Report - filedot.top/5xvdpqhna8sb/CandyDoll_Video

Report Overview

Submitted URL
filedot.top/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
IP
172.67.176.192
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-11 03:49:23
Access
public
Website Title
Download Candy Doll Video Promotion07 rar
Final URL
filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
filedot.top	unknown	unknown	No data	No data	510 B	870 B	104.21.17.123
filedot.to	unknown	unknown	No data	No data	10 kB	1.6 MB	104.21.37.7
maxcdn.bootstrapcdn.com	724	unknown	No data	No data	1.4 kB	69 kB	104.18.10.207
use.fontawesome.com	942	unknown	No data	No data	865 B	16 kB	172.67.142.245

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-11	medium	filedot.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	filedot.to/js/jquery.paging.js	19 kB	2023-03-07	2024-06-04
Pretty URL filedot.to/js/jquery.paging.js IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:22 Last Seen2024-06-04 08:34:35 Times Seen3399 Hash d7a2c1c7af2a004a6d68e1e55b1cfb46 7fd6daa7076c30381880519ad06ef5639b19ee28 c8ecfe747c979fbd87624913200a9237343679923b495885bced089b80fc84f6 Loading...

	filedot.to/js/jquery.cookie.js	3.1 kB	2023-03-07	2024-06-04
Pretty URL filedot.to/js/jquery.cookie.js IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:22 Last Seen2024-06-04 08:34:35 Times Seen2794 Hash ff14e4812b7f512e620b1ad35542bcfc c40c5f777e7a2f63e7b731b3cdb1fe9c806b23ae c4fb91befcf134b81ecfa1c586e1f9d6426c8f4fc1f6c130ac1fddb49ab5df96 Loading...

	filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar	261 B	2023-03-07	2024-06-04
Pretty URL filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:23:22 Last Seen2024-06-04 08:34:34 Times Seen1500 Hash d04584334d251ef8ea053da53b683194 dc0092f79b3e040a93d5d94951ff9eb326960c99 6f42d96dcea6cd1193084d86f60b8629162023b44cd213d41fc63bedc177fbb8 Loading...

	filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar	666 B	2023-03-07	2024-06-04
Pretty URL filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:23:22 Last Seen2024-06-04 08:34:34 Times Seen1503 Hash b43b98ae6d81d1bcc31bf4d398af2770 084014353ba5a80e35a7144b4c4ad8abbcdf6eac 6df937222477e1219205ce19b008280da54e60cdf8c3a5749369a66224a82faa Loading...

	filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar	434 B	2023-03-07	2024-05-23
Pretty URL filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:27:55 Last Seen2024-05-23 09:52:15 Times Seen172 Hash 5646a881ae93595b7f2114dc408a2f38 521be2b5e6010a281669f86ba81936f090ee5714 788256a33c0b503691394083771e5bbfe09151e6635d09a84e711d602e5aa8b8 Loading...

	filedot.to/5xvdpqhna8sb/sandbox%20eval%20code	148 B	2023-04-11	2024-06-04
Pretty URL filedot.to/5xvdpqhna8sb/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:38:13 Last Seen2024-06-04 15:26:21 Times Seen21628 Hash 64fe6fe97a487c82c5be70158b71aa87 b93ba17d1796e404b0ca1ef6f262bbbb0c427366 3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2 Loading...

	ssl.google-analytics.com/ga.js	3.4 kB	2023-04-11	2024-06-04
Pretty URL ssl.google-analytics.com/ga.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:38:13 Last Seen2024-06-04 15:26:21 Times Seen21569 Hash b6f6d7efd99960ab916ee096e061f2e7 e21f1b5b99444ed4e4f62308cf616edd93ee852e bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4 Loading...

