| doodo.click/wp-content/uploads/2024/03/doodstream-indonesia.webp |  172.67.175.100 | 200 OK | 5.9 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2024/03/doodstream-indonesia.webp IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeRIFF (little-endian) data, Web/P image Hash770614d29f2d1ba6a117caf6c9dfd625 ba2c953293f0944c688094d9d1ac52446b709a3b 092737ea89776b2b51c9502126d6f374b7bebe0c34b761ea605a216a31633a82
GET /wp-content/uploads/2024/03/doodstream-indonesia.webp HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/webp
content-length: 5934
vary: Accept-Encoding
last-modified: Fri, 22 Mar 2024 17:08:16 GMT
cache-control: max-age=10368000
expires: Thu, 29 Aug 2024 04:01:26 GMT
cf-cache-status: HIT
age: 341865
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FFreH3ar1Z0aG%2F%2FCZjN7QIXnMl%2BpewrJgWM9r6KK3pMGVmhjZn2GNEViB5DQoXxYu%2FIYusyiVYiVy%2F6ZPO2ZVAboS5DsUKVF56tNgAS8v8LLhJk0L%2BNiJIx4p0q7ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794bfa2b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/Bokep-Ngocok-Memek-Meguri-Basah-Hangat.jpg | 172.67.175.100 | 200 OK | 28 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/Bokep-Ngocok-Memek-Meguri-Basah-Hangat.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 640x360, components 3 Hashe38e5ffb90f8f7c9d29eaf534f1a883a 73a8fa940afb5b0d027d510901b45f8d1af2482d 7d335a78044ab3a8a4236cec636db8dedd36f66f73660260c0c6e1309cffb4d4
GET /wp-content/uploads/2023/07/Bokep-Ngocok-Memek-Meguri-Basah-Hangat.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 27817
vary: Accept-Encoding
last-modified: Wed, 21 Feb 2024 11:42:44 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 06:06:47 GMT
cf-cache-status: HIT
age: 96083
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=utvJADQX7HJjZP92xuv0gpay41x8W3%2Fdij1N4osqEDmWxOtz%2B%2F5Omhzm5gxasKNg0plUIGjxxKuzDBOCoEWz3zWoB9nq8G9i7JBvhs1IWtSaayKiZJ%2BEF47UkXamIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794bfaab512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/bokep-japan-istri-pasrah-diperkosa-direktur.jpg | 172.67.175.100 | 200 OK | 37 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/bokep-japan-istri-pasrah-diperkosa-direktur.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3 Hashedd457f457d498260386080944ae05e1 c2c22667bd4a747a7ec86fa6b9e2a4fceaa902bf b3835f9a4d853f8b3d4cfb5fe895e2c6e27250f34f8a47123e43fb6aa5c9f087
GET /wp-content/uploads/2023/07/bokep-japan-istri-pasrah-diperkosa-direktur.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 37101
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:12:52 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:38:54 GMT
cf-cache-status: HIT
age: 69987
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SEekNkH%2BDYNtqcyVaDlo4HNSCOj66SGFJC%2B6NezWcMmC8AvITAMY6CM%2BOl2Tt3GTx7Uc9rF0omnOLUULWiQTCL1hpbOS3nSiGDc05MYakmxM508Qc%2FTpmTM2toVtuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794bfabb512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/menantu-ketagihan-selingkuh-sama-mertua.jpg | 172.67.175.100 | 200 OK | 11 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/menantu-ketagihan-selingkuh-sama-mertua.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 570x321, components 3 Hash1e07d66c667924456879e0bc11869326 0a030f0ca33dbdcfea459ee68228bc69d8947a9b 2d22ac5637e0cc24e840c6875a387f9a829b7e2f3fc8f6b6ee66af4af0c5dda6
GET /wp-content/uploads/2023/07/menantu-ketagihan-selingkuh-sama-mertua.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 11350
vary: Accept-Encoding
last-modified: Wed, 21 Feb 2024 11:43:16 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 03:39:35 GMT
cf-cache-status: HIT
age: 76083
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hznXS8F6O5I4mZG%2FZ8u4R68PSmEoUPgQoY9YWjfj2%2BlZU1LClt1eNcQ5iFdYdY60I3p7sUtK69%2FhQb4%2FM8sD7uqrFI4xgX%2FOkCryxdJ0EQWU4PaL2J8FaCi%2BJlF1Eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794bfaeb512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/gesek-kontol-pake-toket-janda-sampe-crot.jpg | 172.67.175.100 | 200 OK | 27 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/gesek-kontol-pake-toket-janda-sampe-crot.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", progressive, precision 8, 570x321, components 3 Hash0f8cdbad18b3336019317a5b39847d21 27c3ae9f3404458e17a4516691dd0d00294153aa d84b46f74a3771bcdb25fdc252603ca22d54d8a2016fdbe4cb385fcd954d4955
GET /wp-content/uploads/2023/07/gesek-kontol-pake-toket-janda-sampe-crot.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 26745
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:13:24 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:29:22 GMT
cf-cache-status: HIT
age: 69987
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zgzZE1ltCjKuNNWe%2Ftps2bBdtio80YipDlcte6NWWOBrPiMOL%2F%2FeJMB%2FWpk4NKB2kiOXkowempZxVKvE0nPVhViYLPyuaPRg8KOVp7gb3DGdV7L06MMOfFlUW49Cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794cfb1b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/ngewe-perawat-sange-karena-obat-bius.jpg | 172.67.175.100 | 200 OK | 34 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/ngewe-perawat-sange-karena-obat-bius.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3 Hash38512613f41b9a5e37948cef3538fb4f a18642068a577cb747f3bc82d8e1cfe5a80c68d8 e7824fcf6dcb01ee6caa2806cedea55f39aca1a00bcd0135bd7bb4489f0f5b8d
GET /wp-content/uploads/2023/07/ngewe-perawat-sange-karena-obat-bius.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 34255
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:12:52 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:47:29 GMT
cf-cache-status: HIT
age: 69987
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=50kalAna5aoqFPNQz5jW7FsKaykW4wQYJPLHYg87AAMut8hgdsCER8Nr6j%2BfBSFIZ%2F6wZBLUHmcwCXcgyjfr9wbae65R56YcilrTItYiSMGMf4xjbB4pXCD%2F0if9Dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794cfb3b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/film-bokep-perawat-dipaksa-minum-perangsang.jpg | 172.67.175.100 | 200 OK | 17 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/film-bokep-perawat-dipaksa-minum-perangsang.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 640x360, components 3 Hash6123199bbac891d29627ad17641f9f05 10924d6d1b80c24d559678563a38bcd8891f5e0d 38b7021d70111feb34bf00b6370acbe2f34d8f6c9f1fe0ca4cceaa8c59e56a75
GET /wp-content/uploads/2023/07/film-bokep-perawat-dipaksa-minum-perangsang.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 16608
vary: Accept-Encoding
last-modified: Wed, 21 Feb 2024 11:44:26 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:12:56 GMT
cf-cache-status: HIT
age: 69987
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tLXXMJHjMuQZfSp5uaWICrUPJ7oOYNK7XfGh5tOJeTCzztpZRqEL9F8I0hj9ntGojswHe3vZAEz6zsbeecqLQAxvMBWqZL3Rr4Pdb5Zrtda2mNQuHLJGOV%2B6oe4Yww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794cfb5b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/bokep-pemerkosaan-suster-yang-sudah-dibius-obat.jpg | 172.67.175.100 | 200 OK | 20 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/bokep-pemerkosaan-suster-yang-sudah-dibius-obat.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 640x360, components 3 Hashc2edda3e497f9215714870e09a88c3e7 d5504dcd9176a263bb0149706b3e26e06c87f36b 7f0daac7311bf25134c2a138d8e89fc0f080c44a0fe6445fd6363befe76ff624
GET /wp-content/uploads/2023/07/bokep-pemerkosaan-suster-yang-sudah-dibius-obat.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 19609
vary: Accept-Encoding
last-modified: Wed, 21 Feb 2024 11:44:32 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:31:15 GMT
cf-cache-status: HIT
age: 69987
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYYbg3o6rooPExMr43Rl6egI0qMkp8OXQfbVs1iFk4wM%2FNZjDbuqkw5uW3RT1LlIZkemf7M2YevIMiJvuh4lNNMLk8BrFCSkIujcXbK0AEu0q45vEBeOwS2Sm0gjMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794cfb7b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/07/bokep-hot-suster-dipaksa-minum-obat-perangsang.jpg | 172.67.175.100 | 200 OK | 38 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/07/bokep-hot-suster-dipaksa-minum-obat-perangsang.jpg IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3 Hash8bc60efe3b10e311082bab461192d0fa fb09a353bb63a42d58c200afd8d0043438c3e262 ca07a3d7d13aebedf601b2f7d4e822c3402f9f2392a9239ba486480321ca3e33
GET /wp-content/uploads/2023/07/bokep-hot-suster-dipaksa-minum-obat-perangsang.jpg HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: image/jpeg
content-length: 37876
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:13:28 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:11:11 GMT
cf-cache-status: HIT
age: 69987
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XeI0OrzpIyPAZKlioesp3hC8GF34FFUTOza75h9OYjVC0y7mQm%2BbSbdOa3u916zW0uwuGfSizCdZ9IiaMrvQvTDUpe8XG3EWnUbyHFY5Ci5BpqxQfy9y3Ouw8A53IA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794cfb9b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/themes/kingtube/assets/js/main.js?ver=1.3.4 | 172.67.175.100 | 200 OK | 10 kB |
URL GET HTTP/3doodo.click/wp-content/themes/kingtube/assets/js/main.js?ver=1.3.4 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJavaScript source, ASCII text Hash1317801bbaf6f25a4457ee66b1cee704 6db0658f567614310aaa0f58cd641e32f7850ede 919a1650792edc4d16b0e455bc5a85524563e655826653ce554229d22444e77c
GET /wp-content/themes/kingtube/assets/js/main.js?ver=1.3.4 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:14:56 GMT
cache-control: public, max-age=2592000
expires: Fri, 31 May 2024 04:48:37 GMT
cf-cache-status: HIT
age: 341864
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OmIFfHpyv1o2BNZencJDl0FNk0mnad%2B%2B6N3%2BhuKFJ8t5Px%2BRt3Uuzq1KsOwunGOJHR8m%2F9gof83N2RTYTu%2Fm224LQ7mwKXx4PKkSzmgDOm71FIAV5T63lF65scNWEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794efe1b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 3.bp.blogspot.com/-ZZSacDHLWlM/VhvlKTMjbLI/AAAAAAAAF2M/UDzU4rrvcaI/s1600/btn_close.gif | 142.250.74.65 | 200 OK | 362 B |
URL GET HTTP/23.bp.blogspot.com/-ZZSacDHLWlM/VhvlKTMjbLI/AAAAAAAAF2M/UDzU4rrvcaI/s1600/btn_close.gif IP142.250.74.65:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintC4:7D:61:88:AB:F1:15:A1:36:2A:68:39:51:62:46:00:23:6D:39:00 ValidityTue, 16 Apr 2024 03:45:20 GMT - Tue, 09 Jul 2024 03:45:19 GMT
File typeGIF image data, version 89a, 52 x 15 Hashfd2c05a8c327ace309722b0a5fc4faf3 f446e97c43f8830be9f60644563dd846abe6b8e8 0450e2e1aa3c8b5435690d841f3e573c4f521864e1f8e01a5b6dbcdac922c8b4
