| swimtrunksroblox.blogspot.li/ |  216.58.207.193 | 302 Found | 203 B |
URL User Request GET HTTP/2swimtrunksroblox.blogspot.li/ IP216.58.207.193:443
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeHTML document, ASCII text Hash62614cefefd07a3e5a39860cc44361f8 60eb536f207b298a914cd9b3c0bb81e78efde259 6a8c7c85de582bea9ea81ee5237951da4d48fc80f91cdcc308c17a05474c51a0
GET / HTTP/1.1
Host: swimtrunksroblox.blogspot.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://swimtrunksroblox.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Wed, 24 Apr 2024 03:53:39 GMT
expires: Wed, 24 Apr 2024 03:53:39 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 203
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| swimtrunksroblox.blogspot.com/ | 216.58.207.193 | 200 OK | 48 kB |
URL User Request GET HTTP/2swimtrunksroblox.blogspot.com/ IP216.58.207.193:443
CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeHTML document, ASCII text, with very long lines (32023) Hash6a8202cffbd14b4df05f3a53e70cf286 02a13bcd4aed92289d51263e159b889f103e9fba 8a16932a292defe82d385e6a3c11d161d995e8ac5b5114b8b97b32b71e0a72a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: swimtrunksroblox.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 24 Apr 2024 03:53:39 GMT
date: Wed, 24 Apr 2024 03:53:39 GMT
cache-control: private, max-age=0
last-modified: Wed, 13 Mar 2024 00:03:24 GMT
etag: W/"a1479647a109e958cf6b0c8672c31459561c4f14c924def7cbae276dad27ca63"
x-robots-tag: all,noodp
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 48137
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| swimtrunksroblox.blogspot.com/js/cookienotice.js | 216.58.207.193 | 200 OK | 2.0 kB |
URL GET HTTP/3swimtrunksroblox.blogspot.com/js/cookienotice.js IP216.58.207.193:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/cookienotice.js HTTP/1.1
Host: swimtrunksroblox.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 24 Apr 2024 03:53:39 GMT
expires: Wed, 01 May 2024 03:53:39 GMT
cache-control: public, max-age=604800
last-modified: Tue, 23 Apr 2024 16:54:20 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uvSP0II53g684EEt3naMKKjWHF29IYfrmIaUj3tB6Wdf_SH_AlbWrde1v-55yZ4s_g2yNMk0XnCq89vq4oTAeT2mnU6uixHwjqhqAaZmWojQ | 142.250.74.97 | 404 Not Found | 1.2 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uvSP0II53g684EEt3naMKKjWHF29IYfrmIaUj3tB6Wdf_SH_AlbWrde1v-55yZ4s_g2yNMk0XnCq89vq4oTAeT2mnU6uixHwjqhqAaZmWojQ IP142.250.74.97:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hash9fe85dcb3fe48e26d43227a130d47e6a 918db738002dda86a37aca5f2bece573f89d8084 57eb79ec23f95554cfee51062e26a0e62c8b095b030bf7aa4068894370e1052e
GET /blogger_img_proxy/AEn0k_uvSP0II53g684EEt3naMKKjWHF29IYfrmIaUj3tB6Wdf_SH_AlbWrde1v-55yZ4s_g2yNMk0XnCq89vq4oTAeT2mnU6uixHwjqhqAaZmWojQ HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 03:53:40 GMT
server: fife
content-length: 1187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_siI0LRmMz9KaXu1vGbXfj8uvx1iLqMVmAvzHfEKoA3mC7voxAFKWyIRVQfj79jEiDlyD62rd9Joawzex9Pf-wJjqT7F2ktav5w_UgXN20dN04 | 142.250.74.97 | 200 OK | 6.0 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_siI0LRmMz9KaXu1vGbXfj8uvx1iLqMVmAvzHfEKoA3mC7voxAFKWyIRVQfj79jEiDlyD62rd9Joawzex9Pf-wJjqT7F2ktav5w_UgXN20dN04 IP142.250.74.97:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hashdedae207485a775f6fb3a2994f8c70b4 bfa5b47c151b85b758ed227492b030086aab254b 8965a3639dea09f1773cfba1a47e45c95bc0a864957ec165000fe13540d14aa2
GET /blogger_img_proxy/AEn0k_siI0LRmMz9KaXu1vGbXfj8uvx1iLqMVmAvzHfEKoA3mC7voxAFKWyIRVQfj79jEiDlyD62rd9Joawzex9Pf-wJjqT7F2ktav5w_UgXN20dN04 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Thu, 25 Apr 2024 03:53:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 03:53:40 GMT