	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	37 kB	2023-03-07	2024-06-04
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-06-04 14:22:20 Times Seen58084 Hash 5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef Loading...

	filedot.to/js/jquery-1.9.1.min.js	93 kB	2023-03-07	2024-06-04
Pretty URL filedot.to/js/jquery-1.9.1.min.js IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-06-04 15:28:07 Times Seen25383 Hash 397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4 Loading...

	filedot.to/js/paging.js	1.9 kB	2023-03-07	2024-06-02
Pretty URL filedot.to/js/paging.js IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:22 Last Seen2024-06-02 20:27:37 Times Seen1379 Hash 1608d25b37c81174c1bc9de9472499f9 d0bb079b79481ec4d33552750ea9bf5105a466ee c2ad2c17f6392a62ed746aa7c386e25e8570bd6e97ec0bb1718ce8465219915a Loading...

	filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar	174 B	2023-03-07	2024-06-03
Pretty URL filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar IP 104.21.37.7 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:23:22 Last Seen2024-06-03 00:49:59 Times Seen1343 Hash cb943eb9432bf54d0289b5b025bef54f 59126b245742b44378dbfa4c3d11bd852a4d716b a40ee726019c571babd88bcfc2265bb8030e1b476452ed3ccda139deebefee94 Loading...

HTTP Transactions (27)

URL IP Response Size

filedot.top/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar

104.21.17.123

301 Moved Permanently

167 B

URL User Request GET HTTP/2
filedot.top/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
IP
104.21.17.123:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.top
Fingerprint86:C9:29:F3:22:0D:3F:EB:33:F5:39:FA:5D:C6:66:BA:D0:D6:62:89
ValidityTue, 09 Apr 2024 14:45:37 GMT - Mon, 08 Jul 2024 14:45:36 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
167 B (167 bytes)
Hash
0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar HTTP/1.1
Host: filedot.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Sat, 11 May 2024 02:12:56 GMT
content-type: text/html
content-length: 167
location: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
cache-control: max-age=3600
expires: Sat, 11 May 2024 03:12:56 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I8yv156wEFlWNJhMX33g0hnCsPCPQGOr%2FUWkdDBaaRDk8%2BQLs6EBcK%2Fzt6nH61UTcPNBdu1IfYnfFgxs6YFwcdztp3M2Obifqf3ngps1PLji1kAz2XNrYpuXIhyJSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea59e7b15b527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

filedot.to/images/yep.gif

104.21.37.7

200 OK

408 B

URL GET HTTP/3
filedot.to/images/yep.gif
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
GIF image data, version 89a, 24 x 24
Size
408 B (408 bytes)
Hash
60dd34ff0e1e1fc3deffd115add8ffc9
efd3360ae5ca3b88bf6139065cd59e8748421e47
7e832cdca12c463503367965ea1e8dc5feb140f8a0a955396712fd20f595c6a8

HTTP Headers

GET /images/yep.gif HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/gif
content-length: 408
last-modified: Thu, 02 Jul 2020 18:22:00 GMT
etag: "198-5a9797bff0200"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1922
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aIs25LovcnseBdy9ydbiMHOUcBJDSSQlSeeql8hagGf12GBnypY5p0B7W9G35X%2F43bOhgS%2B42dnQoSm1m9MJkGt4pCk7B2zKMGtguSPFjlcDtTQXcgIAl0PRFrQa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf5b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/download.png

104.21.37.7

200 OK

44 kB

URL GET HTTP/3
filedot.to/images_mega/download.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 298 x 209, 8-bit/color RGBA, non-interlaced
Size
44 kB (44120 bytes)
Hash
77cb24fd0cf7b43b86f1957ed3e2528d
09e5ee0ad720924b9730bb68825f0a7d7ce616b7
c1ca60fed0c658c5727ab06669d7bf41cd13f7fc4fd6b03bfab0051edb020470

HTTP Headers

GET /images_mega/download.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 44120
last-modified: Sat, 04 Jul 2020 07:12:35 GMT
etag: "ac58-5a9985da87ec0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1922
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hUixLshRG7C89YyotNeMTlXYsY1lyYmDFn68UhuJYNfMujsT6gnzn%2BDkRk3GlMlqUI8%2Fc5esRu1D8GBC980gy7kdq6tS1ASmtRU7u9p%2Bc78I7acinPQwJyHtQr8v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf3b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/ico_fb.png