GET /-ZZSacDHLWlM/VhvlKTMjbLI/AAAAAAAAF2M/UDzU4rrvcaI/s1600/btn_close.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="btn_close.gif"
x-content-type-options: nosniff
server: fife
content-length: 362
x-xss-protection: 0
cross-origin-resource-policy: cross-origin
date: Sun, 05 May 2024 11:11:24 GMT
expires: Mon, 06 May 2024 11:11:24 GMT
cache-control: public, max-age=86400, no-transform
age: 9726
etag: "v1764"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/js/jads.js |  185.94.236.245 | 301 Moved Permanently | 178 B |
URL GET HTTP/1.1poweredby.jads.co/js/jads.js IP185.94.236.245:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 05 May 2024 13:53:30 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| a.memosaqee.com/czXEIt0.js |  135.181.208.216 | 200 OK | 40 kB |
URL GET HTTP/2a.memosaqee.com/czXEIt0.js IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65467), with no line terminators Hashe9b6c2bd8de6d4d3641f4ebf479bca70 b8e3b03aa6f8a1dd9263d6f3e2ee422c5bdc4404 77d95f02ca7338cf404d8a0a792410fd53c0bc6e6a98bf69ffdb52961901e72f
GET /czXEIt0.js HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:30 GMT
content-type: application/javascript
content-length: 40341
last-modified: Fri, 22 Mar 2024 11:21:21 GMT
vary: Accept-Encoding
etag: "65fd69b1-9d95"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 45
cf-ray: 8685cf7b1cbf8d59-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-JTTM4MVGC3 | 142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-JTTM4MVGC3 IP142.250.74.168:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (101564 bytes) Hash8712a7e78f08057ba20806bf5b5dff84 92c1e16079ce9ce14538c65684d7dafcbf828b42 f788c542bbf95bb04023357f2286f09ea3db36cfcf0ad90f2276c94a181c0077
GET /gtag/js?id=G-JTTM4MVGC3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 13:53:30 GMT
expires: Sun, 05 May 2024 13:53:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101564
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| a.memosaqee.com/hXr1b83.js | 135.181.208.216 | 200 OK | 77 kB |
URL GET HTTP/2a.memosaqee.com/hXr1b83.js IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators Hasha6781eeb8be115c2cc64c5b4898e5b9d 76001e6e130f936956842ce1fb672ca16be2370e cb8949c4918f30d767c8a97d1b1ddb36eabccf8d93659a80f4e850caa3701da2
GET /hXr1b83.js HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:30 GMT
content-type: application/javascript
content-length: 76790
last-modified: Fri, 22 Mar 2024 11:21:21 GMT
vary: Accept-Encoding
etag: "65fd69b1-12bf6"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 201
cf-ray: 8685d408ccf5d995-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.245 | 200 OK | 1.7 kB |
URL GET HTTP/1.1poweredby.jads.co/js/jads2.js IP185.94.236.245:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doodo.click/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:53:31 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| poweredby.jads.co/js/jads.js | 185.94.236.245 | 301 Moved Permanently | 178 B |
URL GET HTTP/1.1poweredby.jads.co/js/jads.js IP185.94.236.245:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 05 May 2024 13:53:31 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| a.memosaqee.com/api/spots/471419?i=1&url=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&sid=316f550d-e6e6-4ea8-a0be-d3255e18eb25 | 135.181.208.216 | 200 OK | 0 B |
URL GET HTTP/2a.memosaqee.com/api/spots/471419?i=1&url=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&sid=316f550d-e6e6-4ea8-a0be-d3255e18eb25 IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/471419?i=1&url=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&sid=316f550d-e6e6-4ea8-a0be-d3255e18eb25 HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:31 GMT
content-length: 0
set-cookie: nauid=IGv1ulfFVXb0CxyV5Awz; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-content/themes/kingtube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 | 172.67.175.100 | 200 OK | 78 kB |
URL GET HTTP/3doodo.click/wp-content/themes/kingtube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hash091ad02fdd808b3fb8acb687b5cc58dd 19ca04344ebb274c7db047183c1685f8a4c777c2 b5d01b05d5280af652e38d68a4d8a58a868c82658ae8f6f2932e043d3ea38d85
GET /wp-content/themes/kingtube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/wp-content/cache/min/1/wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1714590108
Cookie: _ga_JTTM4MVGC3=GS1.1.1714917210.1.0.1714917211.0.0.0; _ga=GA1.1.1676310092.1714917211
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: font/woff2
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:14:56 GMT
cache-control: max-age=10368000
expires: Thu, 29 Aug 2024 04:37:00 GMT
cf-cache-status: HIT
age: 163144
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HI8nHfRxgtrNeAGI%2FNQZ0UclBCHQdnWBLe2Y7HWiNPpR73xyf%2FAJP6FqiMOHSWzj4rwejJdQzUkAunWDbYzFwlhoB06vAL%2F7sx6TW2nSlvg95g4mDM%2BeEn8LRazGYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f1379ace7ab512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.245 | 200 OK | 1.7 kB |
URL GET HTTP/1.1poweredby.jads.co/js/jads2.js IP185.94.236.245:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doodo.click/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:53:31 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| cdn.pncloudfl.com/pn/f03/8e0/b26/f038e0b261e8dcf9686d4a84bfea82d4b1a6dbb3.webp | 172.67.25.161 | 200 OK | 20 kB |
URL GET HTTP/2cdn.pncloudfl.com/pn/f03/8e0/b26/f038e0b261e8dcf9686d4a84bfea82d4b1a6dbb3.webp IP172.67.25.161:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectcdn.pncloudfl.com Fingerprint50:5F:A0:91:53:C9:C9:E3:5D:EA:53:42:E8:5B:81:FB:DE:7B:1E:2C ValiditySun, 28 Apr 2024 04:53:51 GMT - Sat, 27 Jul 2024 04:53:50 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp Hash2d9e1b346619a57f7d45c8450d9eb6db f038e0b261e8dcf9686d4a84bfea82d4b1a6dbb3 4ee28ef4f93f1ebc0eff21fb4b65be28493c5ecf15442d9f22a47e24f6c9ab36
GET /pn/f03/8e0/b26/f038e0b261e8dcf9686d4a84bfea82d4b1a6dbb3.webp HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: application/octet-stream
content-length: 19604
etag: 2d9e1b346619a57f7d45c8450d9eb6db
last-modified: Fri, 28 Apr 2023 11:45:29 GMT
x-timestamp: 1682682328.25290
x-trans-id: tx065b4643569940dd8fb9e-00645b713b
x-openstack-request-id: tx065b4643569940dd8fb9e-00645b713b
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
expires: Mon, 06 May 2024 17:27:28 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 73563
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 87f1379d6c04712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/adshow.php?adzone=1037379 | 185.94.236.245 | 200 OK | 1.8 kB |
URL GET HTTP/1.1poweredby.jads.co/adshow.php?adzone=1037379 IP185.94.236.245:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1626), with CRLF, LF line terminators Hash60dfeb77cde946c81f561c2e573a68da bfa682910fd570eb5dab3e0227b9fa0749fa29b2 dfb167d5adb3abf2d7ae1df103c4a614703abf2284180ca1f4d3fab2f97399b7
GET /adshow.php?adzone=1037379 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:53:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=a35326a63b696814873ccb251f547de2; expires=Mon, 05-May-2025 13:53:31 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps61041=1; expires=Mon, 06-May-2024 13:53:31 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE3MzUxNTY7aToxNzE1MTc2NDExO30%3D; expires=Wed, 08-May-2024 13:53:31 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 08-May-2024 13:53:31 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| na.nawpush.com/tags/143165?version_name=c | 45.133.44.24 | 200 OK | 1.3 kB |
URL GET HTTP/2na.nawpush.com/tags/143165?version_name=c IP45.133.44.24:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectna.nawpush.com FingerprintE4:8A:6D:1E:95:BA:50:33:94:D3:16:FE:4C:61:AA:DE:72:B1:70:87 ValidityThu, 28 Mar 2024 03:00:38 GMT - Wed, 26 Jun 2024 03:00:37 GMT
Hashb3642ab5aa4057558d42164a10e24718 96d2e2e33f716de6eb5a02444e42b892d4527d6a 96145041989840bf657255e24f34b64a19720154ce786bb410843bfa7a19b394
GET /tags/143165?version_name=c HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doodo.click
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: application/json
content-length: 1309
server: nginx/1.24.0
cache-control: max-age=300, public
x-proxy-cache: MISS
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-content/cache/min/1/wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1714590108 | 172.67.175.100 | 200 OK | 7.0 kB |
URL GET HTTP/3doodo.click/wp-content/cache/min/1/wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1714590108 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeASCII text, with very long lines (31285) Hash4037df8ebec94e839032ad3af8b3f53b a577ea2bf10d60b6933eaa9c86071ac9b803d87f 1fa158fd24c974c8f63caaf708a85c40612c8af6acaa0a527255be75d41540f9
GET /wp-content/cache/min/1/wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1714590108 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 01 May 2024 19:01:48 GMT
etag: W/"7ad7-617691e544360"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BR%2BPidckdvRPOtyTE9G7NHizlhgAo0CvTs9jkxJiGLQZ6T47SaXQb02GvZOnXTMA2xVnxolQ5lVJBBV%2B5V%2Fx55wMzIC1zeC%2FEbUvcrGYD4lquYfspgImHu2oM%2FY4Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794af96b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/adshow.php?adzone=1037378 | 185.94.236.245 | 200 OK | 1.6 kB |
URL GET HTTP/1.1poweredby.jads.co/adshow.php?adzone=1037378 IP185.94.236.245:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (395), with CRLF, LF line terminators Hash8b4fed7473cef7f2393cd493ad4ca099 81fcea40317bf3fb033c3a0b7b9ba6e81596dc4f 01afc1b6bfcaf1c907e96bc20bbafbdbd687405c818396c33468304271fa68fb
