722
Strict-Transport-Security: max-age=0; includeSubdomains
jeanspurrcleopatra.com/sbar.json?key=1aa69e64a0c27bde50f0b05fce716320&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1
200 OK 4.2 kB URL GET HTTP/1.1 jeanspurrcleopatra.com/sbar.json?key=1aa69e64a0c27bde50f0b05fce716320&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectjeanspurrcleopatra.com
FingerprintC6:92:39:26:73:7D:74:AC:63:78:96:A9:16:39:0A:2A:F1:3D:81:18
ValidityMon, 27 Nov 2023 07:43:34 GMT - Sun, 25 Feb 2024 07:43:33 GMT
File type JSON data\012- , ASCII text, with very long lines (6065), with no line terminators
Hash ad3b79519222a444f2f36040c9339a7f
2a28ad20faa2e73a09cd4758ba39f3f899506906
8a087f174afe713775bb16bfc8f0e0022ffe4b8a42ddfb943e32ccc39d330244
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=1aa69e64a0c27bde50f0b05fce716320&uuid=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1 HTTP/1.1
Host: jeanspurrcleopatra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:27 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://videoeggs.blogspot.com
Access-Control-Allow-Origin: https://videoeggs.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=19842289; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1; expires=Thu, 14 Dec 2023 06:29:27 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
uncs=1; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 08 Dec 2023 06:29:27 GMT; secure; SameSite=None
slec1aa69e64a0c27bde50f0b05fce716320=[4691078]; expires=Thu, 07 Dec 2023 06:29:32 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 728f653b2fec15d46a05df65735d20c6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
jeanspurrcleopatra.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTGZxNTIQoQQqJAugKJRMLn2b1bn48gWYSQEBGSkASloWD%2B7Xnw7M4ys3vruLKIFNJxSBSU6%2B%2BcmD8RIg0dCjqniSxFylGgK3BLQwECTIvOPsniFfve298r3ve9ubVZ7pEQJZtcfteua2PYQtykjRPXdSZt5RsXrzVC2qSnGtd1ttg%2B1Vibflz%2FtZDGTXqycU6JVbsQ0ZDSkIaNs9qpxK4tHFDo%2FF43bHZpsx01w7iNNff%2F3pcBPAsg%2B3vkOWg5fmrl0X1oMUKWfn9G%2BdXC5q%2B%2BlZaGFdahL7ffz1YzW2VIj8rEBUiy7dk0rB8T8uUx2Gx7pgC2vzVVAK7HJPglBM%2B2Z2uC9%2B8cbsoNVAYun0bVH0GZETQbQdib0PIJAYTExUvI0rsXravYjUPKpnRM5vb%2Fgq7GZO7X55Gl3502eq1x1Zqy0DbzWEtq6LURdG%2BEvNxBsR5AVzsQxSfQ8jFZ2L%2BALN265I2FlpOXlVSRiJNwXnWXkvm25HSeRSqZX4yjJO50OyGnnQOLtB5BJyMYNQDzx1H6AKUOUCYByjxAKicNFncTSjsJT1qtpbYQotUSIl5alLFstZcSilJMNQxQ5AMIM4BwG8jdBlb1AK78CX6lhpfH4YsxCd7bQF%2FWqBRB5QkqRlBpgqogqPr1HWl85Ou70viSh7MczXKrHtqit8nu2KKnMgLmBpv5Hnl2amDQfPgnVtWkETK22FWLbUZF1OFSxTShnMaJUJ1wsRVReF1D%2B2NgPsC6HpOTbz9Crp%2B8%2Fjs424E3OxD6GFj5Elg17EQUbGXYXqJYz37oa6ms6vV8kxvb87ktmsKmkLZGXsyhuBFsmj3y4sFBz31xC0rsLv%2F9z%2BizD07sQ7gauavxkX5I0DO3h1dsRbau2MqT%2B5fyQqd6nU2PfbVghZr75h11o7JOnj%2FjB1%2B%2FIaZgWt67pnxxgWVSZz1Pvj2tpVTurHVCkR%2FP%2B%2BuKXy79yunSZWV%2B4fKbZ8%2BnuVPea5uNwPSTDx9A6DF55u7ywTN%2B5asH0G4EV9ZIy10yC2i7A5FvwOe7y79d%2Fffx5IVP4S2BM0czPA9QlfXQRfzop9EERh31jNfw6sgCrnYf%2FHHINv1t9FwAVtxEltbouxp9U4OZAXx5fFjkbnf559ZBgJtgyI0Ltrhx5vNDa72eNFSc0ETRSPGky5MOo7KbtLucdUPV4TELUfix%2Bjg59x8AAAD%2F%2FwEAAP%2F%2FL8JIq54EAAA%3D