104.21.37.7

200 OK

766 B

URL GET HTTP/3
filedot.to/images_mega/ico_fb.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
Size
766 B (766 bytes)
Hash
817db53c3b16ace0a8388e8608ba86fa
eee7d7a4cd488a12a0ec2295e8466503d0845eaf
2c97ec3dc2189de72fa87c60c05e008879a6c7977c35877e2e330db3d968f4f4

HTTP Headers

GET /images_mega/ico_fb.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 766
last-modified: Sat, 04 Jul 2020 07:12:41 GMT
etag: "2fe-5a9985e040c40"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=004m48dDPX3lczbgHWlyIgIYUyKP7v0O4Vhsih3ECWb%2BM4UU5VHIsV%2FxK%2Fz3QuUxPtrPiTxjr7HgurrXe%2B8m8QC7hYei1sxG0F9cvy%2BCMcZxPm%2F07ujWwybvhF9r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf6b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/ico_tr.png

104.21.37.7

200 OK

667 B

URL GET HTTP/3
filedot.to/images_mega/ico_tr.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
Size
667 B (667 bytes)
Hash
a11f7eddec49169c78684535e0c25ec2
52d0785e3fd43b13bae943ee9374759fbe6649ce
12e0c5b5358e70c40eb56b09c6a9cf78b550167df112b51f56bd13ea8ddaa335

HTTP Headers

GET /images_mega/ico_tr.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 667
last-modified: Sat, 04 Jul 2020 07:12:42 GMT
etag: "29b-5a9985e134e80"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GazrzfQDCwmVUlg8VTxbcgTwlfhxnssM%2BHjXUphs5DBa%2Bi7brMefctdAsAUmM5dUOxrDa9tPJvhZmwU%2BDQEqPfautQGQp%2BapKtw1lStonx6%2BVsXr1IBvTox%2BDgwU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf7b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/ico_gp.png

104.21.37.7

200 OK

728 B

URL GET HTTP/3
filedot.to/images_mega/ico_gp.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
Size
728 B (728 bytes)
Hash
110fa66f1580e71d4ab51e45a8b615ff
222db487c7021f50c19892c479b0fc8fb1df0b9e
4b367f45eb40738c4fbdbd3bc4831d2e0fda1413291a06362a5200912481d8dd

HTTP Headers

GET /images_mega/ico_gp.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 728
last-modified: Sat, 04 Jul 2020 07:12:41 GMT
etag: "2d8-5a9985e040c40"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bp66oIIRMMgp%2FfkKnibtZiWJQnOpplBTcUK4ExOEohgoqQpedABrLq6c1dRMM%2B36q0JAy5Ecq2TGA5w9UJgSJO8IyuihqVwsXnROdQaZucEtnwqvCZoMyiVsgaMI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf8b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/map.png

104.21.37.7

200 OK

7.7 kB

URL GET HTTP/3
filedot.to/images_mega/map.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 93 x 68, 8-bit/color RGBA, non-interlaced
Size
7.7 kB (7672 bytes)
Hash
474c77b028df382c9717ae11d0632978
a9c543f54a8adaefae2cb173b8cf756401836785
a81465f84e6d75b6c4ce6210dde1b5f714ea3f2d8ddb9e788ef0459c722cdfe2

HTTP Headers

GET /images_mega/map.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 7672
last-modified: Sat, 04 Jul 2020 07:12:45 GMT
etag: "1df8-5a9985e411540"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZOEFYzAgyctBKsKT3JBayjw10Zt3BnLmQNUpEAs6yC30CwhJRxU4APx%2FfixvLsuqsGw5DcmGW5VQg6P7Z7TkCVrrZxpQVpusrpyGTQlfxc3ROWSHaEq6e6aOWnVb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf9b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/bg.png