GET /adshow.php?adzone=1037378 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:53:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=a35326a63b696814873ccb251f547de2; expires=Mon, 05-May-2025 13:53:31 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps54=1; expires=Mon, 06-May-2024 13:53:31 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE3MDYyOTI7aToxNzE1MTc2NDExO30%3D; expires=Wed, 08-May-2024 13:53:31 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 08-May-2024 13:53:31 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| t7cp4fldl.com/chicken.gif?z=2018952&pb=e13bc0d90acf35f13a99410a18113f5c1714924411&psp=F-V6rZs6ZQ7_UjktotCNi9SlSGk7LfYzIGfd-pbUWKQsRHYjsbLbAcVFFGKt_uaysKt1F5sY0KU-3xWycmvOKjtdU8TSBKlmboK2vbxg1hWK4DuiiR8y-Xha0bi8WKhotc7H1r-AwqBbSNmL_iMxeXQZdBUnTXDJJMP5PEGcFVe-72H6ktp8v7M7FI9JQv4B1Yr0bxDNILmySWnNVWqMjHHkmKJefFYRIRGhPzBUhirhxgcv2vKTTXaBqSICuKsz6Hp4KnsU2WnHd-aGSffCOH8MYIB7kg3gNdzgMJYt7jJtrQBEX5qyuHkfz_5EJRDLSwiD7tI1Aa5U_f_xraoFLC_o5_plcs-MPJ07Vbu85cKA3YHZSSHynNliXFcPTD0KPhpWmw4FLoX7ydB5-C7oCTbZLSMUzZKs9byfh38vi54UCMouJOLQcXfo1rcb5WYd0izD3ZR_FSRywB3T0fwoAd57TQl3Y8X1C1peF2DT8-lL9YiMQkxsxQDANpuJJ60BuJs-ixY5L8gWhtnXvjh4Bypa9MKdja12UApZQc9PoLtTKwBZ6soGolIPVxgmpkz3um5WHebygg4Td3acmk7WHIT7wKemhZdCqD9iK91IgMutTVqjc_GYT-L6dpVrd56ZlGd3efYkEIrKdh5UMpK7Oikq9-Dxdt4fDKljfR6fvZAVL9caKVS9yb9LOwG2__A6XMgrno5bAsaPQY7RnYPMRq6h6EkoL7PcjA_tEg6tP-cBz0mbHODau0KjwpDxcds4XeUYLv9nYxwkWuN86z2Zk6eZ-AXxCIc=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2364188628035584&eclog=0&im=1&pload=78 |  212.117.190.201 | 200 OK | 43 B |
URL GET HTTP/2t7cp4fldl.com/chicken.gif?z=2018952&pb=e13bc0d90acf35f13a99410a18113f5c1714924411&psp=F-V6rZs6ZQ7_UjktotCNi9SlSGk7LfYzIGfd-pbUWKQsRHYjsbLbAcVFFGKt_uaysKt1F5sY0KU-3xWycmvOKjtdU8TSBKlmboK2vbxg1hWK4DuiiR8y-Xha0bi8WKhotc7H1r-AwqBbSNmL_iMxeXQZdBUnTXDJJMP5PEGcFVe-72H6ktp8v7M7FI9JQv4B1Yr0bxDNILmySWnNVWqMjHHkmKJefFYRIRGhPzBUhirhxgcv2vKTTXaBqSICuKsz6Hp4KnsU2WnHd-aGSffCOH8MYIB7kg3gNdzgMJYt7jJtrQBEX5qyuHkfz_5EJRDLSwiD7tI1Aa5U_f_xraoFLC_o5_plcs-MPJ07Vbu85cKA3YHZSSHynNliXFcPTD0KPhpWmw4FLoX7ydB5-C7oCTbZLSMUzZKs9byfh38vi54UCMouJOLQcXfo1rcb5WYd0izD3ZR_FSRywB3T0fwoAd57TQl3Y8X1C1peF2DT8-lL9YiMQkxsxQDANpuJJ60BuJs-ixY5L8gWhtnXvjh4Bypa9MKdja12UApZQc9PoLtTKwBZ6soGolIPVxgmpkz3um5WHebygg4Td3acmk7WHIT7wKemhZdCqD9iK91IgMutTVqjc_GYT-L6dpVrd56ZlGd3efYkEIrKdh5UMpK7Oikq9-Dxdt4fDKljfR6fvZAVL9caKVS9yb9LOwG2__A6XMgrno5bAsaPQY7RnYPMRq6h6EkoL7PcjA_tEg6tP-cBz0mbHODau0KjwpDxcds4XeUYLv9nYxwkWuN86z2Zk6eZ-AXxCIc=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2364188628035584&eclog=0&im=1&pload=78 IP212.117.190.201:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint1E:73:92:9F:14:DF:47:2D:DB:3D:0B:6D:38:9F:71:8C:33:6D:14:F2 ValidityTue, 09 Jan 2024 13:35:36 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=2018952&pb=e13bc0d90acf35f13a99410a18113f5c1714924411&psp=F-V6rZs6ZQ7_UjktotCNi9SlSGk7LfYzIGfd-pbUWKQsRHYjsbLbAcVFFGKt_uaysKt1F5sY0KU-3xWycmvOKjtdU8TSBKlmboK2vbxg1hWK4DuiiR8y-Xha0bi8WKhotc7H1r-AwqBbSNmL_iMxeXQZdBUnTXDJJMP5PEGcFVe-72H6ktp8v7M7FI9JQv4B1Yr0bxDNILmySWnNVWqMjHHkmKJefFYRIRGhPzBUhirhxgcv2vKTTXaBqSICuKsz6Hp4KnsU2WnHd-aGSffCOH8MYIB7kg3gNdzgMJYt7jJtrQBEX5qyuHkfz_5EJRDLSwiD7tI1Aa5U_f_xraoFLC_o5_plcs-MPJ07Vbu85cKA3YHZSSHynNliXFcPTD0KPhpWmw4FLoX7ydB5-C7oCTbZLSMUzZKs9byfh38vi54UCMouJOLQcXfo1rcb5WYd0izD3ZR_FSRywB3T0fwoAd57TQl3Y8X1C1peF2DT8-lL9YiMQkxsxQDANpuJJ60BuJs-ixY5L8gWhtnXvjh4Bypa9MKdja12UApZQc9PoLtTKwBZ6soGolIPVxgmpkz3um5WHebygg4Td3acmk7WHIT7wKemhZdCqD9iK91IgMutTVqjc_GYT-L6dpVrd56ZlGd3efYkEIrKdh5UMpK7Oikq9-Dxdt4fDKljfR6fvZAVL9caKVS9yb9LOwG2__A6XMgrno5bAsaPQY7RnYPMRq6h6EkoL7PcjA_tEg6tP-cBz0mbHODau0KjwpDxcds4XeUYLv9nYxwkWuN86z2Zk6eZ-AXxCIc=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2364188628035584&eclog=0&im=1&pload=78 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=240505085370510ec72bf5498792e7a26a04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:31 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| a.memosaqee.com/57bSpT3.js | 135.181.208.216 | 200 OK | 77 kB |
URL GET HTTP/2a.memosaqee.com/57bSpT3.js IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators Hasha6781eeb8be115c2cc64c5b4898e5b9d 76001e6e130f936956842ce1fb672ca16be2370e cb8949c4918f30d767c8a97d1b1ddb36eabccf8d93659a80f4e850caa3701da2
GET /57bSpT3.js HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Cookie: nauid=IGv1ulfFVXb0CxyV5Awz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:31 GMT
content-type: application/javascript
content-length: 76790
last-modified: Fri, 22 Mar 2024 11:21:21 GMT
vary: Accept-Encoding
etag: "65fd69b1-12bf6"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 201
cf-ray: 8685d408ccf5d995-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.8.6/jwplayer.js | 151.101.2.114 | 200 OK | 33 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.8.6/jwplayer.js IP151.101.2.114:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65142) Hashd78d2dbc236ea89294c8d748e1ab5fe0 25d8836b9cd2a1544dbf0af6ee6c67fb99501af9 322b4f89d026f181eeca0bd97673652b69c0e4f98d6f852c469853c6b089256e
GET /player/v/8.8.6/jwplayer.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 10 May 2019 22:22:51 GMT
etag: "d78d2dbc236ea89294c8d748e1ab5fe0"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 May 2024 13:53:31 GMT
via: 1.1 varnish
age: 1594331
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 1953
x-timer: S1714917212.967707,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 32575
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-content/uploads/2023/11/fortunita.png | 172.67.175.100 | 200 OK | 2.3 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/11/fortunita.png IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hashb163bdbf8e4eb38e9421927e2fea4abd 4fd696372e483917d80233e763b74c6127085661 646689ea5942d3c1199581410b10e9d9d3a3f6af6d514a864c825eb0c4561c98
GET /wp-content/uploads/2023/11/fortunita.png HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Cookie: _ga_JTTM4MVGC3=GS1.1.1714917210.1.0.1714917211.0.0.0; _ga=GA1.1.1676310092.1714917211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: image/png
content-length: 2287
vary: Accept-Encoding
last-modified: Tue, 20 Feb 2024 06:21:26 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:57:26 GMT
cf-cache-status: HIT
age: 258166
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Cq6Mu9FyIGdtW5cl0ku%2FGBW9TasUzEMGThCaULnyb2yatiyF6uUjbJbby8X8dq3%2Ft3Y829CELM7KuDuu%2BBW%2B2TYQ9R3FS2ycqU7Sd%2B%2F2ioZF3xf10mg4y1eWT3CDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f1379eeb95b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/uploads/2023/11/fortunita.png | 172.67.175.100 | 200 OK | 2.3 kB |
URL GET HTTP/3doodo.click/wp-content/uploads/2023/11/fortunita.png IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hashb163bdbf8e4eb38e9421927e2fea4abd 4fd696372e483917d80233e763b74c6127085661 646689ea5942d3c1199581410b10e9d9d3a3f6af6d514a864c825eb0c4561c98
GET /wp-content/uploads/2023/11/fortunita.png HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Cookie: _ga_JTTM4MVGC3=GS1.1.1714917210.1.0.1714917211.0.0.0; _ga=GA1.1.1676310092.1714917211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: image/png
content-length: 2287
vary: Accept-Encoding
last-modified: Tue, 20 Feb 2024 06:21:26 GMT
cache-control: public, max-age=10368000
expires: Thu, 29 Aug 2024 04:57:26 GMT
cf-cache-status: HIT
age: 258166
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YTmWGW5z5syy8buE%2FzCqsFv2Vc6j2YGufV3nkgWFoGRbZKc1C7Y%2BNBEvDqQ1aeEcNNggN0v5oYyZbz715aT8PuTPhhfezG%2FIgLaFPqE7i4hr0A66rQkwzWrQlDodCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f1379eeb96b512-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudfrale.com/bn/bb0/d62/f25/bb0d62f259f862e36013c38c66a4affcb2d97bc0.mp4 | 45.133.44.21 | 206 Partial Content | 367 kB |
URL GET HTTP/2cdn.cloudfrale.com/bn/bb0/d62/f25/bb0d62f259f862e36013c38c66a4affcb2d97bc0.mp4 IP45.133.44.21:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint5F:02:E3:5B:0C:B7:FA:C1:27:2A:35:DA:29:17:01:A8:47:B5:F3:A8 ValidityWed, 10 Jan 2024 08:59:56 GMT - Sun, 07 Jul 2024 21:59:00 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size367 kB (366892 bytes) Hash38f17af71788686d25c6caba05c04c37 bb0d62f259f862e36013c38c66a4affcb2d97bc0 26e2309b6b00d44b44b3604b04c4ff0bb2883df04e79569f0a2eac8124573571
GET /bn/bb0/d62/f25/bb0d62f259f862e36013c38c66a4affcb2d97bc0.mp4 HTTP/1.1
Host: cdn.cloudfrale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sun, 05 May 2024 13:53:31 GMT
content-type: video/mp4
content-length: 366892
server: nginx/1.24.0
etag: 38f17af71788686d25c6caba05c04c37
last-modified: Sun, 05 Nov 2023 16:10:43 GMT
x-timestamp: 1699200642.91981
x-trans-id: tx929d54d998354c12beca8-0065ca79c8
x-openstack-request-id: tx929d54d998354c12beca8-0065ca79c8
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Tue, 07 May 2024 13:53:31 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
access-control-allow-origin: *
content-range: bytes 0-366891/366892
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.6.3/jquery.min.js | 142.250.74.106 | 200 OK | 31 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.6.3/jquery.min.js IP142.250.74.106:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hashcf2fbbf84281d9ecbffb4993203d543b 832a6a4e86daf38b1975d705c5de5d9e5f5844bc a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575
GET /ajax/libs/jquery/3.6.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31191
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:01:09 GMT
expires: Fri, 02 May 2025 02:01:09 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 11 Jan 2023 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 301943
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user199147/61041-1713321461-0162689001713321461.png |  185.76.9.25 | 200 OK | 48 kB |
URL GET HTTP/2i.jads.co/network/user199147/61041-1713321461-0162689001713321461.png IP185.76.9.25:443 ASN#60068 Datacamp Limited
Requested byhttps://poweredby.jads.co/adshow.php?adzone=1037379 CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typePNG image data, 300 x 100, 8-bit/color RGB, non-interlaced Hashf9c30324e17c3733d50d768595f2c05d 158be3e9b12e9da848b3edffb034766cc53a6e63 4d1113da9f271c7837dde67f51844db0182162eec3d214f7a02822c41a42e307
GET /network/user199147/61041-1713321461-0162689001713321461.png HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=a35326a63b696814873ccb251f547de2; imps61041=1; juicy_data_1=YToxOntpOjE3MDYyOTI7aToxNzE1MTc2NDExO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps54=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:32 GMT
content-type: image/png
content-length: 48075
last-modified: Wed, 17 Apr 2024 02:37:41 GMT
etag: "661f35f5-bbcb"
x-77-nzt: EwwBuUwJFAH3GG8HAAwBuUwKEwH3rEQAAAwBnJIhJwH3hUEQAA
x-77-nzt-ray: af585630e04151745c8f3766eea3690e
x-accel-expires: @1715939091
x-accel-date: 1714430020
x-77-cache: HIT
x-77-age: 487192
server: CDN77-Turbo
x-cache: HIT
x-age: 487192
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/1x1.gif | 185.76.9.25 | 200 OK | 28 kB |