server: fife
content-length: 5991
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 2.bp.blogspot.com/-lqUfhYdJt_U/U7gGFr_ojMI/AAAAAAAAAW0/yz6DrC0_A80/s1600/hiasan.png | 142.250.74.65 | 200 OK | 458 B |
URL GET HTTP/22.bp.blogspot.com/-lqUfhYdJt_U/U7gGFr_ojMI/AAAAAAAAAW0/yz6DrC0_A80/s1600/hiasan.png IP142.250.74.65:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 945 x 2, 8-bit/color RGBA, non-interlaced Hashd0336f5dc3e792db5fe04a2f3e5af2ae e89841dc6888efe150b5764d818893f5d2c3cb89 66a66cfaa0ee00543e6b6dc712c02f2030d53e6de2f0b231bb0bf3a85ed973b2
GET /-lqUfhYdJt_U/U7gGFr_ojMI/AAAAAAAAAW0/yz6DrC0_A80/s1600/hiasan.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="hiasan.png"
x-content-type-options: nosniff
server: fife
content-length: 458
x-xss-protection: 0
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Thu, 25 Apr 2024 03:53:40 GMT
cache-control: public, max-age=86400, no-transform
etag: "v16d"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sEi4XxzMICDL3BdOil3CnXPwsv8sotCnjAM_WUvzDtZtbKRPJ3okVh9ffxhL2asNrhyTnke_IhiOHZ7iSsC1t1PNojeChzCs4vup1SLKKIpA | 142.250.74.97 | 200 OK | 5.8 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sEi4XxzMICDL3BdOil3CnXPwsv8sotCnjAM_WUvzDtZtbKRPJ3okVh9ffxhL2asNrhyTnke_IhiOHZ7iSsC1t1PNojeChzCs4vup1SLKKIpA IP142.250.74.97:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hash7e38caf73978e5474a80468d206f7fa2 78ef2041e9f1cc4ce7f28a62efd0445d208741bf 917c2da66c300688c64dfb4021d0d2d541adbbc9f0fe7256bfef099c6c61735f
GET /blogger_img_proxy/AEn0k_sEi4XxzMICDL3BdOil3CnXPwsv8sotCnjAM_WUvzDtZtbKRPJ3okVh9ffxhL2asNrhyTnke_IhiOHZ7iSsC1t1PNojeChzCs4vup1SLKKIpA HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Thu, 25 Apr 2024 03:53:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 03:53:40 GMT
server: fife
content-length: 5793
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 2.bp.blogspot.com/-2UuJssaXZoo/Uh5oncBuPuI/AAAAAAAAADM/guoVUoRA86o/s1600/bodybg.jpg | 142.250.74.65 | 200 OK | 1.2 kB |
URL GET HTTP/22.bp.blogspot.com/-2UuJssaXZoo/Uh5oncBuPuI/AAAAAAAAADM/guoVUoRA86o/s1600/bodybg.jpg IP142.250.74.65:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 100x100, components 3 Hash757d44ff2a8ca87668e04dc5fc9222ef cb0e7703b47e6d76d1e18abea58041931bd091c2 26b43256b21835c5daf7d1ac36898311eeb04b148c3529190d9d1f9f57a41f96
GET /-2UuJssaXZoo/Uh5oncBuPuI/AAAAAAAAADM/guoVUoRA86o/s1600/bodybg.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="bodybg.jpg"
x-content-type-options: nosniff
server: fife
content-length: 1210
x-xss-protection: 0
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Thu, 25 Apr 2024 03:53:40 GMT
cache-control: public, max-age=86400, no-transform
etag: "v34"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4.bp.blogspot.com/-9cg5-K_jtuc/Uh5opT3mJvI/AAAAAAAAADc/5FnyCMV0L-8/s1600/search.png | 142.250.74.65 | 200 OK | 507 B |
URL GET HTTP/24.bp.blogspot.com/-9cg5-K_jtuc/Uh5opT3mJvI/AAAAAAAAADc/5FnyCMV0L-8/s1600/search.png IP142.250.74.65:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typePNG image data, 14 x 13, 8-bit/color RGB, non-interlaced Hash91a1b24271947535ae69265e8a737916 8414a2b698425a3e5971a575b6fac415e0a6d8ff 46fe89f3b2542f92e09f8ec274f9a1eda5ee75abdc388357abd3176f4474073a
GET /-9cg5-K_jtuc/Uh5opT3mJvI/AAAAAAAAADc/5FnyCMV0L-8/s1600/search.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="search.png"
x-content-type-options: nosniff
server: fife
content-length: 507
x-xss-protection: 0
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Thu, 25 Apr 2024 03:53:40 GMT
cache-control: public, max-age=86400, no-transform
etag: "v38"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/R2nKScKIGxQ/default.jpg | 142.250.74.54 | 200 OK | 3.1 kB |