104.21.37.7

200 OK

537 kB

URL GET HTTP/3
filedot.to/images_mega/bg.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 1920 x 1000, 8-bit/color RGB, non-interlaced
Size
537 kB (537238 bytes)
Hash
3f7597ed9c824749437496ee3fb183e0
66a1331f61f3489a69e4faf4ce5fc2f46bae6877
8c8cf09d60f81b59275d6fc204804f04a8ca4b4c76cfd274bd3ea3cfeb8261e2

HTTP Headers

GET /images_mega/bg.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/css_mega/style_mega.css
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 537238
last-modified: Sat, 04 Jul 2020 07:12:31 GMT
etag: "83296-5a9985d6b75c0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 711
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NhgIGtXwgq6U0PbYeceQfSTZGtwkf2cVKhR%2FmPKQXkbiVnLD5TdpqVPJRj4ybm4%2BPLh2ovmDlm1YY3AdP9nEm4P4QI9BPqU%2B8EXCyqKQ9Uy0cDaRb3TpR%2FzOLmrE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a5adcdb527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/menu_bk.png

104.21.37.7

200 OK

339 B

URL GET HTTP/3
filedot.to/images_mega/menu_bk.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 91 x 29, 8-bit/color RGBA, non-interlaced
Size
339 B (339 bytes)
Hash
a5bb3c0686c08855a2bd451fd53bcce3
f3d0a27b71ba1fcf030423748b8f30649fcc8fce
83126dfd60c8c3648878a9bd1fd5dc6a1155c56f81458ce4c709c9aa760d7c53

HTTP Headers

GET /images_mega/menu_bk.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/css_mega/style_mega.css
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 339
last-modified: Sat, 04 Jul 2020 07:12:45 GMT
etag: "153-5a9985e411540"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1922
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E3f4mXFA8M%2Fk7%2BLRbRAHnootwoLcbd6oX4XqC3iIkXhKY6hAwBKUQJ%2FTwGkCC5kwWHapB8IXF6NxR0QhJ62Y020z5LWsqsj8umueVsfDU8czNEA5bYkuxBqMS3nO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a5ee1ab527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/down_btn.png

104.21.37.7

200 OK

5.6 kB

URL GET HTTP/3
filedot.to/images_mega/down_btn.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 444 x 50, 8-bit/color RGB, non-interlaced
Size
5.6 kB (5633 bytes)
Hash
f67f14c96f31af2bfa0825356cfcd7dc
497f08808d7bb0881f75c4db0592f61d1ba12885
547fe71021fa822c20a231e032e9c48f094344ee33b75388dc0e56b6af1b58fa

HTTP Headers

GET /images_mega/down_btn.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/css_mega/style_mega.css
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: image/png
content-length: 5633
last-modified: Sat, 04 Jul 2020 07:12:37 GMT
etag: "1601-5a9985dc70340"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3828
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ywjuJHZuSDcApBMohc8CggyQt0wqEjJa08tFgFPDRq57DNhbGxpzkhdI2KaxF4%2Bd2ZrhNX3Tu%2BP6qtmAG%2BTzDoqgs0pXD4U3EwNpXtXi%2ByYziv5yQYxViOvd87eY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a5fe22b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/mega_fonts/calibri.woff

104.21.37.7

200 OK

812 kB

URL GET HTTP/3
filedot.to/mega_fonts/calibri.woff
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
Web Open Font Format, CFF, length 811752, version 0.0
Size
812 kB (811752 bytes)
Hash
c1e5b33aaf495b2812968c7f0274877e
6caa72623241c4558a1ba9871c2bb53c49b1bf3c
042083e72bc67e127b70b4495f3435998481c6e6bb2407dd602958d5ab159046

HTTP Headers

GET /mega_fonts/calibri.woff HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/css_mega/style_mega.css
Cookie: aff=24546
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: application/font-woff
content-length: 811752
last-modified: Sat, 04 Jul 2020 07:13:16 GMT
etag: "c62e8-5a998601a1b00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2850
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fRBAtM05JGXhdmqYyDaPF4zp7vqzLwzPcbDTwdW5LKLFdmfifiYvjluuCuo%2FTPJlJy2Ve3kza0mVujnj3VoBXM0YP%2FNWMPGFElfoWmjDAZKqgyDXeAPaE2MxZRbn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a60e2bb527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/logo.png