IP185.76.9.25:443 ASN#60068 Datacamp Limited
Requested byhttps://poweredby.jads.co/adshow.php?adzone=1037379 CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3 Hash2acfb73fd2df022a7dad5595adef5bda 939b803ea641bd427b7599f92a816262e7a5bf48 3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=a35326a63b696814873ccb251f547de2; imps61041=1; juicy_data_1=YToxOntpOjE3MDYyOTI7aToxNzE1MTc2NDExO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps54=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:32 GMT
content-type: image/jpeg
content-length: 27460
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
etag: "581badc7-6b44"
x-77-nzt: EwwBuUwJFAH3d1YeAAwBuUwKCQH3Ci4GAAwBisclwQHXNjYDAA
x-77-nzt-ray: af585630e04151745c8f37664051700e
x-accel-expires: @1715520995
x-accel-date: 1712928997
x-77-cache: HIT
x-77-age: 1988215
server: CDN77-Turbo
x-cache: HIT
x-age: 1988215
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user1037/54-1702498965-0289532001702498965.gif | 185.76.9.25 | 200 OK | 232 kB |
URL GET HTTP/2i.jads.co/network/user1037/54-1702498965-0289532001702498965.gif IP185.76.9.25:443 ASN#60068 Datacamp Limited
Requested byhttps://poweredby.jads.co/adshow.php?adzone=1037378 CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeGIF image data, version 89a, 300 x 250 Size232 kB (231611 bytes) Hash54db84699c592c2342a0d97897e33d6e 929ec75860ddf91e9e2db1dcde7e9cf8c1f2a5d4 aefc7065d398cc090d2a1bf609b3b79b2a062a4961110abbb0b6669ecb219542
GET /network/user1037/54-1702498965-0289532001702498965.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=a35326a63b696814873ccb251f547de2; imps61041=1; juicy_data_1=YToxOntpOjE3MDYyOTI7aToxNzE1MTc2NDExO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps54=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:32 GMT
content-type: image/gif
content-length: 231611
last-modified: Wed, 13 Dec 2023 20:22:45 GMT
etag: "657a1295-388bb"
x-77-nzt: EwwBuUwJFAH3V/IUAAwBuUwKEwH3wQEAAAwBisclxAH3CQAAAA
x-77-nzt-ray: af585630e04151745c8f3766cb57140e
x-accel-expires: @1716136446
x-accel-date: 1713544453
x-77-cache: HIT
x-77-age: 1372759
server: CDN77-Turbo
x-cache: HIT
x-age: 1372759
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css | 151.101.193.229 | 200 OK | 11 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css IP151.101.193.229:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hash79877fb82de8ca50845081e3c9a201c5 4f6ea69c0e03431ffa1a097a45453b5b3b246d8b af35cc6aba34e5005de77099dfa72d4c1a7715d28ddcec343f48031dc8cb08bc
GET /npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"13a7e-T26mnA4DQx/6Ggl6RUU7WzskbYs"
content-encoding: br
accept-ranges: bytes
date: Sun, 05 May 2024 13:53:32 GMT
age: 23364
x-served-by: cache-fra-etou8220090-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10883
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/plugins/vast/v/8.5.15/vast.js | 151.101.2.114 | | 29 kB |
URL GET ssl.p.jwpcdn.com/player/plugins/vast/v/8.5.15/vast.js IP151.101.2.114:0
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash7c0ec3a99736422fe9c87c8cdf157468 f833cf963ae072288813d19a437adb2ff2c7b0a8 6dcf30cdcfe8b143d99b4902c100606b60a0c873b945d41a609313c7f8c7ae68
GET /player/plugins/vast/v/8.5.15/vast.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 10 May 2019 20:23:13 GMT
etag: "7c0ec3a99736422fe9c87c8cdf157468"
content-type: text/plain
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 May 2024 13:53:32 GMT
via: 1.1 varnish
age: 1511359
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 1607
x-timer: S1714917213.526869,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 28847
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.8.6/jwpsrv.js | 151.101.2.114 | 200 OK | 17 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.8.6/jwpsrv.js IP151.101.2.114:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (58423) Hash9bc736af6f986f33fdcb0dc35be3ecd5 f6f802efd3fdcfa10fefa265a03f6f76e2121caf ba6a62049166fd357a944d885fec2fcd001b21d2918a45710a1aaaa70b748185
GET /player/v/8.8.6/jwpsrv.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=900, immutable
last-modified: Thu, 14 Jan 2021 14:53:59 GMT
etag: "9bc736af6f986f33fdcb0dc35be3ecd5"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 May 2024 13:53:32 GMT
via: 1.1 varnish
age: 45
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714917213.528551,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 17319
X-Firefox-Spdy: h2
|
|
| doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ | 172.67.175.100 | 200 OK | 24 kB |
URL User Request GET HTTP/2doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ IP172.67.175.100:443
CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash2e1b4f7d40f4145dcb013b5d1e85035e 6796530a1e82acbebe91e4c81f8a0f69ed2471c0 58903f1f8b2bb504fd13326c0d4c29c004349222536ebe8fa8bbfd1fd353b06e
GET /papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 01 May 2024 19:02:04 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHmjJAoTZPw%2BVjI340grHnwL6tGi%2F5qQSCnJrWNf9Sej3qBLfLg%2FZktbIqT3ESvpA0cMnO5FZ9FbGaDdtfMIQLIt%2FwjjeJDqB8zAE4VCi8ORBh4mDZGFTWsoaBvY2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f1378d6f9756aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.8.6/jwplayer.core.controls.js | 151.101.2.114 | 200 OK | 67 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.8.6/jwplayer.core.controls.js IP151.101.2.114:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65134) Hash89d6a3f9bdd7a6005afdca2036f4a9cc c3cb5ddb86793353002048096dec172cd3d96853 4bd30f9d856cdccd9aef28dbe2f100f7c322dc74e7be8dfd9b00876d743910d5
GET /player/v/8.8.6/jwplayer.core.controls.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 10 May 2019 22:22:50 GMT
etag: "89d6a3f9bdd7a6005afdca2036f4a9cc"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 May 2024 13:53:32 GMT
via: 1.1 varnish
age: 2552997
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 672
x-timer: S1714917213.534611,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 67217
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.8.6/related.js | 151.101.2.114 | 200 OK | 26 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.8.6/related.js IP151.101.2.114:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65142) Hashda0289724ee6b8a80e6ffa01f3351a80 48c5c49c35e1233d7d89a170e8c9ba8b938b5e72 03248dbad09fb33c0ec7ad3846e280c7a3d3c4c21af9d924f587e64826370b2d
GET /player/v/8.8.6/related.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 10 May 2019 22:22:55 GMT
etag: "da0289724ee6b8a80e6ffa01f3351a80"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 May 2024 13:53:32 GMT
via: 1.1 varnish
age: 6786562
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 2282
x-timer: S1714917213.536535,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 26517
X-Firefox-Spdy: h2
|
|
| ssl.p.jwpcdn.com/player/v/8.8.6/provider.hlsjs.js | 151.101.2.114 | 200 OK | 87 kB |
URL GET HTTP/2ssl.p.jwpcdn.com/player/v/8.8.6/provider.hlsjs.js IP151.101.2.114:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGlobalSign nv-sa Subject*.jwplayer.com FingerprintAB:15:C6:40:38:53:10:D6:CD:12:E9:B3:27:A9:9A:A9:79:8D:B2:9A ValidityWed, 30 Aug 2023 18:09:48 GMT - Mon, 30 Sep 2024 18:09:47 GMT
File typeJavaScript source, ASCII text, with very long lines (37591) Hashdff24282f1f944ea0278d12df5fbe1c7 b6121716cfd7fc1c32d33148104fd8bd1fbcf4bb a0bfccb0e98ee50455a9d460ad9e9003a0c8347c434ff27b27ca4fdedc378b2b
GET /player/v/8.8.6/provider.hlsjs.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 10 May 2019 22:22:53 GMT
etag: "dff24282f1f944ea0278d12df5fbe1c7"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 May 2024 13:53:32 GMT
via: 1.1 varnish
age: 2465847
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 658
x-timer: S1714917213.538665,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 86810
X-Firefox-Spdy: h2
|
|
| entitlements.jwplayer.com/APICodes.json | 152.199.22.243 | 400 Bad Request | 71 B |
URL GET HTTP/2entitlements.jwplayer.com/APICodes.json IP152.199.22.243:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerDigiCert Inc Subjectentitlements.jwplayer.com FingerprintB5:24:44:E4:35:14:01:E0:7C:17:57:0A:BA:CD:20:0F:B5:05:DB:8A ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Hash5534f424f1d6586164a58758f3e2c51a ef37ca3d8831aaad699430dcaa9967469542d602 f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86
GET /APICodes.json HTTP/1.1
Host: entitlements.jwplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srcembed.online
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
accept-ranges: bytes
access-control-allow-origin: *
age: 41960
cache-control: max-age=1800, s-maxage=16140
content-type: application/json
date: Sun, 05 May 2024 13:53:32 GMT
last-modified: Sun, 05 May 2024 02:14:12 GMT
server: ECAcc (ska/F6B4)
x-cache: 400-HIT
content-length: 71
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=143165 |  157.90.84.242 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1fp.metricswpsh.com/fp?tag_id=143165 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=143165 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://doodo.click/
Origin: https://doodo.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 05 May 2024 13:53:33 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://doodo.click
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| cf7f345e1e.536e9f9126.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI0NzQ1MzA4MzcwNjkwNTgwNTAiLCJ0aW1lem9uZSI6MCwidmVyIjoiMy4xMjEuMCIsInRhZ19pZCI6MTQzMTY1LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjEuMjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= | 45.133.44.53 | 200 OK | 0 B |
URL GET HTTP/2cf7f345e1e.536e9f9126.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI0NzQ1MzA4MzcwNjkwNTgwNTAiLCJ0aW1lem9uZSI6MCwidmVyIjoiMy4xMjEuMCIsInRhZ19pZCI6MTQzMTY1LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjEuMjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectcf7f345e1e.536e9f9126.com Fingerprint71:F9:AA:03:86:91:84:5D:4D:14:DA:11:94:7A:19:87:8E:B3:23:E7 ValidityThu, 02 May 2024 02:50:28 GMT - Wed, 31 Jul 2024 02:50:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI0NzQ1MzA4MzcwNjkwNTgwNTAiLCJ0aW1lem9uZSI6MCwidmVyIjoiMy4xMjEuMCIsInRhZ19pZCI6MTQzMTY1LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjEuMjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1
Host: cf7f345e1e.536e9f9126.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doodo.click