URL GET HTTP/2i.ytimg.com/vi/R2nKScKIGxQ/default.jpg IP142.250.74.54:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hashb2a8ec7f2554f7814a08f47754dae618 2fa863eec2a58f2856408e27f34e90f4f63574ed 0f6482f90144b5d415bae61f3fdc8104ddd1abc4666b578e9f32b79954eb0e0d
GET /vi/R2nKScKIGxQ/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 3132
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Wed, 24 Apr 2024 05:53:40 GMT
cache-control: public, max-age=7200
etag: "1593701828"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/_O9o37IEHFw/default.jpg | 142.250.74.54 | 200 OK | 5.2 kB |
URL GET HTTP/2i.ytimg.com/vi/_O9o37IEHFw/default.jpg IP142.250.74.54:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hashc60cf0212801ec81b2a8fb7b95b8aed7 9ab3ebd9af7e43bbb4965331f0da3ceee7415386 864cd575a06d9b8064687b21cac065246a0903eccbe38f885f83801c88e32dfb
GET /vi/_O9o37IEHFw/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 5199
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Wed, 24 Apr 2024 05:53:40 GMT
cache-control: public, max-age=7200
etag: "1545625564"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/l2u-kOR-EOw/default.jpg | 142.250.74.54 | 404 Not Found | 1.1 kB |
URL GET HTTP/2i.ytimg.com/vi/l2u-kOR-EOw/default.jpg IP142.250.74.54:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hashe2ddfee11ae7edcae257da47f3a78a70 6e902fa6302eb30cd204579bca6a59b37233e262 20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/l2u-kOR-EOw/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
vary: Origin
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: image/jpeg
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Wed, 24 Apr 2024 03:54:10 GMT
cache-control: public, max-age=30
x-content-type-options: nosniff
server: sffe
content-length: 1097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/BLpyOmKywTY/default.jpg | 142.250.74.54 | 200 OK | 4.8 kB |
URL GET HTTP/2i.ytimg.com/vi/BLpyOmKywTY/default.jpg IP142.250.74.54:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hash478480088241f8d73fbaa4847c7712a1 c65a8aaa80f2de63afe743f5e538bc99c8e42f28 c8b5681535ac21c97838f74600c5867622cb02613224233c517618a7d7073532
GET /vi/BLpyOmKywTY/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 4762
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Wed, 24 Apr 2024 05:53:40 GMT
cache-control: public, max-age=7200
etag: "1469627687"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/LguiosqfE3I/default.jpg | 142.250.74.54 | 200 OK | 3.2 kB |
URL GET HTTP/2i.ytimg.com/vi/LguiosqfE3I/default.jpg IP142.250.74.54:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hashb84ad33e6fb81de81fa09d244a882baf f14c2bea434d190fd680dc40638e0a791e1f4aac a865b532d1acc66d170868cb92605602cb83a4c4cc9eafe3efbb730f390092b3
GET /vi/LguiosqfE3I/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 3155
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Wed, 24 Apr 2024 05:53:40 GMT
cache-control: public, max-age=7200
etag: "1627166928"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/qaBYyUlQSzs/default.jpg | 142.250.74.54 | 200 OK | 4.6 kB |
URL GET HTTP/2i.ytimg.com/vi/qaBYyUlQSzs/default.jpg IP142.250.74.54:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hash6b1aea9b1b3394e46f53c6fb417f810d 377c90703263b9d1472399f58b434cd1e9dc1000 0b812d4dcb8d57f3faade5406cba1cae29536ed71637427ff8659107e333a5ae
GET /vi/qaBYyUlQSzs/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 4644
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Wed, 24 Apr 2024 05:53:40 GMT
cache-control: public, max-age=7200
etag: "1420064965"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sajohyA6Bz5uZ8cc3jdmqqPFjtr-vakQPia4yAJISQ9alg98JTvfGseJBAgaBHwEmV7ze3eOG0pi6df5hqMlEjGAsZiiudijIEBRyTq2d-m-U | 142.250.74.97 | 200 OK | 7.6 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sajohyA6Bz5uZ8cc3jdmqqPFjtr-vakQPia4yAJISQ9alg98JTvfGseJBAgaBHwEmV7ze3eOG0pi6df5hqMlEjGAsZiiudijIEBRyTq2d-m-U IP142.250.74.97:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hash946fbfa94299543bac306f176889f55f 927eb9af60664f00f61308f89eb88273de14f22c bfe9ed1a626f24365aae0ee3511e8e4be7f05d8b137a84918ca4a74e8d61b16f
GET /blogger_img_proxy/AEn0k_sajohyA6Bz5uZ8cc3jdmqqPFjtr-vakQPia4yAJISQ9alg98JTvfGseJBAgaBHwEmV7ze3eOG0pi6df5hqMlEjGAsZiiudijIEBRyTq2d-m-U HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Thu, 25 Apr 2024 03:53:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 03:53:40 GMT
server: fife
content-length: 7616
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/blogger_img_proxy/AEn0k_ub5COntka2kkANtsox1Iv27CNMPPnaF7ZM2j94qLwapce2nAcEefRNXpIvoNZN1kdqIBM2vDey8yNV8YItpmUcArZHYIp_KwnwO2w9sdFJUxw | 142.250.74.97 | 200 OK | 7.3 kB |
URL GET HTTP/2lh3.googleusercontent.com/blogger_img_proxy/AEn0k_ub5COntka2kkANtsox1Iv27CNMPPnaF7ZM2j94qLwapce2nAcEefRNXpIvoNZN1kdqIBM2vDey8yNV8YItpmUcArZHYIp_KwnwO2w9sdFJUxw IP142.250.74.97:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hash3c07e0e5fcfb6476989a0b382f51f396 09aa432cb1efe1b562947a9757793f50eb105571 70f931312ed8eb22e82c0f0e9d0ee03afb6f28943fb28c66812da00f62f9795c
GET /blogger_img_proxy/AEn0k_ub5COntka2kkANtsox1Iv27CNMPPnaF7ZM2j94qLwapce2nAcEefRNXpIvoNZN1kdqIBM2vDey8yNV8YItpmUcArZHYIp_KwnwO2w9sdFJUxw HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Thu, 25 Apr 2024 03:53:40 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 24 Apr 2024 03:53:40 GMT
server: fife
content-length: 7342
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/1dab2HdQJXo/default.jpg | 142.250.74.54 | 200 OK | 4.0 kB |
URL GET HTTP/2i.ytimg.com/vi/1dab2HdQJXo/default.jpg IP142.250.74.54:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3 Hash94b74973d75b9c9b20eb696f6413385f 0d1e622431732268c62409192f5c94a265a50f99 925ae328997c0070bac92ae46d7b02550ae03fbaf3a3fbf69f150c24c04d7870
GET /vi/1dab2HdQJXo/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 4004
date: Wed, 24 Apr 2024 03:53:40 GMT
expires: Wed, 24 Apr 2024 05:53:40 GMT
cache-control: public, max-age=7200
etag: "1484009814"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/848617736-widgets.js | 142.250.74.41 | 200 OK | 52 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/848617736-widgets.js IP142.250.74.41:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash70285871f1f1d8f776a0c04a61d21d68 2c140498af2f9a4a8088950d16f675745e556a14 5cc556f7a1301c1c932b1b1f696cbfbc5e131209812b9573204f69b305f05b6c
GET /static/v1/widgets/848617736-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51485
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 01:57:58 GMT
expires: Tue, 22 Apr 2025 01:57:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 00:50:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 179742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/img/logo-16.png | 142.250.74.41 | 200 OK | 279 B |
URL GET HTTP/2www.blogger.com/img/logo-16.png IP142.250.74.41:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash5ffecab6c722bb0adc3fce8d83b27993 0e59b05d3da526e82bb4f5d47c5d94e2a318dafb cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 279
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 11:58:51 GMT
expires: Thu, 25 Apr 2024 11:58:51 GMT
cache-control: public, max-age=604800
last-modified: Thu, 18 Apr 2024 04:58:44 GMT
content-type: image/png
age: 489289