104.21.37.7

200 OK

4.8 kB

URL GET HTTP/3
filedot.to/images_mega/logo.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 128 x 26, 8-bit/color RGBA, non-interlaced
Size
4.8 kB (4760 bytes)
Hash
eca4e0ef6629a0e9349d3b6b936ae4fe
8f5381c70b7ae162d4d13a9ecf513a3996915a06
7925c3c7cb70e85319868d7b81eb468a54edc83ab7876f26872ae8aca6340387

HTTP Headers

GET /images_mega/logo.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/css_mega/style_mega.css
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:58 GMT
content-type: image/png
content-length: 4760
last-modified: Sat, 04 Jul 2020 07:43:40 GMT
etag: "1298-5a998ccd22300"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AASGnBcoiOo%2Fmze1%2F6VrsKG0awN1%2B%2BeGX5oJjBNqChrbOwaY%2FPyOA7RW1R5npk0%2BXD%2F8n6H5Bm0DFIpOFh7STf8LausnGjvit2t9QfBB91oltPVDTT9IfVmu5fkx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a5ee19b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/header_bk.png

104.21.37.7

200 OK

217 B

URL GET HTTP/3
filedot.to/images_mega/header_bk.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 2 x 55, 8-bit/color RGBA, non-interlaced
Size
217 B (217 bytes)
Hash
1f09dbdaae65627996a6b24023679abd
ccfaf090bdda14583a7836142fcfffaebe25e392
45e7d663f8967305529db7dd70fcef9d53861e27925fce24e617cb0da414191f

HTTP Headers

GET /images_mega/header_bk.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/css_mega/style_mega.css
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:58 GMT
content-type: image/png
content-length: 217
last-modified: Sat, 04 Jul 2020 07:12:40 GMT
etag: "d9-5a9985df4ca00"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j0XQlG%2FCyPdggZ1LWt6siRYuEzojsuULjy0H48CfBLtKmivhr5d2ohnI9LGrddRy8x3PvKpOZps5hmLGBIoDoMacrPEjpIl%2FFwitIBqMl6UQ5hOGQYiNVXi%2BhU0Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a5ee16b527-OSL
alt-svc: h3=":443"; ma=86400

filedot.to/images_mega/lang_bk.png

104.21.37.7

200 OK

1.2 kB

URL GET HTTP/3
filedot.to/images_mega/lang_bk.png
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
PNG image data, 100 x 29, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1154 bytes)
Hash
75e29a4ed6723ba4831e51d7494715cd
31e25ec5180003d41f8b6eb5b1b76d3740fe81a6
bd4467b0488082ac60f306a5dfc1a7527244a751db673ac2c8a01c0e7ad4e7d4

HTTP Headers

GET /images_mega/lang_bk.png HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/css_mega/style_mega.css
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:58 GMT
content-type: image/png
content-length: 1154
last-modified: Sat, 04 Jul 2020 07:12:43 GMT
etag: "482-5a9985e2290c0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F607nXwVQyP4ifBitu18peKd8kdbXdpU015BV7P4fZRMwH772IGPEfp065DVkFz47aX%2FzzlthGcBdKv0GbbP%2Fbll5rWbux1%2BBgIJBEZs51Kn7DZIbvJPHuxZt1gU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a5ee1eb527-OSL
alt-svc: h3=":443"; ma=86400

maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css

104.18.10.207

200 OK

5.9 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (23577)
Size
5.9 kB (5873 bytes)
Hash
04425bbdc6243fc6e54bf8984fe50330
8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5
541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd

HTTP Headers

GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:08:57
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e6a55b08fe5091f45c9e99ce9e9f98c2
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 885669
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 881ea5a3ee36b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.1.1/css/all.css