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:33 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=143165 | 157.90.84.242 | 204 No Content | 58 B |
URL OPTIONS HTTP/1.1fp.metricswpsh.com/fp?tag_id=143165 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hash87385fcd2a67fc74d2fa67366ba68ea2 a604cdbb1d31ce257e8643eee9219c9c724c200c 9307cbb21345500294eae459b18a8ffb2bd2fcccd928a09efbc1e324fa9c9995
POST /fp?tag_id=143165 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1835
Origin: https://doodo.click
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 May 2024 13:53:33 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://doodo.click
Set-Cookie: id=6740533173319318053; Expires=Mon, 05 May 2025 13:53:33 GMT; Secure; SameSite=None
Vary: Origin
|
|
| milkstream.site/stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video0.ts |  104.21.89.147 | 200 OK | 334 kB |
URL GET HTTP/2milkstream.site/stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video0.ts IP104.21.89.147:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerLet's Encrypt Subjectmilkstream.site Fingerprint01:8C:4B:6F:BA:CA:EE:85:37:9B:CB:2A:7F:89:A9:1D:B9:D7:65:44 ValidityFri, 05 Apr 2024 07:11:30 GMT - Thu, 04 Jul 2024 07:11:29 GMT
Size334 kB (334452 bytes) Hash1b23831409c8aead3b215a6b77a572df a8e892b22a25479d0d3f53f8e9bf277d1bfbaabe d1a345dd24a0b40f95f05f87d020fe68e30d1414515b43dea43414752e715149
GET /stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video0.ts HTTP/1.1
Host: milkstream.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srcembed.online
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:33 GMT
content-type: video/mp2t
content-length: 334452
last-modified: Sat, 09 Dec 2023 04:22:29 GMT
etag: "6573eb85-51a74"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
x-robots-tag: noindex, nofollow, nosnippet, noarchive
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gLwjPwGL4urUiW7NMzwzhWvtp6fg5v9nsAs%2Bds9B20OP7rQ%2B1VjyqOcihi2%2FjCJEJF9VMf2k6nhLVJcN0knw7C4FIG5hQlDE22CsRKH7cCBgA0pSz6c4jZI6oqnR%2FDAi%2FYU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f137a6791156b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| a.memosaqee.com/api/users/471274?host=srcembed.online&ev=212&wh=702&ww=1248&uuid=&url=https%3A%2F%2Fsrcembed.online%2Fvideo%2Fmyk1aOpxzYbJQfl&sid=e9cadab3-3f44-4e6d-b3eb-8750faa3ea52&i=1&referrer=doodo.click | 135.181.208.216 | 200 OK | 0 B |
URL GET HTTP/2a.memosaqee.com/api/users/471274?host=srcembed.online&ev=212&wh=702&ww=1248&uuid=&url=https%3A%2F%2Fsrcembed.online%2Fvideo%2Fmyk1aOpxzYbJQfl&sid=e9cadab3-3f44-4e6d-b3eb-8750faa3ea52&i=1&referrer=doodo.click IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users/471274?host=srcembed.online&ev=212&wh=702&ww=1248&uuid=&url=https%3A%2F%2Fsrcembed.online%2Fvideo%2Fmyk1aOpxzYbJQfl&sid=e9cadab3-3f44-4e6d-b3eb-8750faa3ea52&i=1&referrer=doodo.click HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Cookie: nauid=IGv1ulfFVXb0CxyV5Awz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:33 GMT
content-length: 0
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
|
|
| milkstream.site/stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video1.ts | 104.21.89.147 | 200 OK | 188 kB |
URL GET HTTP/3milkstream.site/stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video1.ts IP104.21.89.147:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerLet's Encrypt Subjectmilkstream.site Fingerprint01:8C:4B:6F:BA:CA:EE:85:37:9B:CB:2A:7F:89:A9:1D:B9:D7:65:44 ValidityFri, 05 Apr 2024 07:11:30 GMT - Thu, 04 Jul 2024 07:11:29 GMT
Size188 kB (188376 bytes) Hasha32a3c1e5c1afecb345c21259334292c 38df335d62c22c61fc3257d6733d3be85146b11a 955617e15c157ae7eafe16316971648d7792601953fa7f69a10652b8c79c3b16
GET /stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video1.ts HTTP/1.1
Host: milkstream.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srcembed.online
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:33 GMT
content-type: video/mp2t
content-length: 188376
last-modified: Sat, 09 Dec 2023 04:22:29 GMT
etag: "6573eb85-2dfd8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
x-robots-tag: noindex, nofollow, nosnippet, noarchive
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F5TZ0KNxPMV%2Fj1%2FlGE04wqsmf%2BntF5kcRlI2iVcISS14AVgu3RruiKHmsKRR1Rc3naAcdlDa9xXqvWAlGikRGRnuUcnCq6jLpS5EAZo7IsC2wUnWAZYhSjXE6M9bJHEJdTE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f137a7bea90afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bid.onclckbn.com/get/?go=1&data=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 | 157.90.85.57 | 200 OK | 1.5 kB |
URL GET HTTP/2bid.onclckbn.com/get/?go=1&data=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 IP157.90.85.57:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectrtbbnr.com Fingerprint50:F0:54:4D:69:42:92:C3:CA:86:D0:5D:5E:8F:CB:CF:53:CF:AF:A5 ValidityWed, 01 May 2024 01:53:14 GMT - Tue, 30 Jul 2024 01:53:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2240) Hashb38aa0d748288ef5b9ee2455a21e71bb 8ae2511538c797b0f590c487b68e0aae3bd4f66d c63729cad4f64e5d4bbac7f5af69ac194b6782b9ac59e2a20448983a3f0d1ffa
GET /get/?go=1&data=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 HTTP/1.1
Host: bid.onclckbn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Sun, 05 May 2024 13:53:33 GMT
content-type: text/html
content-length: 1527
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bid.onclckbn.com/banner/in/show/?mid=4094839208703862793&pid=0&site=499676&sc=NO&usage_type=DCH&subid=505641195&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=doodo.click&hostname=auc-banner-hz-12&site_id=0&spot_id=499676&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB19&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=100&ml=&tag_ab=c&v2=0&ttl=&space_id=1499&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB19&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D499676%26source%3D505641195%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D499676%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DDownload%252CPapa%252CMuda%252CSange%252CNgehamilin%252CIbu%252CDi%252CKolam%252COnsen%252CDoodstream%252CDownload%252CVideo%252CPapa%252CMuda%252CSange%252CNgehamilin%252CIbu%252CDi%252CKolam%252COnsen%252CDengan%252Cberbagai%252CGenre%252CBokep%252CJepang%252CViral%252Chot%252Cterbaru%252Cfull%252CHD%252CDurasi%252CSitus%252Cnonton%2C%26spot_id%3D499676%26p%3Dhttps%253A%252F%252Fdoodo.click%252Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%2C4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D100%26bf%3D0.0001%26dr%3Ddoodo.click&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Download%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDoodstream%2CDownload%2CVideo%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDengan%2Cberbagai%2CGenre%2CBokep%2CJepang%2CViral%2Chot%2Cterbaru%2Cfull%2CHD%2CDurasi%2CSitus%2Cnonton,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=0&client_price=&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0 | 157.90.85.57 | 302 Found | 0 B |
URL GET HTTP/2bid.onclckbn.com/banner/in/show/?mid=4094839208703862793&pid=0&site=499676&sc=NO&usage_type=DCH&subid=505641195&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=doodo.click&hostname=auc-banner-hz-12&site_id=0&spot_id=499676&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB19&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=100&ml=&tag_ab=c&v2=0&ttl=&space_id=1499&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB19&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D499676%26source%3D505641195%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D499676%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DDownload%252CPapa%252CMuda%252CSange%252CNgehamilin%252CIbu%252CDi%252CKolam%252COnsen%252CDoodstream%252CDownload%252CVideo%252CPapa%252CMuda%252CSange%252CNgehamilin%252CIbu%252CDi%252CKolam%252COnsen%252CDengan%252Cberbagai%252CGenre%252CBokep%252CJepang%252CViral%252Chot%252Cterbaru%252Cfull%252CHD%252CDurasi%252CSitus%252Cnonton%2C%26spot_id%3D499676%26p%3Dhttps%253A%252F%252Fdoodo.click%252Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%2C4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D100%26bf%3D0.0001%26dr%3Ddoodo.click&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Download%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDoodstream%2CDownload%2CVideo%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDengan%2Cberbagai%2CGenre%2CBokep%2CJepang%2CViral%2Chot%2Cterbaru%2Cfull%2CHD%2CDurasi%2CSitus%2Cnonton,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=0&client_price=&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0 IP157.90.85.57:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://bid.onclckbn.com/get/?go=1&data=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 CertificateIssuerLet's Encrypt Subjectrtbbnr.com Fingerprint50:F0:54:4D:69:42:92:C3:CA:86:D0:5D:5E:8F:CB:CF:53:CF:AF:A5 ValidityWed, 01 May 2024 01:53:14 GMT - Tue, 30 Jul 2024 01:53:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=4094839208703862793&pid=0&site=499676&sc=NO&usage_type=DCH&subid=505641195&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=doodo.click&hostname=auc-banner-hz-12&site_id=0&spot_id=499676&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=default&iabcat=IAB19&min_cpm=0.0001&placement_type_id=269&skin_test=&verify_hash=&score=100&ml=&tag_ab=c&v2=0&ttl=&space_id=1499&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB19&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D499676%26source%3D505641195%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D499676%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DDownload%252CPapa%252CMuda%252CSange%252CNgehamilin%252CIbu%252CDi%252CKolam%252COnsen%252CDoodstream%252CDownload%252CVideo%252CPapa%252CMuda%252CSange%252CNgehamilin%252CIbu%252CDi%252CKolam%252COnsen%252CDengan%252Cberbagai%252CGenre%252CBokep%252CJepang%252CViral%252Chot%252Cterbaru%252Cfull%252CHD%252CDurasi%252CSitus%252Cnonton%2C%26spot_id%3D499676%26p%3Dhttps%253A%252F%252Fdoodo.click%252Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%2C4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D100%26bf%3D0.0001%26dr%3Ddoodo.click&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Download%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDoodstream%2CDownload%2CVideo%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDengan%2Cberbagai%2CGenre%2CBokep%2CJepang%2CViral%2Chot%2Cterbaru%2Cfull%2CHD%2CDurasi%2CSitus%2Cnonton,&stratagem=&ssp=3758&refresh=1&priority=0&bb=0.0001&label_ids=&site_id64=0&client_price=&container=ClickadillaTuple&original_bid_usd=0&comeback=&topics=&o_d=&ectr=0 HTTP/1.1