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.css | 142.250.74.41 | 200 OK | 6.8 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.css IP142.250.74.41:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com Fingerprint17:41:C7:D0:1D:55:29:41:DB:6D:65:5F:4E:63:97:50:32:7D:E1:60 ValidityMon, 18 Mar 2024 19:33:57 GMT - Mon, 10 Jun 2024 19:33:56 GMT
File typeASCII text, with very long lines (31610) Hash1262fb3b6c8a66bb33af5bb8de15a59a 7ce924780c5287c5dd8dbeae4e712775ea1f83f9 d539a910089008f073b426d44a496f1952ba01b9ff018425c18d21bea42aa128
GET /static/v1/widgets/2549344219-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6822
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 19:34:05 GMT
expires: Fri, 18 Apr 2025 19:34:05 GMT
cache-control: public, max-age=31536000
age: 461975
last-modified: Fri, 12 Jun 2020 07:20:00 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| swimtrunksroblox.blogspot.com/favicon.ico | 216.58.207.193 | 200 OK | 412 B |
URL GET HTTP/3swimtrunksroblox.blogspot.com/favicon.ico IP216.58.207.193:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeMS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel Hash59a0c7b6e4848ccdabcea0636efda02b 30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340 a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: swimtrunksroblox.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Cookie: referrer=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Wed, 24 Apr 2024 03:53:40 GMT
date: Wed, 24 Apr 2024 03:53:40 GMT
cache-control: private, max-age=86400
last-modified: Wed, 13 Mar 2024 00:03:24 GMT
etag: W/"a1479647a109e958cf6b0c8672c31459561c4f14c924def7cbae276dad27ca63"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.min.css |  104.18.11.207 | 200 OK | 22 kB |
URL GET HTTP/2netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.min.css IP104.18.11.207:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (668) Hash7fbe76cdac6093784895bb4989203e5a 68e2602c02181b61eebc9e1dccb0a38377fa5df7 326b994ec59c7334f52211fbd5aa909a36b98d1717cb798bfcd3af8d4cbdb6ca
GET /font-awesome/3.2.1/css/font-awesome.min.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:53:40 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7fbe76cdac6093784895bb4989203e5a"
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 08/20/2022 07:32:03
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 874
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 2845ef75bc396fde7c0a684dc361cce3
cdn-cache: HIT
cf-cache-status: HIT
age: 3363079
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 879325c91c4d5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mtevor.com/cluster-v2/roblox-abx.js | 104.21.21.167 | 200 OK | 2.7 kB |
URL GET HTTP/2mtevor.com/cluster-v2/roblox-abx.js IP104.21.21.167:443
Requested byhttps://swimtrunksroblox.blogspot.com/ CertificateIssuerGoogle Trust Services LLC Subjectmtevor.com Fingerprint2E:17:85:8E:88:E4:A3:D2:9E:9D:09:05:67:DD:C6:F3:67:50:17:46 ValidityTue, 16 Apr 2024 18:42:57 GMT - Mon, 15 Jul 2024 18:42:56 GMT
File typeJavaScript source, ASCII text, with very long lines (2812), with no line terminators Hashca50690f2e26c0cbcfe221085c6de982 171ee35fea25d7f802fb7ea762f322577b030541 a8624c871def586434dca1a38d4eea1cfb6aaa93587fb12ae37598dd29aa5c6a
GET /cluster-v2/roblox-abx.js HTTP/1.1
Host: mtevor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://swimtrunksroblox.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:53:39 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3246
last-modified: Wed, 24 Apr 2024 02:41:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AUtS5MFHoQNUlCywx7hOAPmgp93uaeCQH7VuoMWFRTo%2FK8J0dNNvLg0r8Z1CKlmJVFiymg4iGPwfaPTglThBxRLMWI0pF6pW5b1lB3J1LU72Qqj7mM1krSDIINH4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879325c8eaaf569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|