172.67.142.245

200 OK

10 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.1.1/css/all.css
IP
172.67.142.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (45538)
Size
10 kB (10429 bytes)
Hash
597b70b2ce6b1483f72526c906918fe9
cdb01c449b472defd676e51a50074f5cf3f6076c
d98121a51ed3f911f519cf42be28225dc26b4c9d61cfab0a580118e5c3447463

HTTP Headers

GET /releases/v5.1.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: text/css
cache-control: max-age=31556926
etag: W/"597b70b2ce6b1483f72526c906918fe9"
last-modified: Fri, 22 Sep 2023 01:44:26 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 891258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dTTOftuqeVCByQiTKDfHeGhlrzRgWx11xod7OuuFiAy%2F5zJQ%2F%2BBQipXE9C3BpzeIATU%2BJjxQ7j7cCUBedH8eHLWlhqxfWgyUioWaBLPuKWXzFgtwquZ0uFAD0MWrgbt%2F0dQ%2F6tcj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881ea5a48aae569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.1.1/css/v4-shims.css

172.67.142.245

200 OK

4.7 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.1.1/css/v4-shims.css
IP
172.67.142.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (26508)
Size
4.7 kB (4674 bytes)
Hash
01727b5056f65c2ac938f5db4e552b10
a44b4f2f268d7fdd5fa700d8f1b71f6a85fb7c39
1458c65cd927c3e5bf35667665280eaaf849eef09ed217983334c5c8a78f6759

HTTP Headers

GET /releases/v5.1.1/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: text/css
cache-control: max-age=31556926
etag: W/"01727b5056f65c2ac938f5db4e552b10"
last-modified: Fri, 22 Sep 2023 01:44:26 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 885637
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mU7oacipmpK8%2BjnQwRBDtWbB2HaADvJaYC2y%2B15hpfFGJWQBfBntHAqJj2E2Qvt5DLukMPtBadaq2%2FXMiESTdeCN65Mpm3276u1c%2B95mebXygCbLoG8rEJRGzfDfsoVPWvTmVMA4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881ea5a49ab0569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

filedot.to/js/jquery-1.9.1.min.js

104.21.37.7

200 OK

39 kB

URL GET HTTP/3
filedot.to/js/jquery-1.9.1.min.js
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
JavaScript source, ASCII text, with very long lines (32089)
Size
39 kB (38743 bytes)
Hash
397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4

HTTP Headers

GET /js/jquery-1.9.1.min.js HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: application/javascript
last-modified: Thu, 02 Jul 2020 18:19:10 GMT
etag: W/"169d5-5a97971dd0380"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2851
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BNIBJnBUDk%2FU4Ze68IfFc1YUCa7PeCCe7KeNrHzLk53B1iATBArq2w%2FIHz80ziW8FdeF%2FBYTlmSfqk8XJHAO6oNg9XJ0Xt85C3AsbUKmDikOy52Wvnq8dmSjVyv%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a38ce9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

filedot.to/5xvdpqhna8sb/favicon.ico

104.21.37.7

200 OK

13 kB

URL GET HTTP/3
filedot.to/5xvdpqhna8sb/favicon.ico
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
HTML document, ASCII text
Size
13 kB (13027 bytes)
Hash
c9de2c86b1dd297836bf822332fcd0a3
3a244284709154b3364e2869b9990e3690d707c9
99f0204e9b6306cb94e3090cc1118cbcf016bb78cd740e9dd2148fefb97434e8