Host: bid.onclckbn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bid.onclckbn.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5OSwic3BhY2VpZCI6MTQ5OSwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkRvd25sb2FkJTJDUGFwYSUyQ011ZGElMkNTYW5nZSUyQ05nZWhhbWlsaW4lMkNJYnUlMkNEaSUyQ0tvbGFtJTJDT25zZW4lMkNEb29kc3RyZWFtJTJDRG93bmxvYWQlMkNWaWRlbyUyQ1BhcGElMkNNdWRhJTJDU2FuZ2UlMkNOZ2VoYW1pbGluJTJDSWJ1JTJDRGklMkNLb2xhbSUyQ09uc2VuJTJDRGVuZ2FuJTJDYmVyYmFnYWklMkNHZW5yZSUyQ0Jva2VwJTJDSmVwYW5nJTJDVmlyYWwlMkNob3QlMkN0ZXJiYXJ1JTJDZnVsbCUyQ0hEJTJDRHVyYXNpJTJDU2l0dXMlMkNub250b24sIiwibGFiZWxzIjoiNCw1LDYsNyw4LDksNDYsNDcsNTQsNTUsNjEsMTA5LDQsNSw2LDcsOCw5LDQ2LDQ3LDU0LDU1LDYxLDEwOSIsImFsbG93ZWRfbGFiZWxzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IjUwNTY0MTE5NSIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjQ5OTY3NiwibXVsdGlwbGUiOmZhbHNlLCJpc19pZnJhbWUiOmZhbHNlLCJyZWZkb21haW4iOiIiLCJwbCI6MCwic3RyYXRhZ2VtIjoiIiwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU4LCJidHlwZSI6MCwidjIiOjAsInJjaGFuZ2UiOmZhbHNlfSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiNDk5Njc2IiwiY2F0IjpbIklBQjE5Il0sInBhZ2UiOiJodHRwczovL2Rvb2RvLmNsaWNrL3BhcGEtbXVkYS1zYW5nZS1uZ2VoYW1pbGluLWlidS1kaS1rb2xhbS1vbnNlbi8iLCJjdGlkIjoxfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOGE2OTViOWUyY2ZjMWNmZGUzM2M3OGU4MGU1YTUxZTIiLCJmcCI6bnVsbCwiZnBfc3RyIjoiIiwidWFfZGF0YSI6bnVsbH0sImV4dCI6eyJkdCI6MTcxNDkxNzIxMzEyNn19
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Sun, 05 May 2024 13:53:33 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=499676&source=505641195&idzone=0&w=300&h=250&mo=&ve=&site_id=499676&utm1=&utm2=&utm3=&utm4=&ad_tags=Download%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDoodstream%2CDownload%2CVideo%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDengan%2Cberbagai%2CGenre%2CBokep%2CJepang%2CViral%2Chot%2Cterbaru%2Cfull%2CHD%2CDurasi%2CSitus%2Cnonton,&spot_id=499676&p=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109,4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=100&bf=0.0001&dr=doodo.click
X-Firefox-Spdy: h2
|
|
| btds.zog.link/in/912/?sid=499676&source=505641195&idzone=0&w=300&h=250&mo=&ve=&site_id=499676&utm1=&utm2=&utm3=&utm4=&ad_tags=Download%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDoodstream%2CDownload%2CVideo%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDengan%2Cberbagai%2CGenre%2CBokep%2CJepang%2CViral%2Chot%2Cterbaru%2Cfull%2CHD%2CDurasi%2CSitus%2Cnonton,&spot_id=499676&p=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109,4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=100&bf=0.0001&dr=doodo.click | 109.206.176.75 | 302 Found | 0 B |
URL GET HTTP/2btds.zog.link/in/912/?sid=499676&source=505641195&idzone=0&w=300&h=250&mo=&ve=&site_id=499676&utm1=&utm2=&utm3=&utm4=&ad_tags=Download%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDoodstream%2CDownload%2CVideo%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDengan%2Cberbagai%2CGenre%2CBokep%2CJepang%2CViral%2Chot%2Cterbaru%2Cfull%2CHD%2CDurasi%2CSitus%2Cnonton,&spot_id=499676&p=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109,4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=100&bf=0.0001&dr=doodo.click IP109.206.176.75:443
Requested byhttps://bid.onclckbn.com/get/?go=1&data=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 CertificateIssuerLet's Encrypt Subjectbtds.zog.link Fingerprint75:03:AF:F9:98:70:A2:1C:2C:16:63:24:61:B2:C8:4A:DE:12:C3:CC ValidityFri, 22 Mar 2024 03:01:38 GMT - Thu, 20 Jun 2024 03:01:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=499676&source=505641195&idzone=0&w=300&h=250&mo=&ve=&site_id=499676&utm1=&utm2=&utm3=&utm4=&ad_tags=Download%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDoodstream%2CDownload%2CVideo%2CPapa%2CMuda%2CSange%2CNgehamilin%2CIbu%2CDi%2CKolam%2COnsen%2CDengan%2Cberbagai%2CGenre%2CBokep%2CJepang%2CViral%2Chot%2Cterbaru%2Cfull%2CHD%2CDurasi%2CSitus%2Cnonton,&spot_id=499676&p=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109,4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=100&bf=0.0001&dr=doodo.click HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bid.onclckbn.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 05 May 2024 13:53:34 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://topshortnews.co/onclicka_300x250.html
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Mon, 06 May 2024 13:53:33 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| js.wpadmngr.com/static/adManager.js | 45.133.44.52 | 200 OK | 75 kB |
URL GET HTTP/2js.wpadmngr.com/static/adManager.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectjs.wpadmngr.com Fingerprint60:8B:32:7F:ED:77:26:33:0E:F0:C1:0F:02:66:F5:DB:C6:0D:1F:70 ValidityMon, 11 Mar 2024 04:00:58 GMT - Sun, 09 Jun 2024 04:00:57 GMT
File typegzip compressed data, from Unix Hashc558ca9cb11de3bf229ee6a82c804e1f b91072f2f2d3a8ded563b68b2a3e07a45d2c1f3d ad79f39f84ffe17649caa053e2de520cf3820624d309ffacc6943e59db825368
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 23 Apr 2024 09:45:14 GMT
etag: W/"6627832a-6c7"
content-encoding: gzip
expires: Sun, 05 May 2024 13:58:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| topshortnews.co/onclicka_300x250.html | 172.67.200.138 | 200 OK | 3.7 kB |
URL GET HTTP/2topshortnews.co/onclicka_300x250.html IP172.67.200.138:443
Requested byhttps://bid.onclckbn.com/get/?go=1&data=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 CertificateIssuerGoogle Trust Services LLC Subjecttopshortnews.co FingerprintA9:43:16:F4:7C:9C:E7:11:62:DA:DF:8B:C6:90:78:6D:4B:66:E5:D8 ValiditySun, 21 Apr 2024 17:26:28 GMT - Sat, 20 Jul 2024 17:26:27 GMT
File typeHTML document, ASCII text Hasha828fd1dc0916b5d6cd50d5c5edd556a d63bed2cc0194cf7587d1400f2036220ceab662d 6f7047e7337f7b750119019e8f0fc765d6619cc4bed5e4a2f1a6291e59f23882
GET /onclicka_300x250.html HTTP/1.1
Host: topshortnews.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bid.onclckbn.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:33 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
last-modified: Thu, 14 Mar 2024 08:36:45 GMT
x-request-id: 3173f253b4705d11c7300666a53282e5
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oLAz7HqvE7ErZROtfBez8nE4LxvJQ3wTLIRcnUgZuWA9sWLAU5uMkFWGjpS884dX%2F4dFUfhM3O06rzuo2rrrgBHwHthRm6pVw%2BgEJUIplpFXV2RVFHH9iKoasffZ1bUoJIM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f137aae88f5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-admin/admin-ajax.php | 172.67.175.100 | 200 OK | 7.6 kB |
URL POST HTTP/3doodo.click/wp-admin/admin-ajax.php IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeASCII text, with no line terminators Hashcc85effc576005c9667362e3f8303d79 0fc97b4529d319bdb0266ed9aaffde15bd3a0fc0 262318277ce8160377ca4041e4a85571257e43d3788aa27333cee4f07e0aa959
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 50
Origin: https://doodo.click
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Cookie: _ga_JTTM4MVGC3=GS1.1.1714917210.1.0.1714917211.0.0.0; _ga=GA1.1.1676310092.1714917211; bnState_2018952={"impressions":1,"delayStarted":0}; bnState_2018951={"impressions":1,"delayStarted":0}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://doodo.click
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5PowJqA8KOeA3Yvv0CE8P5N7qAIcoh1meRQt%2FGFjdZE091qIlZAXVvPoww7%2FW73I%2FGzb3GhXw9I30iDxgqEiaG2%2BpxsIfWPjHl%2BP1BazMipGKGJZpa4xV6rRNGS5MA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f137a53c09b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| storage.multstorage.com/log/count.html | 104.21.30.242 | 200 OK | 882 B |
URL GET HTTP/2storage.multstorage.com/log/count.html IP104.21.30.242:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectmultstorage.com Fingerprint63:F0:24:29:21:22:E5:42:33:61:B5:20:05:1B:EF:36:81:F5:7B:0A ValiditySun, 17 Mar 2024 08:38:54 GMT - Sat, 15 Jun 2024 08:38:53 GMT
File typeHTML document, ASCII text, with very long lines (919), with no line terminators Hash053b1fe641da8057571d40ebaf1624ab 09b2648b7d08c84621298f0b939cea5170a65022 6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:32 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: 378ec944c5cd598fe2c7de5d5d51d81d
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cfiwi0VfujZFOoeA1ARF%2FfTiGwZZCT51aCZW2Yr5qktzwW%2FLi1WT0jRzGFstpuOYNHeMWrM3iIP7XXHQg2YbPnaY93K1Ve%2B%2B92dxkFvMfjMHcj%2FT50Paqj%2B93NDO7r6pP68pvS5Jvl%2F7Lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f137a4aae0568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| srcembed.online/uploads/banners/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen.jpg | 104.21.77.43 | 200 OK | 32 kB |
URL GET HTTP/3srcembed.online/uploads/banners/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen.jpg IP104.21.77.43:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGoogle Trust Services LLC Subjectsrcembed.online Fingerprint0B:93:65:B3:9F:86:5D:5E:FA:B9:82:FE:14:11:6F:2E:B2:74:3F:EB ValidityFri, 08 Mar 2024 01:18:41 GMT - Thu, 06 Jun 2024 01:18:40 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x360, components 3 Hash2433fada0b4404a214d21c2694a18059 af8d73ed16796d1c220081fbdea20515e29cb97c d5a7905d045813daa9a598faec1fe589643db34c269dfeccb044efa7effad4d9
GET /uploads/banners/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen.jpg HTTP/1.1
Host: srcembed.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/video/myk1aOpxzYbJQfl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:33 GMT
content-type: image/jpeg
last-modified: Mon, 01 Jan 2024 06:24:43 GMT
vary: Accept-Encoding
etag: W/"65925aab-7aeb"
expires: Wed, 29 May 2024 11:43:25 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RqSXUL1UN2Lr3z%2FnyCU9b8G6x%2Fpi5V9lAKg%2BaIfn1YEB7GjLAhJ0%2F%2BxmRxt%2FZXGe5ohR%2BGt7z%2BHzpiUlbXvf%2FEGANeZPjepww4qpDK5W732q83hOksPZQoAmi1AS0xVkZ7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f137a489fb56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s.o333o.com/adgpt.js | 85.10.205.45 | 200 OK | 2.0 kB |