200 OK 7 B URL GET HTTP/1.1 jeanspurrcleopatra.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTGZxNTIQoQQqJAugKJRMLn2b1bn48gWYSQEBGSkASloWD%2B7Xnw7M4ys3vruLKIFNJxSBSU6%2B%2BcmD8RIg0dCjqniSxFylGgK3BLQwECTIvOPsniFfve298r3ve9ubVZ7pEQJZtcfteua2PYQtykjRPXdSZt5RsXrzVC2qSnGtd1ttg%2B1Vibflz%2FtZDGTXqycU6JVbsQ0ZDSkIaNs9qpxK4tHFDo%2FF43bHZpsx01w7iNNff%2F3pcBPAsg%2B3vkOWg5fmrl0X1oMUKWfn9G%2BdXC5q%2B%2BlZaGFdahL7ffz1YzW2VIj8rEBUiy7dk0rB8T8uUx2Gx7pgC2vzVVAK7HJPglBM%2B2Z2uC9%2B8cbsoNVAYun0bVH0GZETQbQdib0PIJAYTExUvI0rsXravYjUPKpnRM5vb%2Fgq7GZO7X55Gl3502eq1x1Zqy0DbzWEtq6LURdG%2BEvNxBsR5AVzsQxSfQ8jFZ2L%2BALN265I2FlpOXlVSRiJNwXnWXkvm25HSeRSqZX4yjJO50OyGnnQOLtB5BJyMYNQDzx1H6AKUOUCYByjxAKicNFncTSjsJT1qtpbYQotUSIl5alLFstZcSilJMNQxQ5AMIM4BwG8jdBlb1AK78CX6lhpfH4YsxCd7bQF%2FWqBRB5QkqRlBpgqogqPr1HWl85Ou70viSh7MczXKrHtqit8nu2KKnMgLmBpv5Hnl2amDQfPgnVtWkETK22FWLbUZF1OFSxTShnMaJUJ1wsRVReF1D%2B2NgPsC6HpOTbz9Crp%2B8%2Fjs424E3OxD6GFj5Elg17EQUbGXYXqJYz37oa6ms6vV8kxvb87ktmsKmkLZGXsyhuBFsmj3y4sFBz31xC0rsLv%2F9z%2BizD07sQ7gauavxkX5I0DO3h1dsRbau2MqT%2B5fyQqd6nU2PfbVghZr75h11o7JOnj%2FjB1%2B%2FIaZgWt67pnxxgWVSZz1Pvj2tpVTurHVCkR%2FP%2B%2BuKXy79yunSZWV%2B4fKbZ8%2BnuVPea5uNwPSTDx9A6DF55u7ywTN%2B5asH0G4EV9ZIy10yC2i7A5FvwOe7y79d%2Fffx5IVP4S2BM0czPA9QlfXQRfzop9EERh31jNfw6sgCrnYf%2FHHINv1t9FwAVtxEltbouxp9U4OZAXx5fFjkbnf559ZBgJtgyI0Ltrhx5vNDa72eNFSc0ETRSPGky5MOo7KbtLucdUPV4TELUfix%2Bjg59x8AAAD%2F%2FwEAAP%2F%2FL8JIq54EAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectjeanspurrcleopatra.com
FingerprintC6:92:39:26:73:7D:74:AC:63:78:96:A9:16:39:0A:2A:F1:3D:81:18
ValidityMon, 27 Nov 2023 07:43:34 GMT - Sun, 25 Feb 2024 07:43:33 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTGZxNTIQoQQqJAugKJRMLn2b1bn48gWYSQEBGSkASloWD%2B7Xnw7M4ys3vruLKIFNJxSBSU6%2B%2BcmD8RIg0dCjqniSxFylGgK3BLQwECTIvOPsniFfve298r3ve9ubVZ7pEQJZtcfteua2PYQtykjRPXdSZt5RsXrzVC2qSnGtd1ttg%2B1Vibflz%2FtZDGTXqycU6JVbsQ0ZDSkIaNs9qpxK4tHFDo%2FF43bHZpsx01w7iNNff%2F3pcBPAsg%2B3vkOWg5fmrl0X1oMUKWfn9G%2BdXC5q%2B%2BlZaGFdahL7ffz1YzW2VIj8rEBUiy7dk0rB8T8uUx2Gx7pgC2vzVVAK7HJPglBM%2B2Z2uC9%2B8cbsoNVAYun0bVH0GZETQbQdib0PIJAYTExUvI0rsXravYjUPKpnRM5vb%2Fgq7GZO7X55Gl3502eq1x1Zqy0DbzWEtq6LURdG%2BEvNxBsR5AVzsQxSfQ8jFZ2L%2BALN265I2FlpOXlVSRiJNwXnWXkvm25HSeRSqZX4yjJO50OyGnnQOLtB5BJyMYNQDzx1H6AKUOUCYByjxAKicNFncTSjsJT1qtpbYQotUSIl5alLFstZcSilJMNQxQ5AMIM4BwG8jdBlb1AK78CX6lhpfH4YsxCd7bQF%2FWqBRB5QkqRlBpgqogqPr1HWl85Ou70viSh7MczXKrHtqit8nu2KKnMgLmBpv5Hnl2amDQfPgnVtWkETK22FWLbUZF1OFSxTShnMaJUJ1wsRVReF1D%2B2NgPsC6HpOTbz9Crp%2B8%2Fjs424E3OxD6GFj5Elg17EQUbGXYXqJYz37oa6ms6vV8kxvb87ktmsKmkLZGXsyhuBFsmj3y4sFBz31xC0rsLv%2F9z%2BizD07sQ7gauavxkX5I0DO3h1dsRbau2MqT%2B5fyQqd6nU2PfbVghZr75h11o7JOnj%2FjB1%2B%2FIaZgWt67pnxxgWVSZz1Pvj2tpVTurHVCkR%2FP%2B%2BuKXy79yunSZWV%2B4fKbZ8%2BnuVPea5uNwPSTDx9A6DF55u7ywTN%2B5asH0G4EV9ZIy10yC2i7A5FvwOe7y79d%2Fffx5IVP4S2BM0czPA9QlfXQRfzop9EERh31jNfw6sgCrnYf%2FHHINv1t9FwAVtxEltbouxp9U4OZAXx5fFjkbnf559ZBgJtgyI0Ltrhx5vNDa72eNFSc0ETRSPGky5MOo7KbtLucdUPV4TELUfix%2Bjg59x8AAAD%2F%2FwEAAP%2F%2FL8JIq54EAAA%3D HTTP/1.1
Host: jeanspurrcleopatra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Cookie: u_pl=19842289; uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 33cc4d442cd674f941b1c450ff6ed8d0
Strict-Transport-Security: max-age=0; includeSubdomains
videoeggs.blogspot.com/favicon.ico
200 OK 651 B URL GET HTTP/3 videoeggs.blogspot.com/favicon.ico
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 99ccf822e4a2f6eedf767d1f9153057d
f6ab36a2cab1db3d25f943e8f34540604b52b447
326c30fdcf3e44e6a5d90728e39986b6c6c85861526db7e9c233bd2064ff2952
GET /favicon.ico HTTP/1.1
Host: videoeggs.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Cookie: _ga_TMH5R5EN9H=GS1.1.1701930572.1.0.1701930572.0.0.0; _ga=GA1.1.42114986.1701930573; dom3ic8zudi28v8lr6fgphwffqoz0j6c=ede2c5f1-e98f-4db0-a2ef-652f57971b07%3A3%3A1; pp_main_3f9e365cce679cc68853b492bea462fd=1; sb_main_1aa69e64a0c27bde50f0b05fce716320=1; sb_count_1aa69e64a0c27bde50f0b05fce716320=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Thu, 07 Dec 2023 06:29:28 GMT
date: Thu, 07 Dec 2023 06:29:28 GMT
cache-control: private, max-age=86400
last-modified: Thu, 07 Dec 2023 04:16:34 GMT
etag: W/"5f0425c73519339268b8e9dda4d6de5e9ca1890fd71f60b85bfd6110092aab48"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 651
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png
200 OK 9.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/button.png
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 374 x 158, 8-bit colormap, non-interlaced\012- data
Hash 820ad88853e09bfa31ecc6dfd93c07ec
c8d408a8618a825a5111c51a6fe2e30f4d53098c
948bc0c4bd13d058c1c64f903453f928ecfdcd87686eebe6f9a73618e24d4bbd
GET /sb/interstitial/games/hentai-heroes/main/8/img/button.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:28 GMT
content-type: image/png
content-length: 9865
last-modified: Thu, 19 Oct 2023 16:12:57 GMT
etag: "65315589-2689"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2520300
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MFKNpCPehTmAvYS6rpMftYGQRg0tbk8Yahk9v9PLWlsejiX0C7PQL%2FHnsKUAfo0I%2BTCQ6rymb6hm%2FbxJmU5n2ui%2BXZqiUXjHjTtpLr7GwTRuF%2B1zibzPV74tDb5M9eul3BINVKW0ygt4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6e5bdd763b8-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
jeanspurrcleopatra.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTGZxNTIQoQQqJAugKJRMLn2b3b%2B0OQLEJIiAhJSILSUDA7M3sePLuzzOzeXlxZRArpOCQKyvV3TsyfCJGGDhmd00SWIvko0BW4paEAAaZFZ59k8Yp97%2B3vFe%2F73tzZKPaJj4JNr75r1pTWbCms09qpmyoVpnS1yzdqPq3TM7WbKm01z9QGs4%2Ftv%2BbTsE5P1y5IvmqWAupT6lO%2Fdl5ZGZvB0iGFyh50%2FXqX1ptB3Q%2BbGNj%2F967w4JgH0d8nz0GJyVMrjx9C8THS5Ptz0q3mJnv1raTQLDcWfbH1frqamjJFclzG1kOcbs2nYdyEkC9PwKRbcwUw%2Fc2ZAkRqQrxffETp1nxNRP17R5tGGjJFJJ5G2R9D6jEUG4Ob21BijwBc4PIVpMn9y8aW7NYRZTM6IQsHf0GVE7Lw6%2FNIk%2B%2FOajWoXTe6yJVJHQZxBTUYQ%2FXGyIod5GseVLkDnn8CJZ6QpYNLSJPNK04bKDF9WQoZ8DD2F2W3Ey82RUQXWSDjxVYYxGG72%2FYj2j60SKkxVDyGlkMwdxKF81AoD0Xsocg8JGJaY2E3prQdR3Gj0WlyzhsNzsNOS4Si0ezEFAWfaRgiz4bgeghu15HZdayqIWzxE9xKBSdOwuUT4r23jr6oUEqC0hGUjKBUBGVOUPare0K7wFX3hXZF5M9zMM%2BNamTy3ga7Z%2FKeTAmYHW5k%2B%2BTZmYFe%2FdGfWJXTms9YqytbTUZ50I6EDGlMIxrGXLb9ViOgcKqCcifAnIc1NSGn336MTO29%2FjsitgOnd8DVCbDiJbBy1A4o2Mqo2aFYS3%2FoKyGN7PVcPdKm5zKT17lJIEyFLF9Afsvb0PvkxcODXvjiDiTfXf77n%2FFnH5w6ALcVMlvhI%2FWIoKfvjq6ZkmxeM6UjD69kuUrUGpsd%2B3rOcrnwzTvyVmmsuHjODb9%2Bg8%2FArHxwQ7r8EkuFSnuOfHtWCSHteWO5JD9edDdldLVwK2cLmxbZpatvnr%2BYZFY6p0w6BlN7H26Dqwl55v7y4TN%2B5attKDuGLSokxS6ZB5TZAc%2FW4bLd5d%2Bu%2F%2Ftk%2BsKncIbA6uOZKPNQFtXIBtHxT60ItDzuWVTByWMLIrm7%2FccR23B30bMeWH4baVKhbyv0dQWmh3DFyVGe2d3lnxuHgUh7o0hbbzPSVn9%2BZK1T01roN2Un6rS5EJHkwm8HjU6D0kCIZrsr%2FS5yN5Efxxf%2BAwAA%2F%2F8BAAD%2F%2FzvKxk2eBAAA
200 OK 7 B URL GET HTTP/1.1 jeanspurrcleopatra.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTGZxNTIQoQQqJAugKJRMLn2b3b%2B0OQLEJIiAhJSILSUDA7M3sePLuzzOzeXlxZRArpOCQKyvV3TsyfCJGGDhmd00SWIvko0BW4paEAAaZFZ59k8Yp97%2B3vFe%2F73tzZKPaJj4JNr75r1pTWbCms09qpmyoVpnS1yzdqPq3TM7WbKm01z9QGs4%2Ftv%2BbTsE5P1y5IvmqWAupT6lO%2Fdl5ZGZvB0iGFyh50%2FXqX1ptB3Q%2BbGNj%2F967w4JgH0d8nz0GJyVMrjx9C8THS5Ptz0q3mJnv1raTQLDcWfbH1frqamjJFclzG1kOcbs2nYdyEkC9PwKRbcwUw%2Fc2ZAkRqQrxffETp1nxNRP17R5tGGjJFJJ5G2R9D6jEUG4Ob21BijwBc4PIVpMn9y8aW7NYRZTM6IQsHf0GVE7Lw6%2FNIk%2B%2FOajWoXTe6yJVJHQZxBTUYQ%2FXGyIod5GseVLkDnn8CJZ6QpYNLSJPNK04bKDF9WQoZ8DD2F2W3Ey82RUQXWSDjxVYYxGG72%2FYj2j60SKkxVDyGlkMwdxKF81AoD0Xsocg8JGJaY2E3prQdR3Gj0WlyzhsNzsNOS4Si0ezEFAWfaRgiz4bgeghu15HZdayqIWzxE9xKBSdOwuUT4r23jr6oUEqC0hGUjKBUBGVOUPare0K7wFX3hXZF5M9zMM%2BNamTy3ga7Z%2FKeTAmYHW5k%2B%2BTZmYFe%2FdGfWJXTms9YqytbTUZ50I6EDGlMIxrGXLb9ViOgcKqCcifAnIc1NSGn336MTO29%2FjsitgOnd8DVCbDiJbBy1A4o2Mqo2aFYS3%2FoKyGN7PVcPdKm5zKT17lJIEyFLF9Afsvb0PvkxcODXvjiDiTfXf77n%2FFnH5w6ALcVMlvhI%2FWIoKfvjq6ZkmxeM6UjD69kuUrUGpsd%2B3rOcrnwzTvyVmmsuHjODb9%2Bg8%2FArHxwQ7r8EkuFSnuOfHtWCSHteWO5JD9edDdldLVwK2cLmxbZpatvnr%2BYZFY6p0w6BlN7H26Dqwl55v7y4TN%2B5attKDuGLSokxS6ZB5TZAc%2FW4bLd5d%2Bu%2F%2Ftk%2BsKncIbA6uOZKPNQFtXIBtHxT60ItDzuWVTByWMLIrm7%2FccR23B30bMeWH4baVKhbyv0dQWmh3DFyVGe2d3lnxuHgUh7o0hbbzPSVn9%2BZK1T01roN2Un6rS5EJHkwm8HjU6D0kCIZrsr%2FS5yN5Efxxf%2BAwAA%2F%2F8BAAD%2F%2FzvKxk2eBAAA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectjeanspurrcleopatra.com
FingerprintC6:92:39:26:73:7D:74:AC:63:78:96:A9:16:39:0A:2A:F1:3D:81:18
ValidityMon, 27 Nov 2023 07:43:34 GMT - Sun, 25 Feb 2024 07:43:33 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTGZxNTIQoQQqJAugKJRMLn2b3b%2B0OQLEJIiAhJSILSUDA7M3sePLuzzOzeXlxZRArpOCQKyvV3TsyfCJGGDhmd00SWIvko0BW4paEAAaZFZ59k8Yp97%2B3vFe%2F73tzZKPaJj4JNr75r1pTWbCms09qpmyoVpnS1yzdqPq3TM7WbKm01z9QGs4%2Ftv%2BbTsE5P1y5IvmqWAupT6lO%2Fdl5ZGZvB0iGFyh50%2FXqX1ptB3Q%2BbGNj%2F967w4JgH0d8nz0GJyVMrjx9C8THS5Ptz0q3mJnv1raTQLDcWfbH1frqamjJFclzG1kOcbs2nYdyEkC9PwKRbcwUw%2Fc2ZAkRqQrxffETp1nxNRP17R5tGGjJFJJ5G2R9D6jEUG4Ob21BijwBc4PIVpMn9y8aW7NYRZTM6IQsHf0GVE7Lw6%2FNIk%2B%2FOajWoXTe6yJVJHQZxBTUYQ%2FXGyIod5GseVLkDnn8CJZ6QpYNLSJPNK04bKDF9WQoZ8DD2F2W3Ey82RUQXWSDjxVYYxGG72%2FYj2j60SKkxVDyGlkMwdxKF81AoD0Xsocg8JGJaY2E3prQdR3Gj0WlyzhsNzsNOS4Si0ezEFAWfaRgiz4bgeghu15HZdayqIWzxE9xKBSdOwuUT4r23jr6oUEqC0hGUjKBUBGVOUPare0K7wFX3hXZF5M9zMM%2BNamTy3ga7Z%2FKeTAmYHW5k%2B%2BTZmYFe%2FdGfWJXTms9YqytbTUZ50I6EDGlMIxrGXLb9ViOgcKqCcifAnIc1NSGn336MTO29%2FjsitgOnd8DVCbDiJbBy1A4o2Mqo2aFYS3%2FoKyGN7PVcPdKm5zKT17lJIEyFLF9Afsvb0PvkxcODXvjiDiTfXf77n%2FFnH5w6ALcVMlvhI%2FWIoKfvjq6ZkmxeM6UjD69kuUrUGpsd%2B3rOcrnwzTvyVmmsuHjODb9%2Bg8%2FArHxwQ7r8EkuFSnuOfHtWCSHteWO5JD9edDdldLVwK2cLmxbZpatvnr%2BYZFY6p0w6BlN7H26Dqwl55v7y4TN%2B5attKDuGLSokxS6ZB5TZAc%2FW4bLd5d%2Bu%2F%2Ftk%2BsKncIbA6uOZKPNQFtXIBtHxT60ItDzuWVTByWMLIrm7%2FccR23B30bMeWH4baVKhbyv0dQWmh3DFyVGe2d3lnxuHgUh7o0hbbzPSVn9%2BZK1T01roN2Un6rS5EJHkwm8HjU6D0kCIZrsr%2FS5yN5Efxxf%2BAwAA%2F%2F8BAAD%2F%2FzvKxk2eBAAA HTTP/1.1
Host: jeanspurrcleopatra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Cookie: u_pl=19842289; uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:29 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1c24f8ea2cf0430f8856bdc73a6b85bd
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg
200 OK 376 kB URL GET HTTP/3 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 376 kB (375458 bytes)
Hash 65b98e31f2a22bfc2ae827300f514b93
8d66b3140eaabf1eff5990961d013af5e948df5a
6ea2b64aa9ed05099682f877c6f257d5ebc03814c5910a9dc91a3eae94bf6879
GET /sb/interstitial/games/hentai-heroes/main/8/img/bg.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 06:29:29 GMT
content-type: image/jpeg
content-length: 375458
last-modified: Thu, 19 Oct 2023 16:13:01 GMT
etag: "6531558d-5baa2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 3039484
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zFREuSQVZu0St%2BMc7vPqFWF%2BSqmJcVv4bphTkfvsb4NLsn2j5cGMrS1XE0OneLFxyAKz9fBm3R%2BIHP1Zz%2BsTut1PtZv5XbvetiQktK%2FVy68r4Y%2B0fYwrnOJ87gos%2BXFrf4HgsvDliZrw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6e83a446316-LHR
alt-svc: h3=":443"; ma=86400
jeanspurrcleopatra.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 jeanspurrcleopatra.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://videoeggs.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectjeanspurrcleopatra.com
FingerprintC6:92:39:26:73:7D:74:AC:63:78:96:A9:16:39:0A:2A:F1:3D:81:18
ValidityMon, 27 Nov 2023 07:43:34 GMT - Sun, 25 Feb 2024 07:43:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: jeanspurrcleopatra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Cookie: u_pl=19842289; uid_id2=ede2c5f1-e98f-4db0-a2ef-652f57971b07:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 06:29:29 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 6.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Dec 2023 06:29:28 GMT
date: Thu, 07 Dec 2023 06:29:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg
200 OK 1.2 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/img/close.svg
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1275), with no line terminators
Hash ee9084e5f63b44e99321603aeadcf5b3
7ad5af3b9bd4f16852d7491fa0d2d27208318d10
780911a80399262efd3de45d684bb03fc965406402d3b60720d3dcfe7a4a3fc0
GET /sb/interstitial/games/hentai-heroes/main/8/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:28 GMT
content-type: image/svg+xml
last-modified: Thu, 19 Oct 2023 16:12:58 GMT
etag: W/"6531558a-49d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1914414
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lDL3wnj2xU8HSQJITbf2bjmtHOg84S7eLq1tm0XnEJ3wQWapHwx4IfnAgpbE1KIMxVF8WCOhbbrbZ5s4MpL04NLNoQs2lV92Kav9qu84wUpnGfX3JwLbmM9vnR6xtqNU293ZvOr3HOiP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6e5add163b8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html
200 OK 1.2 kB URL GET HTTP/2 cdn.yourwebbars.com/sb/interstitial/games/hentai-heroes/main/8/index.html
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49
ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1310), with no line terminators
Hash e3b4395490a66f24e4461eea7481e495
18a3479d01e1a5dec50eb78d998fbad56a8b72ee
88718b8db2865c0e2f96730d4e2925b79005f0e68ceed052120b356655e69f99
GET /sb/interstitial/games/hentai-heroes/main/8/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:28 GMT
content-type: text/html
last-modified: Thu, 19 Oct 2023 16:12:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ST1wWxKiH1Mc5dlu5NBzDIaKCCuiwtolB5ssJPz3h6r5HfVqbn3SeJuYDJB6UkiSuZi6wcEkjEAcUlBEg0dKK8sySGQ%2BS1LqBrSeDDDQX26RSFa4CHIT6GsXHsoPRtaNGTuhojE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6e12eaf568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css
200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/animate.css
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/interstitial/games/hentai-heroes/main/8/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:28 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=logKDiJPj%2BlwxFhKa07J2uWaHdBYs0GrS57rMD9KIgE9EDHOWFpQPnYMIaEvfk64%2Bi8eyJUBBeZU7PKRb%2Bj%2BGExq3QMk%2FQ72Jv5EVpJgT3cws%2F56K%2BKz2OsGrMapxr58Ls%2FvRbF6RmNJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6e59dbc63b8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js
200 OK 3.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/js/script.js
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type Unicode text, UTF-8 text, with very long lines (4043), with no line terminators
Hash f2001508a1433d69f73ae313da8090c3
1ec17bee2988ff2a70745692a4b0bc9d8bf0ee8a
a390ae0f0d236c036d3fae3e793f1d1dfd2c7879ad2215f15c5cadcb7a0a7244
GET /sb/interstitial/games/hentai-heroes/main/8/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:28 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2023 16:13:00 GMT
etag: W/"6531558c-f3f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XbUBnLfFROSWTiY1CCmGPEUttXyttp5wCsoGkdt2bJ%2BDDxtog53fGCORVBOkB4m9VAcm6R8guwtV%2BXZYrUilxWdCKGavampPn0SZl4QtY9%2Bremd3oXQjLJEccmS6syHCHcbtEC4bvVt%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6e59dc063b8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css
200 OK 2.4 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/interstitial/games/hentai-heroes/main/8/css/style.css
IP
Requested by https://videoeggs.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (2534), with no line terminators
Hash 565a828cd09907e234598f78c4672ae1
bf30c71fa149d82e10c405cc2dd22d5415af3514
45caa990dabda92c96faa8da3208494707ca28e9fb1090a370b40da63ede95a1
GET /sb/interstitial/games/hentai-heroes/main/8/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videoeggs.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://videoeggs.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 06:29:28 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 16:12:56 GMT
etag: W/"65315588-958"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WpJ4E1xqw%2Fa6zycJ2ei854cs3nPRkb4d6rQWBfCItJJkMUXXRb0Rlbkcy5kE39ho8XSqD41zlZn7xnYN%2BVcnADGzITdPhLeZm1BKLFMEZh%2FNY94sQpdMv%2FEYSOsLx3yuBJTptBJOkiP9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831ab6e59dc263b8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
216.58.207.193
104.21.234.32
18.157.140.81