HTTP Headers

GET /5xvdpqhna8sb/favicon.ico HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:58 GMT
content-type: text/html; charset=UTF-8
expires: Fri, 10 May 2024 02:12:58 GMT
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 09 May 2024 18:25:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QxJTfaUBUWIOTYHFpGJ4kgG%2FIHSfiE5VlFmVwt3Gs8FHvVc71tbb%2FZivHru2uSUi%2BiC%2Fbi3PsM0iQDjmSy8Nu%2BFkqtBWXRLQt4j3eAKgvD3BdPfO2zZYV9COxIHy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a7aed8b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

filedot.to/css/bootstrap.css

104.21.37.7

200 OK

33 kB

URL GET HTTP/3
filedot.to/css/bootstrap.css
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
ASCII text, with very long lines (540)
Size
33 kB (33347 bytes)
Hash
de29a2a7f8fdd32726d8e70fa3037379
45686004dcb4a332ffd98cca3ba7979bf1a02aa7
0dd311ba439876efdb560247faf414416adb4683c5184c817c5c4ff1137e8a9a

HTTP Headers

GET /css/bootstrap.css HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: text/css
last-modified: Thu, 02 Jul 2020 18:20:13 GMT
etag: W/"2335b-5a979759e5140"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2qmf%2Bu9cI5aGWvgi57cJ%2FLIYTdAFYLEC%2BJd0hpQNArb0TO1ntpCIdVuPUL7IG3jHfW%2BHZNKhQCBiddeQVPwHWWsM17WLukwK5lkUzZvsE%2FTweCFQkOkfulYAfxph"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a38ceab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

filedot.to/js/jquery.cookie.js

104.21.37.7

200 OK

3.1 kB

URL GET HTTP/3
filedot.to/js/jquery.cookie.js
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
JavaScript source, ASCII text, with very long lines (3441), with no line terminators
Size
3.1 kB (3121 bytes)
Hash
7e208f9bc7ca201678c76d96e899349c
afa52ce81c7656bf1a8605bd2cbd38c2be00cd9b
0f0e74eaa31ad2d6c07d9ceb16efefc78aae0f45328759eb163800d261e53d29

HTTP Headers

GET /js/jquery.cookie.js HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: application/javascript
last-modified: Thu, 02 Jul 2020 18:19:16 GMT
etag: W/"c31-5a97972389100"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BQRmvVjaIGxf84yxYKr8Z8vKATi2sCdGL8pkNlL2X9%2Bz701PibYVf5pualR20xTlsHu3A3LtONE1Wc%2BGf1X4kbX0iH9MJEtHJCajMWOM3Vag3Rh4qSCQo4PExpN7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css

104.18.10.207

200 OK

23 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (23192)
Size
23 kB (23409 bytes)
Hash
ab6b02efeaf178e0247b9504051472fb
8256575374f430476bdcd49de98c77990229ce31
653e073e97423adda5bc3917a241ee8497dd38a48f14bcde0098a4e54fd0fa5e

HTTP Headers

GET /bootstrap/3.3.7/css/bootstrap-theme.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://filedot.to
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ab6b02efeaf178e0247b9504051472fb"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 09/09/2023 16:29:16
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 864
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 384d249074d84cf01a912082dcab5bf5
cdn-cache: HIT
cf-cache-status: HIT
age: 895012
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 881ea5a3eb6056cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

filedot.to/js/paging.js

104.21.37.7

200 OK

1.9 kB

URL GET HTTP/3
filedot.to/js/paging.js
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
HTML document, ASCII text, with very long lines (1953), with no line terminators
Size
1.9 kB (1880 bytes)
Hash
6a895f7d4904e76986003fd24c60f2cb
6aeef2e41f51b15e9ebc5e151dc21a02b9fd57dc
a1327fac7c992eeb1fd0b176325cf52c9ee5019aef038e15afa5008565295a86

HTTP Headers

GET /js/paging.js HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: application/javascript
last-modified: Thu, 02 Jul 2020 18:19:31 GMT
etag: W/"758-5a979731d72c0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3253
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KUx5ohhZiy%2FppOcX8g%2FZxYG84GTnkVzeDXUHE8CxPI%2F0FowHD4arigGINPpM%2BdLxNPyG%2FoDHSAtUyoNejUO0hp67mOFmx%2Feq3Si%2FRtmnR%2B%2FHOpzC%2BMm1HRUHjq6w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cf1b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

filedot.to/css_mega/style_mega.css

104.21.37.7

200 OK

90 kB

URL GET HTTP/3
filedot.to/css_mega/style_mega.css
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
ASCII text, with very long lines (342), with CRLF line terminators
Size
90 kB (89997 bytes)
Hash
4bc4aebd81777a433d4f0e7947523286
e5606d28788dd7d63ce71b73fdf0242abbe26afb
0db429bd8f05ba39d9fa08d5ac99d42a0f87b93dc5e78d5343d0840d961cdc4f