IP85.10.205.45:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerSectigo Limited Subjects.o333o.com FingerprintC1:C0:0F:C0:EF:0F:F7:7A:36:2F:00:9E:5C:55:63:54:63:A3:A6:46 ValidityMon, 12 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT
File typeASCII text, with very long lines (2144), with no line terminators Hash15c5faf13e6a9fe6956e7a9f8dfc1fe4 d323e8b5e73a2b8697c980370840e9c7b574ad68 53e483dd657b4fb19cce7d604e2b5890d0694b9a2c9190279151ac830d24ba81
GET /adgpt.js HTTP/1.1
Host: s.o333o.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:32 GMT
content-type: application/javascript
content-length: 820
last-modified: Fri, 22 Mar 2024 11:21:21 GMT
vary: Accept-Encoding
etag: "65fd69b1-334"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
X-Firefox-Spdy: h2
|
|
| s.o333o.com/adgpt.js | 85.10.205.45 | 200 OK | 2.0 kB |
IP85.10.205.45:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerSectigo Limited Subjects.o333o.com FingerprintC1:C0:0F:C0:EF:0F:F7:7A:36:2F:00:9E:5C:55:63:54:63:A3:A6:46 ValidityMon, 12 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT
File typeASCII text, with very long lines (2144), with no line terminators Hash15c5faf13e6a9fe6956e7a9f8dfc1fe4 d323e8b5e73a2b8697c980370840e9c7b574ad68 53e483dd657b4fb19cce7d604e2b5890d0694b9a2c9190279151ac830d24ba81
GET /adgpt.js HTTP/1.1
Host: s.o333o.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:31 GMT
content-type: application/javascript
content-length: 820
last-modified: Fri, 22 Mar 2024 11:21:21 GMT
vary: Accept-Encoding
etag: "65fd69b1-334"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 172.67.175.100 | 200 OK | 88 kB |
URL GET HTTP/3doodo.click/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:14:54 GMT
cache-control: public, max-age=2592000
expires: Fri, 31 May 2024 05:02:13 GMT
cf-cache-status: HIT
age: 341865
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=onBcjCJmNKsZL28MJZyxDwGHex4aVTWrTUso0YYgmr%2B7uZllGZuQElLAm%2FGd4Vn1081Oixvn80oIydXaV4gd0IA%2BhCobZnwHLndLIY9pD8EKFaGkUnCDm5D58HT0tA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794af9bb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 172.67.175.100 | 200 OK | 14 kB |
URL GET HTTP/3doodo.click/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:14:54 GMT
cache-control: public, max-age=2592000
expires: Fri, 31 May 2024 04:43:35 GMT
cf-cache-status: HIT
age: 341865
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFT5SU9xIxYLzPkHoqqnYsQlyCUZx5pOv6YHWjm%2F1ipdWAVjbgn9D2GkQDTv5Wewgve3TTw%2BiK0yg0Xh2EpA4rvzj9JFZvvM4ua2O%2BEs2bSW2qR9KAP%2FyRqQcnbqrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794bf9cb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| js.wpadmngr.com/static/adManager.m.js | 45.133.44.52 | 200 OK | 109 kB |
URL GET HTTP/2js.wpadmngr.com/static/adManager.m.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectjs.wpadmngr.com Fingerprint60:8B:32:7F:ED:77:26:33:0E:F0:C1:0F:02:66:F5:DB:C6:0D:1F:70 ValidityMon, 11 Mar 2024 04:00:58 GMT - Sun, 09 Jun 2024 04:00:57 GMT
Size109 kB (109340 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 23 Apr 2024 09:45:19 GMT
etag: W/"6627832f-1ab1c"
content-encoding: gzip
expires: Sun, 05 May 2024 13:58:31 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| t7cp4fldl.com/get/2018952?zoneid=2018952&jp=_clwlb0aqr0tuh8ha7vcznt&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2364188628035584&eclog=0&im=1&freq=0&uf=0 | 212.117.190.201 | 200 OK | 4.3 kB |
URL GET HTTP/2t7cp4fldl.com/get/2018952?zoneid=2018952&jp=_clwlb0aqr0tuh8ha7vcznt&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2364188628035584&eclog=0&im=1&freq=0&uf=0 IP212.117.190.201:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint1E:73:92:9F:14:DF:47:2D:DB:3D:0B:6D:38:9F:71:8C:33:6D:14:F2 ValidityTue, 09 Jan 2024 13:35:36 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeUnicode text, UTF-8 text, with very long lines (4392), with no line terminators Hashd878d20c991d1fe313121f475290daf6 83085cf40a3aec85f28233cf4c13a97e2c97f4db 57f4fc68183fdc91ae99226f4dc9be4658a1547a5202ebbec900b1fc5df157bd
GET /get/2018952?zoneid=2018952&jp=_clwlb0aqr0tuh8ha7vcznt&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2364188628035584&eclog=0&im=1&freq=0&uf=0 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:31 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 08 Jun 2025 13:53:31 GMT; Secure; SameSite=None
UID=2405050853a63913d343eb4b4da6d7777e87; Path=/; Expires=Sun, 08 Jun 2025 13:53:31 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| js.capndr.com/advertising.js | 45.133.44.53 | 200 OK | 0 B |
URL GET HTTP/2js.capndr.com/advertising.js IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectjs.capndr.com Fingerprint0D:30:A1:FB:7E:A0:EC:89:85:17:27:67:37:21:DA:E0:CB:E3:26:06 ValiditySun, 21 Apr 2024 03:00:41 GMT - Sat, 20 Jul 2024 03:00:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Sun, 05 May 2024 13:58:31 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-content/themes/kingtube/assets/js/skip-link-focus-fix.js?ver=1.0.0 | 172.67.175.100 | 200 OK | 683 B |
URL GET HTTP/3doodo.click/wp-content/themes/kingtube/assets/js/skip-link-focus-fix.js?ver=1.0.0 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJavaScript source, ASCII text, with very long lines (764), with no line terminators Hashdd786d8ce7d6818efc49c23556cb9e7c 8483b4b256a3933e21bcb4f886720bc7be5345b5 9883d893befe1cd5c78b0d9260ebffcf81b1973de9cc5c57837ec3b91781ed0a
GET /wp-content/themes/kingtube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:14:56 GMT
cache-control: public, max-age=2592000
expires: Fri, 31 May 2024 04:41:11 GMT
cf-cache-status: HIT
age: 341864
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OeSmI8BYXn2Jo%2FWZMyYHal8NeYiJvyoXYp9SJDJkZmPot14a3mFvzCQbqPKQ1BWbVE2hWb4WsiW9BLF15hnsENlyVWPKbWigAoW2KM%2BBBzQ4A25e2i8sIwVk7Vmo%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794efe3b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| js.cabnnr.com/banner-admanager/build.m.js | 45.133.44.52 | 200 OK | 56 kB |
URL GET HTTP/2js.cabnnr.com/banner-admanager/build.m.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjectjs.cabnnr.com Fingerprint5C:37:AE:D3:EE:7B:02:13:44:21:0F:75:18:3F:22:34:F5:C6:15:64 ValidityFri, 19 Apr 2024 03:00:59 GMT - Thu, 18 Jul 2024 03:00:58 GMT
File typeJavaScript source, ASCII text, with very long lines (56336), with no line terminators Hashfccadd28c5e4331a4dcf655826830e7f 5a12635ceaafe1f03e31e97014fd37781b373ccc e50d381ae31a1cf8118b1f475ead1ae9cf3f2dae59c30cc0f11939b68837cfe0
GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:33 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 23 Apr 2024 08:48:17 GMT
etag: W/"662775d1-dc10"
content-encoding: gzip
expires: Sun, 05 May 2024 13:58:33 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| a.memosaqee.com/api/users/471418?host=doodo.click&ev=212&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&sid=316f550d-e6e6-4ea8-a0be-d3255e18eb25&i=1 | 135.181.208.216 | 200 OK | 614 B |
URL GET HTTP/2a.memosaqee.com/api/users/471418?host=doodo.click&ev=212&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&sid=316f550d-e6e6-4ea8-a0be-d3255e18eb25&i=1 IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
File typeASCII text, with very long lines (744), with no line terminators Hash4b1330dd0ad33645d0f75bd1cc81e95b 2e7e43ff91cb9ef82768f7505dc17b4a524b7d77 6c60388cdbf493fc4b506587003ac0162ee8e7bd4947ed208181143a473e2a7f
GET /api/users/471418?host=doodo.click&ev=212&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fdoodo.click%2Fpapa-muda-sange-ngehamilin-ibu-di-kolam-onsen%2F&sid=316f550d-e6e6-4ea8-a0be-d3255e18eb25&i=1 HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Cookie: nauid=IGv1ulfFVXb0CxyV5Awz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:33 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.tubecorp.com/b/300x250.png | 45.133.44.25 | 200 OK | 73 kB |
URL GET HTTP/2cdn.tubecorp.com/b/300x250.png IP45.133.44.25:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://topshortnews.co/onclicka_300x250.html CertificateIssuerLet's Encrypt Subjectcdn.tubecorp.com Fingerprint34:BC:E4:45:52:8A:F9:EE:96:A3:49:A4:C1:8F:85:52:94:DA:F7:4F ValidityThu, 04 Apr 2024 03:01:03 GMT - Wed, 03 Jul 2024 03:01:02 GMT
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced Hasha1dcd5a7ec62b21b12724d4e3be1a775 8cfbcdec3ff538851c17ab0ecf6e2234a1eeb08e feabab5013a7cd08bff8c6e5365781819e137f7b2674f1ef8a1f2958c3fe918e
GET /b/300x250.png HTTP/1.1
Host: cdn.tubecorp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topshortnews.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:34 GMT
content-type: image/png
content-length: 73357
server: nginx/1.20.1
last-modified: Thu, 14 Mar 2024 08:31:38 GMT
etag: "65f2b5ea-11e8d"
cache-control: max-age=3600
x-request-id: 627887c9f3c3046010095a77901ec010
expires: Sun, 05 May 2024 14:53:34 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 172.67.175.100 | 200 OK | 19 kB |
URL GET HTTP/3doodo.click/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Cookie: _ga_JTTM4MVGC3=GS1.1.1714917210.1.0.1714917211.0.0.0; _ga=GA1.1.1676310092.1714917211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 08 Apr 2024 16:13:47 GMT
cache-control: public, max-age=2592000
expires: Fri, 31 May 2024 03:09:50 GMT
cf-cache-status: HIT
age: 341864
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fi%2BZmMCy0rUy4AuRgZGCt9o%2FAbAxYj3WkFh9irzqrH5nhAHokyx25VNXzHsk9Mmmd2vDq4Zdnilaeqcn8jq5%2FD2y4MUltl41MikhE%2FLiCyPpGQJu4VzYmE3ihbFPIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f1379c0fb6b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| srcembed.online/templates/assets/css/player.css?v=1714917211 | 104.21.77.43 | 200 OK | 3.0 kB |
URL GET HTTP/3srcembed.online/templates/assets/css/player.css?v=1714917211 IP104.21.77.43:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerGoogle Trust Services LLC Subjectsrcembed.online Fingerprint0B:93:65:B3:9F:86:5D:5E:FA:B9:82:FE:14:11:6F:2E:B2:74:3F:EB ValidityFri, 08 Mar 2024 01:18:41 GMT - Thu, 06 Jun 2024 01:18:40 GMT
File typeASCII text, with very long lines (3174), with no line terminators Hash0a298073256b661cf61c9d35afe029e9 1cf52515af5e7b24b51381afea69e2fd0d0dc11a c7411a98505144a1c0c193eb1fcfceca0f3c2a9a111597374d219ea7bf5d989a
GET /templates/assets/css/player.css?v=1714917211 HTTP/1.1
Host: srcembed.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/video/myk1aOpxzYbJQfl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:32 GMT
content-type: text/css
last-modified: Wed, 29 Nov 2023 08:50:47 GMT
vary: Accept-Encoding
etag: W/"6566fb67-bb3"
expires: Mon, 06 May 2024 01:53:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tb18M38EUEXJU0Dd40A9LhY8Eoa%2BFx7JlUjjevgevZ79DX8dzkTpmXoB2unr9CH7gDBXMMczzqhZ07hVHQjlObrV6ZoBW%2Bz4d2IcnhCHd2Mw9JthbskOenF0m0iD55ap80o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f1379e6afe56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| a.memosaqee.com/api/settings/471274 | 135.181.208.216 | 200 OK | 33 B |
URL GET HTTP/2a.memosaqee.com/api/settings/471274 IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash511ff610a0435434dd22a4836719fbb3 0cf692a9ecb6dd3d715e3315e0eeccc1c384f0c3 d090111da31c837d965f1dcf49b00a53cf41686d0913627f78c5ff36d693c6d0
GET /api/settings/471274 HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://srcembed.online/
Origin: https://srcembed.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:32 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| a.memosaqee.com/api/settings/471418 | 135.181.208.216 | 200 OK | 33 B |
URL GET HTTP/2a.memosaqee.com/api/settings/471418 IP135.181.208.216:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerLet's Encrypt Subjecta.bdsmz.tube FingerprintAA:4D:03:7A:4E:94:8C:76:58:6E:53:CC:8E:99:24:E6:51:84:BF:05 ValidityFri, 03 May 2024 10:27:08 GMT - Thu, 01 Aug 2024 10:27:07 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash511ff610a0435434dd22a4836719fbb3 0cf692a9ecb6dd3d715e3315e0eeccc1c384f0c3 d090111da31c837d965f1dcf49b00a53cf41686d0913627f78c5ff36d693c6d0
GET /api/settings/471418 HTTP/1.1
Host: a.memosaqee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doodo.click/
Origin: https://doodo.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:31 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| t7cp4fldl.com/get/2018951?zoneid=2018951&jp=_clj43ni2v3alm4li5qgvac&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615988441720320&eclog=0&im=1&freq=0&uf=0 | 212.117.190.201 | 200 OK | 4.2 kB |
URL GET HTTP/2t7cp4fldl.com/get/2018951?zoneid=2018951&jp=_clj43ni2v3alm4li5qgvac&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615988441720320&eclog=0&im=1&freq=0&uf=0 IP212.117.190.201:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint1E:73:92:9F:14:DF:47:2D:DB:3D:0B:6D:38:9F:71:8C:33:6D:14:F2 ValidityTue, 09 Jan 2024 13:35:36 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeASCII text, with very long lines (4270), with no line terminators Hash1e9d5a80be0faacf08faeaf179efd21a 1f549a6b24f84997473afc41967835c13f7ec742 89f4b5d2c43afc8119c035db8934801ee1fdf914a035d6b957cfa6f851721e6a
GET /get/2018951?zoneid=2018951&jp=_clj43ni2v3alm4li5qgvac&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615988441720320&eclog=0&im=1&freq=0&uf=0 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:31 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=240505085370510ec72bf5498792e7a26a04; Path=/; Expires=Sun, 08 Jun 2025 13:53:31 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Sun, 08 Jun 2025 13:53:31 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| milkstream.site/stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video.m3u8 | 104.21.89.147 | 200 OK | 12 kB |
URL GET HTTP/2milkstream.site/stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video.m3u8 IP104.21.89.147:443
Requested byhttps://srcembed.online/video/myk1aOpxzYbJQfl CertificateIssuerLet's Encrypt Subjectmilkstream.site Fingerprint01:8C:4B:6F:BA:CA:EE:85:37:9B:CB:2A:7F:89:A9:1D:B9:D7:65:44 ValidityFri, 05 Apr 2024 07:11:30 GMT - Thu, 04 Jul 2024 07:11:29 GMT
Hash2fe584f881cb81648dcac3b3f8dbc4fb b07b3e1ebfbda534777a66496fb8ec53f0412c30 18edeb88e1dad67dc887a890dfd96e189bc2760cf22532476b9dcaf439f4f5fa
GET /stream/video/480/Papa-Muda-Sange-Ngehamilin-Ibu-Di-Kolam-Onsen/video.m3u8 HTTP/1.1
Host: milkstream.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srcembed.online
DNT: 1
Connection: keep-alive
Referer: https://srcembed.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:33 GMT
content-type: application/vnd.apple.mpegurl
last-modified: Sat, 09 Dec 2023 04:22:30 GMT
etag: W/"6573eb86-308c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
x-robots-tag: noindex, nofollow, nosnippet, noarchive
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CIieQHRSgwzRgz9WoGghCpFy0gSJgEKf6CNGLSjVAIiPujLNQ9jPQY7YV0oH%2FuKTLxPLv7t1sxPZ06EGK2KeQS%2Bxh%2FTbYvZRrD25u76%2BYUKoxK0WI2IJhdTFmwRFuxLtCJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f137a51f8456b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| srcembed.online/video/myk1aOpxzYbJQfl | 104.21.77.43 | 200 OK | 2.8 kB |
URL GET HTTP/2srcembed.online/video/myk1aOpxzYbJQfl IP104.21.77.43:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectsrcembed.online Fingerprint0B:93:65:B3:9F:86:5D:5E:FA:B9:82:FE:14:11:6F:2E:B2:74:3F:EB ValidityFri, 08 Mar 2024 01:18:41 GMT - Thu, 06 Jun 2024 01:18:40 GMT
File typeHTML document, ASCII text, with very long lines (2945), with no line terminators Hashc61046f22c6b436a51c40c977b7b1f1a 9afb7c709b460f3941c827536997a1dc08fc971e 435e4e74f51dd41879f139d50754a65b1f3d284fc578983587528be770449661
GET /video/myk1aOpxzYbJQfl HTTP/1.1
Host: srcembed.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 13:53:31 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=f459442vsael544ro0qjh58tfs; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKaTJTUv04vMI2NVIvFb5Z6ZGn22Wsbajk4VM33l3xtlE1RBBRy7w3MaZlXSc5hOz%2Fx1G60GDROi6%2B7zxtLt%2FE6p3v0hTXV74v9ma8PDTs1FTfODd9bZbHq7WHeseraZgpU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f1379b1d5d56b7-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| t7cp4fldl.com/lv/esnk/2018951/code.js | 212.117.190.201 | 200 OK | 116 kB |
URL GET HTTP/2t7cp4fldl.com/lv/esnk/2018951/code.js IP212.117.190.201:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint1E:73:92:9F:14:DF:47:2D:DB:3D:0B:6D:38:9F:71:8C:33:6D:14:F2 ValidityTue, 09 Jan 2024 13:35:36 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65107) Size116 kB (115697 bytes) Hashc078b003b4fbc916c3d88e11faf30395 47c51fbba87ce701a35b737111bddfeed2564179 9297a6b6ad82bc4722103de022402b820de95e68a6f21ee077d6d987bbd3d7c4
GET /lv/esnk/2018951/code.js HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:30 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 17:06:20 GMT
vary: Accept-Encoding
etag: W/"662a8d8c-1c437"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| t7cp4fldl.com/lv/esnk/2018952/code.js | 212.117.190.201 | 200 OK | 116 kB |
URL GET HTTP/2t7cp4fldl.com/lv/esnk/2018952/code.js IP212.117.190.201:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint1E:73:92:9F:14:DF:47:2D:DB:3D:0B:6D:38:9F:71:8C:33:6D:14:F2 ValidityTue, 09 Jan 2024 13:35:36 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65107) Size116 kB (115697 bytes) Hash28ac78db4b1d4ae184a8e2e932d953a3 b8c8e51475d655b36219bc15ce5da2b2f1c095de 7afdb2bf2e45bcfac5882f228c5f935cb454ac8fd961cb7fc7e17bb2a35968ca
GET /lv/esnk/2018952/code.js HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 13:53:30 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 17:06:20 GMT
vary: Accept-Encoding
etag: W/"662a8d8c-1c437"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| doodo.click/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 172.67.175.100 | 200 OK | 113 kB |
URL GET HTTP/3doodo.click/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
Size113 kB (113381 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 08 Apr 2024 16:13:48 GMT
cache-control: public, max-age=31536000
expires: Thu, 01 May 2025 04:35:01 GMT
cf-cache-status: HIT
age: 258168
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WhoP4cThKFBzobASlLXkjkyd%2BZk6%2B%2FS6GXF0xP%2FPzhZp%2BGDZ8gSWhnNrkb1qfZC12zp5cA8TA%2FRUFxWLc1aODJb0DXGYnhwn0Ffi3lzzqyRLfLtfkdB3Q69lraL8VQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794af93b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/cache/min/1/wp-content/themes/kingtube/style.css?ver=1714590108 | 172.67.175.100 | 200 OK | 44 kB |
URL GET HTTP/3doodo.click/wp-content/cache/min/1/wp-content/themes/kingtube/style.css?ver=1714590108 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeASCII text, with very long lines (43517), with no line terminators Hash28ac1c5ab7ceb6e8b92491565d4d7437 379dfbdc9290724050de68bcf301dc23df9f1e2c 516744bbc329ee740887c854b468a6f0195ff5aabf167cbc9e1fbbeeb7fece3a
GET /wp-content/cache/min/1/wp-content/themes/kingtube/style.css?ver=1714590108 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 01 May 2024 19:01:48 GMT
etag: W/"a9fd-617691e54a120"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xyl3ABTeng4zavadugHxXWfDpovp72CsF%2FKAUVLRm4KH1UmuYrqnXkIoRaWQfasArVa5oVfCw9MZvA9%2FoYcUNFXscl6RwGPqdRf6cosJOdqiB9Jd4q00o7cO8er4MA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794af99b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| doodo.click/wp-content/themes/kingtube/assets/js/navigation.js?ver=1.0.0 | 172.67.175.100 | 200 OK | 4.5 kB |
URL GET HTTP/3doodo.click/wp-content/themes/kingtube/assets/js/navigation.js?ver=1.0.0 IP172.67.175.100:443
Requested byhttps://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/ CertificateIssuerGoogle Trust Services LLC Subjectdoodo.click FingerprintFD:20:20:86:77:90:5F:3B:C2:E6:F2:6F:19:3A:32:CF:42:04:F8:E5 ValidityTue, 26 Mar 2024 21:01:03 GMT - Mon, 24 Jun 2024 21:01:02 GMT
File typeJavaScript source, ASCII text, with very long lines (4946), with no line terminators Hash40ee7b2d2c0fa8c431c7025b96806d38 5fdccd79435ddc2a4c2aa3781c1c224ae34b90e7 5299567ba5d1c67d8d73c637d85dc56cee49c2566ddede0ed5425542c675e810
GET /wp-content/themes/kingtube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1
Host: doodo.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doodo.click/papa-muda-sange-ngehamilin-ibu-di-kolam-onsen/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 13:53:30 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 29 Jan 2024 02:14:56 GMT
cache-control: public, max-age=2592000
expires: Fri, 31 May 2024 04:41:58 GMT
cf-cache-status: HIT
age: 341864
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JbcELCMKvWs5nXfY3A8YupHq%2BRHK3w%2F271GmuHco3UmCIJxoT2bd7lOT%2BxfYvvO4DAShvkT0Xmk%2FbddfvCGxhviVXCyzZB6uMcKE9VInM%2F6QrwcRtc0mN2ptcCx6CA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f13794efdfb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|