HTTP Headers

GET /css_mega/style_mega.css HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: text/css
last-modified: Sat, 04 Jul 2020 14:22:36 GMT
etag: W/"15f8d-5a99e5f848300"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FgzzE7ADTajQsbbBSpFseEQKErZCSKSm%2FnX7Ng8r23XyBJfSZoSqgGtNde5ZwS1jWLcSKmDKPHcY8RBtyr3yOaM5%2FsXLYcIOpugcvYA3z5qTNNsaj1kcpEYMx%2FvM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39cecb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

filedot.to/js/jquery.paging.js

104.21.37.7

200 OK

19 kB

URL GET HTTP/3
filedot.to/js/jquery.paging.js
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
JavaScript source, ASCII text
Size
19 kB (19365 bytes)
Hash
d7a2c1c7af2a004a6d68e1e55b1cfb46
7fd6daa7076c30381880519ad06ef5639b19ee28
c8ecfe747c979fbd87624913200a9237343679923b495885bced089b80fc84f6

HTTP Headers

GET /js/jquery.paging.js HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Cookie: aff=24546
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: application/javascript
last-modified: Thu, 02 Jul 2020 18:19:25 GMT
etag: W/"4ba5-5a97972c1e540"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mTNvVy9xDsTI0RZHpmuvnVv%2Fd4VRLlgL4jqTOesgD4XKEbTQs%2BKCUydTB2Hwk0Wb6MjKcrQdUiNO%2BZGGolXeV1ERNWfIsOgV4QTxrhAFT7Kf2QALGsutmBMnEU2q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea5a39ceeb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar

104.21.37.7

200 OK

18 kB

URL User Request GET HTTP/2
filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
IP
104.21.37.7:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectfiledot.to
FingerprintF2:28:7A:C1:37:ED:FB:DB:2B:DE:35:A8:B8:95:49:B7:2B:DA:21:D5
ValidityThu, 14 Mar 2024 14:10:51 GMT - Wed, 12 Jun 2024 14:10:50 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
18 kB (17481 bytes)
Hash
dc2a73284b1d0b0559aa51130100a97e
2f621b5ca0e5bdca8b12037a03304897616d1103
3abdef629564d39d1429c6997496b1b71beaa30ceee8b6a79a1434970cb84d4d

HTTP Headers

GET /5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar HTTP/1.1
Host: filedot.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=0;includeSubDomains;
expires: Fri, 10 May 2024 02:12:57 GMT
cf-cache-status: BYPASS
set-cookie: aff=24546; domain=.filedot.to; path=/; expires=Sat, 25-May-2024 02:12:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i8zHVdXOB%2FtNxB%2F35IqqKzs%2BMK4piYRMuBBQpZw43fCPlR5Dx0NGyUieS13%2BGqino7gFXZ7jzrbPDmXwxZURP4JXHeg4SY2md7N2%2FOId8rHAGeqNz7ZB%2B32e%2FSC7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881ea59fe8705699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js

104.18.10.207

200 OK

37 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://filedot.to/5xvdpqhna8sb/CandyDoll_Video_Promotion07.rar
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (32033)
Size
37 kB (37045 bytes)
Hash
5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef

HTTP Headers

GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://filedot.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 11 May 2024 02:12:57 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"5869c96cc8f19086aee625d670d741f9"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 10/31/2023 19:27:53
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1a04ea32b2f4b219188fda8349c8680c
cdn-cache: HIT
cf-cache-status: HIT
age: 885660
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 881ea5a3de30b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML