{"report_id":"0d491b87-26c2-4712-a4d8-3e6668c2c559","version":0,"status":"done","tags":[],"date":"2026-07-07T11:52:53Z","url":{"schema":"https","addr":"dododol.cyou","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"title":"Domidex","dom":{"size":54452,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35199)","md5":"88c0f840e541b43585869b16987489be","sha1":"009979ee1c492b0f24ea9e1dad6173fb1a796730","sha256":"fba0c47bb63fc7e9dfee4c3537fd87c6e73cceac59dd92d0f7160940695d07f7","sha512":"7ed5974d09fba6384ac4365bf4d0d291bacd825244e1794501f84d8a3ce4826692eaad171268195c9a0886737e8ea9b4e506b134b4700d607a1bca3bbddb5cbb","ssdeep":"1536:vuP7oNRE7yp1ad5eZIXLTvQ4mZxp8wsOxc3i/3l:v6oMmt","tlshash":"e933ca22b548917712b7d6c0e2657f2cb1eae30bd25d81807afd82940fc7cf8b5169ad","dom_hash":"domhash7395ac4cac699ad70410074d588e5ea5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dododol.cyou","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T11:52:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dododol.cyou","ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-07T11:53:00.480731Z","last_seen":"2026-07-07T11:53:00.480731Z","alert_count":63,"request_count":64,"received_data":17173426,"sent_data":30288,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":11,"received_data":50261,"sent_data":6020,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-03-27T06:51:42.839831Z","last_seen":"2026-07-07T11:41:16.192294Z","alert_count":0,"request_count":22,"received_data":7228849,"sent_data":12629,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"w2703.ogac.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-22","domain_rank":0,"first_seen":"2025-03-27T06:51:42.836675Z","last_seen":"2026-07-07T11:41:38.071644Z","alert_count":0,"request_count":10,"received_data":51816,"sent_data":5540,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff2effbd97dbef98caebd336c3c8b0d0","sha1":"034f0c383def4526799a316a000c82411b3f7620","sha256":"07622d359ccac7f451cfcffc7b31f61537649051c5d7b53b6320a37a8a2247c6","sha512":"6dd0f5ed97057e84abe03eefff3d7b0843a62fa3c741b214549ae1f8df709ad37f9eb0a6799bacb99b8e004dadff7c832c469f66753901309f9f856bb9f65ebe","ssdeep":"","tlshash":"dde07d81a0433e714f171c50756f37ecd22d08692bb846935cfcc9b4769387486b7e98","size":323,"data":"","first_seen":"2026-07-07T11:41:26.860326Z","last_seen":"2026-07-08T02:06:35.105947Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f26e9f6b1c29e6f4121e99acde14ca85","sha1":"b1c38e35b24b663d3aa932c624a28bbb614d0772","sha256":"46d37c4717e581f3aaa15c68765f1c80e616455b0ea759da22387a361c377c06","sha512":"3789996c3c8f19489c197bfe681c9bd46dd7f48ff91740986476431c9a29fab78182a3ccaa336348aff562e3da2a2aefc6a3151d4606cab653cb87a35f8afb9e","ssdeep":"","tlshash":"e8c08cc4a0d66e001602641051bf24e8a0384027704c1f03dda4dc882e220b48337ea8","size":147,"data":"","first_seen":"2024-06-17T06:30:16Z","last_seen":"2026-07-08T02:06:35.092248Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9478c1e0e1c2e5e68abbb6f8e0aee904","sha1":"38a6937cb16e4625fbd62db9a7e31b04d3b49ec0","sha256":"d5a05c1804821cf30d7a240a914a931ff30dd4cbc7b2cc6009d885735276ed56","sha512":"dc176e7cb8d07e42cbcc28ef333c2109479a9b3a1500d66fcb7cff815f47a4e5ba050b9fc508c4606394657175bebf4a53d653e36355d7ce0eb0d5db71a0f8a4","ssdeep":"","tlshash":"90c08cc4a0c26d001622a81150bf29e89024802771c81b82ccd8e8883e220f08237eac","size":147,"data":"","first_seen":"2026-07-07T11:41:26.923156Z","last_seen":"2026-07-08T02:06:35.127599Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e6297d7faedd6fbd0ebe235fe39c969c","sha1":"dd4438718a3a92be245c660cbacf9cf3aefd22d0","sha256":"2b55bd826e8a70460fb92e8295b17c77af0b0cf6f7cdc478fbbb3483feb04108","sha512":"7cba889839232d7e64f06a17a68ac0f323eed482fa057cc9013f944e4d074912361b8ab0f3e9ef44ceb88bdfcbbf84a725656255be82a043739ec5cfd7988a06","ssdeep":"","tlshash":"a5c08cc4a0c32d002602651420af24e89024402670481b029c94d8482e220b08233e98","size":136,"data":"","first_seen":"2024-05-11T18:07:38Z","last_seen":"2026-07-08T02:06:35.078762Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5003a2cefed7629b058f13442b83fe37","sha1":"29967677945563e1293820a6bc485d76c2dd9c26","sha256":"e3ce9e933df9b916af7fa244c09cdfee6fa1a6fc20f158f234cf6c4b7ae7aa91","sha512":"70f40c8c5e0abe0e413a683c1221435c54c3da866cb043abd575d6fc015dbb89119a1b7b9b8c26bc1357597ce217fa0ad2fd1a751902e4e61c0b32a9b7b6b5da","ssdeep":"","tlshash":"8dc08cc4a0c32d102707645021ef25e4a029842ab1481b538cacdc882ea20b98237edc","size":158,"data":"","first_seen":"2026-07-07T11:41:26.900283Z","last_seen":"2026-07-08T02:06:35.139166Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d1caea98a380026c641af1f426cf1e91","sha1":"655817fd59fb4704bb2d8c351053550c176142de","sha256":"8c4765290b0c208db886dca2bc47bc7d37dbaa31a3c83c4ae921b3a79a941124","sha512":"88381acae447bb9eaf7875052a09ca1a4f14eef6cc06495122f5ca62016939ee20137d6c3809533f2fd323c657be7372637516be4970c621697dcd5cef4c0ddd","ssdeep":"","tlshash":"72c08cc4a0c22d501602651054af25e49034402670481b428c94d85c2e220b08237ee8","size":140,"data":"","first_seen":"2024-09-19T21:02:30.271309Z","last_seen":"2026-07-08T02:06:35.12434Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f88efa9f1f949f2241ff3d897b65827f","sha1":"bf951a0bccda6969f60405c01e71df70f6ea04c7","sha256":"31cbe896c8214287dee61ea90926e4697ebe26f52f55fa1122009c73548b609f","sha512":"b3a2a6e62b94758eb9918b16ec382e34b1a524c51f53fecb00e0ff4cf39c954eaea2143261265be5f5d9678ac2b7341a19ee3f1bb4290f702e5d20f580521af3","ssdeep":"","tlshash":"63d02b86f0413720151b681071bf79fcd13c44312164175a8dc9d4243f510f85237dd4","size":262,"data":"","first_seen":"2026-07-07T11:41:26.960938Z","last_seen":"2026-07-08T02:06:35.122802Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-e60e8bf0.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49de1e169ab53a30f4775d9cd708575b","sha1":"199f445cb79a4f63022d6a1ef5041ec71b6aea34","sha256":"583897a591cd4dce871f095cc83c51635e3b1f31f78b978d204b0ac8b2e4a59d","sha512":"c192c43c160c1ff2eee703b6b234e68f0abb23f4f31f5084ae415e16283e2197fbfa1e3524369b0eb11696b4302094a4d34b02066a6ec16472d76f49797330db","ssdeep":"3072:HJqxRGfbmHyJRH+foQg0qJQdwxxIV8Nh+fPZAIRDdurnvmb:HExRGfbmHyJV7Qg0qJ5IV8Nh+fPZAIRv","tlshash":"a4e33c4e98058fff7dbe0514b95a085020ad1fa791cd88e372fe9a5827f6ce5a34c724","size":156826,"data":"","first_seen":"2026-07-07T11:41:26.752406Z","last_seen":"2026-07-08T02:06:34.988614Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-14T05:43:40.589791Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"26334a486cacbbde08d5dd61c284171e","sha1":"9cb6bd8a1127ae177461f6212fc4904cd0512bc2","sha256":"6f7a28a010a22b9386d2934b0ca0c677d73e125e11b83c7d199078dbe9fad701","sha512":"7efe561675d2309ef1ad91e22448c046fe4bc702cee7f68206f825bc65316d210e1818c176a391ec1dd441eed9f798840bb8164d08ea6eae9e82e041b80c78cc","ssdeep":"","tlshash":"3fc08cc8b0c23d106656b51020af25e8a038d02a788c5b33ddd5d8892f230f89233e98","size":155,"data":"","first_seen":"2026-04-06T13:07:20.346336Z","last_seen":"2026-07-08T02:06:35.107418Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-14T11:56:35.977189Z","times_seen":4345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"89a2fd7cff47c6b788531d6b9a71333c","sha1":"8899006072807286f5533a81c3876dae527bc775","sha256":"73b7dc487f42029ff35f0dc72d753529a05305531f56810635264324a6d7d205","sha512":"1b389aa6a46a22e11fcf67cbec7d8e6acf913e9c9d6725d64ee2fb13ad7d7a41ac99b723a09f2f0243b9ccc33458b2e63c5cf545d5fcb8791a86f009e6e5031f","ssdeep":"","tlshash":"19c08cc4a0d66d001706a81014bf26e8a0244026704c5b438c94e8882e220b08233ea8","size":141,"data":"","first_seen":"2026-04-20T02:27:37.316222Z","last_seen":"2026-07-08T02:06:35.115148Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"332052a099a27304a447324fc0ff6ac1","sha1":"092eeba3ca1de10ebcc5c06cf3ca1816ba6565fb","sha256":"17014e37392c8fed37c106bdee11ccc977ddc205ded2cc83c53b7322ae222278","sha512":"9b40c9cc84a359cef3b383ad4f918c80671df3806726b4440fb5a7baee27b4ec296856388ce069b67affe76540a5a6e57cf86ed9c5a4085584ec5e1126eaeb52","ssdeep":"","tlshash":"bcc08cc4b0c22e002a06a81028af3ae8e024402a74481b468cd4d8582e230f48237e9c","size":150,"data":"","first_seen":"2023-07-09T14:24:47Z","last_seen":"2026-07-13T12:23:36.253817Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/charting_library/charting_library.min.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-13T14:16:28.211974Z","times_seen":1274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d05ac596ca08fa89f17f15c3c75d23ab","sha1":"f7c4c456cf417e8bc37658fd50fc0789f859bcac","sha256":"ec96ccd8c3449885529e51182352635073ef587e491aa776d51c7a51aa0adf06","sha512":"239ddff364f49662f5b7300ede66b7c90cfb5aa03a7feb515300d955d8cab9d4065d938e77c672781b237b18502adcdba2d1b31907c7b18bb11df8d4708fd344","ssdeep":"","tlshash":"94c080c470d62d555a056514616f25e4503c4026b1482782ccf4d9593e734b44237dec","size":173,"data":"","first_seen":"2026-07-07T11:41:26.885131Z","last_seen":"2026-07-08T02:06:35.133724Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e0815e350d9d4cba4cded1d06b7e4ae","sha1":"55e8faf606f9e30d196d1f081ade646ec864eabb","sha256":"380b6061b406e0bd4c3ce8d1377c1a8cf7dac28a4c9b1732bd8f38c85f973eff","sha512":"531acf789ab8db1319343736adf04fcb555521d06ab44ca8c8b9c349f549ac294ad92286a113e3a31124d28960daac791b1ec38151075280e0eb039775f20521","ssdeep":"","tlshash":"33d0a7c2b2d73d291b952765657f34e45039849ab0585b138decc9c83b171bca237ee8","size":229,"data":"","first_seen":"2026-07-07T11:41:26.930516Z","last_seen":"2026-07-08T02:06:35.126544Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57b80d9341ba59a6ace99ef51b700f5e","sha1":"d96586bc9a51ab8d516b4e5ffdcd9e2a1de84aaf","sha256":"d1cfb07e9665b20770b804f3fbd38d89c8c4c2e368e4c53a1fede65242568e82","sha512":"a53032069f0bf639a90288c532177af0adf90b6ad722f5e20c04df75f555d423a167d5bfad71f8ec2285a364eaec089c9c852ce19abf066e9e1229165e55a3da","ssdeep":"","tlshash":"bdc080c4a0d36d006526555130ef24d45024445674485f5b9d94d9542e621f15133eec","size":164,"data":"","first_seen":"2026-04-06T13:07:20.355913Z","last_seen":"2026-07-08T02:06:35.119706Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d4dde08b2f78db07220433f8a7023773","sha1":"a210f988ff967675ecaeeb6e3460d35dcff55b63","sha256":"c5d26f7e3f7944a175233a337e8ffda802872ed4c55de206b534c922fc3dc08c","sha512":"66a9fbf374aa5f2161431f35bfd1b0c21ae4bc6a69c6b6b4b6b0148da057cb40af175a3fc77893522b11fb46614287c6d24c388d94734a2ec35e10bbb3033f15","ssdeep":"","tlshash":"e4c08cc4a0c26d109622a41410af24e8a034442b70486b528c98e84a3e220f08233eac","size":145,"data":"","first_seen":"2025-08-01T10:28:57.340935Z","last_seen":"2026-07-08T02:06:35.072787Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ef9a96bb58ab6301afcb8cca184ca16","sha1":"2fa021ae2a7231e78d447bb965b81e4d4abfcc86","sha256":"20710ba7e15f39ff26c3643696c6167ec3b20687c52bc9ac2e5c8ab88ee977a5","sha512":"c191a8558dc47da056895529c1f31c54a70a67908fe8cb042e0fdfbe5cf0ab3b10d083d2e5390060c8d76ff0895ce45924e8425230983725a1b06979050e3689","ssdeep":"","tlshash":"cdc08cc4b0c73d111a22752090af34eab0284427b04c1b239c94e88c2e630f88237ed8","size":155,"data":"","first_seen":"2026-04-20T02:27:37.365645Z","last_seen":"2026-07-08T02:06:35.087056Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b930df22c33903a51da293acafe99c75","sha1":"b55338e86516b2bbb040b8f4ab18d06a42ce7f31","sha256":"ff6e566d85cf46b452a4d97bb3e7a3c5ca0e30f5701ab12d0c7418b19cb79a19","sha512":"00bcaad1a57c6337071e7ade127f8fcf7504e9e7310fc213c1b8f7ea19e1a0940ae31710b6077da5a1003d374f486044ef56ffe3592415d25936a8d30e4a5f3d","ssdeep":"","tlshash":"d8e02bc6b0d9af806793664021ef39e894204415724c3ed26c8ceca93dd39f8c26badc","size":292,"data":"","first_seen":"2026-07-07T11:41:26.953311Z","last_seen":"2026-07-08T02:06:35.088707Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"77a9acbe0a5807bddc2a854c731c1cef","sha1":"c1110a2e9b0e6b99d5ba39471e449659d5c96c0c","sha256":"ae2b2815428de00492f2b25decf47e84045bd26f37ccfd506f0d96d4c99646f5","sha512":"7ed47baca9a7fe6c5c63b9165e78a4361bcda6347f47df2b99a85aeab79584e32b3fcfd18b87ef25b573ad313fdba994ba58dfbde4e03a12a08b8131de733552","ssdeep":"","tlshash":"42c08cc4b0c36e105a026810a0bf28e490244436b4985b03ccb4d8692e238b0e337edc","size":152,"data":"","first_seen":"2026-07-07T11:41:26.947723Z","last_seen":"2026-07-08T02:06:35.098771Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/en-e87ee1c1.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1500ee7e87e644d4a6505d641e68cea0","sha1":"9306594900fd48256653066148c65009192ab2a8","sha256":"1b763268b77213958c086a93470c77d336d0463c4a77f237c61d88617758dd40","sha512":"fc420827d8d3a0ef73df6e9bb7495b0e458317f7693a347726f47b681f21cc2eeaa37588285383b870a55ebdab1bea9e1552fcb29b445efd3c56ff8124bd02d7","ssdeep":"768:wn2ZcEwlusI6hjZb1jsqvJ0JNk0sc7gUA5cY2blwOijTjb67NqM/IJzKEvzIqswF:szuZ6hNVB0hSCYiN8JRvzIez","tlshash":"31331a8d2e1a89a904f3172274ce6a5250b945c1c259485f0fecc9fd63d2fa7b3a7738","size":53468,"data":"","first_seen":"2026-07-07T11:41:26.840754Z","last_seen":"2026-07-08T02:06:35.046287Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d509c3241f01cb949085231883a05e36","sha1":"dccf7eab9e51f948923d55958b6e074aed707efc","sha256":"62433d2362ca2e121d1e43a3a163e99fb3cd307e35203184a542f409fc3993cb","sha512":"58f8af0cb22ce450edaeb168cb5a5ccaf14438d6d5114a4a37f13164e98d071cbb32cb35ca54c300d0117f2114f879f767e4c383f6c9e5d6c6aebc62667a6bb7","ssdeep":"","tlshash":"89c022c4a0ca29100a41181428af28e8a024c026b00c2b169ce4cc982dd20fc8223d88","size":194,"data":"","first_seen":"2025-08-01T10:28:57.347027Z","last_seen":"2026-07-08T02:06:35.140235Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dc61dfe54ad4e8f9d790a48cd05f0f67","sha1":"c783229f100cbf908bdc475c23bd5915d2b617df","sha256":"b13fa0f345b038888746bad71c153aaed3a76d7cfb4be95f7f23ba92b78740d3","sha512":"25a9af93b8ebce488ccb86fa4d388d6bd19510ae81f5bd5ef9b1d70394f93a2f05d28b4c4ad92c2cd0745b74bf0278214283f87c039b63a63d2fe8550720b31b","ssdeep":"","tlshash":"9cc08cc4a0c62d00160a641010af24e49024402670481b028d94d84a2e230b08233e98","size":137,"data":"","first_seen":"2024-10-20T08:32:52.997008Z","last_seen":"2026-07-08T02:06:35.076036Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8b6e421d43c3a9e6623ad4ba8b8f3ee1","sha1":"9a2b9e3a628bdcbaa61d54c56364915749000b3d","sha256":"4fc9b6352ffd0fb9c5477566a646225abbaafce6df86c8f4a18521163f9c125f","sha512":"a932c966e1ca585d721cd3f773cfa5699b5fe83370d70b9552b4a5a7acd201b6ff1d06190eafcb7ddbe00859674a95f990309f1695801c615702ffa5458e336b","ssdeep":"","tlshash":"39c08cc4a0cb6d002642651010bf25e4a0344026704c9b038cd4dc683e2b0b19233e98","size":148,"data":"","first_seen":"2025-08-01T10:28:57.330076Z","last_seen":"2026-07-08T02:06:35.08292Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56a3356cae936bc7164a5fd8155c7f63","sha1":"b4bc7b82ef692284cb2215bfeeb701fcd3a319b1","sha256":"4f2b9067e1f41e843b60451094a4eff6fb519a91ad8990dae4a9175d884aaa9e","sha512":"cc02a9ff7873d9b1bada07a1763a77582d6b10f1a3747aec0aae20e2dd2f7bf7508bb6dfb6cf7821ed9205b5ab95b17ab141e9084c5b0ec613aa114ae2e83c94","ssdeep":"","tlshash":"bec08cc4a0c2ae042602642420af38e8a024402674486b43edd4d8982f638f88233e9c","size":150,"data":"","first_seen":"2025-08-07T00:21:40.384901Z","last_seen":"2026-07-08T02:06:35.069144Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f70472ade8ee8cdea45d18d89156159","sha1":"ea96f286a68f9b0ec9a7a2679bfd38a1fc5d208b","sha256":"6442238a8abfcc360a0e6924f94169df8773202b367714ab3b422ae7cbacae6e","sha512":"f4f61017cae4f87edebcd78c336411c0d7acb0d6efb78cef2f84c5cba399616323261ad531fb7e21852ac25683d2497635b669339952d6dcc42cbae7ad86a8dc","ssdeep":"","tlshash":"83c08cc5a0e33d041726681120ff35e8902440267448ab428ca4d8882f230b08233ea8","size":151,"data":"","first_seen":"2026-07-07T11:41:26.928611Z","last_seen":"2026-07-08T02:06:35.076713Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"abccf847a580c8b1c0c265c00db73e68","sha1":"32c6f8dede0bb92c82cc2844af65bf4016f17845","sha256":"37689f13ea7ebf27a7857d1844c0c8fbcff789881549cde77efeb11dec69d1fd","sha512":"ab9ae6046066151b43e2630ecb96a3ba1a4338e2d8aefc0b6c1672bd3047ef1d949b7190ebf400e39c13403cfe59c01c17fbadff3ecfc5fb9c6aeccd17d15e1c","ssdeep":"","tlshash":"f0c08cc9b0c72e002646a51524af24e490284426b0482b468ce8d8582e630f08237e9c","size":150,"data":"","first_seen":"2026-07-07T11:41:26.889952Z","last_seen":"2026-07-08T02:06:35.069809Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"de9aaa7c53a7d8ed2a7e954b084ec8c2","sha1":"41fe4732e538926cdab3ed81b0b54e6c2a62b72e","sha256":"afd180edd428e1a1108f127e81889d2c44fb913c0e545d9567cb306a4c7bd4ea","sha512":"484ba349686fccce24609227958254044c8c6d67b466c269361823db43b0f06359168bc04828e6d834600994453e87b2c9eff7a1fe16f47123712a7f1de5d22c","ssdeep":"","tlshash":"0bc08cc5a0c22d20560a651014af26e490244026b0481b028ce4d8482e220f08233ea8","size":141,"data":"","first_seen":"2024-04-12T02:38:48Z","last_seen":"2026-07-08T02:06:35.084045Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a721a50c61c92f9abfe8d63f825ee7b","sha1":"d8e59ff6d82b15eadd4cd1fd49a9baef1c3fa177","sha256":"fb95e46456b3cc9a3c9f488e3f8b62fdc2c2314b9d4dffff33391bef134f5c87","sha512":"67af8cad0d127d30ef79bcb73c0fb1ce8dcdf651e29e2f9c5b39a35c632742890cceb5d5a1adecb3b108724dc7105b6f0d4cd35a346cd59d5e971c043c2591f5","ssdeep":"","tlshash":"afe02bb775f4697908a9395f782be6843ca00e714869644029dd44a9e860e938d2adc4","size":400,"data":"","first_seen":"2023-03-14T12:34:09Z","last_seen":"2026-07-14T11:39:17.773903Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"314a4a0c0dfaa7f725a48efdfa07f3b9","sha1":"b5a76ea1703d9d6bf1e29eed721641b70a664bee","sha256":"25cbb344fb41cbe01733831e31da1516dd98079de466b8fd074f08850522271e","sha512":"f30ef0854d67af4fd103af114a1107bca4267286907737e4b30897b0fdf85ec9d793852eda79f100a8bdb40736fb82b516c8026711e18ada80efced7595a583b","ssdeep":"","tlshash":"7bc0c0c070c23e005601301420ff24d69036403370c847028dc8d80d3e330b0c133df8","size":169,"data":"","first_seen":"2026-04-06T13:07:20.359998Z","last_seen":"2026-07-08T02:06:35.094229Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"716fe249e310bb493e4f3694dcf1f3d1","sha1":"5df05b2f6e845585a12cd6194e067d2df5d667aa","sha256":"f3d2c1b2095f0ee237ca585321a1209641a0c2e2558e1f75eab1ff3c665b39ac","sha512":"cc9f8bdf6922b9c24416b04bbc7227d9b96abfaf92114f1897df6d68141d963fbbdb7a17b554e4133d1d6c6adbd7a7b00df39357639a0f2842e72cb1be1c03ba","ssdeep":"","tlshash":"12c08cc5b0c76e003606685160bf34e8a0284027748c6b428d98e86c2ea30b48233f98","size":152,"data":"","first_seen":"2026-07-07T11:41:26.871311Z","last_seen":"2026-07-08T02:06:35.120945Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3ccc9492d79dab168d313d5ca7666639","sha1":"1bb3ef888fdb7ff45bf21645d21c6146c30e792d","sha256":"45814699f5f5994f5204db47a9cae8f1bd2e11810843cabab88abbe0c0176d82","sha512":"95eb3514a0a67bfd015a9123ba942f4d6d37180e495c9d43c305a990d9f16c088a4e48a8f887df67ca2e019c3b922351764068893a59c6dc1f9279e6815abf1a","ssdeep":"","tlshash":"d9c08cc4b0c62d001606686014af34e49034402b70881b128ca4d84c2e224b48233ea8","size":142,"data":"","first_seen":"2023-05-04T20:29:59Z","last_seen":"2026-07-12T20:37:59.731035Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7d03b01a8761627af0124447f47b62da","sha1":"b9d34dadbea4fd0e084611b4ba6ac22dbfb899d3","sha256":"e7f047f3a4b07c2ebf463c8c8e2e2e5943a9441ce3c0f10ae1b0e5a630216bc2","sha512":"ddf32c857ebcb99e9c30a1bc2b4f34c185649d99af96a709fdbed0a1cd1ec06fc1efbc3cbcab41c2cf853fe29ed0d78ffbb59d77f14bbd689b70567d0cd6ed35","ssdeep":"","tlshash":"78c08cc8a0d37d001a02651021af38e8a024842674481b129ca8d84c3e735b0a233e98","size":149,"data":"","first_seen":"2023-05-26T12:38:17Z","last_seen":"2026-07-11T07:41:33.109104Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b2edfc19cecfc8cd541e27f4dbe8f1da","sha1":"f2bca10f2358b67016f643046c91f6ad05f25fa3","sha256":"adcfbbe5e7bc8dce70c3d3c7d276c469e5e54e5b00bf3ee612f3a004ea9c3b8c","sha512":"3f984727c905bace39b8d367443a17bac097623a243e7bfb72c431dcf05b4c61a66f087391ad1280b5cb03ca718e1899e623ce6eeb759e32640abad7189d6d04","ssdeep":"","tlshash":"e5e0cd4560a62fa19d1115c46a6f7bfcd624443a346c13764c5d9664bad28b08127ddc","size":301,"data":"","first_seen":"2026-07-07T11:41:26.943462Z","last_seen":"2026-07-08T02:06:35.074037Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1a352ac4bb443bdcaf198b7358bee9e6","sha1":"c19388818738646929e3a4d3faca782e89114420","sha256":"f5bdc0c6d6939d1db9fe9cc251246a58f6c8f9f8ad151016ded529caf3278445","sha512":"2b486f8136215e5aae52d0b48921756e7b858c3ab2e0f60e2ea77ea01b325991c0ac040847dd806d7278f0827329e6a6e4f3c18c9b6568039e3da42e5112a7ee","ssdeep":"","tlshash":"e2c08cc6b0c72e005a02682860bf28e490284436b04c5b038cf4e8682e230b69337fac","size":155,"data":"","first_seen":"2026-07-07T11:41:26.868143Z","last_seen":"2026-07-08T02:06:35.104652Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a1b0348907c26b48177c3568ed43bd42","sha1":"b6aa06599b884553f73cbca616e15abe3ad73ea7","sha256":"3c19cbc4f3c0d0b0767ab1d99390bd6cf9821c77482d81f2b28133ac6fbd901e","sha512":"4cc2075d35fe9f95d11bd9284f37513220b15104c89a4c8a337ecdaae3e8634011e3a7c4ac281727a11ffd080a0e7b7d30b7f813c4832b71986e334df527334b","ssdeep":"","tlshash":"fdc08cc4a0c72d202a02a45014bf25e49034802770481b13cca8d8882e620b08233e98","size":148,"data":"","first_seen":"2026-07-07T11:41:26.874038Z","last_seen":"2026-07-08T02:06:35.097121Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73af7be193d3aa427b3732369f7737e3","sha1":"42c22a50c1223e784dedef66c9a3cdb72a814d5e","sha256":"8e15ff07ac28af1601ebca94ab1c18561c88604a4d40290d9f81b18a7d3b920c","sha512":"e4fe343c60dcc149af59df6246b22d713e2733a170e414c73e77bcfd8ec2cf144c47257e59b94bc41fed3ff2a11df20583c105dc4dcd2f5b95117cec4e00dd41","ssdeep":"","tlshash":"7a51219e651362379283d6ed47cf201473b32268300d911576cdd6107ba8bbc939ebdd","size":2460,"data":"","first_seen":"2026-07-07T11:41:26.862603Z","last_seen":"2026-07-08T02:06:35.125414Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"548b25eb4d80095ecbe90b55222d9cdc","sha1":"1cd3b4d67b5137dce538a6a555715aaaf41ed958","sha256":"99275a72a7f5b5d5de5a3e09908d4c323d2abb8f71462996b27479443a4fd971","sha512":"d5b65de7a463f519cebfc054866afe5a3ca38e12b27d80ed670ab85d411f86aace1fa9ff87c2e8460681c160f676cc5007d48d0bf7549abeacaff480e8dcc202","ssdeep":"","tlshash":"95e0abe0a1e640c65f82417a0fee597664121732886d381d2c4a7112fecf6153575a21","size":416,"data":"","first_seen":"2025-08-07T00:21:40.387132Z","last_seen":"2026-07-08T02:06:35.100893Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/currencyItemPC-b6dba9cf.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fb2242890a4ac4478e2184a3c58e694","sha1":"1d0655631add5112f747cab4a38946909471c328","sha256":"08bd0c0c94dbc1e042c9eedf27b44356ee6b51e3ab4ac2962a1a76ef49c748ca","sha512":"df5a3901691ad867f08685bc2a06e47deed3ef547459ce4cd4e03af2d67b2fe857c5f70f7318f90c7518523a8f83db08ff546eba46bd70cedcd1192c40243c47","ssdeep":"3072:qs9L8dI/XBXyBnvaoXsZLFJ3bnIbCoTZXT+wY/7tXCu/z:qYL8dyxX2tgFJ3bn6CoTZXT+P/7tXlb","tlshash":"b8f3b6953792e02243f186fa08350402f32a7989394b85acb5bd9ddb3c9dd4d72b9f78","size":165054,"data":"","first_seen":"2026-07-07T11:41:26.776808Z","last_seen":"2026-07-08T02:06:34.993055Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bbdcff399fdea9a5e6ba7b76e99cd25c","sha1":"9598c321977767c3375f0c256e29a2aa8ad93f75","sha256":"7759b1a1f9531da032ecee7bc448de9f497aa3d73fb2f5b7adda8e085f395752","sha512":"56d90dee46144b3a2b2b9b2bb807a812210213514507ecaf1d000a57164c9a2f9bde6dc066a144da213d921984629679a174a5cc0ad15217286e9cc295d03cfe","ssdeep":"","tlshash":"8cc08cc8a0c22d101602a45020af26e4a034882b70481b128c94d8482e220b08233e98","size":139,"data":"","first_seen":"2023-04-15T19:29:39Z","last_seen":"2026-07-14T09:57:48.469059Z","times_seen":1712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fff8d4047b92abbdece52052e9ef8331","sha1":"ad102a833d343e160f20c59d6a69b5cb4a071171","sha256":"e461417ef58723ecbcc8864b6e27e7b9735b1ae11686455f12fdaab6706b73f8","sha512":"5dba36f75b03e7b745c850cffd63d6c379bbb25e46cde0039dfe99fca938c40d291a7314551dab3c1b46817f489d9fcb478630cbaebbfd876a110f2c06434382","ssdeep":"","tlshash":"f4c022c9a0d62e101905a12448af30f084384027b04cab12ccd4c8843a220f49273f88","size":186,"data":"","first_seen":"2026-07-07T11:41:26.957978Z","last_seen":"2026-07-08T02:06:35.114048Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b775310d39d745d50d5ff76688c08fbb","sha1":"98a82898b089e8ac2b7b1b3a776126a9ff4297b8","sha256":"fbfc24a79ead6f8b3943eca11e3fd0ef9f004aaf22b9246e7e346c0148b1122e","sha512":"84c54c34478182352e8cd6a61326e4d1818187ac177ca3bc5ed892e94c9baa0b9e07e0ea6eb04e4cac8f0ce36f0b2bc257bc16b323e65f8aeaab2af7b7a35222","ssdeep":"","tlshash":"40c08cc5a0c26e001602742055bf74e890248427b8481f13ddd8e8482e220f49237fa8","size":152,"data":"","first_seen":"2026-07-07T11:41:26.908251Z","last_seen":"2026-07-08T02:06:35.131191Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9855d4c04f157e5c9c682661d5b5be86","sha1":"5adfe15cc541b63be66fb532327b7b3fffb83698","sha256":"f95ec8519b8bc8bed1a83b8b71c6ca7c5c28934060e385d58719d337440bcdc4","sha512":"c76953ef1ddb4193ff01328a80274f8df7834b933d1035d837df948e12b2a56bae2dc905cc49a63c168e42673e0f8badab974dc5bdff113f5b4347a052e7eb54","ssdeep":"","tlshash":"f1c08cc5a0c22d105626a41010af35e490344026744c1b12dc94d8482e220b0a233ee8","size":141,"data":"","first_seen":"2026-07-07T11:41:26.912438Z","last_seen":"2026-07-08T02:06:35.085224Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/vendor-0fb05a56.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95f14eb8350a4fbf17e32f80ac9026fa","sha1":"ef72efc75cc06e038ebbde4d9f426a76b95fa660","sha256":"61fd91e2cb1a2bf94a40bd7a5ae6a29af97af4525d223fd465c1aabac4c09a47","sha512":"86db01483c58a2317d167409837ed34dedc9537c6aab464f541370e47d993f602b0e4fe776f2427c6deef18df2d78ebfcb28c38156286a886f7002bf8b760470","ssdeep":"24576:qcxqKN7TKrTLKwAKCWLBHY1Y2/xxO55PpzCci/9/Y2OYE0hCFrekIPYn5hs4I6Q6:qcxqKN7TKrTLKwAKCWLBHY1Y2/xxO55V","tlshash":"a6553a957892f03193bb58d9407b0101f33d2b19b409c8e0f1be9d9a396ad55a2bbf3d","size":1408430,"data":"","first_seen":"2026-07-07T11:41:26.93831Z","last_seen":"2026-07-08T02:06:35.145442Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d5018ad0e84685898fc58e73a163d517","sha1":"9161166b82a0ae119643413cc562c829d9602d66","sha256":"3521fa43f28caf3383d75355db46f28f71df59db8adc15ee9d41e7092af69184","sha512":"137a86d0104673988085832f780766cfbc7011cf8b8dbf081c849b0a44809dc33c5de95f7eb504f060619f092c16708e8da20e093f2008520df206954d46e242","ssdeep":"","tlshash":"eac08ce4a0c26f105606649210af28e490284066b4481b43ddd4d8482ea20b0923bed8","size":149,"data":"","first_seen":"2025-10-04T13:31:50.127471Z","last_seen":"2026-07-08T02:06:35.112933Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"89fc9e6fe8df873cf2ff4e99006b8392","sha1":"e952df40dd89f9142a13338aea69a9d5234f7e4b","sha256":"ae5cd01b289eb52a7ab2d95a03fe3e61f8b83951ab69424319507e7ad061ebf2","sha512":"bdb3bfc236d49d6faef0961588f5fd84a002b9f2f00de306397f1e0c5c06120d28933ed141b36a12ecc69915bcfde6ac62741d87296318778bf0d9e3b473a6dd","ssdeep":"","tlshash":"09c012c9a5a62a206612696428ef34e59025402a60482b27cd96d8892e3a1b69337e98","size":170,"data":"","first_seen":"2025-10-04T13:31:50.174774Z","last_seen":"2026-07-08T02:06:35.10174Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"85a3e12e98b3d8d50ffde3a02185c6db","sha1":"ab25b1a55a4effa6d5b54fe6967f76caa405315f","sha256":"4844fe280e7064195a1969260e47a0488ff9dc9f3fd877a95585ce59b6aece12","sha512":"c660956ec82cd55a39f64c29f6762269308d67c6b015a417db626d3fbd1cc8efd42c75eb26edd1f42ae882c2d4ee37107c6e87bdd06c329dd56818cd5358f1d8","ssdeep":"","tlshash":"6ec08cc8a0c26d1026066a1014bf29e49024802a70885b028c94e8992e230b08233ea8","size":146,"data":"","first_seen":"2026-04-20T02:27:37.328728Z","last_seen":"2026-07-08T02:06:35.111977Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10060-84173ed2.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9f60a6a9782e2be6c13efbd4571f188","sha1":"1b841d879b1a906bd1a5d179a79ab4f63835cf16","sha256":"01d21dc0e6647e33d8f2019b5dc7c96a572a6057af3125f4181d6b633c6dd825","sha512":"b9d19b74588d33fa9382a4b4c2ed64dc5085849d4e80aadfc723aaac11df400393675492c91c87a97d506457ef99d5df58fecbf981dcbc1414ed0aed3526e9c3","ssdeep":"","tlshash":"0551c819ad0ae37d86b3807012250790318e3fadf524c5e596ec6e225731ea4df4eb10","size":2768,"data":"","first_seen":"2026-07-07T11:41:26.839271Z","last_seen":"2026-07-08T02:06:35.009366Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"246fe1c49871419b6785b422b9eac7e4","sha1":"2fbdd6388d58a2c372275deebf3279433d041267","sha256":"92292dc76a4bb115abb0a9c47439b99c79a4416cef27c11e0b94d7f4983bece2","sha512":"fb6298e73a0d46b8573cdfdbd96a93a9731e8775e9caba28acbe98e26d68da7446d31747858120d99ea91a69ed7bd38ca92bbdc4a7102bd5c18fb1b838c61ce5","ssdeep":"","tlshash":"0fc08cc9a0c36e001606e41115af24e4a024402670481b128da8e8483e220f09233e9c","size":139,"data":"","first_seen":"2025-03-28T05:59:49.56142Z","last_seen":"2026-07-08T02:06:35.091101Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-14T06:19:22.029115Z","times_seen":1640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-12T20:37:59.728166Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ccd150b26b19436bf630d3e55d886c56","sha1":"b1b0a07a69d04c4d3fd477f645bdf45520f62f80","sha256":"c24d2e1417d4808466ba562ca2a899798ce86afc46131750f60e27caee231f57","sha512":"10c397a1dfd5c74118cfe0e9e2ebd5eaff92efb8aa9790b59149d433b53ed52b58f56be0a4ba2700f418bf659071fe8e9a854c0b42ae798f805c1c77cb64f4c9","ssdeep":"","tlshash":"3dc08cc4b0c26e105a02651014bf3ae490244036b4481b128cd4e8482e230b08233ed8","size":139,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-14T11:04:23.710922Z","times_seen":3005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ae9d06d99586e3ca72d3b0e744e0bff1","sha1":"77853b8e14efb5a64209509bfeed5e17bd5cf0db","sha256":"bcc4908fdc81870cc6f3cfdce715d11b020d66d7971f33c6c7e536e630e6dc3f","sha512":"d07e8157674d24e4b1e4f96af6fcebace2ebd1d0e694c6c4b9da00e97d79c915f03fdb1e946c7729194c106377780f596c79f86a36816a3514f3edaa61293a4f","ssdeep":"","tlshash":"09c08cc4a0c22e209622641010bf24e89038802770485b528c98ec493e220f48233eec","size":145,"data":"","first_seen":"2025-06-10T12:05:18.868611Z","last_seen":"2026-07-08T02:06:35.079898Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"263f983f31569b8a74877bc5446db914","sha1":"6d7161172ffcb45128661669a8128e549358ac77","sha256":"3ff1ad6fe6021ca70bf78209b3c603b6bafb9696ba7e1be8b3514f8756a0d490","sha512":"e6bf050876189be971147ae7f22acd05fd041c3c930fc7f1bcd68ccb8beba2b01d937ab92e037199c8c86822797d3d3ffda47376aa4faf6b09a5cbcb52aa65af","ssdeep":"","tlshash":"e7c08cc4b0c23d201606a51121ef25e4a038442674481b129c94d8492f620f88233e98","size":144,"data":"","first_seen":"2023-05-14T18:33:47Z","last_seen":"2026-07-11T23:49:17.678689Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4092861792434d8fd54a28a7a99cd503","sha1":"fa7d9a0e7262e0d23165387720a83c2c3a8e5970","sha256":"d03020c845e7ef28d4882fe7434bc20cbef6868304ef094e2485217d46859d97","sha512":"a3162500a6d07a962e9d33adfb1f48618451e7bcae3ba4c34fdae249c5abb34f629e51ee1c2013316abf7770d8d969c570d9d7ae56fa3c2926ff06cec7a20253","ssdeep":"","tlshash":"39c08cc8a0c22d10560a641010bf28e4a02440a670481b568c94d8982e620f08233e98","size":144,"data":"","first_seen":"2026-07-07T11:41:26.893404Z","last_seen":"2026-07-08T02:06:35.118648Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4be84c4258d119109e4bf25e9c3f0261","sha1":"8bf0f27d19cb4b53ffad3fd1883f274899521fb0","sha256":"be61b993dfa8de1c952b54832485f7c263dc2ac450fecc77db1fb1b7b3b404de","sha512":"6246aafabe42da1334969b224b7823be02ccd23e51f3cfd770ac6ce2395729da69f8c412965edac92e124042a8c492d894296f083689d471ee34625af70a22c0","ssdeep":"","tlshash":"a3c08cc8a0d32d002612641420ef35e49028442ab4481b138d94d8482e226b48233e98","size":144,"data":"","first_seen":"2026-07-07T11:41:26.91856Z","last_seen":"2026-07-08T02:06:35.093488Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c1f77a90487dc0a47078262e5be5fb9c","sha1":"0cb4bac827090eef3a0e6b326531b55a2d95150a","sha256":"fabd579f460426e98545c0ab89a5aa2b2f4431ecb7e9eec394f7dcc4e992ae5f","sha512":"7754d3e54dd63d1701c109202c5049874269e7c2d0bd1d9f0247a05992f528b8b7781bc3b799083b2662305a1854a8c378254bea809ac972e7a470465b26cc7c","ssdeep":"","tlshash":"a2c08cc4a0c26d101a12792010bf25e490248437b08c1b8acd94d8582e234f49237ed8","size":151,"data":"","first_seen":"2026-04-06T13:07:20.340447Z","last_seen":"2026-07-08T02:06:35.134821Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f901e5567c22c94a144dcbce36144f46","sha1":"36d5e3ef1b4cb765584413ef57b845d902677b5c","sha256":"3a4b27c62f99b9c4b03a689503cf42a4c358db727d25f9132f4b8f3fd73ba554","sha512":"9a469d17891477c8bc06b423122911a54830daecb24a1bc01875b70f008142f2e06146feb399541a9c5db668158d053317fcc7b5eb292692a37e028b454887b9","ssdeep":"","tlshash":"b1c08cc4a0c22d00a60a641010af28e490244026708c1b02cc94d8482e220b08233ed8","size":136,"data":"","first_seen":"2024-12-14T05:19:27.709236Z","last_seen":"2026-07-08T02:06:35.111043Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5222261495d64d245b99d68bb7013230","sha1":"e858a3351fbb6c4f76d769dd5de74a01d11231d9","sha256":"9c4bafa46c22467a0f2eabe0251b6198a42da4746917110ed5b0aceb365502a6","sha512":"6f2b54f43be08deae659048e5d4e557e5f1017d32f597ae93b08cf3cda9fe9269d329b8fe6d830a43c0ffad04fa0da63f8bb3989d33bbd68ff93406f190a6107","ssdeep":"","tlshash":"86c08cc5a0c22d106602645610af39e4a024403b704c1b068cd4ec492e220f18233e98","size":144,"data":"","first_seen":"2023-07-03T07:59:47Z","last_seen":"2026-07-09T15:01:42.366092Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6977255198f73b0037caf4686442262f","sha1":"f571a3990f09f265c99e3526846c6b6748fc2da0","sha256":"11e0463b625d5dedab7e21cd6c60bea00de3fcfe8ea211881087d165d53bdaa5","sha512":"afd7bca7d058c4c3ce791a3dfeff6b6a300b86def50fb9ae02090cc7da3f8d2c30bec638911baa962eb0c197f8e07e6b538f07308976e433c99d2972097de39a","ssdeep":"","tlshash":"86e07dc7a1fd37156d529542862f32ecd159843924acba326c94e95437e1874c3379dc","size":323,"data":"","first_seen":"2026-07-07T11:41:26.924945Z","last_seen":"2026-07-08T02:06:35.116138Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/filters-07a1b79b.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"230da9f3c28e5fb6fe5ffb697bfc2789","sha1":"b203db1c192eac6114c93b6231aff768e307a74d","sha256":"d83fd6fbaafc5944e7c0ffc4b555a5cc6ef59a85c3162cfe9be6d415c0bbe6d2","sha512":"786d4449ea6faac2c147580389c0bcb347f0784b1edab11f58c14e072fb199514af44cab56d32f8a78920fc21fd8846154b1dc99660656c517ba669df0ac0694","ssdeep":"","tlshash":"315143ddf8c3a13397ea5ef944188231718eae14786e4b5df55be0426a33888d07fb64","size":3149,"data":"","first_seen":"2026-07-07T11:41:26.790796Z","last_seen":"2026-07-08T02:06:34.994588Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-14T06:19:22.03792Z","times_seen":1988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da85d4432099f824b1adb1f9e3ed9773","sha1":"ea0b879cd763ddda187846497cdec9e8ae439a63","sha256":"704c6d0a90a1a5de9853fade139ebcee219169f31ec7f3e8b8f5e3ba887d1bb3","sha512":"d768799772b76355f4c4eb19ee4d73d51e8af82ea760abdbd1809935cd116e2e228783e2c28810b8897e58cb95bd715c6035ab3e25316df874295d62ec8c0535","ssdeep":"","tlshash":"7dc08cc4b0c32d002602641050bf24e49028402770481b028c94ec492e220b48233ea8","size":138,"data":"","first_seen":"2023-05-06T06:10:29Z","last_seen":"2026-07-08T02:06:35.07108Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c25f58b87123eca5bc6abcfd7d9e78c9","sha1":"96309de13c7f2b6b5c7e2fc33796bb5211253545","sha256":"15557de089c10004256c27e8c9f82a3af0771a5c5d3d75dddd39ca2969605a16","sha512":"913fc55a8efe1d7ef971f15ecca01223dc9eda5b2a2192db99dbf8146b4cb738013ea917d32d40e91a63278866898d96b5f2cea7dc5c4e5aac8c6b6e1e202697","ssdeep":"","tlshash":"29c08cd4a0d23e04b612655524bf38e89028503b78481b02ccd4dd883e220b49237ea8","size":152,"data":"","first_seen":"2025-10-07T02:49:21.686809Z","last_seen":"2026-07-08T02:06:35.087768Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-14T17:16:26.118736Z","times_seen":120145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cfdbc3034156c4d175e9a622671c7b87","sha1":"095a4dc28469e9fe7a11917850ac85a5142978cc","sha256":"799b4bea43a69995fa143b418cabeba7a0c006d71e7876dfa8487ff9b4c8c0f4","sha512":"b1349e166462bcda01656217f2b1c12dd49d91db7518a8f97131463b80c73dc227b068c0a17142bb89eec9a21878ed0ad5ea5940fee7ac7af56c9304d5e7e1bb","ssdeep":"","tlshash":"b5c08cc4a0d67d502692646020bf24e890244066708c1b53ae94dc4c2e630b08237e98","size":148,"data":"","first_seen":"2026-07-07T11:41:26.858048Z","last_seen":"2026-07-08T02:06:35.08114Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6b8658425ed7c7dbe24d8e6668eb581d","sha1":"e5b53935ebd8baea5d3c5f6df9b286d500086425","sha256":"fd5ea603d630576154b0a22361ed1a8251475063f8de71d55cc03ccc3f0f07f2","sha512":"53b082f523eb545b1465f661b3e454f71a8ad5dac8bae67cec2ede9033553cfd4a8c30fe16c2dc233590bb78d6119e7d540c69d6b9aeb0b19cca4499841a2e3d","ssdeep":"","tlshash":"49c08cc4a0c32e101a02641018bf28e4a0244036b48c6b028dd4dc492ea30b49233ea8","size":146,"data":"","first_seen":"2026-07-04T07:36:54.816945Z","last_seen":"2026-07-08T02:06:35.129658Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4fd3894921515fde3d2a5a6b49fafea","sha1":"2b61e54b86fb7c7aeb56161cb9a883bed3aed3ec","sha256":"f68ea64dab60b9d2ac90cbad4e5c9730b922c2a65761173d1785c9a7cf6ddf92","sha512":"257942c9566d446d4c2ab35620f63f825deafdc553accb2f2ed1d1b1042aedb8d60fffab2587e3ec8a9da26f4ea3f2faca97569c0581c57e1b3476c472413cf4","ssdeep":"","tlshash":"8cc08cd6f0c73d009b0a642016bf39e4d034403ab44c9b5bccd5dc4a2ea30b4a23bee8","size":168,"data":"","first_seen":"2026-04-20T02:27:37.270025Z","last_seen":"2026-07-08T02:06:35.086284Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"729154ce23502edc866ee58cf59f29fc","sha1":"4c0832a58876ea4c4a41d73004bf064dc4b1d1d1","sha256":"c92fbe8d5f6cb411194658f1d889356c4b84e91723fe68a96da42f074c6f9f51","sha512":"237cd3735b8a6a5948af5a61987cb59a4585a0c25916d8d38aa17d8b42a2c327285c4309d864be8aa673ec1cefee37938c00b634532f701428126174466e3a41","ssdeep":"","tlshash":"99c08cc5a0d67e105616642260af38e490384036b44c5b168ce4ec692e234b59237ea8","size":154,"data":"","first_seen":"2026-07-07T11:41:26.876005Z","last_seen":"2026-07-08T02:06:35.136823Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d45e43f77e02c8fe2c4ee718cc0645b3","sha1":"023a73f3c2fef297e0d905b13b4164c0776933b2","sha256":"d804db602e3ec9acc8d8ca1f60259b0453a1c23fbd618760cc720937f179d3b5","sha512":"3e75f9a660f6bd582d349371a4521aa44e2bff89add7b9459322d8bf2ba5f28838666167becdf6be3e58b7b7df81ca1f50933a71788405d3d659e21aa058f497","ssdeep":"","tlshash":"04c022c470d268104301640815bf30ec90340816740807c28d84f8182f220b08223e98","size":171,"data":"","first_seen":"2026-07-07T11:41:26.936438Z","last_seen":"2026-07-08T02:06:35.109955Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c4cc85f4b24a0c7e6820a9ded832203","sha1":"ea7ea165f8fd5cc04a9db36540e6c612e46fec17","sha256":"e32fe0101dbf288c191537cdab05c9ab8a25cef990d12db5e26f63c0a80d5e87","sha512":"c69362ff116d491bbea73f3a8ca8769a30eda238d662b836fa212d9b509311589543e57475eb4488aba5c488a487e612aee8c46491ccd25d03522747c00adad8","ssdeep":"","tlshash":"eac02b03c2d007aa4a547003ef0f1e3065710f868d110203701db6640414466050fdc0","size":131,"data":"","first_seen":"2025-03-07T05:16:21.61363Z","last_seen":"2026-07-14T11:39:17.768606Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-61a3adf1.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f045d66415edd9af4c201f4bfd87ad2","sha1":"6e1c5349b5f27709e5ef9ca1fddd9c4a2884c1ce","sha256":"15e0f370db44aab33dd91d1a064021e82ca3bf2f60e241fe819223fe86718be7","sha512":"8e2aa30bfd2a72cdd9209114e2b03040341550d429f058057400759188537cdee8437ef42a096d8960f1178e23d9eaa86da56ad1f8e94c0a951fe804fcc21942","ssdeep":"768:X3NcHwjnrgbabP1VbAJ0xXgSPfvW0x+xcYLSjqcmWabbCXraJmJ73G:W+J7jVmWabbCl73G","tlshash":"d9b27606b701ea7df2b750c529e8216031192f9edc8d4ce3b6bc1e9a0755d28771b63b","size":24694,"data":"","first_seen":"2026-07-07T11:41:26.727748Z","last_seen":"2026-07-08T02:06:35.013399Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d739074d26ee2b80c3dbf2f75111e86e","sha1":"f0734866940325126fa284a62e13ce4bba5f8892","sha256":"8c46e2e6385e172e22d1e2c83d90a650a2691b82ea89cde14161ad89fa55cf04","sha512":"defc6bc88604ba3e2fd4766a8331bef4faf925ea899c820c6da3f5ccb20e3119eb9f00e476790d9e0afaf555bc88f7aedd054a1ed7d84771f8635ec6fbebcbec","ssdeep":"","tlshash":"b7c08cc4a0c22d102602645010bf25e490288026704c1b038c94d8693e271b08233f98","size":142,"data":"","first_seen":"2025-08-01T10:28:57.334826Z","last_seen":"2026-07-08T02:06:35.141512Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-14T06:19:22.005879Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"26abc4bd93edd03e2d12bd01956b691a","sha1":"2b2a6366130dd9db1835e196c4e737d0782d3378","sha256":"44145e8487d866174e5e79e1d9061c1c9e8d4c43b6f4ca4f83e9284766952317","sha512":"9432f07890961492375bfde3a9ef91781b477c15c46ccdc792b74e1794834c4438ff23258c5dd9fe71cfbd5f3da2113537f571bf94eecbf218e91d1f792fdd6c","ssdeep":"","tlshash":"bcc08cc4a0c22d601602651014af25e49034402670481b02dc98d85c2e220b09337eec","size":140,"data":"","first_seen":"2024-09-19T21:02:30.270336Z","last_seen":"2026-07-08T02:06:35.128676Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"db4e472417ccb98e8794057700db7137","sha1":"f7523a27c2ff36e543ed1bc2d05f3f4d61ea860d","sha256":"6ffb1122ce7a41ed0f7a07ba07a75f33fa7bf91ac76bcb99490d74e9ca4dbc64","sha512":"f484c4c8f4fa7b42c76e50d69acc823f24ccb75a86e39c17ef9c31f2c23d87c83cdfeb1503a11274215bcf6325c526b9da019a70b4a0e7d943b333731522ed49","ssdeep":"","tlshash":"2cd02e89a087b99092622228a9af70cc80aa0016a0080b43adc8e80c2f660b4d133eb8","size":239,"data":"","first_seen":"2026-07-07T11:41:26.954947Z","last_seen":"2026-07-08T02:06:35.089923Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"797c0df3b2eaed859b25bf3037edf3cd","sha1":"c845d4cd1c4788fbb84538cc6d9e09610f9ae011","sha256":"f919988419936861302327ae40675194d973b8389b946505161d027c83e77a0c","sha512":"a579f33bfd146bcac205aedd85eb93ba6511cf0cae500e0808aec1f656a69386e01f01524bb577380bda4318a204c5772e42b9659f24ad3bdf43bc3af423eb1c","ssdeep":"","tlshash":"54c08cc4a0c23e205652651410af38e49028446ab08c1b02dde8dd893e624b4933be98","size":149,"data":"","first_seen":"2024-01-22T14:18:13Z","last_seen":"2026-07-08T02:06:35.077932Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d4dd3ee5c2f29d86c840910624eb0a44","sha1":"5d128a88ac9ecdccf379b51614d254dec9477c92","sha256":"8e7bd6c1f0ce33f4867d9fd4cb3d8fca101b9ce65a0cdff4c0a2a2277958a636","sha512":"e66b7bfec96d5119497544a1500bdc84d7637f9055e703e9eb12783fa4b0ac6c176cf19f96f6106d097be6757692343321fc58bf049a644c104d1813f6de3a96","ssdeep":"","tlshash":"29c08cc4a0c22d002603681020af35e89024402ab04c2b028c99d8482e624b48233e98","size":143,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-07-08T02:06:35.117211Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"276cd01122edc30787e28baf65ac04fe","sha1":"703c8f8e67f8dbf7f97645024402b6fdb5c6c4c8","sha256":"9a1466ab95c460e291efbd52537a23c4761a405029170e7a3f7c087e934cc59c","sha512":"3f29481ddd1d476927bcd6bd0e3e7b756d4a4fcf0b6c4a53a180c701393ee361c53d4edbcfa5df11b787e46943cc99ef357e84f9ff710bde1d6e804855f65ec6","ssdeep":"","tlshash":"49c08cc4a0c72d001602641010af24e890244026b04c1f02cc94d8482e220f08233edc","size":138,"data":"","first_seen":"2025-07-27T10:32:18.367379Z","last_seen":"2026-07-12T17:29:09.692095Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"868cc7d2aa0ac8e14f70d10552857105","sha1":"8feacf694ff08b77c993ae841162354ab4241810","sha256":"091a389a197d167f12624482b441d69322af7e1c18cb187cbe560ab583d1fac9","sha512":"2dcc56abf82ea852347cfd2c7f3ad2b150f9cedf54c3ab49f2fb04097fb83686154d986df163f15bb996c8ea33bdd48363697712f9c9895207f0f65cbbd887d0","ssdeep":"","tlshash":"dfc08cc4a0c32d001716681024bf35e890244026b0485b428ce4d8482e230b08233e98","size":142,"data":"","first_seen":"2026-07-07T11:41:26.91527Z","last_seen":"2026-07-08T02:06:35.138099Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6a2f15517c52141d01e33ded211aa87c","sha1":"1b48b8f4ef7327d0fe70d410060d3719279466ae","sha256":"75385b92e0abc4e890abd9487a992b1e7994cd539221355f28a3d2406af764e9","sha512":"7adec94f0a0d255659219d73cbce54abf532145393de85ded2468009642553a1a6787701bf3d4d6d29c95756abe72656ebea9d7de5bfd2c16c208c0b07b5b1b8","ssdeep":"","tlshash":"06c08cd5b0c22d015612641011af34e490284066b0482b028dd8ec892e234b88237e98","size":145,"data":"","first_seen":"2025-03-05T14:53:04.331999Z","last_seen":"2026-07-08T02:06:35.108739Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e27207b5b9aa45c8e7611e8779354f5d","sha1":"c3aae61985f3c6bd193ed316a85ffb89c049931a","sha256":"d19fa3bd7790d0aa12426bc56067a20b2462682bb37ecc896ff0953e93883f24","sha512":"73cebc85d778320ec7aa71e8033f0c0853c62123a7fef03364c587d6402df22ea1e68ddcb6700125bf635c9556fb9d4e9ea8d32d4da175b56b4c7c6166435d6a","ssdeep":"","tlshash":"bdc08cc4e1d32d041602742512af69e89028803bb68c5b8adcd8d86c3e63af4933fe98","size":166,"data":"","first_seen":"2026-07-07T11:41:26.910146Z","last_seen":"2026-07-08T02:06:35.095313Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/#/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"458470cbf54cce79a2892507d3a839c4","sha1":"7033a9aab41a67173652d305ec3b5d1ac859fac7","sha256":"ed7d2350f6caeb43949d4ac41456a45364187a0a948d76e7b8ec20e56c9913b5","sha512":"61fab5f6c0b58e3125728c177ed289c60b4dfb365cc704e77c5abe8739468ec42de27fdbdbf2fcbac6abf9ab59b64648a91000e862af448efcc325da673b08cf","ssdeep":"","tlshash":"84c080c660d72d0055475451256f74e89025401770881b62cce4dc683e330f04237d98","size":160,"data":"","first_seen":"2026-07-07T11:41:26.86627Z","last_seen":"2026-07-08T02:06:35.142371Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dododol.cyou/assets/currencyItemPC-f2b4e07a.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.931Z","timestamp":1783425139931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/currencyItemPC-f2b4e07a.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-77e\"\r\nexpires: Tue, 07 Jul 2026 23:39:39 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ln4VY6noM5EoU6kwskzYY5nku3atcKBoOkhsDGxXBUkl6CRsb1aSmirglZNlRPztUumQDmpPxtXCWyHnYqiwfaFUXrlWUI3HT7bvharqoMFuOyA27FYCKWT3g06EjYY%3D\"}]}\r\ncf-ray: a176a4749efab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1918,"size_decoded":1310,"mime_type":"text/css","magic":"ASCII text, with very long lines (1917)","md5":"5ac32885833d5bfea91636a75c72bc71","sha1":"a9be19b332857489bb74739808e4472e52bfa4ed","sha256":"f2b4e07ad792f372b7dc6d7ef59a4df51875bc966fa8416e8f62c91c6283f0e0","sha512":"069bc6e5e8b0491e7b8a8b4d2ea2660c47283ea82c044d0819e4e54a3722f831d3a8e2d53b79e4ba73ff3167cea1dc0e40c350cd61deb320c3fe92d2f5c4a81c","ssdeep":"","tlshash":"fa41ec00bb8621a5e43bc3923d99500c817da2f2f356478d95ef9d451fab0873233eae","first_seen":"2026-04-06T13:07:20.276323Z","last_seen":"2026-07-08T02:06:35.018075Z","times_seen":11,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/usdt.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.265Z","timestamp":1783425141265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/usdt.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 2113\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"841-RHjyH1IoIlxatFUsKxq7416GK+k\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230167-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 26261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oG35MLiAHoFbjOinDBytudLm7wZGRbWPGmmXhn7WwprYiPP0USnrND4MUCLW0oOaM7FTFlEJGCYWnNW5gQHfkcUytUc5FaJV3n%2Bjne1ksneaq%2FlWU5zB4y1aCeEABMyIeqU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d287376ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2113,"size_decoded":3157,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"1209268b2a9b376e08bdcfb12b98aaf9","sha1":"4478f21f5228225c5ab4552c2b1abbe35e862be9","sha256":"9adc9724481b9ee1393ee384f3cc3e39fdbf21936c38fa581ea1536371d0ceae","sha512":"f89abdc3e69bc31ce1eb397032391c2bac1c74f85f89cdb0767ac931433d350ef5dfdcc4ede5840b1e3d3ad2126f9f5859bd2509cf0ab300ca80b52336aaa00b","ssdeep":"","tlshash":"a34118ea0a1b7e3a134f380386fa36676c0ccfa944d42270f11233522e7907cd5fa888","first_seen":"2023-05-11T18:09:32Z","last_seen":"2026-07-10T19:57:57.136438Z","times_seen":180,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/logo-2789bb4e.jpg","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.279Z","timestamp":1783425141279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/logo-2789bb4e.jpg HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-12826\"\r\nexpires: Sun, 26 Jul 2026 03:02:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFqmuSe8Wbe2%2BZe6fnp25gSCLTUWnchCdHzH23mgdAVrzHkaFZpCUSoik8kezQABUwn2crG2KtfpMeZiF5Tq9M%2BqMozQig6s0SCm43fKLYmNpZs12eeOOV0tyxO%2BbEQ%3D\"}]}\r\ncf-ray: a176a47d0fd5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75814,"size_decoded":72011,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1254x1254, components 3","md5":"6c05133e24181f0925f8cc83a2a5a47d","sha1":"16143af0feff5a5acaa77c394cbc3bc865760cf5","sha256":"2789bb4e65f0827b5f20005507dd0752612fb3a6c11f793ae745514f8192def7","sha512":"a254b71ba238c89d41b14c9762ce23fd281af0780bbe5b3525d8fcb5bc62a38f3dd670a9bd8ca2069f9e5e2445a83a38f11e97fe5a22a8396add73c0175423d6","ssdeep":"1536:SbkI4H8AUxs6/tK79qRBJQKgfUIPT5autkF2kGIj9PqGQRSAjf:SbkI4H8AUxs6K78bJQxf3VauKF222f","tlshash":"c073f17c9709f456d6568374a8cb1aba3ffebfa6e75d1a038f121523a831310fc69444","first_seen":"2026-07-07T11:41:26.830524Z","last_seen":"2026-07-08T02:06:35.000229Z","times_seen":4,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/bnb.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.292Z","timestamp":1783425141292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/bnb.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1494\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"5d6-j1QOTZuFOswBRb037EL97s1/Ffc\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230199-FRA, cache-bma-essb1270065-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1397\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vD%2BYy8GhqdFXAN2tKjxY8TYqmLpi8gbDNK7H4a0f9HUZ9dOK2WqRw5m6%2B3ITvwf%2B6BEqec8anWScAI10%2FbliAIy9EVQZMdtMg9SxTw9%2FGmPtvA6RO20F2jYIz4oAXUd7BHs%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d287076ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1494,"size_decoded":2575,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fefe5d0b26806c858130f0eb454e1106","sha1":"8f540e4d9b853acc0145bd37ec42fdeecd7f15f7","sha256":"7aef69406a4a5c74bd3569222a4fb3e534c8c6c1446755fdec7d7687bbf38a04","sha512":"98af45cf72a49d0776a57edc8cecb299d206723d1772c64439738e508f27ab92f0a06608bb76023267a34a8b433cec216329a8847836fc381f818ed2487fe3ff","ssdeep":"","tlshash":"2f31fce221413443e91adab851af83637ce009a05b8392456dd576d7b779ac45b44812","first_seen":"2023-08-29T23:22:40Z","last_seen":"2026-07-08T02:06:35.004834Z","times_seen":56,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10060-367a97b2.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.927Z","timestamp":1783425139927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10060-367a97b2.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-da0\"\r\nexpires: Tue, 07 Jul 2026 23:39:07 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJykBEw58gVLyJ%2Ff4enotH3qSBzhsqlM6%2Fs7OyS84RNlnv1ZZ8L9wwms59clKFuoHZIYL9NRUS%2FD1Fc1OkSUe0VSrtFKoeFjOKAvcvrb042cY2XNA8aih22QKFYa7%2BI%3D\"}]}\r\ncf-ray: a176a4748ef8b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3488,"size_decoded":1653,"mime_type":"text/css","magic":"ASCII text, with very long lines (3487)","md5":"d91ac46fab87fee54fc65d54b49cbaab","sha1":"246ff48b800f6200a7f6aa78a167c6748247d0f7","sha256":"367a97b22ed7c5360473e85ddb5f37d4f151b9f56ead32f5603c50a1784efda8","sha512":"126991037bee3a266818f50a2654242f96156fb95434791aa8b6a6b72cf4822416ca938e265b460e299999783d70edeed0ead04a18f7079fc4a27043fd0253c6","ssdeep":"","tlshash":"3f71ef6da3942e351c77d2b5fa584dc9e000ff70d7879da0d153099329ebed72a20238","first_seen":"2026-04-06T13:07:20.289373Z","last_seen":"2026-07-08T02:06:35.021873Z","times_seen":13,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.04de7806e64014dcd89014be6e05602d8.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.181Z","timestamp":1783425141181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.04de7806e64014dcd89014be6e05602d8.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1797832\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8777F13DC3732C5B5C3\r\nAccept-Ranges: bytes\r\nETag: \"252A2E9439217E0353284A619BBBFE53\"\r\nLast-Modified: Fri, 19 Jun 2026 17:19:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11664072622306627443\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=4de7806e64014dcd89014be6e05602d8.png\r\nCache-Control: no-cache\r\nContent-MD5: JSoulDkhfgNTKEphm7v+Uw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1797832,"size_decoded":1798399,"mime_type":"image/png","magic":"PNG image data, 2304 x 1536, 8-bit/color RGBA, non-interlaced","md5":"c02e5af9eb1e5c76dbb5b610cdcc0877","sha1":"c0819eb0aa73513a82a2d00c83f90e84548dc96c","sha256":"d7da6470bad8b08e995403e3b512f60f28fc25b044f7daee049d4d1400254888","sha512":"a169e0736b642980148484fda71020d37eee68d639e5d6fd3ea7ef26be6744d9da927cb3935bc121063347399923359f058e6c9222480a8b99ab2b3303f3ff6d","ssdeep":"24576:6+s9Aq3XLpKoUB2gNkCH6vqAbej+bd1kVZ78Xe61C:8XLPw2wkCav9becdeVZjqC","tlshash":"c225339e748c07fdd10f81839fa26691944e1332be77df469b28c92e1c0621e6855efb","first_seen":"2026-07-07T11:41:26.7573Z","last_seen":"2026-07-08T02:06:35.041832Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3698,"timings":{"blocked":-1,"dns":27,"connect":269,"send":0,"wait":275,"receive":1499,"ssl":1627},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10022-66f0e1ad.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.234Z","timestamp":1783425141234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10022-66f0e1ad.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-2cc37b\"\r\nexpires: Thu, 06 Aug 2026 11:39:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbcqiwymxkYgMxg1MrITSl0syzoidWrGHncNzffjtQa%2FmGFq0JaxptzmexA2DQpynE7OlRGzBNeAtdcclEcBiFk2ufiqhryQalR%2B7uHFCM31htERfjFCpqnrPCB%2F0hk%3D\"}]}\r\ncf-ray: a176a47cbfc7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2933627,"size_decoded":2492799,"mime_type":"image/png","magic":"PNG image data, 7980 x 5100, 8-bit/color RGBA, non-interlaced","md5":"12dd64955e0e8211aa8fb0742ae7a88a","sha1":"d766738efadac92f2b46a3310573c6fc97c081f4","sha256":"88b0370d6aa1e7693f0978d43db5bd2c27d4ff351a0e813204c01999da432f88","sha512":"c6e0d224263742bb495ddf7bcc17c1fc16d610a26d26200bc31d0dec86cdc222a4a5575e7695e9a751b809387e1278168ee76567343955f1ee9c0b29f12a9c1c","ssdeep":"12288:iyo5lhVDaTVHBgROscYyKoq4MELVj8K5qr9jLt748Ng6vsmrH3ZHBxk8Le0LRh/c:ILhQVHBJscdKoLqK5CZxUirZPJz71C","tlshash":"95256863ca64782ba02405a1b32761e6c1711c777968de1e1bd3386f1aabfe1fd71d02","first_seen":"2026-04-06T13:07:20.303493Z","last_seen":"2026-07-08T02:06:35.007271Z","times_seen":6,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":512,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/doge.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.280Z","timestamp":1783425141280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/doge.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1597\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"63d-2Wn9hU4amXt4F7pggAzBx6ahQjs\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220183-FRA, cache-ber1080052-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 12255\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FUtK6mTqYPg1WghNuTqfxIQCvYx8Pq4rNjQT0nUrTrAMmv%2FmJPwfzjM%2Bh0VAQgrcXDkJ23Hw00mjZX5m4OrMRnlyEZaytbAcyfQ1A91%2FNy2cN0r9JUbqwaEwSKuC5K7kB8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d285676ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1597,"size_decoded":2672,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"1938a5ea7cbe7458795a834563258ced","sha1":"d969fd854e1a997b7817ba60800cc1c7a6a1423b","sha256":"4a789f36f6ca12a6d1901ab8441a9cab7a4a9a5fd4ba87c887c4d45c729fffce","sha512":"e940ff74f8cb4f53b7463bbcd2b118e9d7c818eb8d2ab0a2ecfdce172e98cb91c44a4d5acd49402b12803c2b273d5ce3f96e1295ae612368bfb78e7f619546e3","ssdeep":"","tlshash":"bc319846a655c394f3cd0711c30b4a56215e579c786170c056b9a863cf393a8d5fef71","first_seen":"2024-11-30T11:37:49.082714Z","last_seen":"2026-07-08T02:06:35.011446Z","times_seen":59,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-8485d11a.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:18.828Z","timestamp":1783425138828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-8485d11a.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-bb028\"\r\nexpires: Tue, 07 Jul 2026 23:39:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7NR7QnVUdclOz0X15YRfiLsx8UhUUJWx2koX4SJ43HxKMkVp1b99uR4oB3DNHoWSDQCs%2BouN%2FESUnxaVqyqbokvE%2FjHxiC5kDKdvM3dFZ3dSj6CibQJdIOsH0wr9vw%3D\"}]}\r\ncf-ray: a176a46dae31b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765992,"size_decoded":143568,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"fff573b0657126694ab56dd44f91bdcb","sha1":"ab2c0feed3020ee6e4a41c9b33e325c60209117b","sha256":"8485d11ab61ed61cf059e9f6d21192ad71a050fd8fa6f3db67f4be9aa171c940","sha512":"79a34d5f2ab7cbb901d07b0273004baab0122ff32dee9e7b008ea9732b52b1ca597ed2131ed6bc8b04c20b3cc68df416f441bdc33c5f57908f351e86970caa34","ssdeep":"12288:pv1+3dZ8w71ZACkFDS3vyf58rBeV05TnOKP0dknRhKXylzoRd:pv1+3dZ8w71ZACkFDS3vyf58rBeV05Tc","tlshash":"2bf4d855e762113b2917da7d6bc8add8a738dba1dc114ba5f21060084ec3ff91293f2b","first_seen":"2026-07-07T11:41:26.771637Z","last_seen":"2026-07-08T02:06:35.040091Z","times_seen":5,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/charting_library/charting_library.min.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.189Z","timestamp":1783425139189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a494676-2a6a\"\r\nexpires: Tue, 07 Jul 2026 23:39:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LOyRQEvZn41GUt1tQfZb3jri3KVZYjdx2PigqSQAt8sx9B4N18PyzZJ2eFS0iIiIOdVtY1s3mGBsIidN9E1WZOqJ3vczYOkqSmFNiLTXJ%2BnCoJL1HYBbCgvbZOMdKI%3D\"}]}\r\ncf-ray: a176a46ffe7cb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3914,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-13T14:16:28.211974Z","times_seen":1274,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0a2fddaba9d4949f386cba41ec6c861f3.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.195Z","timestamp":1783425141195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a2fddaba9d4949f386cba41ec6c861f3.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1060317\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87760F7333331F6E739\r\nAccept-Ranges: bytes\r\nETag: \"C5312DAC1FE0EDE80E013502C00E7CBA\"\r\nLast-Modified: Fri, 19 Jun 2026 17:18:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10757253273853868695\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=a2fddaba9d4949f386cba41ec6c861f3.png\r\nCache-Control: no-cache\r\nContent-MD5: xTEtrB/g7egOATUCwA58ug==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1060317,"size_decoded":1060884,"mime_type":"image/png","magic":"PNG image data, 2080 x 1664, 8-bit/color RGBA, non-interlaced","md5":"29123781df3f84fb41954c610650912d","sha1":"79e8c3b66f201f5188bb656d39bf4311ca1b8697","sha256":"e8310ef2fa8948edd26d940523fa5c464e4c2c086fe7c18ad51f262b6dd09619","sha512":"04ffd41bea01d49a57e155107dab7c39b6ad3834dc9f5a05f260ab2237c1647ce302baaff505da0ce09f07727b4a262de7853037b433574ccd6dddd4b20395ec","ssdeep":"24576:fOS0udrL1tfccST/mRZ0QqmY4+CUo6UqpvE8H:euzaTK/TC9U0v/","tlshash":"62253342e5d583f8d68318cb93b6124948aa13b6f76217448dfea1cefc867205f43f66","first_seen":"2026-07-07T11:41:26.832655Z","last_seen":"2026-07-08T02:06:34.981405Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3213,"timings":{"blocked":1824,"dns":0,"connect":0,"send":0,"wait":280,"receive":1109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10064-ff340492.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.224Z","timestamp":1783425141224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10064-ff340492.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-1689\"\r\nexpires: Sun, 26 Jul 2026 03:01:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=He1njKAcFptoH9GMXuAF8ji83QbDbhroWxG%2FI%2B5QD03zo31yw0QFnvt0a%2F9d5Bu7yDEx2wa7yruwx3%2B0t8BZQ5iIu7yA5MM0r48ST6WE5%2FFaI2mV%2FUsDoT9xKlrYUGM%3D\"}]}\r\ncf-ray: a176a47cafc4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5769,"size_decoded":6533,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"d483fbe0f5d0f40ba696cccabb8951f8","sha1":"b03a5ba4a47e40bda58365cdc0e400dedde8212f","sha256":"ff3404922be76acbc5298e86e7435994bed12c1b992b2c727814a2b3a9ae193d","sha512":"cbe2040219fd674db828670e99edd1b906b6230ca915c37791598465bdaab6d7d01fc6553ffca2221728d4f576deabe6abf4839b14104b70638e9149a4f203dc","ssdeep":"96:5uQV6Fn/5iVE7DeyOSw9/sJZKdfsFxEOPabJ+4rBJQnmYpzcX56cdDLri1JuO:5Z4mVEuEwFsHKd0cbNEnmGM6c5LrinH","tlshash":"06c18e4e9cc276d6818b1bacab9f0c23d427083d571aa54ab51502b97f4d36383f2343","first_seen":"2026-04-06T13:07:20.300662Z","last_seen":"2026-07-08T02:06:35.017Z","times_seen":10,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10023-9603fa3b.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.238Z","timestamp":1783425141238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10023-9603fa3b.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-90e69\"\r\nexpires: Sun, 26 Jul 2026 03:01:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewA%2B5i7JpLVK0yhzuF7PEUxurCV88C4paB2UH%2Bnom4yAGvPeoncR2k3BhjAndWk9FYf9Mi8FSr8%2FtGXhJjvLwRKEA%2BENyJXvfZXoxWuHSO1o31JxbRzvMhKhXXKR5nE%3D\"}]}\r\ncf-ray: a176a47cbfc9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":593513,"size_decoded":571131,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"f8b520b9b596a160858ec7eaffa7f468","sha1":"49581ff05e4c1d95a5026fe365c848babff07689","sha256":"9603fa3bfa043d9ac761362c550730bf4ec2612b4f14e24d56c3ef7a56ffa0a3","sha512":"476605101dec8f6f50902ea3d345423553ca7e89b0daa5776070f3dd6330ca278c8705d202f195db4b3d72bff9ded3863138ae2bca1a6266f60bdff1077c22bc","ssdeep":"12288:caRo3RtiTNiDmPfGl3v3ESgBeulh9kNmJZotAa6/HeKfMj1NTxFbP:caRsLiTYDmy/3ESgBeuyNmJZ3hUj1/FT","tlshash":"3cc4f042c880693a85fd36442623be91d4737427e658ff5a0b4414fcbe8b5b5e8b1bf8","first_seen":"2026-04-06T13:07:20.328519Z","last_seen":"2026-07-08T02:06:35.02122Z","times_seen":6,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.065d4fff823f347f5b59f9821c1e18430.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.251Z","timestamp":1783425141251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.065d4fff823f347f5b59f9821c1e18430.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2716\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-oss-request-id: 6A495BF9ACF6C53237A06067\r\naccept-ranges: bytes\r\netag: \"357C70544DD1B14860BC51340063D77C\"\r\nlast-modified: Wed, 12 Feb 2025 05:31:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15675064243199693157\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=65d4fff823f347f5b59f9821c1e18430.png\r\ncache-control: max-age=14400\r\ncontent-md5: NXxwVE3RsUhgvFE0AGPXfA==\r\nx-oss-server-time: 3\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPehhP%2BJW3zhiKpxmpNEKi8ldmYYnOyfR7GQSoaNipg692N0zktKXQp%2BtkQwTp1R5dDrg1udMm32zPgSUGAKamLWdWOpZirzoBaDugBUGq67rjFbJSY8wz9uisRbl%2BirxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a5adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2716,"size_decoded":3715,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"357c70544dd1b14860bc51340063d77c","sha1":"18f393f78361350917078e0ad187015132b0e423","sha256":"8a70962f8477e5d150574d9b1d21ba03252eb851a2aadd3707af106622bac38f","sha512":"5157c39f4f87af924131e43c880913c90a96e9ba90394016c1d95b74b4e54a2a1bbbb9393f4fe273e414d193ccd96db92d5780332b027fed060264123d662c44","ssdeep":"","tlshash":"a4514c27ba401974e51bb829c22dcd78d46342bacc9f513bc2048530f7493ff7645536","first_seen":"2025-03-27T06:51:59.24804Z","last_seen":"2026-07-08T02:06:35.039045Z","times_seen":58,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.00413f419eec44aecb1a03a9a3ef20d6d.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.262Z","timestamp":1783425141262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.00413f419eec44aecb1a03a9a3ef20d6d.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7045\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-oss-request-id: 6A495BF9C78BAF36335CD9B4\r\naccept-ranges: bytes\r\netag: \"FE535FC7F988BC4D3E5A59D11D3BBD5F\"\r\nlast-modified: Wed, 12 Feb 2025 06:03:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2578583264330892478\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=0413f419eec44aecb1a03a9a3ef20d6d.png\r\ncache-control: max-age=14400\r\ncontent-md5: /lNfx/mIvE0+WlnRHTu9Xw==\r\nx-oss-server-time: 4\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shhGZY%2BOAzrezMC2xv48SuFT4Fml55LYWpaqEaA8D4k2nsjQUb0aLdXAX23sOEeOdJX5noQdzlo9n2k56dZXHnY0uWoJAf%2BpwnqsnXslZ7mK%2FbrZYZVR%2B0I5qtXL5NHqNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a17dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7045,"size_decoded":8045,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"fe535fc7f988bc4d3e5a59d11d3bbd5f","sha1":"35a5ee055c0863b418dbb4dd4142e6dcb3dee8bc","sha256":"5768b455f25e136e43bde1faad5fa0f1e039f5a4d3e88c7d1426f72f3322e7c4","sha512":"236e3242e761d4bc8f3498177929e102faf192890c4338ad4071895160b8f889a606c6d5af7e7c121bff4f4a3977c4a707eab482801383663dac6baba533ed9e","ssdeep":"192:FYkzeuIRP2ht3rajpX8UIqgwlYoKzCA1kWqkyj2QF0QW:FY0ev+bra6U+wdKWAyjF0QW","tlshash":"46e1b02ef33a176d8568bef6d132600082e676e857c9b10f485d66e21f207c8ba913d6","first_seen":"2025-03-27T06:51:59.259607Z","last_seen":"2026-07-08T02:06:35.010951Z","times_seen":32,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10055-292e72f0.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.202Z","timestamp":1783425141202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10055-292e72f0.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-1556\"\r\nexpires: Thu, 06 Aug 2026 11:39:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I04vEn9GwYq9otdxMTwXOgxgV1IQgRSM90LxD7DBv8CYRFWCtmRuFlpBr9ABKVVwA7duWUFA9YOWJzmkEYokwnrXeU0BhljM%2FKYPfjJW7wowC6FUtmOaM4alrFFJdAU%3D\"}]}\r\ncf-ray: a176a47c8fb3b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5462,"size_decoded":6216,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"f06c195c1b7e6d6b34571e2d22e3c090","sha1":"8b2d779744d9d12c6681d901c26a9c7057b448ab","sha256":"292e72f03427a64943bc82cff6fb10df104bfe9bb6e8988f319232b1ddcb4c95","sha512":"2065e0a37dc38e9d39a8d58f5074f60a551a0940fd72f9fc4b9927b6e4bfe1b26ea1fffd65c35e65880024bbf5ba707e2b663e97c5f6f72e29418fea6bc4a446","ssdeep":"96:NxpL7i5eRZWE6f5ONoFjrXUu2vXi5d7CIkujLdBs1TxX:NjL7icR8FkvSf7CMjpqD","tlshash":"b9b18e13b52b0192b02cbe560e313b04151d2aa8d9bb22c6495e033d4267af66cfebdc","first_seen":"2026-04-06T13:07:20.310828Z","last_seen":"2026-07-08T02:06:35.060153Z","times_seen":10,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/common/getAllSetting","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.205Z","timestamp":1783425141205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tm1rjoGZXmGOjElh2jhTDM2%2BfNBhQEJj7cQlIePbzSG%2Bm5AogrFQ4GPOrLxjUVMcRwqmOld2PIGLA80ivfXGnF%2B6nJWOHnx0IYDRkHw1F28aJocrIfdTL%2Fkj1PDbRoc%3D\"}]}\r\ncf-ray: a176a47c8fb5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30897,"size_decoded":6862,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (30299), with no line terminators","md5":"fe579900f4ba04d7e984c5822ff0ed4c","sha1":"0691b1fe196e70f8116fbf26024ac9c257a13b05","sha256":"b1e5144d0b808d702c150cf80fd70e51f298df61842f22a4b8ebd42819f29087","sha512":"597264ff9d1bcd4a13e578bab7f3541b652e56bf0eb5b85cff01326afd517731f6bf8f69ecbd778801cd55e13f8e1ea053e1933148488aa09a459049191d6b40","ssdeep":"384:0sOzmKW+8JbBf3N2/CDt2pD+EMe9PP0zcb:0sOzmKQbzxo480U","tlshash":"50d2011672c9c87d86f20cc8d47b7d4ef8dc347faa909849f4a69e4c9459df7884b04a","first_seen":"2026-07-07T11:41:26.754898Z","last_seen":"2026-07-08T02:06:35.001439Z","times_seen":5,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-457bab7b.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.937Z","timestamp":1783425139937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-457bab7b.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-9e7\"\r\nexpires: Tue, 07 Jul 2026 23:39:07 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ol9DM7MvqY2yWHh3sdvWe8d9E4vMMi0Dp7CZLDkWZimFQ0MnllE4p2%2F7a4EY%2BcQ9NHA6%2FNfoQ8%2BZDW%2FkYPj2o8g07IN10xY4oUW%2B1bydONyroXsFgIEea5EUxOfnkkw%3D\"}]}\r\ncf-ray: a176a4749f01b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2535,"size_decoded":1473,"mime_type":"text/css","magic":"ASCII text, with very long lines (2534)","md5":"581d4cf90f9c4ee23587c2a2f6f4494d","sha1":"b4b3c18f8b4977973ca7b185f93c51927d0c3f3f","sha256":"457bab7b9f44154dd16e860236705b1659ffbd16ae2a80eade02740b20a56470","sha512":"61882f6dd3469c43da4298235ffae3b3e02b00d87db6793762efc660571e03c3abfa9f8710c64eed7de0daf5113446d14c71c9b70e7a1b63a108d2133ea5bc99","ssdeep":"","tlshash":"be512388b71a31256cb3de87bd2925c8a7445902e7ab9985f10fdd0b07dfad3183028a","first_seen":"2026-07-07T11:41:26.744713Z","last_seen":"2026-07-08T02:06:35.018538Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0aed821d9d40f4452991d4c6a8e6fa3a3.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.180Z","timestamp":1783425141180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0aed821d9d40f4452991d4c6a8e6fa3a3.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12556\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8762A8AB23334A47F1C\r\nAccept-Ranges: bytes\r\nETag: \"14B415ED0A3655B62E78EC234990BC12\"\r\nLast-Modified: Wed, 25 Dec 2024 07:15:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12852473166245111393\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=aed821d9d40f4452991d4c6a8e6fa3a3.png\r\nCache-Control: no-cache\r\nContent-MD5: FLQV7Qo2VbYueOwjSZC8Eg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12556,"size_decoded":13121,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"14b415ed0a3655b62e78ec234990bc12","sha1":"b0a80be4c4f8e4c9f9d00711fcf8656fb020cc85","sha256":"0beea878c1ea5844b65a4686696654fe5adba210beea0489c45b40ab5b652499","sha512":"61a935ea01c21844355ebc98bf23d65c35cdb3c7c9759c6ad80883d184244813396cb8c6d98bcc58e3504642cc490610560faf8f0eac81039eace1f3cc6a8434","ssdeep":"192:3b9K1tLI4BayVPpEgg9/+Ufcn+wA4DRsf/eLs8j1lLgr2Jlk9eLk8htD281++UFa:rc1t5YmGc1AeI8ux8Lk8ht91+/Fa","tlshash":"8c42c0abb48f4c2a90adc0719d4974abe3f21cd41d64e2291ed0bf1c7114663299678b","first_seen":"2025-03-27T06:51:59.252862Z","last_seen":"2026-07-08T02:06:35.003793Z","times_seen":71,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":-1,"dns":28,"connect":264,"send":0,"wait":267,"receive":0,"ssl":797},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/btc.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.268Z","timestamp":1783425141268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/btc.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 2589\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"a1d-Hs2DJWWPRZEeKOlK+4Xzq6PqOMQ\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230137-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 15069\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMHF5ja91CPMPHjcq6UhyWIQQxm97EO9WXUW%2BQY%2FIWTQSqQS9TdfvkKX2yyaD7g%2FIreIFVG5hGNVFMsgC5FYOxf4EyEE3yDESR0ntLv1sYPfec%2B6f0QtovlgG9skDPDMJX4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d284776ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2589,"size_decoded":3637,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8f8d12b8691a706a99e7544bd33527c2","sha1":"1ecd8325658f45911e28e94afb85f3aba3ea38c4","sha256":"8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e","sha512":"36abf50c637a730a26ceea1ab4e2c9d153274b5c1a03d273372f0b580eeed3267d08d4512326da520bd19b425288d72f0c2edc8abdbd3549b03612c639946021","ssdeep":"","tlshash":"a9513aa1c3955ea0445ad9910b83ea56263031dca284f7d6ee3024900f68b35b4d2b73","first_seen":"2023-04-13T08:11:26Z","last_seen":"2026-07-13T22:31:51.151641Z","times_seen":299,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/vendor-0fb05a56.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:18.820Z","timestamp":1783425138820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/vendor-0fb05a56.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-157dae\"\r\nexpires: Tue, 07 Jul 2026 15:18:25 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKcaWa%2B0L7rHSXl56YJMq62k88tHPf46NwXw%2Bfgx8nTI9WDtjfh8seiOiNGciOlZL8RwzYql4K5k1OhV2ewggqsbhiMkYLX1enFcxQF3k5WbjfMSTjbjWyZS1Qi7l7o%3D\"}]}\r\ncf-ray: a176a46dae2fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1408430,"size_decoded":456923,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"84a1ef46da1f9937344ac8f9dcf46136","sha1":"cce2e2de5dbb4a74fefc4d56a52b258bdae76fde","sha256":"e8a88e6f329a2d554f8b825feddaf3f1a08e2eb1cda1ebf2be5b99aac56830e0","sha512":"83c848fb963e9b4d034e7d5fd891653fc5a9f293320aca549276e80801f73920995636a655be8a7a952f391af72634c893577220c5ffb68a002f601a3c98f1b5","ssdeep":"24576:qcxqKN7TKrTLKwAKCWLBHY1Y2/xxO55PpzCci/9/Y2OYE0hCFrekIPYn5hs4I6Q9:qcxqKN7TKrTLKwAKCWLBHY1Y2/xxO55K","tlshash":"162538d97592f02193bb54e9407b0001f33e2b59740988e0f0be9d9a3d6ad5992bbf3d","first_seen":"2026-07-07T11:41:26.802619Z","last_seen":"2026-07-08T02:06:35.045027Z","times_seen":5,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/resource/fonts/Arial.ttf","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.173Z","timestamp":1783425139173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dododol.cyou/assets/index-8485d11a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\npriority: u=3,i=?0\r\netag: \"6a494676-ff9e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dv3yeMmNDKkiCc8BY7bTEJm8M%2FGbhvkEoIw5oPZ8YLBss004pQT%2F66nXn%2BVkHVMDFKsLwKRpVgYrpUfzBu54erQHzg3ESGPiP3HabCq4hRVUeUyBeDJnRHrLOfteCjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a46fde78b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047718,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-14T06:19:21.897356Z","times_seen":2004,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=DEFI_POP_UPS_NOTICE","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.198Z","timestamp":1783425141198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=DEFI_POP_UPS_NOTICE HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOlTLv8I0VNDAxy1lXKKGyICLoy%2BvNUnupS0t%2BDj8NX4k82Sid8oEgjRMZIpYwrrHdzG%2FYQ0nzW4rIcFA8rebxPXAbECzWJZS%2Fkllqe5ZsJpyt2Jev18jxEzYHL%2BFFs%3D\"}]}\r\ncf-ray: a176a47c7fb1b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":897,"mime_type":"application/json","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-07-12T20:31:43.804251Z","times_seen":283,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10061-2c68b5df.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.212Z","timestamp":1783425141212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10061-2c68b5df.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-2750\"\r\nexpires: Sun, 26 Jul 2026 03:01:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMF2oLyVV%2FkZZ7NN2pv2mCIi%2Fxpq%2BrGA8arxwhERxM60J%2FigpUOARFfO8TCOfXZk2EBkoN4fF%2B34ctJsmkwEsT8ifTfeTTX1JGo6%2BxbeJsmCmDpkNr66o2IMniDXdiw%3D\"}]}\r\ncf-ray: a176a47c9fbcb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10064,"size_decoded":10828,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"946266fc71290b4e039c8fb6cfa7be9e","sha1":"c9abaaec2e154a2872e71792d9fb3d8a63b91456","sha256":"2c68b5df6ee7ce8246fc0650f1cb16bb0971bb633d411a38833582f97bcf9708","sha512":"5b30658f4f06ca58a36641f0020679ccb70a2cc0c39d6b60c1a899e9422eb3d651f019ff45164313b3469ee31d5a8d2113e83d180306c02bbe4f02dfe87d5d23","ssdeep":"192:hDPCuF9uhDFC8cZpDcuMserBr1uPddXsmx6TD0Hfmonxz136To6wi:hDPCGUD4LZtcuMPs376K/xxCl","tlshash":"09229fa22d194db13c3c8e59a427aa8fcb00d76c3e37320f85bd63729555f3ba24075a","first_seen":"2026-04-06T13:07:20.256458Z","last_seen":"2026-07-08T02:06:35.065613Z","times_seen":10,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/platform/alading/logo_144.png?2.0.1783187035300","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.554Z","timestamp":1783425139554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /platform/alading/logo_144.png?2.0.1783187035300 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a494676-4f15\"\r\nexpires: Tue, 04 Aug 2026 09:18:12 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KoTrPrM2eutUFnyeXTqvisE7iobF%2Fpi0Dr9QNWbnLd2qXo0pZOWj4tUPoltOisbtLToCSx7pwXn6pLJGzgLxOc9mtDd8r2MbqcWGTTWxq41XIMltZkICCO3%2F4YuYbI%3D\"}]}\r\ncf-ray: a176a4723eb5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20245,"size_decoded":20436,"mime_type":"image/png","magic":"PNG image data, 348 x 112, 8-bit/color RGBA, non-interlaced","md5":"57e0ab18b9d4567f18d1f0b280a2d441","sha1":"0f5ea608306e264a7f32da1c6c2c4964a137c9df","sha256":"a6f054496d10e913d4ea35b98a7dc07df22a13bdf225d1236e9802dc77ba4d91","sha512":"f04c2c3cc84ff6a772b5164d05e8de9638e083da1a75c0734736ca0aede123ea0e5395fc46b8a92144252d834e1bba293ae040ad0eee86fb14d58644cff549ba","ssdeep":"384:BrHi4RUBIrsAmJ0VP6m645e9fzDUyYabIX4tOr0ei+u+gzScA8EQ:BHvRyWmJ1m645gz4yYa8X4WWB+gOcVP","tlshash":"3f92d1fe581126da72041314c8ce68a2c2f7ccbebec5798d8e9ec7517a40955edda2c4","first_seen":"2026-04-06T13:07:20.29395Z","last_seen":"2026-07-08T02:06:35.006206Z","times_seen":7,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/common/getCoinList","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.922Z","timestamp":1783425139922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: \r\nlang: en-US\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IKwlioGT%2FYoQU9FbA%2FRscsJhtgAXrm9A6BNUYxLTKvWMzxD1m39kmZJ%2FO%2F%2BlUs633r2fF18CnLVTKLtoj%2BpKj4Hp9LhLATRJq5nZDAkmukMHXYZchaDmmexC%2FwB5Jg4%3D\"}]}\r\ncf-ray: a176a4748ef5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69373,"size_decoded":7461,"mime_type":"application/json","magic":"JSON text data","md5":"de77e0e60fe630a97cfeef5e08597a1f","sha1":"a7b8281562592957cee3d64ee55ddd4b4767602e","sha256":"f7e6ebd655c6d177baa56917476e9e093dd40fa2bfafd78dae3df388a32588e4","sha512":"b1faf77de5fbdbd5bb767a546aae7b1689938a5631431f957e0d4d3c1ef13227cf8b54b80cfd28e984b12067f6289057a29b9ee3a67dc4fcdcb870ec68b78fe3","ssdeep":"192:VXe1Xf8Xc6X8fWXW/dX1t0XDjDXqeXlBSDgu2wXuwYnAK7cYf9TCKhnjR4bV0Kwx:L1VuNopQd2b0siyk1dJuXRaY9","tlshash":"5763f12ab294847cd16980d10d5f7d23e19d3a3fedc64a1ac6de8d9888eee725507f03","first_seen":"2026-07-07T11:53:04.306368Z","last_seen":"2026-07-07T11:53:04.306368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/usdc.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.266Z","timestamp":1783425141266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/usdc.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 7763\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"1e53-Zzmg1RRQriLo4g+o7AiNVGlBVD8\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230107-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 12255\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNGl3EL7uVZ12JbfpcnvWeU9B5NIjr7rOqUQLtb5eehvCVNWl%2BCFv5ZfOOgydTzYGRPc%2F1NzwXQN7BWTmaoSw3hBtTWKY%2FJmWsXp4VRiPS1GWtGzqrYg4PTDWbT1ogtodJM%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d286d76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7763,"size_decoded":8842,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"7dfa6cbc7537f528327e421ff3527656","sha1":"6739a0d51450ae22e8e20fa8ec088d546941543f","sha256":"7f9969d11eef1e08ded67abd495a65b4394bf8363515eaf5bbad4c089b98928b","sha512":"8b456748341a5aeb8937390e03f9f8c5b97421d0ae4b9e59810452358a28ced91d88ee4452071cf12a3be8fc205c931a7390f944fee7640e8b45b143f6b139e1","ssdeep":"192:BwVqbIGyXTBxVRc95v84tgsUEigzOsliT6DoL:BdI/xYX84tpi6OMiT46","tlshash":"1ff1c08aeef87959e2d4f7726223014e1331163c0c586d013599dead8ec77484dc4e76","first_seen":"2025-08-08T05:26:47.57562Z","last_seen":"2026-07-08T02:06:35.057639Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10054-1fbe1b40.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.277Z","timestamp":1783425141277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10054-1fbe1b40.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-2fcea\"\r\nexpires: Sun, 26 Jul 2026 03:02:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DFFwhhl0ftpfJfOGPtgmseSVb8Pef5ZKudQgq9QCULc9ZsKSzX%2BVOQVM2F%2B1muy%2F8HMWDrTEaSXQn4xHd1P0BGew0V5OrRA%2FXpDW09kI491Taj3g8MRyZqdpuamTLGw%3D\"}]}\r\ncf-ray: a176a47d0fd6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195818,"size_decoded":196593,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"6722b8afbe0f4a838365103cd6a1f524","sha1":"fca54c40c53566368fba813b5a102c887277545f","sha256":"1fbe1b405a7665088d35da64758bef04fd98878d0de410f899186d453e4b2056","sha512":"224ab4de44837ba30ba4692dbaf2a910936f5784648f7c1e7cc563e2503373145d42c09a5c24d14446857b7dba8aa238b5e022d1fcbbea4d28c4903fac162db2","ssdeep":"3072:qrbRyaMnMDFiYKyACKP+R5Fqt5XVGzjtcHiC7PhptqVc/EV+h7ntuxaXl9uGT0rc:+bRyc53Kmlq8zyCC9bA3VpxaXl9+FT/A","tlshash":"ab141294b2138fc6d6381e5d07174cd63b99f0495a247adb1a0fefbb4b192e824b4613","first_seen":"2026-04-06T13:07:20.309151Z","last_seen":"2026-07-08T02:06:35.0043Z","times_seen":10,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/platform/alading/config.js?1783425139901","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.918Z","timestamp":1783425139918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /platform/alading/config.js?1783425139901 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a494676-186\"\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Jul 2026 23:52:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9SsVZMCBFy3O%2Fe2cTVse%2Fir9FYMqEVhHkfps2TxUpvMZiSfsGNSlteoS8OcuXHjUGbqB9YXajEIjzXg2tdeg8k72OAdUFVTSj5XQJGBER%2BoRUxWX0nJpmB6pLv%2B8Vg%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a176a4748ef3b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":1006,"mime_type":"application/javascript","magic":"ASCII text","md5":"c8503182485808fbb7daf602ba27f732","sha1":"b887481c9a563add0f09c65e6b0d35a23112e355","sha256":"2490f639eabe36aad1be40131aad5d278aefaf27a7fe1b52581de8e6e17f3100","sha512":"15c5b8a6fa04d208d41a80e5c6498517e4d6f6e48e977f7e7118ce8a32a3f6d0eab96fac163b06f0e27c9db644c83cd6040f56478f5b77a733d9830ab0fd4714","ssdeep":"","tlshash":"3ee022e0a5e640ca5b82456a0fee953664461732886d382e2c4a6116fecfa0a35b5a22","first_seen":"2025-08-07T00:21:40.247974Z","last_seen":"2026-07-08T02:06:35.002804Z","times_seen":27,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.06820136fbadb47d99c45e66c2062fb0b.jfif?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.176Z","timestamp":1783425141176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.06820136fbadb47d99c45e66c2062fb0b.jfif?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4194\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87660F73331339DE139\r\nAccept-Ranges: bytes\r\nETag: \"B45D7E9D405DA3C66765537CBE02C47B\"\r\nLast-Modified: Tue, 27 May 2025 12:43:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2434628539097554218\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=6820136fbadb47d99c45e66c2062fb0b.jfif\r\nCache-Control: no-cache\r\nContent-MD5: tF1+nUBdo8ZnZVN8vgLEew==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4194,"size_decoded":4758,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2], baseline, precision 8, 474x316, components 3","md5":"b45d7e9d405da3c66765537cbe02c47b","sha1":"1e2f127859852f3eef55249b1a89b8ce186c6ff3","sha256":"ce812908377f5c14ce6fd94e910686f5d8c8d37d34e2b60bb0eac8d88455f2bf","sha512":"0c731e6942c3e8ef29f5c5d4f7377a85e27b2422debc13f76cf4044357b92d18c4e82031aee7f0fe8016a103eafa2774e643dba600da869467529b6aaec897e1","ssdeep":"48:Xw6nyYqnuERAP5PPPPPPPPPPPPPPPPPPPPPPPPPPPPA:XfyuEL","tlshash":"7381594b268a0da758b3efd27f03039e9778fc96201036e36d111a9c7bf6362118d1b4","first_seen":"2026-04-06T13:07:20.28577Z","last_seen":"2026-07-08T02:06:35.034429Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":32,"connect":272,"send":0,"wait":270,"receive":0,"ssl":806},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.07ddc6e3d7eab4fbe9e222f6c8c2d6c28.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.183Z","timestamp":1783425141183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.07ddc6e3d7eab4fbe9e222f6c8c2d6c28.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21548\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8771000003039E56F60\r\nAccept-Ranges: bytes\r\nETag: \"639A47EA6A31FE26285F5049327ADB50\"\r\nLast-Modified: Wed, 25 Dec 2024 07:16:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10454958790141642359\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=7ddc6e3d7eab4fbe9e222f6c8c2d6c28.png\r\nCache-Control: no-cache\r\nContent-MD5: Y5pH6mox/iYoX1BJMnrbUA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21548,"size_decoded":22113,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"639a47ea6a31fe26285f5049327adb50","sha1":"2da11d21169d23092e66b45e8c0ec670f2395687","sha256":"40eb4529da9bda72a54499c1d25c92cc255995ac1f5b4c832cf13c39432749ff","sha512":"c29363480661629fb25eb0736d7e4926b4a82f4a3a5d2b8ad7e75114fb8c30c9eb7c18f51991488aa8b047004f75404e206d9597daff9f60671f7027d08f0512","ssdeep":"384:c4UIzEU8WE5GmcfxFsHJ1skpxnJOUFiWMO1bs8rBH+UbV94KaVlQB4hiB:J7eWE5sfzahpxnJJiW5Q294KqG0W","tlshash":"5ca2d1491b2757d4a73c3f038c4c3d690537ec758aa5f248beaaeca25c21520feb9243","first_seen":"2025-03-27T06:51:59.248956Z","last_seen":"2026-07-08T02:06:35.035468Z","times_seen":67,"resource_available":false,"data":null}},"time_used":2468,"timings":{"blocked":-1,"dns":25,"connect":269,"send":0,"wait":273,"receive":7,"ssl":1894},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/tutu01-b713af1a.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.200Z","timestamp":1783425141200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/tutu01-b713af1a.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-20128b\"\r\nexpires: Sun, 26 Jul 2026 03:01:55 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17HbtLtZwbqr9IIw1US%2BzdVItWDZ8l3HcERoYzqrbua%2FQHaIJEpkzm12ImdvIcxZ7r1Jy07tq5mfmu%2Fl%2F2XG0BIP4ZQWykWbTI95eQ3kAwOypw81TNy9w3XAEnFO3lU%3D\"}]}\r\ncf-ray: a176a47c8fb2b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2101899,"size_decoded":2083717,"mime_type":"image/png","magic":"PNG image data, 1378 x 1534, 8-bit/color RGBA, non-interlaced","md5":"aa768a55ac0e05afafd329fe27903859","sha1":"1847f8854b3c9d49ea2c7f7976e6698a2e2ebff6","sha256":"50259952d6474491a005e8f875cf7dcf12a922a2e4aa36cfe804b38231fd8fcb","sha512":"600234c8d65e5ddd496c0ff43e64d92fe898f4ff909c1f621cddff5fb0b6a10f4351c777339782c9830a14a623ca86deef3573c66c09998bdaae306f720e2e24","ssdeep":"24576:yweHUI59uk7d5ox6RhFD0s1W+yQ6MJ4O4ftKaL+z2x:3kB5c6RhF4EHyQ6MoFvjx","tlshash":"7a253378f28a365fd4adae384d23e56426f5743181f50ff62caac8f548d98478a01fc9","first_seen":"2026-07-07T11:41:26.781141Z","last_seen":"2026-07-08T02:06:35.010428Z","times_seen":4,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0a9e6eac461e14ee48b735988879f0666.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.259Z","timestamp":1783425141259,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a9e6eac461e14ee48b735988879f0666.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 41871\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE878CD9B34323771B2BB\r\nAccept-Ranges: bytes\r\nETag: \"C17FB2AD4136F0AE9C0F8CC76203B089\"\r\nLast-Modified: Tue, 11 Feb 2025 14:28:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 230717204766387871\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=a9e6eac461e14ee48b735988879f0666.png\r\nCache-Control: no-cache\r\nContent-MD5: wX+yrUE28K6cD4zHYgOwiQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":41871,"size_decoded":42434,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c17fb2ad4136f0ae9c0f8cc76203b089","sha1":"987ca3f5149a44ec1e31833672d5661ce1a6a708","sha256":"d4a651e74adee7510d4da40304f48c9dca2f2130dcf4ae2b19d8c64e334b5223","sha512":"ce9b251f36a25ae4efde9fecf88197198c7031a001afd7e2bdc08578df55e820a4556ac049a8c80f0715ab69c753264bc443867afe91a77e7c585d13f0f0fada","ssdeep":"768:YepL62JLS//jk7O0tUz0dgF8TXZEz55FB5KGfLzO6OHtDd4i7ACk/31Rnqu+7POg:zpO2JLdO0tKQ3ZEz5TB5KILi6ONDdf7f","tlshash":"6313f1d0ce9b3131e5061c57bcadb8911c7a902ca337fe2e30c7f4256f94995c858ab9","first_seen":"2025-02-26T18:31:17.555429Z","last_seen":"2026-07-08T14:59:29.930539Z","times_seen":126,"resource_available":false,"data":null}},"time_used":3191,"timings":{"blocked":2916,"dns":0,"connect":0,"send":0,"wait":271,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/ada.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.285Z","timestamp":1783425141285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/ada.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 5676\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"162c-IGHKp69m3gVJKKhLABmHmsNwSBg\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230040-FRA, cache-ber1080051-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1397\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLFJxh9Kd%2BILX6IrfK%2FfF09zXGjLguuIGk5tNTFxMyl1l3cV86D4E2jfR92HgskhEhUWPZvhvSN77G8Cxl767GY2KG8ZqfCbgJ23PfYJps5wyvCbsMHmZrJbJliAY3BYTP4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d285b76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5676,"size_decoded":6747,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"b46b7cf5e660032d28bffdd8a46683ad","sha1":"2061caa7af66de054928a84b0019879ac3704818","sha256":"c1257317f1853dd6848777550a9a17f65f74435382b22d9385377737a803c069","sha512":"f35e3b3c27da78899cd1769bc2ed6f0ee0d583c614daf1eb0c51e6706a798bbacc0f97e247c3a08d5af3fdf1f5ac3682d5dcd839321d98a5c3f7ceb85d13fcff","ssdeep":"96:g7fV591a9lw+qPOxqJxch0nu3ctxrgwdM715veD0TceqXo9kcdQCROlYFDtKJpXM:g7VAPw+q8qJC0nu3ctEWT3oHQCTvKJp8","tlshash":"1ac16dc422f097cf5e54b5572ae0e43d4ad65a7b16324c4a9010a47b744f8e90cea86a","first_seen":"2025-08-05T08:56:13.181255Z","last_seen":"2026-07-08T02:06:34.986685Z","times_seen":28,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/version.json?_=1783425139787","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.790Z","timestamp":1783425139790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /version.json?_=1783425139787 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/json\r\netag: W/\"6a4946c9-5b\"\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p93%2FSJeRGY%2F9XoUGbyNrglSgqJqvwwoFW5DR2YlTSwyVbp%2BROgvaL0dfN%2BCX91kRmdBC5mJVCduG5C1VcqjSPAq9WSstDsHvyHd2wpogdvfsk2P80FJ8sFBV%2B0%2FBldo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a176a473bedab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":749,"mime_type":"application/json","magic":"JSON text data","md5":"1bb0457bd1774adcd8ff7b39714f984c","sha1":"acff8fb03dc3529facbe4e2ca446dd373f4cfb26","sha256":"ba972ccf20e8c1ab6c8babd146abab826c6e909dee334b5af4511417e90a7c08","sha512":"b71fb230e2df6955501ed65ae6271c1f76c9b7c5b0268b89f4b204faf4770e2fdb64f58b73b9eb543d6ea3e14522c06316e7b7f0f6c972b67c0158e50fee5c58","ssdeep":"","tlshash":"a1b01204633be451832059714e9408c093a031b004c18a893016221c135001ad515119","first_seen":"2026-07-07T11:41:26.779681Z","last_seen":"2026-07-08T02:06:34.997134Z","times_seen":5,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/dot.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.287Z","timestamp":1783425141287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/dot.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 5651\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"1613-Kr9mCe3gB+LqjnNOzin+Ha5M7tw\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220039-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 35070\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrnFOtw1CN7GNlK1T643QSzOciNHYgbPfEw331CKm%2BmAXL11CLiErl2jx6pg7dNu1UrJ7uAqk61pl7gogquwaceLDTXchgC31t3l0jqBthVvRzIT5ym6%2BR1OnG%2Bi0A5MDT4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d284476ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5651,"size_decoded":6698,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f272c9cc7e4ce5cf95d5318496ff1de0","sha1":"2abf6609ede007e2ea8e734ece29fe1dae4ceedc","sha256":"6051b0de048fea17d91be204b3c2025e16265c3a5e65759bf254186e77d41e6c","sha512":"dffb29fbda41c9e3ab588981936dc07a491b2e2f03d4c2016fc07869b412eae14486e7be1193fc7545ddaa5e046a5b786424a53049fca02b248f57e0954e6793","ssdeep":"96:K8YMAU3VlXB77NSz5mHgNmGRwXO4s7Mc3xniDYdhGm+cTQOGvyKA9u1yDH0d3t:kcZ77MmIRqOl7MGtth+cTQ4Hucct","tlshash":"3dc18e40db29c0eb462d56f181a6133f7b9b5211a183336a60fd917e923fa448bdba47","first_seen":"2025-09-08T14:29:09.833353Z","last_seen":"2026-07-08T02:06:35.008854Z","times_seen":21,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/resource/svg/light/gou-yuyan.svg?2.0.1783187035300","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.178Z","timestamp":1783425141178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /resource/svg/light/gou-yuyan.svg?2.0.1783187035300 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a494676-105\"\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBeDQonhQ%2BfmvJFscKPKejhdeRVTVuphNRNKtSlaXo%2BskttG%2F7sBvG9hvnsX5kP0CkhkW9CZMON21ZoIG6PkmEd%2BzmOrhVN%2BnfqA%2Bhe50vJzYVqV46cN0EJZ45Zgkzo%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a176a47c5fadb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":893,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9be08682406830b20d26c7d6ea6497a9","sha1":"726e8e49fcef32c83adf41278a0b0d81d64cedc9","sha256":"6f1072b132109de71d9ceb899c1b0d2e5af12901cfc5e79d048301f455ed9ad3","sha512":"3d78093203c31f9573becde02ec2c29e819e33b8be59adbf2562561e14da84f201fd93198aeba1dfbd73ee4a0ecd5c3a8e3efbe4faa3e58fef610cb34b70a3e2","ssdeep":"","tlshash":"53d0951fe85f400c605bcd5009e03d44916ef05557d605fdf9d258bbc1224513479d58","first_seen":"2025-04-25T08:37:00.52435Z","last_seen":"2026-07-08T02:06:35.052667Z","times_seen":94,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10062-99210c2b.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.214Z","timestamp":1783425141214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10062-99210c2b.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-17ad\"\r\nexpires: Sun, 26 Jul 2026 03:01:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhVb%2F%2BXtY9o3rHcqa7mqB6E3chUnAIiNLYgz4h4xs0SLmLKbiTLjzvKa9ABZo7g6sMYwCF5SklxmDlnS4avrrEEDy%2FrP%2FOCre9nJFM2%2B2877QfDnDkRLBHgGU3ZbBLk%3D\"}]}\r\ncf-ray: a176a47c9fbdb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6061,"size_decoded":6823,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"c74cd735eb94f093b6f24b25538bd743","sha1":"9cd5e85856e380ab57395cc9e4da104b41166970","sha256":"99210c2bc135d0eff75d0813c2ea00b6d2d3277616fd089fceafd15c8c1640c8","sha512":"9f6df291fd21db477b83fa3a318e312542ba6a72866abb8bb9188a763d478632777191a1e0e3ca8092031818f9a170518a56641c24d9f3a1c1819ddca55896ac","ssdeep":"96:jYB2VRw+rITy5IUUrauM6XmZ+KkcJIWh5DBWX26D2z03Lk+y8Aa41e/hhD7bcTlD:jv9iyjUrausZ5kctDBWXgobk+vAp1uz6","tlshash":"ddc16b075c8c819da6bafc52e014924c7e97c16861a2bde17600d838e2eeb6bb541625","first_seen":"2026-04-06T13:07:20.261741Z","last_seen":"2026-07-08T02:06:35.026501Z","times_seen":10,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-e226468d.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.934Z","timestamp":1783425139934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-e226468d.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-867d\"\r\nexpires: Tue, 07 Jul 2026 23:39:39 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0H4n1mhgb23m3D78ecqggBJ4HINBbdxCqFYjGTlpGh%2FGfZxnoKk7zI1r1SnlC8wN0rOy7w0Hz9mR0UqRShGswlv4LpeBuVYgQTq%2BFUjlB0%2FVPRoJ8xRefakHna8rYl4%3D\"}]}\r\ncf-ray: a176a4749effb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34429,"size_decoded":6426,"mime_type":"text/css","magic":"ASCII text, with very long lines (34428)","md5":"53eb273abf25f30936845110d35d8f72","sha1":"186fc52eaa3d0c3b7191f01c0bbe674dad9f8990","sha256":"e226468db92390dacd24de92e6c0727998271521ba7a4a95f9e3ff1e81f97a5f","sha512":"da8eb232146d33826960ac9ca4ab0f3624c29899862e4278d405cba2814b6db9f1da68a0129e75cdeaba5089151ecd7f2ff11041f2b7368ca315451ddd6c2d69","ssdeep":"384:QFmej/rwwm5EN1TMM77gjyRPIPr0Qh0IlOPeA:Iwwm5EX7EjB4H","tlshash":"4cf27429ba4c7228a833c9c5b8d0b688d096f952f3634ed4d12376634ddb7d7272634e","first_seen":"2026-07-07T11:41:26.763773Z","last_seen":"2026-07-08T02:06:35.031616Z","times_seen":5,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/resource/fonts/DINOT-Medium.otf","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.114Z","timestamp":1783425141114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dododol.cyou/assets/index-8485d11a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\npriority: u=3,i=?0\r\netag: \"6a494676-11d88\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkpQIDkAFjDpmXocSyl47BYuDbaCyYQ2oia7ZoSMkbwJdlT31y1r0oE4aTUNfFGktg3dFpbHueib9K9Se49Xpjol%2FDSbwM13x6mJ91kr9FJBx%2Fv5%2FRsyGLiGUATfBIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47bffa7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":73800,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-14T06:19:21.861274Z","times_seen":1586,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10058-fcab6c83.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.207Z","timestamp":1783425141207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10058-fcab6c83.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-24ce\"\r\nexpires: Sun, 26 Jul 2026 03:01:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bk8G95D6MNWe%2Fk6c0HkU7hJ8SB3vLAPRiq6MgUzxhEWuAYV8qnIo7UJyHpGFjEpYv4Oq0d7Ak7WCystuwBGVIV%2Fcc7ado52uPviJFzVnDu8qyPEOSyhbeFNktnezdcw%3D\"}]}\r\ncf-ray: a176a47c8fb8b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9422,"size_decoded":10178,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"6f60a88e7abf31ab4db35e4ec66b3810","sha1":"29492d3cf63eb54b7e3b7744d35099e5d63a6318","sha256":"fcab6c8372214bfa29097c310a83e1bbc006a6be4119d8ecffe83e48038cc162","sha512":"e4b161cf6d15fa1717d149f0a05d31eebda6b0a3a651b7b818ed85f84718cb493c74650b3dd8690ff29cfaa80a636055f421c758e4c323fdd3f49fadaa1ca0a7","ssdeep":"192:QgDLXa26CFHck0FsxRiKLqQU2jZYvYBwdGEHt4rxQuj8zvHJs1:QgDWXCxDxo4LU2jZsSxjj8zvHY","tlshash":"6e12bfd074eb91a3e4f0058fb72e4402a89869fac32bd0c286e915a8f1c5bd795f45df","first_seen":"2026-04-06T13:07:20.260872Z","last_seen":"2026-07-08T02:06:35.016449Z","times_seen":10,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10059-609bd5b5.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.209Z","timestamp":1783425141209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10059-609bd5b5.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-3238\"\r\nexpires: Sun, 26 Jul 2026 03:01:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hv0cikDKZ2WXZ3Oj9DXcfOGsB73TmD%2Fvgy9EKNzC2lLlAJKnG8h6dAU2G687Xf1kjriuYeR2h25FIZH1JMp50h6JeGsupwVHQyjNrNY91HMq6C85yx6sXW%2F7kRY0Ir4%3D\"}]}\r\ncf-ray: a176a47c9fb9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12856,"size_decoded":13606,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"1175219f1ec2e8efdea3d016e92f2926","sha1":"4877d535d62dbd561da056d4ff5d88de0ac7e253","sha256":"609bd5b5a43b8a1e57be7f8e3277c2e29544845e8bf4635ddf672b0e4b8caed1","sha512":"7dd81f56811d4b99f379e724201b1623a2f2f85ee938b8ed7ea2dc40cdb9f9c900e1efaf466b9c5b89db0b99ddfe769061d1aaab56595f30f1b07838a0603c0e","ssdeep":"384:JvUoFQO2ZibWZ62FAdyDzQZaHegIpgMbQAnBR5l46wJ4e:JJCjZ6uGyv5QBbNR/cJ4e","tlshash":"c042c0615b2cfcdc5351974fe139ac68216fba892df8375f46292c9d4bc802512dc47a","first_seen":"2026-04-06T13:07:20.270436Z","last_seen":"2026-07-08T02:06:34.989204Z","times_seen":10,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10024-2087249c.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.239Z","timestamp":1783425141239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10024-2087249c.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-268b49\"\r\nexpires: Thu, 06 Aug 2026 11:39:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90Z9HICQ9OCGWEuWzJsI61kEFI8gb1xNhlScd99uD1%2BhpAZrGfPqBFszMoCEKblINKJ%2BBnF1Wpo2OqgKpyfO6AP4FGKLlFHJ6t88d0MWN%2Fw4EguDb2VlNKS6dI%2Bgjvs%3D\"}]}\r\ncf-ray: a176a47ccfcab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2526025,"size_decoded":2527143,"mime_type":"image/png","magic":"PNG image data, 1920 x 1146, 8-bit/color RGBA, non-interlaced","md5":"09b43b628320eaf8c90c71a89c5701b3","sha1":"53a009e58d6ee8aca0560a0eb79fe1320a423d36","sha256":"a6443550c99d483788ffaaa71ad232117102c5956c47eb3ff7f73694228d6c11","sha512":"790202a5bac6631a48d1cc33e74cab82c902e1ad38dfba3e044d77464f4df5e7a47aad133290839b4f6981f5bc08a1efc2ff11f4232f6a07f325b7a992ba1e34","ssdeep":"12288:9hJ+c+vqgQu8YbetC0dZalJnxSPB0G/bCiZnVKB1CV3d7IsOKoCkUktDAY1dfp1a:9yBbbig/sPj/HVpiRtkS1pNNvfsd","tlshash":"5525338ac4ba3227cbb3ee47f7d458cf14af61446953d36f2b890f414215ad9b82a7c1","first_seen":"2026-04-06T13:07:20.277712Z","last_seen":"2026-07-08T02:06:35.015387Z","times_seen":6,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":495,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.0d2c560c71a484bcfb6c78b489ded0398.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.252Z","timestamp":1783425141252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.0d2c560c71a484bcfb6c78b489ded0398.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7259\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-oss-request-id: 6A495BF9CE63A8353987CEAF\r\naccept-ranges: bytes\r\netag: \"74723ADF8FBA6AB9108D58287FDBD54C\"\r\nlast-modified: Wed, 12 Feb 2025 05:31:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6142254341309364301\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=d2c560c71a484bcfb6c78b489ded0398.png\r\ncache-control: max-age=14400\r\ncontent-md5: dHI634+6arkQjVgof9vVTA==\r\nx-oss-server-time: 3\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pwrF0ewEbxj8x4dpYa3MDwByIUi%2F0uRhVeCQv1JHBvI4DNTZwsdeVTJeZfCR%2F1lRgmt2vgZzn9FWT0RZf9hFeeUeksJ7dqmNEwTqc%2BTqaO6bNJ3jtC%2FZHXsvtG5t%2B7NJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a66dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7259,"size_decoded":8261,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"74723adf8fba6ab9108d58287fdbd54c","sha1":"11f1b33ff310f79ecbebb9e368b3b415cfe632c7","sha256":"f8c1f05ac06ea5b6c87c4fdf8e9bc8244aa83ad8b75b657f568773af74e20630","sha512":"66a77bc0be610048db17ab6310ebbda7892212884dfb409020b4fab0e6059d8d3a2cdff573990593e5572d8adb622a03948a5417a62efa3280bd91a142a27264","ssdeep":"192:08cV5jgd93WXUO5xk1iOanVF9m6BrQh3DTpW2pAXdq:08cVu3Pc8iOCF9mKrQRPpW2Z","tlshash":"ace1af5fc19a8a2b017fbdd4857fac2552ec941c383f38427721ba1541dea49b61bdb0","first_seen":"2025-03-27T06:51:59.209219Z","last_seen":"2026-07-08T02:06:35.027946Z","times_seen":59,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.048cfd4c3179e4f8f9de905f513917174.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.263Z","timestamp":1783425141263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.048cfd4c3179e4f8f9de905f513917174.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4029\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE878CD9B3432377CB4BB\r\nAccept-Ranges: bytes\r\nETag: \"C86B8F98691249EE33A43A7ABDC771AA\"\r\nLast-Modified: Fri, 19 Jun 2026 17:56:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17295896614934178311\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=48cfd4c3179e4f8f9de905f513917174.png\r\nCache-Control: no-cache\r\nContent-MD5: yGuPmGkSSe4zpDp6vcdxqg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4029,"size_decoded":4593,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c86b8f98691249ee33a43a7abdc771aa","sha1":"67b16689946820b363c9b5cef00abcfadb19c7a7","sha256":"5d957a9007104d083cf823e228e00443e76fb8288e4506dce850b4b3ffd0eff8","sha512":"f1d3031d00b50218a680104b74f48d10c17c6eada03828f153daf8754e3679578452610c8a1085e7094a080ae1d6ff83998b1786d7132b9660d658c1c5144cec","ssdeep":"","tlshash":"84816ed67ed88606835b44593d0410347f9e5c86da01d8b1aadce1bfe8f06cb6411ed7","first_seen":"2025-07-06T22:01:43.236584Z","last_seen":"2026-07-08T02:06:34.99206Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3462,"timings":{"blocked":3190,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/ltc.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.283Z","timestamp":1783425141283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/ltc.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1660\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"67c-43TxJ8zYUIaFdxJd3ag1IQ+fnBI\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230090-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1397\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FUxgncz3NPkCX9HBUm9mv%2FpkBCrCo22SEm4FMTEGeRmJFPm8RxyrNFWL%2FduEQQmZn%2B4UXwXvzHB06ltoyjVAnNwk35rQtdGEc5RzBTcXDhWmXrw3C%2BlVDmT9VCRtW9q8ig%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d285f76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1660,"size_decoded":2709,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"95507ffd15fb458032339c7dc775ed70","sha1":"e374f127ccd850868577125ddda835210f9f9c12","sha256":"7160750bcbc115ac8a3229bc1120fb59e96a737d607a57b42fa8e2b092a14159","sha512":"6fe799554171ee690f22ad0c86752f8ee12826ca378e15a0531b50d1f84458805ca6abc9ff8684bd62171afda6ed546ed21ae7dfb6689de65a248351fc1f3a58","ssdeep":"","tlshash":"82311a099a662da282350f2ae84c6128cd012340cd0123d7fbbdfc12d2e81c1503cea0","first_seen":"2025-03-09T08:32:31.736669Z","last_seen":"2026-07-08T02:06:35.030652Z","times_seen":47,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/en-e87ee1c1.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:20.648Z","timestamp":1783425140648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/en-e87ee1c1.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-d0de\"\r\nexpires: Tue, 07 Jul 2026 23:52:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iAQSCsWX%2FijixAPo2AqD7MsKf%2Bn7CJ6virCY4rHmiOLJDnr%2BH%2BUH6y5ZsKWCgrWArGbQ%2F1ggz16JPUV2gDggdSFrnXzUqUHZd4z9sWwqNyRwfiiUJmrjcaRql1Qnts%3D\"}]}\r\ncf-ray: a176a4790f76b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53470,"size_decoded":17573,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (53382)","md5":"1500ee7e87e644d4a6505d641e68cea0","sha1":"9306594900fd48256653066148c65009192ab2a8","sha256":"1b763268b77213958c086a93470c77d336d0463c4a77f237c61d88617758dd40","sha512":"fc420827d8d3a0ef73df6e9bb7495b0e458317f7693a347726f47b681f21cc2eeaa37588285383b870a55ebdab1bea9e1552fcb29b445efd3c56ff8124bd02d7","ssdeep":"768:wn2ZcEwlusI6hjZb1jsqvJ0JNk0sc7gUA5cY2blwOijTjb67NqM/IJzKEvzIqswF:szuZ6hNVB0hSCYiN8JRvzIez","tlshash":"31331a8d2e1a89a904f3172274ce6a5250b945c1c259485f0fecc9fd63d2fa7b3a7738","first_seen":"2026-07-07T11:41:26.840754Z","last_seen":"2026-07-08T02:06:35.046287Z","times_seen":5,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.09646585f0aea4bf4bb3dcf376cc954b6.jpg?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.188Z","timestamp":1783425141188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09646585f0aea4bf4bb3dcf376cc954b6.jpg?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10965\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87660F7333331AEE339\r\nAccept-Ranges: bytes\r\nETag: \"327647608D0424763F3893F6AD655EB3\"\r\nLast-Modified: Fri, 09 Aug 2024 12:59:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10790596113790497685\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=9646585f0aea4bf4bb3dcf376cc954b6.jpg\r\nCache-Control: no-cache\r\nContent-MD5: MnZHYI0EJHY/OJP2rWVesw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10965,"size_decoded":11530,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 526x310, components 3","md5":"327647608d0424763f3893f6ad655eb3","sha1":"8316a606efedb29bf60e70cf1167c2ec730df6d2","sha256":"53501f8bd3de06a3fb840b97946c08d0cdde89bdac92ee33a28e158b2277951f","sha512":"34cd2625b7ad284975ed4ae6cb3df8f173a525dd4eda65436607111feb5d2eb4397e7bff749a2dfe200d5c83c548e62eff366ba6168ef1902364cd25e339f43b","ssdeep":"192:RsvynUKUv/UCMrYNMtKwQvtM/jWpeivuTR00bxdxreFSlI:R6npvsCMrYNg7qtPgLeFuI","tlshash":"6b3270278b59ef43f525d3f4bf031ea9935ba714a5623aeb42201edb2f104019cca75e","first_seen":"2025-03-27T06:51:59.245266Z","last_seen":"2026-07-08T02:06:35.011989Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1539,"timings":{"blocked":1262,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0b176eff7fa9b4a67a4654330ccd1f247.jpg?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.189Z","timestamp":1783425141189,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b176eff7fa9b4a67a4654330ccd1f247.jpg?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 26159\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8762A8AB2333446831C\r\nAccept-Ranges: bytes\r\nETag: \"31864E1A2A3587E6A0C319A043B2B591\"\r\nLast-Modified: Fri, 09 Aug 2024 13:00:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17179111581067002729\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=b176eff7fa9b4a67a4654330ccd1f247.jpg\r\nCache-Control: no-cache\r\nContent-MD5: MYZOGio1h+agwxmgQ7K1kQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":26159,"size_decoded":26724,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 530x340, components 3","md5":"31864e1a2a3587e6a0c319a043b2b591","sha1":"0dd6ff563f4e1124ed5cda9af85c8c0359d7b94c","sha256":"fbb94e0c2480b87f2a12bab04fe163eb2b4020002a3e4c25bda5c2fe8d1916a5","sha512":"7227ebb8210fd310ea02c3686deacbe8c6003049b0537f9b17349ce6c7b390b45e2fdc200c191abdf37ef8f2fc9fafe9202ce9f41009e4222746e8c32e1482a0","ssdeep":"768:gpEbYyQnSC9kb91MFQh8T/rWNV755bApsKC:gpEbUnS2kBmFc8rsFZA6L","tlshash":"d0c29f21a796f789d45a93f899030ee46f17a779e3604ecf64461b3f3d948214cca21f","first_seen":"2025-03-27T06:51:59.249912Z","last_seen":"2026-07-08T02:06:35.050682Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1794,"timings":{"blocked":1506,"dns":0,"connect":0,"send":0,"wait":278,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0e9f324b9b8b84645b0317c75677d70d4.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.196Z","timestamp":1783425141196,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0e9f324b9b8b84645b0317c75677d70d4.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1352816\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87760F73331331BE839\r\nAccept-Ranges: bytes\r\nETag: \"C32514B28BE78FC6CAF136915DB5C00A\"\r\nLast-Modified: Fri, 19 Jun 2026 17:19:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5202406167939094986\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=e9f324b9b8b84645b0317c75677d70d4.png\r\nCache-Control: no-cache\r\nContent-MD5: wyUUsovnj8bK8TaRXbXACg==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1352816,"size_decoded":1353382,"mime_type":"image/png","magic":"PNG image data, 2080 x 1664, 8-bit/color RGBA, non-interlaced","md5":"2224d99894982d7c402015c6f8cff8b5","sha1":"623f0e98e8f8f92791881a635b5ee268a62c441d","sha256":"560c751cbcbcf8b22d1706a3ef5121a1de66ce19f66e9c2d3f7f087aec4dbbf0","sha512":"dbd9b068228f5f4380221c7e9871b963132abee304b39715e2a09807136cc7d3db433191e63f0df15722127f3db80917ddf19eeed461d82681b067f3ed4e35f8","ssdeep":"24576:tjMoilW+BD8SW7oITxxo7NaRZCYmyysGCG:tjQlntHWMSoRaL4yl2","tlshash":"ff25334dcc8027fef827afeb905918652ad926bc8345dfa447b1cb18d770d5292e0e4e","first_seen":"2026-07-07T11:41:26.736623Z","last_seen":"2026-07-08T02:06:35.042508Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3285,"timings":{"blocked":1844,"dns":0,"connect":0,"send":0,"wait":285,"receive":1156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10050-ea8500f3.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.272Z","timestamp":1783425141272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10050-ea8500f3.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-30e1e\"\r\nexpires: Sun, 26 Jul 2026 03:02:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUPyShBa%2BichDqKYkPHH1erR0POoKulp%2F55xwzXpgR9m1nax2hkrrzHBkmCh2C0GkDFci4F02FDkE8ex1WEcwldplOFPBJzKoPd9097zYJEhD67iywGGr34ApcqEOOY%3D\"}]}\r\ncf-ray: a176a47cffd1b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200222,"size_decoded":201034,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"8df4b79d842606443ac3bc99e4b4444d","sha1":"d8c8325cb4cdc21d63579897b5c8a698203a533f","sha256":"ea8500f31042e62536939d8255ff1b93f27e50110f1651b94dafea5ed6021ef6","sha512":"2227dcced4f4d3e53ef0d1b546a4e8e63601df6b1879025faae757e227de714f4834d61409d4fa841e6621546a628c9121a4bc0e481e6fef950968587eb7e8b1","ssdeep":"3072:HWmbLj0ckso2ngVkGKJ8PzVlChXbj16dsDYsMO5X9HHWhhn56kVoSLt3Zk669YRB:2g82n9GKJ+zVlCxQdtO5tWl9Ptp28fV","tlshash":"721412a9e3254a48fc9b3b115b7d617048658ca28ff02ecc17e46152d4ec1eed178f6e","first_seen":"2026-04-06T13:07:20.281295Z","last_seen":"2026-07-08T02:06:35.053915Z","times_seen":10,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/IPtt-cdf45714.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.270Z","timestamp":1783425141270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/IPtt-cdf45714.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-f294\"\r\nexpires: Sun, 26 Jul 2026 03:02:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SGO1jlAXXTPlRpDo2MfogxedB0M2S5DhvKm%2FmbdIRhe%2BW5KDDzkyLIO9%2FtMjufqIJSH65A7iQAv68YWKv2AN0PgWWYwE5TLFLd9WcVpaG%2BCnYLDpk7AxMn5lAHpVS4%3D\"}]}\r\ncf-ray: a176a47cffcfb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62100,"size_decoded":61249,"mime_type":"image/png","magic":"PNG image data, 819 x 331, 8-bit/color RGBA, non-interlaced","md5":"f1ed8bc551347c40b5ea94da77dc306d","sha1":"b14f28450f384fa9cd1d055285836f9eec83f336","sha256":"cdf45714b34311c0010ed9a42494a2d02f141eac7568ef643056535b0a6536d4","sha512":"1db84d10d2a9f38e89297c7fd54a2d0c0af04e7a064a3ccd1d4ad9d8123ec33abd1f8426b9b568d48eaf396bd9ac7f5c59c7925fd003d6110c91493823d23bd1","ssdeep":"1536:8achrHNesCQmyoP3kGO01aCj4aObRVdI8g:EhzNesCQmXPJaCj4/Xdk","tlshash":"745302404b7e19b3d747703b08cc28d12fbcb9c7688941af786074386d693b42b6974b","first_seen":"2026-07-07T11:41:26.796598Z","last_seen":"2026-07-08T02:06:35.030038Z","times_seen":4,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dododol.cyou/ws/74950758-fdeb-4cc1-84c6-70bea75134f5","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.980Z","timestamp":1783425139980,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /ws/74950758-fdeb-4cc1-84c6-70bea75134f5 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dododol.cyou\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: X7DblPpyKTlmMq7YN/G3og==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 07 Jul 2026 11:52:20 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://dododol.cyou\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ADp2qJCRN4O6YblgOZ2V2jq+u+g=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eDpcCM6GmgLzIBNk0Uy2DKqZLQpXoHQoJk5%2FZ2J8TA213mtQ0nUkeBOngFvVt4fqqt%2FGxlmyPvvM77j%2FC1Pa4Wb9zsRelTrT2lA9VPcYGkQXUB8MXETw%2FOoLmh4T1vo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a176a4750f2f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1043\u0026min_rtt=955\u0026rtt_var=342\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2862\u0026recv_bytes=1319\u0026delivery_rate=2964370\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=44eb61aa5546f0c3\u0026ts=641\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1068,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T17:18:36.654706Z","times_seen":17242919,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":0,"dns":14,"connect":15,"send":0,"wait":633,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0ff2d36a99b4b4d3b9e58dbdaf37ab1df.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.199Z","timestamp":1783425141199,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ff2d36a99b4b4d3b9e58dbdaf37ab1df.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23782\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8771000003039097260\r\nAccept-Ranges: bytes\r\nETag: \"516157290B6FB65A740976C10A954D2E\"\r\nLast-Modified: Tue, 10 Dec 2024 07:43:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6027171461498336641\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=ff2d36a99b4b4d3b9e58dbdaf37ab1df.png\r\nCache-Control: no-cache\r\nContent-MD5: UWFXKQtvtlp0CXbBCpVNLg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":23782,"size_decoded":24346,"mime_type":"image/png","magic":"PNG image data, 308 x 310, 8-bit/color RGBA, non-interlaced","md5":"516157290b6fb65a740976c10a954d2e","sha1":"f5056edc9311873421bef51695fac0a325eb7f5c","sha256":"a9f270f9f8b6f1b50009b88cefc094faa4b0af40f11e4e657a4aff3d760dae35","sha512":"8484d66910669f23ac5a26b8b5add429396fe40fd7c3feacdc9b8071e34043e798074d23b757e39dcf36c69a166536742c5727893df96860435944fc4eb0819b","ssdeep":"384:CHJWfy29WDrfssB+lU2z8GSDVJfVL59eIFnSdQmN7ZE7UiRsZRAJRR+hXKoveQFi:MJWa29YIjllfKZN9ebdQmRSlsXApQ8","tlshash":"f1b2e1bbacdda0b0fc688c2614ec944d69d34e5c837c9a4a11ffc74e382c594d1ba995","first_seen":"2025-03-27T06:51:59.159771Z","last_seen":"2026-07-08T02:06:34.987338Z","times_seen":85,"resource_available":false,"data":null}},"time_used":2634,"timings":{"blocked":2352,"dns":0,"connect":0,"send":0,"wait":275,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10057-f3793463.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.206Z","timestamp":1783425141206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10057-f3793463.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-19ca\"\r\nexpires: Sun, 26 Jul 2026 03:01:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RD1RJl0Og%2B42JhQlAVCJhwSjJW8uIWDkouevOY9cf0AQBhRGJcrl14s%2BDKbEXL1ZAn44etTkP%2BQ3F1rxkW1pxcldEBLh%2BvqTlCnxlV7UXFDHln1soLsyNUzhy%2FMgG7g%3D\"}]}\r\ncf-ray: a176a47c8fb6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6602,"size_decoded":7364,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"4b1c08bdd43022161d2095b3709848c0","sha1":"57553dcd1eba23e897fb2012c17e2a4b37db5fc6","sha256":"f37934631aa1613d0353787f9f21a25c43d22614a1f01d44971b163a0cc21419","sha512":"04725cbf63f1dd4fd98ca847d029b6e19475979e6c2f77d09abf3c80ebda00d10d3ab47edd4e8290eb8d0b6c584b2854710eb32ec299d31c676619a21350d780","ssdeep":"192:vCiGIFr8OoUgT37c6QhvvX3KzIsYQFopDhlb7:vFGWr8OoUgT3A1hv/TQFitd","tlshash":"59d1afce199dbaa0919e704421369d79263b618c4a17678027de9bb23ff713a0670a87","first_seen":"2026-04-06T13:07:20.250522Z","last_seen":"2026-07-08T02:06:35.025984Z","times_seen":10,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/helpcenter/list","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.218Z","timestamp":1783425141218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/helpcenter/list HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6cNDSTYciEokS33GipzOFAsUwehbHiIec1f7LVtf217XnVJp0gaf8op5xLIM%2BjsQL957g43baUaGdpcw207ms%2FP43j5klz2lC2F3Y2Ymi7N51z2pgq8jRXCAPvjPh8%3D\"}]}\r\ncf-ray: a176a47c9fbfb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":1363,"mime_type":"application/json","magic":"JSON text data","md5":"b23cdc0ed7cf7dcfccae09905710508b","sha1":"59e3df336a969d852351f8b8938326a130d0f806","sha256":"17b210498e105388f1cc22ad118073842491e8695213d9a294dbf643e7244308","sha512":"6cf0f85bc6a19d039e2c0dff5f5e721d96cc4b1d5f20e6abbd75081d39ba23b5053db01bd55fa7a26a2f3c8961d9aadaeac458eb629a5fa5277c1588a36523bd","ssdeep":"","tlshash":"b6417d2a5665ecbea53e80e340adf94c918f162769e19d3c78c7cf1cc1e15390c1b29a","first_seen":"2026-07-07T11:41:26.80422Z","last_seen":"2026-07-08T02:06:35.066772Z","times_seen":4,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/resource/svg/light/moren.svg?2.0.1783187035300","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.241Z","timestamp":1783425141241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /resource/svg/light/moren.svg?2.0.1783187035300 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a494676-133\"\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goog50hkTjBiWQTQUzzdJMqgbBPytDR8yt59yd958Y7EQJ5LtpzmKMm%2FqRM4XAqNbxUWRfcs4S1sBHU9UXIu%2BgDHn%2B%2BH1WOuJQLA6Sx35vAYX%2F%2FSaV%2FJ6KDBq54Cwnc%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a176a47ccfcbb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307,"size_decoded":882,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7717d623b9e9193c32f926e96c49abd","sha1":"b08948bab8fd14015ace9bda4c97e02584e3b7b2","sha256":"db1351d981f6ed6c4a52323a6ed5652c30cfde27c84695814257db98905f82cc","sha512":"60a0670f41290e6766018ecd268339a43a84672f54356006232b33239560ea377028b29b82d83574b2aee547de3567d164ac65e45403ba185a91f0822a494a76","ssdeep":"","tlshash":"9fe07db680260c1ea4090661cbf40a84807cf143c2a204edfba01473033042e1d8d275","first_seen":"2024-08-20T13:53:54.395904Z","last_seen":"2026-07-08T02:06:35.0611Z","times_seen":87,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10049-ea3c5978.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.271Z","timestamp":1783425141271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10049-ea3c5978.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-29014\"\r\nexpires: Sun, 26 Jul 2026 03:02:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EknrOHCj4ZYWNj3%2FxAbSROLjfvpB%2BnF7HW81R4cvu3m3CRvcbaxfkC9ppqdRQJf3NBGc%2FtpF7a7l9nVaI%2FYvC%2FTNiHQviW60mw8PqzGqcbmw6U59Sr51zcdPYUzOkuE%3D\"}]}\r\ncf-ray: a176a47cffd0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167956,"size_decoded":168764,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"47a06e1eb61605d83de86f93fe015536","sha1":"5825d6d245c93e342855c2661275a03ff5cca472","sha256":"ea3c5978a76937ac5ec9cd35309b45e2454703b479142a2886acd90a3b21259e","sha512":"dc32fce2f296d802308671a791418111f521f463bcbbb9b937df38eaf2950731e69c65bdbb10fe2e332a7b7250184e161b4f5e3af84148bfec59c23cdcd6f90e","ssdeep":"3072:MjcFHKBIyrM5pLS9SAqWjBdfx1CakimWFHZJ24X8LHBUbhFlES:4AIpkpG8PWj/J1CakimWFXeHAXES","tlshash":"70f312c4a053c873979c25826302d885e56597e4c988962c1a691fdfeccb07c6eb8b8f","first_seen":"2026-04-06T13:07:20.325231Z","last_seen":"2026-07-08T02:06:34.996375Z","times_seen":10,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/fa-solid-900-aa759986.woff2","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.116Z","timestamp":1783425141116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/fa-solid-900-aa759986.woff2 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dododol.cyou/assets/index-8485d11a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6a4946c9-26a0c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h52DjPQnrrhTMLcgSknn%2FqmiRiUtRtVLVTaIKuNW%2BdNBr9zs%2BbX%2FyCO4pk5OOZkPe9cFHlcxvcadl%2F2cm93LMyTHfqToIjQq3XAw0k1iii21l2SFVSmB3O4Z9uacQbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47bffa8b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158220,"size_decoded":158915,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-07-14T16:40:07.593143Z","times_seen":31593,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.079f586299ce34665b23762658bd6159e.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.245Z","timestamp":1783425141245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.079f586299ce34665b23762658bd6159e.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2472\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-oss-request-id: 6A495BF9EE24003739C6529A\r\naccept-ranges: bytes\r\netag: \"CEC48F9F3CC1D501D4807A50415D8E7E\"\r\nlast-modified: Wed, 12 Feb 2025 05:30:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6865148215600521348\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=79f586299ce34665b23762658bd6159e.png\r\ncache-control: max-age=14400\r\ncontent-md5: zsSPnzzB1QHUgHpQQV2Ofg==\r\nx-oss-server-time: 3\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4GvYqglxAYVNZ7ly7WXgGknv1nqJKRDOo5diqLCfLY%2B9S949cEqIBFYQE9kaB7sdIgqI8m1DP%2FVBBYD6jK3aHNxCPkXbvA6jVUHRVAYvkusjeM1MVoidNEE1we7QyhrwLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a44dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2472,"size_decoded":3468,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"cec48f9f3cc1d501d4807a50415d8e7e","sha1":"8c02e9568afbaf25ab4a6bb78b0a282d67d8a171","sha256":"02154f9968692d265c01c5bbfe06fdc65e7601ffa4474e48c5b150503f8c24f5","sha512":"4202af49086463cf39b0fcf35e44e1667d55d74693cb9b617eeb3003f0c9b27a569a7ff9ef47895dc7d3db31c666a28e0b2280dd751ee568998aede8e2e7643f","ssdeep":"","tlshash":"be512843c367d9a8dd44b81b42b67a940120c10f7de02de20baf2e283f4c97c1874ee2","first_seen":"2025-03-27T06:51:59.251561Z","last_seen":"2026-07-08T02:06:35.014288Z","times_seen":68,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/xrp.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.284Z","timestamp":1783425141284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/xrp.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 2393\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"959-j3IMAI6SWJrsrQD5M45j3/fbpns\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230073-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 15069\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kTqR161rMEaCKu2n2b9R8xG45D%2BM2Z09OQHStSKFzr9Sb9eRhCmZ7UYEchFXiCyW%2BZ93pZZvBytmohPaZiF7utsat7PfV0d8HkYuDauefFIjnRv8lNn6MR08u6y%2ByaScMJE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d285476ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2393,"size_decoded":3439,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"2308acc5cb079e77004f6ae91cc7b051","sha1":"8f720c008e92589aecad00f9338e63dff7dba67b","sha256":"0875539d872ac02066c129360ade039e835bd7b9b2320f3a4d24ed4ef72c3051","sha512":"b18ef5a99aacedf38a3cfa584a8451df96097682fa4dbd5f54fb2ec4011811e3e800474dd5306d64f588f92e4210be0568725038b8664863f45dba12ba3d4ddd","ssdeep":"","tlshash":"f6410ba2c3b63a51b428f219ca4b044d150abeae3534f074714e365fe67d3637aa9051","first_seen":"2025-03-09T08:32:31.721939Z","last_seen":"2026-07-08T02:06:35.002331Z","times_seen":32,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/helpcenter/list","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:22.127Z","timestamp":1783425142127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/helpcenter/list HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEhxoJCVQmZaL69tXcG6zgTwo8BsYshxxVEabyxnXnwgf1QRrV9ug%2FlWupVvsMr%2BrHu34vtWFBIpSMHJP883ODcyO0r9yvQNt%2FuWQGtdBgggZJi9bljSLWQLEDn4tRA%3D\"}]}\r\ncf-ray: a176a482585eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":1365,"mime_type":"application/json","magic":"JSON text data","md5":"b23cdc0ed7cf7dcfccae09905710508b","sha1":"59e3df336a969d852351f8b8938326a130d0f806","sha256":"17b210498e105388f1cc22ad118073842491e8695213d9a294dbf643e7244308","sha512":"6cf0f85bc6a19d039e2c0dff5f5e721d96cc4b1d5f20e6abbd75081d39ba23b5053db01bd55fa7a26a2f3c8961d9aadaeac458eb629a5fa5277c1588a36523bd","ssdeep":"","tlshash":"b6417d2a5665ecbea53e80e340adf94c918f162769e19d3c78c7cf1cc1e15390c1b29a","first_seen":"2026-07-07T11:41:26.80422Z","last_seen":"2026-07-08T02:06:35.066772Z","times_seen":4,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-61a3adf1.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.924Z","timestamp":1783425139924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-61a3adf1.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-6076\"\r\nexpires: Tue, 07 Jul 2026 23:52:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Lx0ZJ9MHmdfNRjgid%2FIweSBDgQQ7oc1QVIMPJdwi4aK%2FcDf9eh%2B8A6qyIF%2FUwcyX0xmMsYCsq%2B9UhHzHLOD855tVfQt65RCbY1KUoDMoQtEvb37VQ7c%2Fxd%2FOZXcasY%3D\"}]}\r\ncf-ray: a176a4748ef6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24694,"size_decoded":8052,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (24637)","md5":"2f045d66415edd9af4c201f4bfd87ad2","sha1":"6e1c5349b5f27709e5ef9ca1fddd9c4a2884c1ce","sha256":"15e0f370db44aab33dd91d1a064021e82ca3bf2f60e241fe819223fe86718be7","sha512":"8e2aa30bfd2a72cdd9209114e2b03040341550d429f058057400759188537cdee8437ef42a096d8960f1178e23d9eaa86da56ad1f8e94c0a951fe804fcc21942","ssdeep":"768:X3NcHwjnrgbabP1VbAJ0xXgSPfvW0x+xcYLSjqcmWabbCXraJmJ73G:W+J7jVmWabbCl73G","tlshash":"d9b27606b701ea7df2b750c529e8216031192f9edc8d4ce3b6bc1e9a0755d28771b63b","first_seen":"2026-07-07T11:41:26.727748Z","last_seen":"2026-07-08T02:06:35.013399Z","times_seen":5,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/platform/alading/favicon.ico?2.0.1783187035300","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.556Z","timestamp":1783425139556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /platform/alading/favicon.ico?2.0.1783187035300 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a494676-17a86\"\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkT3%2FDlZNSsy1gW8R2DtjgGAbVvyzjuQr0hwgrN6HSIKN7tmgxlt7NuV304xtT%2BnhfmVT7w9LZHGwvX%2Bf0jpyObx5OHobuA8wnWguAq6ad6J8XyvuDIpIFBI36rzJ5A%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a176a4723eb7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96902,"size_decoded":97586,"mime_type":"image/x-icon","magic":"PNG image data, 475 x 475, 8-bit/color RGBA, non-interlaced","md5":"81c9fb3c4da49aea309dc321ca4311c9","sha1":"c5e011af69ab85febcf43eb9b76cd039742a8592","sha256":"6e7561168905d5f18a97cd772d5985ffd1f6613351fd2d9c84f3efc474fa6348","sha512":"abad2e80f9b64287d4c514519c98781edc3f754c60a561e1467da729be8f3982cc1bf059924f52c10601268318134f133cdf85eaaa87209a844d2fcebe6f4a0c","ssdeep":"1536:tZYTlngpV2gMICyBvEvJHPZcxmG7wRB2Hp/sUbEjfnOtVcIxMxpuoCh:kepAg/2vZPZcxhwRBOmUbETOtiIxMxLu","tlshash":"fe93025369f492e4c057f5334bf82ba53776971382f318afa94cfa1901882b90a536f3","first_seen":"2026-07-07T11:41:26.742421Z","last_seen":"2026-07-08T02:06:35.033365Z","times_seen":5,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.0d1f7af78f4e74348b5f7e02c97be663f.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.249Z","timestamp":1783425141249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.0d1f7af78f4e74348b5f7e02c97be663f.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4351\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-oss-request-id: 6A495BF9BC6A5B383843FD96\r\naccept-ranges: bytes\r\netag: \"7178CF883A4DE37AA710CDABDED7C122\"\r\nlast-modified: Wed, 12 Feb 2025 05:31:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7759418857463939290\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=d1f7af78f4e74348b5f7e02c97be663f.png\r\ncache-control: max-age=14400\r\ncontent-md5: cXjPiDpN43qnEM2r3tfBIg==\r\nx-oss-server-time: 18\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIJSzk9I92KkzyVBpPsbwBesbqhy9ZVUI2mQ%2B8kf6HmTljaY1hykOG53O%2FwqIdFO3woPYan37pRnzuUs9H3g%2FSXF2J7S5WRsI%2FXxLqthJntKkwERc%2FyxHurmnrtWqkDyCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a75dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4351,"size_decoded":5354,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"7178cf883a4de37aa710cdabded7c122","sha1":"e533b8e743d187c972f3506a785396c747e3448f","sha256":"be1e990bf2df79bd33e8bfd537f54f1d2eebdbb425edfb7b1857d61189d92bd8","sha512":"611359c139e22a92d6748c67e54f4eac7fe84dc63defbe287908f402371c19bdedac4ee158d175cda14cd209378d869000bd60351dc51b707b5083b7df69519d","ssdeep":"96:REeJUX+vGNBxUGAksVU7h6DXuqL41XzPN:RBGXAks27IuqL8zF","tlshash":"b8918e6889915dd60ff951d3a5bbb001cd2d9128cfa8a025402c9c2b8b773cc76fe290","first_seen":"2025-03-27T06:51:59.237684Z","last_seen":"2026-07-08T02:06:35.037699Z","times_seen":59,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.095187cfc25ba4444a86dcd567ee24f4e.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.260Z","timestamp":1783425141260,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.095187cfc25ba4444a86dcd567ee24f4e.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7451\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8782A8AB23334C78E1C\r\nAccept-Ranges: bytes\r\nETag: \"821D7702329AA8EA176CFDAEA94FF500\"\r\nLast-Modified: Sat, 15 Feb 2025 06:38:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5577372258955764801\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=95187cfc25ba4444a86dcd567ee24f4e.png\r\nCache-Control: no-cache\r\nContent-MD5: gh13AjKaqOoXbP2uqU/1AA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7451,"size_decoded":8014,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"821d7702329aa8ea176cfdaea94ff500","sha1":"ceb3538e4717bf3d92247034806fa9fa0cab2899","sha256":"a6517c7366f38e461bc8a408f25253441e55794c859a95ed7228525c6689d28c","sha512":"c2eb99b4e650ae41b2d4bf2f69d4d427e79ffc769d9867e9f7d6c0283d55a5f1c760e28b1b5d7f5a22c822b55a4a2c541c576ebd307b0283b5927c7fe5dc1433","ssdeep":"192:XA3hlkToGDvfxYW96xLafbgUStJU1kwgFme9gRo5d:XuhlklRYrxLaDItikY0gRW","tlshash":"e9f1afa8f7c5d03d05274a8d47275b2be309053a32d826ba3715eb70daba50941b99ce","first_seen":"2025-08-07T00:21:40.224534Z","last_seen":"2026-07-08T02:06:34.993622Z","times_seen":47,"resource_available":false,"data":null}},"time_used":3326,"timings":{"blocked":3059,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10052-f08c9343.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.274Z","timestamp":1783425141274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10052-f08c9343.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-2e4ef\"\r\nexpires: Sun, 26 Jul 2026 03:02:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFhCzYF8%2Bu789NOG9SGuXjRUlZJrcR4TRJhQbHHQ6RQZvZpm7BQxdkq4grpXAX%2BsiIWBjf4tDWXVoLntPGzRPkdUNHw2IVN5Tt8FcyN6kFYuSajxT7Nz5leAcYDp4i0%3D\"}]}\r\ncf-ray: a176a47cffd4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189679,"size_decoded":190486,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"bb55dd5f6e7ba3535a44e7e656c4911d","sha1":"6817766eb2b8f0210c786ea1c07fe67db92e5190","sha256":"f08c934345fbd7f55995b6b99dd2f87d4aafbdf8bc8b352f5ba676f16c8ce3ec","sha512":"e3f9742896ad568687bd0d227edecf058a085ac9f7d0bcbccecb4cb3e9ca2780098ceb2e19a7477653c116a0ac266360a7e4e827d8718cab74249f3ca113f800","ssdeep":"3072:kKng2YIQFYQLYvgH5Q9mF+1lWLWJvik0Rqo367sF2cXDim1VJR:keLYxvYIvjWYkAus5Wm19","tlshash":"e904127c0ecfe2b81f54749283cf00e18ed218b5176e5b0f055f642dabc625781e6b6a","first_seen":"2026-04-06T13:07:20.336605Z","last_seen":"2026-07-08T02:06:35.029454Z","times_seen":10,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-ea450140.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.936Z","timestamp":1783425139936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-ea450140.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: text/css\r\netag: W/\"6a4946c9-a4\"\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Jul 2026 23:39:07 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieAxMCuwIORt7afu0q1RJkKm9qcbSX96noR%2BSYAN55qAAfkbk%2F0PGvXSLIVOeojbZIut7JbYkbKBXGRJhcYcVccT4s2ecx6vmj%2FTiZu01rQTCexR%2Fb5mXWbOjSX3vN4%3D\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a176a4749f00b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":817,"mime_type":"text/css","magic":"ASCII text","md5":"bd7871f4dc48070e9eba1cb3bd0bcde7","sha1":"536f16a3788e237e9a757145572577bfc79a7067","sha256":"ea450140aa10bd6b6d3223e1f96b8f2b233f86529fbf51563510f429b8392514","sha512":"7b5c05efba7182115341670c61fad182be576efce298d1af731bb7debc1a05f299f40b365a6bff8d3ebb185a2be2f86be0eba2d25e1daacf1201322b055642af","ssdeep":"","tlshash":"91c08cbcd80cea18fb33a620a82b0e810201e145fa03ec8d038210134d2fc422bf00ec","first_seen":"2026-07-07T11:41:26.8208Z","last_seen":"2026-07-08T02:06:35.019374Z","times_seen":5,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10060-5f0e2cbb.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.210Z","timestamp":1783425141210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10060-5f0e2cbb.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-fdd\"\r\nexpires: Sun, 26 Jul 2026 03:01:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akuEu8EFVBmaMkTWh2IIhP82sKW2P0Ipukt%2FCsfbZdRBPs7h%2Bysk3cUEbjjrwrFG%2BpbWhOsxmhE0lhvyj4709PwpXeJEZsY1CK3cogxRV9nGg1oZEPTA69WpzoFe8N8%3D\"}]}\r\ncf-ray: a176a47c9fbab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":4813,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"a953a6cde83a05891b289722a6510d2d","sha1":"186678a28d95c04090140039161ef1441eef8541","sha256":"5f0e2cbbbef290458110861352ea69c861ad1b5a4089977574a637ef45b25059","sha512":"f1e4c2d24012474130a0bfda14517e5d4cffa5896ae40579c26eaaba74fda65bccff7a7f8b2aeab4df2871148a389e4510dda4e08a9eaee4091ff72d3bbc4b2d","ssdeep":"","tlshash":"13817e83872154d72d48a63b639ce1e27f17b2db95305d19bd2d9cbc52b10c94f76207","first_seen":"2026-04-06T13:07:20.25554Z","last_seen":"2026-07-08T02:06:35.012518Z","times_seen":10,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10060-84173ed2.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.926Z","timestamp":1783425139926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10060-84173ed2.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-ad0\"\r\nexpires: Tue, 07 Jul 2026 23:52:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjBj418zM3KtW03UTpvzuhTvcl7uT9qi9iiDKK5X7WJEOoRW5oygH%2FBrxJQbF%2BM%2F5Rd60xB8IZr7crNfBw8ltSPRCkn3wLbkVAodhFMTBkJLyMfeMTT2QDB4j4aRqOg%3D\"}]}\r\ncf-ray: a176a4748ef7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2768,"size_decoded":2091,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2767)","md5":"f9f60a6a9782e2be6c13efbd4571f188","sha1":"1b841d879b1a906bd1a5d179a79ab4f63835cf16","sha256":"01d21dc0e6647e33d8f2019b5dc7c96a572a6057af3125f4181d6b633c6dd825","sha512":"b9d19b74588d33fa9382a4b4c2ed64dc5085849d4e80aadfc723aaac11df400393675492c91c87a97d506457ef99d5df58fecbf981dcbc1414ed0aed3526e9c3","ssdeep":"","tlshash":"0551c819ad0ae37d86b3807012250790318e3fadf524c5e596ec6e225731ea4df4eb10","first_seen":"2026-07-07T11:41:26.839271Z","last_seen":"2026-07-08T02:06:35.009366Z","times_seen":5,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/logo03-457d8c22.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.119Z","timestamp":1783425141119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/logo03-457d8c22.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-13be2\"\r\nexpires: Thu, 06 Aug 2026 11:39:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppA7lzm7oO0xdFe4jSFh0gSyL456eqKrIh6TxRdTVjSeITYb4yltMrbJ%2FkvmtYTZ3dtwdsjlY5OFQL0llbKc0pDqX3cf7edWocvHEhtdgamFypPgYwJ8LT99iQfbYHc%3D\"}]}\r\ncf-ray: a176a47bffa9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80866,"size_decoded":80316,"mime_type":"image/png","magic":"PNG image data, 905 x 229, 8-bit/color RGBA, non-interlaced","md5":"b3680a112da0074d28d7f17b30d1aac3","sha1":"b19c07b7e133c1e33756f4037734f11e88b91acf","sha256":"457d8c22cc0ebb97e4636b2ccb98909cdbc25ddb90fa504392ea574a26a0b91a","sha512":"43c7669340d0eab1e6ce1626d66a4300daecf35beb1959835cfdeee594f3c863ac0ab32030926a612a5ce25e41933d499dff3ad17ec908b9047868147de1a7a0","ssdeep":"1536:428KJF65lPrcg1GmK/TdHv31CWzsY1OTYlp9wnO5eMr+SSvnhggNdVR:q5ljc4nK/TdHddOQwnorxSJgYd","tlshash":"c683023dd0f0c805eecb547ca157af67278fa8e995d6208ed1459c8a9c46e3cd9f490c","first_seen":"2026-07-07T11:41:26.747899Z","last_seen":"2026-07-08T02:06:35.003284Z","times_seen":4,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/notice/list?key=ROLL_NOTICE","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.192Z","timestamp":1783425141192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAWdU950Fh7nXg14GBJgUAOP4Qm%2Bs%2B8inpq6Cjcbc%2B0LKewwM5lBI54WY3tL2w4y47EZJ6JfXDjVi5rRQlSUZZUlT6AbRGJ%2FNN8U3sdjig68yohK%2Fiy%2FGHNA%2FM08AlM%3D\"}]}\r\ncf-ray: a176a47c7fb0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584,"size_decoded":1218,"mime_type":"application/json","magic":"JSON text data","md5":"5cc070a32e3a33dc14aa858f8df1e4ad","sha1":"92d1fbeb46fbcbce933424833de505232993c7b2","sha256":"a8e2ae8e94483c813c72e1b5db03d445b7a12bdf5223a015ed8f236d64f4d579","sha512":"eab29c9d7e18147bebfacee93a70a26df515face03494b9ef4acc5d3b7924f558a928030e32a24e362d23f9b8d1a7fe8e841e0bd08eefc1f68b06a894fc565fc","ssdeep":"","tlshash":"67f0465d453c8e7a884684c315d8becd527f1293a691ce3485aacf2c82f95b50a17a09","first_seen":"2025-08-07T00:21:40.235727Z","last_seen":"2026-07-08T02:06:34.989799Z","times_seen":20,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.00666fb49fa1d48a486fdc8f86c226886.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.194Z","timestamp":1783425141194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.00666fb49fa1d48a486fdc8f86c226886.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1022743\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8772A8AB233343F851C\r\nAccept-Ranges: bytes\r\nETag: \"4E7D29D759ABB65710E47851115CBF49\"\r\nLast-Modified: Fri, 19 Jun 2026 17:18:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6596606566531118872\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=0666fb49fa1d48a486fdc8f86c226886.png\r\nCache-Control: no-cache\r\nContent-MD5: Tn0p11mrtlcQ5HhREVy/SQ==\r\nx-oss-server-time: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1022743,"size_decoded":1023309,"mime_type":"image/png","magic":"PNG image data, 2304 x 1536, 8-bit/color RGBA, non-interlaced","md5":"4e7d29d759abb65710e47851115cbf49","sha1":"1aa14f24947128eae32f35230df3dcd7f7c7b951","sha256":"da920c3329a3ca29600e4eb3211c0d097ac0966fe82aee04fec16eb4b2730c46","sha512":"6543a89bb7c4372f6157791e9384d63bcd2e73ef24e3d4940d37ff9ea63b9ab2921b20313806f13b2c9ec2ef65082ba53f43cc5b213d2ab8f992e69e02d3ef65","ssdeep":"24576:qrNmMyXljr1p4h8mk6YR5VrvK6zyt9aQgFcCu/tFiV/HrO9cDU6Fsi9:UNSH4hnk6YR5FytcQocCY3itHrO9F6t","tlshash":"5a2533c178fa0af4f8839b18a8500eec3daa1513af9f2341467757851879dab6b1cf71","first_seen":"2026-07-07T11:41:26.847012Z","last_seen":"2026-07-08T02:06:34.980751Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3067,"timings":{"blocked":1794,"dns":0,"connect":0,"send":0,"wait":288,"receive":985,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10063-4e725ede.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.217Z","timestamp":1783425141217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10063-4e725ede.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-199a\"\r\nexpires: Thu, 06 Aug 2026 11:39:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73m0XyII877559OS%2F%2FgfyKdiLVap6bmes7Zr%2FWWeAHGBVMHA5fMWMHPbAAMO91K6mLas871z5c899lFmOYV1fvJkU%2BVKjrk7PFieTCbsAH0mAhOCKAiZqfvPRNzBquw%3D\"}]}\r\ncf-ray: a176a47c9fbeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6554,"size_decoded":7286,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"76dfc92b5fe03e8070e43f50f1c0d968","sha1":"25d86c78439d5de7eb8f46bf39cece1ca7fea558","sha256":"4e725ede036c17e8b5fe12a57cf3c284d88ada5b6ec97a2cc09a315540f79a43","sha512":"f24b4cf2701786364b68ab414ccae7fb2aaed8acc1eec584d8b6579de254fbd138163ddfdc4f47360b79f33a33005faff409dc04dd7127ec5d2dc6078a3e83f7","ssdeep":"96:ztRuZQarktakdzQWOnJtKyQcwmH72strRn3zpXvYwVK1DNXSHuhqRhBgB0Mj2UmA:ztkCqmakdz4J8STJt5jBxGzhyU0eJlq4","tlshash":"8ad19dac1ab055945d77aec71749b57f8aa96c32f08704384f8f6ec052298b338ad4a6","first_seen":"2026-04-06T13:07:20.286583Z","last_seen":"2026-07-08T02:06:35.024103Z","times_seen":10,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.0bce51ab6ee0f48bca96050839501a9a5.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.243Z","timestamp":1783425141243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.0bce51ab6ee0f48bca96050839501a9a5.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3892\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-oss-request-id: 6A495BF9C390C33931EEF089\r\naccept-ranges: bytes\r\netag: \"19F7D5B28811705FFD7F852EE11BA4B6\"\r\nlast-modified: Wed, 12 Feb 2025 05:28:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17074911780041381393\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=bce51ab6ee0f48bca96050839501a9a5.png\r\ncache-control: max-age=14400\r\ncontent-md5: GffVsogRcF/9f4Uu4Ruktg==\r\nx-oss-server-time: 5\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5AjPjMwhY6IjiPPvz3f%2FcpQsw4OVPHo1jRIudXOcdDiAfptqxI0F4Qe4UVO0vjThl22cozBVVXvFUGMQjzCUDcDlpKFLJ6wngVaLBlqnj3t81TakPI00SjBpV7BdVYMAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a2fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3892,"size_decoded":4887,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"19f7d5b28811705ffd7f852ee11ba4b6","sha1":"ac413df7b4f5ec9f82ba7e5384ea0e756b506047","sha256":"d79586a1285eedd03ceaff46ead84cfd1e42b95afa47385f2288890972ff6468","sha512":"8dd68cacca15842a411a20e9cbee4cce4d3c7f32b1d43fa2285a40c675530d2476b98cf61429aa7bd18b67a3c24fa0f17f405f894f7bd11cf1bd946c3c30eec9","ssdeep":"","tlshash":"53815b514346f3968f3834668e5519ccc92af5095872094a7f6edce4930b2b63d2e1ab","first_seen":"2025-03-27T06:51:59.169662Z","last_seen":"2026-07-08T02:06:35.032656Z","times_seen":69,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.081bf9bb101254f56bb0a9a5cb796522c.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.184Z","timestamp":1783425141184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.081bf9bb101254f56bb0a9a5cb796522c.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5509\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8762A8AB233345E811C\r\nAccept-Ranges: bytes\r\nETag: \"49BB8806BB89E59DAD478A199103D401\"\r\nLast-Modified: Wed, 25 Dec 2024 07:16:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 278986811476547567\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=81bf9bb101254f56bb0a9a5cb796522c.png\r\nCache-Control: no-cache\r\nContent-MD5: SbuIBruJ5Z2tR4oZkQPUAQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5509,"size_decoded":6071,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"49bb8806bb89e59dad478a199103d401","sha1":"7c7e04c23ecacd45cd9597384f454520b46372c3","sha256":"d4a994da74aff6dd29824839619894faff7dac1d1efa4678c40db74d8b886462","sha512":"f470c807c20ffd6b29d2c5cf48337af618a4dd82a18f6e86ab41d514ea25c8db4766bc1eda49059681f7f02d150ee391bc8ea1a59c6449b57fc5fa8c736348fe","ssdeep":"96:DxjC1uhQMQvUW79i7SSK0QBJe2+q/Scnu3t+89gy3MjBKTbWdl7RvUtONQZe:12BMkd5iGF04JRz9OtGccAsPce","tlshash":"b8b18d1db8418b30c3fcc2add48d96a0a3276c8f1a212c145f9ad3126dc999ce19f8e5","first_seen":"2025-03-27T06:51:59.173807Z","last_seen":"2026-07-08T02:06:35.01588Z","times_seen":55,"resource_available":false,"data":null}},"time_used":1509,"timings":{"blocked":1242,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/eth.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.268Z","timestamp":1783425141268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/eth.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 3437\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"d6d-tXBbydXmxdf3DpoaJ3P3IR9HRlc\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230213-FRA, cache-ber1080028-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 15069\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYi9YdL%2BB4rsvYwTio7rdKbu5%2B9f%2FIrsiqIZXENZBIVXcwesZqbwL3QT4AXy5yYBuhJ1NEWEDFl9lZKX%2Ftj5gYyekCx7Wx3HHcu3%2BA6srae97BZiHtiJxGrmL%2FSZXwOWUnE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d286776ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3437,"size_decoded":4516,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"174b0414fece541456d82f84a296e380","sha1":"b5705bc9d5e6c5d7f70e9a1a2773f7211f474657","sha256":"99bf2102cc13a51bb226f931b8d0fa4c5b3ca9dc4179167e89d7ee3f677c3fdb","sha512":"6a5fb1f896da4d1bda7474e19880294be83017a5da5cd39113adfeb5032cb9b7566e706845209e4312408a99b7305b27a84748637bed44aa2622246bea0bda94","ssdeep":"","tlshash":"a5615d8d039107bec5d46349519fd6698c278705862f4fe84b67c8fc0e99dccc4c6b59","first_seen":"2024-12-25T23:55:17.402619Z","last_seen":"2026-07-09T14:39:00.469626Z","times_seen":64,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10051-8171b1b0.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.273Z","timestamp":1783425141273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10051-8171b1b0.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-31eb1\"\r\nexpires: Sun, 26 Jul 2026 03:02:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scrzc4vbkvvijuVMUmF%2FYhyGiXjcciNNkoKJ0tciqWG0IN3Gnjy1Lw5jaq9NThMv%2BfGvH2HmsrvOKvKu3xZ8f0kFvg7QRn09jehGtwJ9GVT%2BB9ndxS6l3g7BsuCPqcI%3D\"}]}\r\ncf-ray: a176a47cffd3b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204465,"size_decoded":205279,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"7f66ab507c8da115dcc347dd32218e03","sha1":"319461012a9c9df643987a309fa049ca6579d127","sha256":"8171b1b0a95993d0450db6f32c498971fe094bd66f5a85584eea040f75d06032","sha512":"6f6614670639a544db1b61122d82beafea15120becb14b1d2e2132963d65b5c17e54a3f9870b2f9fdc6006c7a1245a464982b3c27a6e1a03267f52de0a297cb0","ssdeep":"6144:/ISIs/crz/+dyZFXVdoYEwGziuChubTP1dJ1mO:Tnc+dyZFl0wGuNDO","tlshash":"1e142396f1672bc8cf8e502971624fa14b9ccd4e936d2653469191c32dcbeb9b908f33","first_seen":"2026-04-06T13:07:20.288488Z","last_seen":"2026-07-08T02:06:35.028518Z","times_seen":10,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/atomiclabs/cryptocurrency-icons/128/color/sol.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.290Z","timestamp":1783425141290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/atomiclabs/cryptocurrency-icons/128/color/sol.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4222\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"107e-e1TVZyWPRAZRxKQdL5VcnEEkUb0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220102-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 15795\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLckhY3Rz4MK1quQlJVzn1224QCj%2FxYZrn6uMr9v%2BT3pXJyBESmIYViKrysvETnleL2RRT9714UfzkeOML8QlFFqYzEkGMcIFL0IomwIWgBzCFwEJuqRw6JaX%2BnafWW2rQI%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a176a47d286376ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4222,"size_decoded":5269,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0bf2916a9c679e99dc9060ee1cc2dde5","sha1":"7b54d567258f440651c4a41d2f955c9c412451bd","sha256":"b9296ce1118a6d150e57049190aeb4c024199e0787e0c6198c244230b8d704f5","sha512":"1749edaf7c45f50df246f209b5d26801f3ec20f449a82a9deff48b348c5fded272fc3cfdaec44eccf27ffb5225774a7ec0c6a564d7a0e558665411d5bc3c8675","ssdeep":"96:hvuOg3LKz5FT+ae8o5VngkGBh6WQZsrHzXIY4:yYdzinN6wCQY4","tlshash":"ed915dd8f39d7610a3c05d3590aa3ff78ec6818c0c258888f926f67c54ad4e11c85e5a","first_seen":"2025-09-08T14:29:09.791256Z","last_seen":"2026-07-08T02:06:35.064969Z","times_seen":31,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:18.830Z","timestamp":1783425138830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Jul 2026 11:52:18 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LpG9UO7rLc5rx8MEVveYLx4d3UbRTaLrr9hl7cD6sOu87Sc0rdX%2Foy1en8A2vq6qeoybQnVwDOE4XBe4beIZHutY2mPm%2FdL4EKSPm7VJCv42gOFYt%2Fj2uZe78lAc%2BSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 07 Jul 2026 11:52:18 GMT\r\nserver: cloudflare\r\ncf-ray: a176a46dbe32b51d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4747,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-14T17:16:26.118736Z","times_seen":120145,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/currencyItemPC-b6dba9cf.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.929Z","timestamp":1783425139929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/currencyItemPC-b6dba9cf.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-284be\"\r\nexpires: Tue, 07 Jul 2026 23:52:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nf%2B8Q9pqI3nqvyncc%2FMPKxGyDw6C24ozmWnehVAHvHUaoCcDljSU0PVVK7dFTGYzYe2uIR3zpXN1iyIcCdjTvKHX2UkPpcNvLcGrXbypFvhmr32r13Dr6txR5BxVGMc%3D\"}]}\r\ncf-ray: a176a4749ef9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165054,"size_decoded":53812,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"2fb2242890a4ac4478e2184a3c58e694","sha1":"1d0655631add5112f747cab4a38946909471c328","sha256":"08bd0c0c94dbc1e042c9eedf27b44356ee6b51e3ab4ac2962a1a76ef49c748ca","sha512":"df5a3901691ad867f08685bc2a06e47deed3ef547459ce4cd4e03af2d67b2fe857c5f70f7318f90c7518523a8f83db08ff546eba46bd70cedcd1192c40243c47","ssdeep":"3072:qs9L8dI/XBXyBnvaoXsZLFJ3bnIbCoTZXT+wY/7tXCu/z:qYL8dyxX2tgFJ3bn6CoTZXT+P/7tXlb","tlshash":"b8f3b6953792e02243f186fa08350402f32a7989394b85acb5bd9ddb3c9dd4d72b9f78","first_seen":"2026-07-07T11:41:26.776808Z","last_seen":"2026-07-08T02:06:34.993055Z","times_seen":5,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.071b23cc01fd04131a4063d7d6a23dbf9.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.185Z","timestamp":1783425141185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.071b23cc01fd04131a4063d7d6a23dbf9.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1579473\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE876CD9B343237CFA6BB\r\nAccept-Ranges: bytes\r\nETag: \"8634A779D3AEE275BCFCE21EC089848D\"\r\nLast-Modified: Fri, 19 Jun 2026 17:19:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5035329797955365769\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=71b23cc01fd04131a4063d7d6a23dbf9.png\r\nCache-Control: no-cache\r\nContent-MD5: hjSnedOu4nW8/OIewImEjQ==\r\nx-oss-server-time: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1579473,"size_decoded":1580039,"mime_type":"image/png","magic":"PNG image data, 2304 x 1536, 8-bit/color RGBA, non-interlaced","md5":"045153a04d724ba536daa0e3267a2ee1","sha1":"2ab2e4352b6052f0c97a6e8b07d5cb9d6918e443","sha256":"9e8cf011930df2ddd6eef6d5cf032b35f2a39f222e73ca979d3e2f47c2e4b735","sha512":"3450f6486b3fa0884123ca0c38c9532330051abf1e648666edba25f5974dc98dd4ec2da83079582ffdd2626fe0edce629df292ce03f8f1df9effb8e691ecea63","ssdeep":"24576:h29VUCXLIEB1JDvZpDETXNo+77vR1KU4tp5+P99:E3tvB1ZSd3XTKU46","tlshash":"8e2533419dcc2ff4c09280804452e2a8b6df255b63e04abaed7da8d5fb1bf456249f1e","first_seen":"2026-07-07T11:41:26.83526Z","last_seen":"2026-07-08T02:06:35.049885Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2926,"timings":{"blocked":1260,"dns":0,"connect":0,"send":0,"wait":286,"receive":1380,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0c549b33c5fdd459f8dd2c7c58ddee9ea.jpg?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.186Z","timestamp":1783425141186,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c549b33c5fdd459f8dd2c7c58ddee9ea.jpg?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 53306\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87660F7333133A9E339\r\nAccept-Ranges: bytes\r\nETag: \"385078DEA753BC827EDB39F84E521222\"\r\nLast-Modified: Fri, 09 Aug 2024 12:56:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14899398220973683417\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=c549b33c5fdd459f8dd2c7c58ddee9ea.jpg\r\nCache-Control: no-cache\r\nContent-MD5: OFB43qdTvIJ+2zn4TlISIg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":53306,"size_decoded":53871,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1416x1260, components 3","md5":"385078dea753bc827edb39f84e521222","sha1":"ab7e24b8eb720cc54607fd1f78cf492637100459","sha256":"b6c6b8f983969f5f049aaab89b60bd992a490b6848ccbbec658e1739a895c551","sha512":"0ee92e0f02c93e818f5fc832ddcdb194e3da8f95186b80097cb7d92b43b19410f27158bf447bed9c35f44222949d5deacbb7ad6b13aa5be646f473d99580577a","ssdeep":"768:opEbYyYHyJNq4RyGGpH2UXj1/DCTy5ckDjFHVu:opEbcCNqG1AWUXleTGckPFHc","tlshash":"7733645349185b86e53993e4be030f9c2f067f1ce89279ff41621ecb7a306264d8e16e","first_seen":"2025-03-27T06:51:59.222326Z","last_seen":"2026-07-08T02:06:34.9833Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1574,"timings":{"blocked":1261,"dns":0,"connect":0,"send":0,"wait":280,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.00410d8c55e3f419b8acd42fa33218eae.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.257Z","timestamp":1783425141257,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.00410d8c55e3f419b8acd42fa33218eae.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 110823\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87810000030390E7460\r\nAccept-Ranges: bytes\r\nETag: \"34670508C1563532FC318D5BA93B4B41\"\r\nLast-Modified: Tue, 11 Jun 2024 15:42:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6896134453953597630\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=0410d8c55e3f419b8acd42fa33218eae.png\r\nCache-Control: no-cache\r\nContent-MD5: NGcFCMFWNTL8MY1bqTtLQQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":110823,"size_decoded":111388,"mime_type":"image/png","magic":"PNG image data, 252 x 264, 8-bit/color RGBA, non-interlaced","md5":"34670508c1563532fc318d5ba93b4b41","sha1":"623c56a1c0862a6d3534f9c6a91bf37d9ffd8efa","sha256":"e6aa607586ad4b2986917012a40af81e7c0bb05f241b9de019fa90f3ac5616a0","sha512":"14f377b59879f18d98724dd160b09c483587896e26d82b0809ac827c12331e7bbb7f37966a6f12d47f65f0eb0124bfeadcb236e71802a6cda885ee4e8a520988","ssdeep":"3072:HLHCrwDFdVRvf48G82zxAiHh2NfhVEaicQ:risDF/RY8G82dHoicQ","tlshash":"2fb31213cbd54c78eb5b4176aea5317978571c4d0eda018f9fd0f842b84a22bbc07e9a","first_seen":"2025-03-27T06:51:59.258734Z","last_seen":"2026-07-08T02:06:35.063529Z","times_seen":38,"resource_available":false,"data":null}},"time_used":3159,"timings":{"blocked":2627,"dns":0,"connect":0,"send":0,"wait":275,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-eaf4c418.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.939Z","timestamp":1783425139939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-eaf4c418.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: text/css\r\netag: W/\"6a4946c9-18e\"\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Jul 2026 23:39:07 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2o7mEJkXYeIuFXVo%2Bvg%2BRfkk8NZ3DqVndypIlqJBNQlV8KpVsc1dJ1nem8qcRXBUN3d1JpFowWw90rbNy3mncK2wfrXizTkX5dw%2FQyASXQ13A2TANZpkFHfszJnBJ00%3D\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a176a474af02b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398,"size_decoded":924,"mime_type":"text/css","magic":"ASCII text, with very long lines (397)","md5":"8300d6c36f12b7d9dcd6b27346b7df58","sha1":"c1130cb17cd814bc7c67717ca15a1de5c19878bb","sha256":"eaf4c418fb370aef28d557bdb1e77463e22713fc661975b6a12719d1f0a7d504","sha512":"3ff1f8ce9ab8bbd9578d2482158adeb83101e49ce873e3b5e117053f03d1f42bdcd41820b10fd070c32fb50b1938237de8191ff38b0173913ef9a3fc1a4eba6a","ssdeep":"","tlshash":"dde0689c9fdfaf246d37c0dc4d604e5cc281b591e603dda5e49f00162cef6822a1837a","first_seen":"2026-04-06T13:07:20.299846Z","last_seen":"2026-07-08T02:06:35.020364Z","times_seen":11,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.08806df71d3394f95858ddbea3a50ae7d.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.175Z","timestamp":1783425141175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.08806df71d3394f95858ddbea3a50ae7d.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4741\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87660F7333331A0E139\r\nAccept-Ranges: bytes\r\nETag: \"0D3CC761EBF53DFD01A767973B166C3F\"\r\nLast-Modified: Wed, 25 Dec 2024 07:22:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10212476019059771858\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=8806df71d3394f95858ddbea3a50ae7d.png\r\nCache-Control: no-cache\r\nContent-MD5: DTzHYev1Pf0Bp2eXOxZsPw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4741,"size_decoded":5305,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0d3cc761ebf53dfd01a767973b166c3f","sha1":"ea63beee2c5d24534147b351a9b631aaa8c8a4ce","sha256":"854dce1a493d669fef9179d178af206dd2bdd9c7863a0bd18d0777d24b135527","sha512":"4642936fb3a4794952bd4086b452a2f1366f50278de0764fd0f1f2f486d67ce10b51783df9eb1394ae871a30b7031fb9a59ac7419293ae0622e94e0d1198740b","ssdeep":"96:HwoMkyqrtz9MoMFXQhJlR/RQSmvTik24XsKe3JI+abyX5vpwdy8NypD:HwoMk7hugrLRQSmvJ2qI3y+5XJpwdygG","tlshash":"62a16cd1ce007bf9b4addc53e1cf928441ea6c4a8926c25d2b95d63c6e6283391d2ccd","first_seen":"2023-07-05T14:45:43Z","last_seen":"2026-07-08T02:06:35.051931Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1385,"timings":{"blocked":-1,"dns":33,"connect":272,"send":0,"wait":270,"receive":0,"ssl":806},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10021-22a1f7d9.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.232Z","timestamp":1783425141232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10021-22a1f7d9.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-2c87a7\"\r\nexpires: Sun, 26 Jul 2026 03:01:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8j5W0etayq1lC6%2BzR%2BbKN2cszBx%2BZfKctD%2Bmx0dS7qJz7JMKr21qiJbacYCLJNXWxjZjEasd3A%2BiKSH2Bz3OQUXSENjFCl3YNxYDrlLMNkLa2x2MKlYHaxPC19XeRl8%3D\"}]}\r\ncf-ray: a176a47cbfc6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2918311,"size_decoded":2374032,"mime_type":"image/png","magic":"PNG image data, 7980 x 5100, 8-bit/color RGBA, non-interlaced","md5":"3cd3b157111d257342af7c5a035ad2c7","sha1":"aeb4e0888e0569119053e43a972121f728ed683d","sha256":"21d5efcec3669736265dce0cb8399e5a66af6488f39293ed506dbe56317df05d","sha512":"2228ff09db82cff367546011a1fedce6fb58f8298103a9862bb6cac3bfcc4c759849fbb3baf0d172f125d40df44465ec71b316dba22b50f7285a23e54b650e0f","ssdeep":"24576:YGh0hmSqM/TpHTwJbgcP0kV8D+iqeJOkjOgfrj3av:z0hmSqMcbgJkaDhqsOkj7rjqv","tlshash":"e325ac33c670116be134537461a2575244ba2def267cf9a604c27c4a6b3fbeebc36948","first_seen":"2026-04-06T13:07:20.291165Z","last_seen":"2026-07-08T02:06:35.006767Z","times_seen":6,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.05dac07f72cb844c6bdd2222f40951be8.jpg?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.193Z","timestamp":1783425141193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.05dac07f72cb844c6bdd2222f40951be8.jpg?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5787\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87660F73331330EE639\r\nAccept-Ranges: bytes\r\nETag: \"236E57E7DAF6CE63AFF3EB486764AFBA\"\r\nLast-Modified: Fri, 19 Jun 2026 17:12:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12787991364394779934\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=5dac07f72cb844c6bdd2222f40951be8.jpg\r\nCache-Control: no-cache\r\nContent-MD5: I25X59r2zmOv8+tIZ2Svug==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5787,"size_decoded":6351,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 260x260, components 3","md5":"236e57e7daf6ce63aff3eb486764afba","sha1":"0d01852bde4a646fb546f79fac11c78078dc8478","sha256":"791c5583adcb3708caf780cf731aa9a2d0db71d0950f718ad6597ee2e6c96faa","sha512":"6f3def656436174813904681dc41086f68a93e88f633945e83daf0ecd65006d1bba95af25445217f9f1d44a06a3ee68deb7115428905c5c6486b32136039b629","ssdeep":"96:G61s7K7wkk91xTfRjSkbGmcnvD5IsnlK8rSm/X7MZw5:3s7K7m91xTfbGrvD5vlK8rS8X7MW","tlshash":"05c11b0c4fa9e5f4c84e25785adb80197b38d90d6b6976cfd3cab6f258902e3f8412d0","first_seen":"2026-07-07T11:41:26.823066Z","last_seen":"2026-07-08T02:06:35.022369Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1844,"timings":{"blocked":1573,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/common/type/defi_activity_type","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.236Z","timestamp":1783425141236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvyEGA6ni2Ej6i7QaGMJWssx%2BUs3HDTEi7SZ5sXQVrf1H38u6fKJneYmjfAeoPdF2ZvYsltg1AYwAYXH0Bx34pbuXGUfOdbJtwtOESPx6sG8jqLbcVz2JsWMoRf%2Bh8I%3D\"}]}\r\ncf-ray: a176a47cbfc8b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":1100,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-14T06:19:21.949181Z","times_seen":741,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.077b09dffb3ad43598745511e55b049cf.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.261Z","timestamp":1783425141261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.077b09dffb3ad43598745511e55b049cf.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 40414\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE8781000003039DE7760\r\nAccept-Ranges: bytes\r\nETag: \"15D27855E2679B44C2F9D41469FDED78\"\r\nLast-Modified: Fri, 26 Jun 2026 18:39:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17546784876458465451\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=77b09dffb3ad43598745511e55b049cf.png\r\nCache-Control: no-cache\r\nContent-MD5: FdJ4VeJnm0TC+dQUaf3teA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":40414,"size_decoded":40979,"mime_type":"image/png","magic":"PNG image data, 250 x 219, 8-bit/color RGBA, non-interlaced","md5":"15d27855e2679b44c2f9d41469fded78","sha1":"e02117cdfc41a2680c6f61ca6c381bfded636baa","sha256":"2d2f3af034e36761ee00d36f472888a8921b6a76cca120f6aab8c6549d34e6e5","sha512":"e2b998be589aa35f283d2724ba09de01ac4c505c1fe7e5a7b54477bc8fd037a5a87874d77a772acd0dab6536a26559b8ff21a23dfe724427add26f89c3632202","ssdeep":"768:qwRG+Sc0fYjUHjUrkdOaaj/QImSkIfTwusJx2e7gGnqKeauy0D:quGlLH0mij/QbYwdT/nqKLuyc","tlshash":"6603f1edfbd598a2a881bc6f7116030f7a5b65f08c605bf181636caba42e246052384b","first_seen":"2026-04-06T13:07:20.301556Z","last_seen":"2026-07-08T02:06:34.985198Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3459,"timings":{"blocked":3159,"dns":0,"connect":0,"send":0,"wait":277,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10053-778065f7.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.276Z","timestamp":1783425141276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10053-778065f7.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-48b2c\"\r\nexpires: Thu, 06 Aug 2026 11:39:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNfDX1nPy0bAA%2BOu93DJvRZfSYAXTBp9kYAXxCiuX8g2TNfUkfC0LE%2B4AZlCA3RtF%2F9azgepJppVsqQLkB7SNBayWW2mS2W9qikeuk%2FKx0kjMQj94CcvG2jqbLfKQp4%3D\"}]}\r\ncf-ray: a176a47d0fd7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":297772,"size_decoded":298618,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"cd2647c7717aa1860d987cc94563893d","sha1":"108765a458fd626b72be2569b52023b91729289f","sha256":"778065f72092037ba0a43c9c9c40656d670dfa8f6b29c46e7d7e4eb7bc9b835a","sha512":"97ad18db5b1f858aa7d0412297b7b3e9b5a5233ef3b4e8fb3f895c3d290d86665020dcbf4cfc5eeade8191cc3627ee001087bc5464c81ed350a0550ce2994e04","ssdeep":"6144:+dW4JqWyM5BT2U2UvozkX+zHWq1iBsVs1ZzHdnN788rZXRINMvNIu:+dW4AoKSakumqknN7nrZhsMGu","tlshash":"87542398ae642c31e9034542f549ce73fd1f7c9a2db1a2669934caf01c7d7c92375278","first_seen":"2026-04-06T13:07:20.297067Z","last_seen":"2026-07-08T02:06:35.055173Z","times_seen":10,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-e60e8bf0.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.797Z","timestamp":1783425139797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-e60e8bf0.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-2649a\"\r\nexpires: Tue, 07 Jul 2026 15:18:25 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 30834\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKtS1hsxjyvcqbtpTR2DJdX0lTNDc5%2FOp7pzUbj6VwIfvdnHV3ScQizD%2FwXdY%2FnU2mGEIsr4ZZVg3EbSwnle3sQhWYs51%2FsrJlX3svYt%2B6i5wDRftD1vrdCQlCUEIiQ%3D\"}]}\r\ncf-ray: a176a473bedbb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156826,"size_decoded":41522,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65484), with no line terminators","md5":"49de1e169ab53a30f4775d9cd708575b","sha1":"199f445cb79a4f63022d6a1ef5041ec71b6aea34","sha256":"583897a591cd4dce871f095cc83c51635e3b1f31f78b978d204b0ac8b2e4a59d","sha512":"c192c43c160c1ff2eee703b6b234e68f0abb23f4f31f5084ae415e16283e2197fbfa1e3524369b0eb11696b4302094a4d34b02066a6ec16472d76f49797330db","ssdeep":"3072:HJqxRGfbmHyJRH+foQg0qJQdwxxIV8Nh+fPZAIRDdurnvmb:HExRGfbmHyJV7Qg0qJ5IV8Nh+fPZAIRv","tlshash":"a4e33c4e98058fff7dbe0514b95a085020ad1fa791cd88e372fe9a5827f6ce5a34c724","first_seen":"2026-07-07T11:41:26.752406Z","last_seen":"2026-07-08T02:06:34.988614Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.191Z","timestamp":1783425141191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21348\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE87660F7333331CFE539\r\nAccept-Ranges: bytes\r\nETag: \"F9D607ADCC57A8457AEEEB513275A9E9\"\r\nLast-Modified: Fri, 09 Aug 2024 13:01:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7654332070385894571\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg\r\nCache-Control: no-cache\r\nContent-MD5: +dYHrcxXqEV67utRMnWp6Q==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21348,"size_decoded":21912,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 534x352, components 3","md5":"f9d607adcc57a8457aeeeb513275a9e9","sha1":"1ad026a013b978aba6b0ca3a53ebfaea03b7f51d","sha256":"351c23b49140e41d9ce8262afad9f36219c0f2293fb1d4fd205707951f06b802","sha512":"aa9950337f11db2b7d53fca4bb58782eb8e48a6198ea0dab101d1daeeb983b514fca169316eb97f8c1efc3c802f7e408820b459cb4753ee7833a26c14dfb627a","ssdeep":"384:P6npvsCMrYNg7800vwP8JmPg7hX5YseE0iJcf9BtUb7K+G/ZPyIfrDf0:wpEbYyA0CeE5lcBf9Ba3XOI3","tlshash":"e7a219239a59eb93f02587f0be031e995b2ba32ce58135ed10571e9f1e507318dcd26e","first_seen":"2025-03-27T06:51:59.193814Z","last_seen":"2026-07-08T02:06:35.036454Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1825,"timings":{"blocked":1539,"dns":0,"connect":0,"send":0,"wait":279,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.07f0781cf20a048079a531593e009c329.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.255Z","timestamp":1783425141255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.07f0781cf20a048079a531593e009c329.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5657\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-oss-request-id: 6A495BF9CE63A8393584CEAF\r\naccept-ranges: bytes\r\netag: \"0D5D52CDB7871192BF024FC78A4D808C\"\r\nlast-modified: Wed, 12 Feb 2025 05:32:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14301710622204803946\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=7f0781cf20a048079a531593e009c329.png\r\ncache-control: max-age=14400\r\ncontent-md5: DV1SzbeHEZK/Ak/Hik2AjA==\r\nx-oss-server-time: 38\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oo3fPie2eYsU1JVQ3bgw3amioxcR1cfzoZzIlnmLDYW6YFVjKGTRwOeWE4ryWDLWtrUNmCNC1sejCTFV60wTzfptxT28rstSVkRy%2FkyqfruaCb%2B9OPsSgXZbZSaSznH2uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a72dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5657,"size_decoded":6655,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0d5d52cdb7871192bf024fc78a4d808c","sha1":"8b4d1ee4940f1b2fa2f00eadcd1d92b3508be813","sha256":"336355885237ca1f049a3748ac3a1f3ffd5347c4f520645c82fbed896c16b493","sha512":"6bc4c9ff05e80d1184a6645cdccbcebcfa185dd25b7f97472c15c43c505e6dfde949f1c1157244ea03bed27c8d5c8f6734f401cd05947cdf680cc30c18a5f74c","ssdeep":"96:MuLQylfkd7ppJ7O2HXYm/9zz1CV9R9gBG2OdBQWn24HLnSKaSCTb0Sc:7La7bvXYm/9lAIGBQW24HnCX09","tlshash":"2fc1ad827fca7835d60cd37ab393298c52ec682e485186b617d012bce17920c76df2f1","first_seen":"2025-10-19T02:11:07.47734Z","last_seen":"2026-07-08T02:06:34.98452Z","times_seen":16,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/filters-07a1b79b.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.933Z","timestamp":1783425139933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/filters-07a1b79b.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4946c9-c4d\"\r\nexpires: Tue, 07 Jul 2026 23:52:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tb%2FFKZprRaQtIB7v0iBUZ9IbuNf%2Fh8Qp2BfHNdufT%2BMKJPQc5ZbwQhjuwBASGdlEjaidkLtgxL%2FOOVpuZe%2FHuCn7v3HwWcS0C2SK3gi%2BnzVNBk4jvDh493F%2B30qxwcM%3D\"}]}\r\ncf-ray: a176a4749efeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3149,"size_decoded":1883,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3148)","md5":"230da9f3c28e5fb6fe5ffb697bfc2789","sha1":"b203db1c192eac6114c93b6231aff768e307a74d","sha256":"d83fd6fbaafc5944e7c0ffc4b555a5cc6ef59a85c3162cfe9be6d415c0bbe6d2","sha512":"786d4449ea6faac2c147580389c0bcb347f0784b1edab11f58c14e072fb199514af44cab56d32f8a78920fc21fd8846154b1dc99660656c517ba669df0ac0694","ssdeep":"","tlshash":"315143ddf8c3a13397ea5ef944188231718eae14786e4b5df55be0426a33888d07fb64","first_seen":"2026-07-07T11:41:26.790796Z","last_seen":"2026-07-08T02:06:34.994588Z","times_seen":5,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0789afc5021e94d70980b9be5428acfc9.png?2.0.1783187035300","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.179Z","timestamp":1783425141179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0789afc5021e94d70980b9be5428acfc9.png?2.0.1783187035300 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 07 Jul 2026 11:52:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8763\r\nConnection: keep-alive\r\nx-oss-request-id: 6A4CE876CD9B343237F8A4BB\r\nAccept-Ranges: bytes\r\nETag: \"955C77D1B75E882FD817D2DAA9BF3510\"\r\nLast-Modified: Wed, 25 Dec 2024 07:15:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8653684933170171035\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=789afc5021e94d70980b9be5428acfc9.png\r\nCache-Control: no-cache\r\nContent-MD5: lVx30bdeiC/YF9Laqb81EA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8763,"size_decoded":9326,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"955c77d1b75e882fd817d2daa9bf3510","sha1":"84d52c0542a4a053289a7067722b1a1d75f6b6d5","sha256":"db34976089ba1ff54b519082e7bcf59345e4cf4754f950130a2270e814f800f7","sha512":"3ac8c65e0c95edd0cc0840d488057156df615f4c06ac356970a016c71a8729ed97cece07b71c733df4674b9cd1a46d3ef196956c372447d0b815224e624472d5","ssdeep":"192:QfZuDTDVztOYX+T5QEY4j23UQt8nHRndW4gXSTDR:QKHtkK+qI2UA8nxnYPqR","tlshash":"5602c0d89302a1e8d95eb8eede30e072401d554bc7cee94092e5e5790c592b8f5bb1f4","first_seen":"2025-03-27T06:51:59.223327Z","last_seen":"2026-07-08T02:06:35.059582Z","times_seen":71,"resource_available":false,"data":null}},"time_used":1378,"timings":{"blocked":-1,"dns":29,"connect":272,"send":0,"wait":271,"receive":0,"ssl":805},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10065-50124e91.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.230Z","timestamp":1783425141230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10065-50124e91.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-1ede\"\r\nexpires: Sun, 26 Jul 2026 03:01:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbIOQYj8iL%2FRliN8OtAeplrnH0vhnjZHIA1YNFVpDnr6%2Fjr7vvfHcqq828ZpCON9DJAub8nbhpiuMSY9giYwGny8cUueSUfq%2F8TXuK1MF2kE5mi82e4WCKwraCAGwfs%3D\"}]}\r\ncf-ray: a176a47cbfc5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7902,"size_decoded":8660,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"16be96a5c4709215ed0383437432e1c1","sha1":"79ccf29aa8626e0bdccc1038cd4a10fbf962dacc","sha256":"50124e91d6abb1b4649e2b88a72992397b8ed8c87c2e19ea1a4a36d9441e09e5","sha512":"66440f62ade49c2638411d908c5874d10e6bb839868f19a98cbeae9b0e03cc35c80be882a7c3757c39b9d8ae68e7a56601e646574f4a889b7fbb993ff1ff5587","ssdeep":"192:aQ6GtMTknKqVL/uK0d84FCYe8X0ZcAyANicJ:aQ6GyT/SuoD8ucjo","tlshash":"f2f1bfd1a934ffe4f9ca24260bc010a42d784d1bd7dace1d8eb757624857a2628f134d","first_seen":"2026-04-06T13:07:20.322594Z","last_seen":"2026-07-08T02:06:34.982688Z","times_seen":10,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.0410d5bdd444c492494ae888a947f74bf.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.247Z","timestamp":1783425141247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.0410d5bdd444c492494ae888a947f74bf.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1448\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-oss-request-id: 6A495BF9ACF6C53630996067\r\naccept-ranges: bytes\r\netag: \"5C7738AB650D91E79D98B51DD609C974\"\r\nlast-modified: Wed, 12 Feb 2025 05:30:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11517935334861670903\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=410d5bdd444c492494ae888a947f74bf.png\r\ncache-control: max-age=14400\r\ncontent-md5: XHc4q2UNkeedmLUd1gnJdA==\r\nx-oss-server-time: 5\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSyWT1eajZ3QCLvVT2AlJD06hj7fS9V5Kgt4om5nCX3BidpzMPpx%2B8N61c%2FcW7nIoLp%2BAX3M6ELXwsuyw6ul87qSeVRj%2BkiHUNX0P%2Bc2Zhf7tUITCsmEwOaWeF%2B36q2bqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a54dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1448,"size_decoded":2453,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"5c7738ab650d91e79d98b51dd609c974","sha1":"3a361e80ebf57b692c90630659bc99454a1bf599","sha256":"158b299322e60ec007787a14b5cf9ca8550c7fe7413517d22769071b42e2dae6","sha512":"8642799f293987c413b9a4f76cd8c702b59c5ff99c51e5f4d14a11fcf66018894baeb4c7519a5d3f2b72359cee8041aa6fcfcdcb3c4c7c09c1b99b4751163ebc","ssdeep":"","tlshash":"f73108e0f39b0de0795e2777a7c37368ca20b9f50255608e4899e2a3c8b9c308c74f41","first_seen":"2025-03-27T06:51:59.270735Z","last_seen":"2026-07-08T02:06:35.062017Z","times_seen":67,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/api/common/getAllSetting","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.920Z","timestamp":1783425139920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: \r\nlang: en-US\r\nOrigin: https://dododol.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:20 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dododol.cyou\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQ8MMlRxHab7Epkbanb4bN0XK4mJAPZaVx80I7hhAWoGbWhSBBPveh3q%2Fp54xmmDIxMGPTnPpWsZcLZuKFbdIGUnteUt00FAKTPY%2B4lrGLuJg5trmCIiAAUKDTnhYJk%3D\"}]}\r\ncf-ray: a176a4748ef4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30897,"size_decoded":6858,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (30299), with no line terminators","md5":"fe579900f4ba04d7e984c5822ff0ed4c","sha1":"0691b1fe196e70f8116fbf26024ac9c257a13b05","sha256":"b1e5144d0b808d702c150cf80fd70e51f298df61842f22a4b8ebd42819f29087","sha512":"597264ff9d1bcd4a13e578bab7f3541b652e56bf0eb5b85cff01326afd517731f6bf8f69ecbd778801cd55e13f8e1ea053e1933148488aa09a459049191d6b40","ssdeep":"384:0sOzmKW+8JbBf3N2/CDt2pD+EMe9PP0zcb:0sOzmKQbzxo480U","tlshash":"50d2011672c9c87d86f20cc8d47b7d4ef8dc347faa909849f4a69e4c9459df7884b04a","first_seen":"2026-07-07T11:41:26.754898Z","last_seen":"2026-07-08T02:06:35.001439Z","times_seen":5,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T11:52:17.785Z","timestamp":1783425137785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:18 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJ33Jv0oDBPjGm5HxJb%2Bn3g8zSqDyDAaiRE6lBz5MaEDP2iBW37TOoTlKCnKXBiWdQSmi%2BetC%2FegJV018EW354AyeWzer5O%2BRF595bA0f9p7C418MtWpO6Q8EJBFn1c%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a176a467fd2fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8259,"size_decoded":3418,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2554)","md5":"576edd472e3cecc743c418e33726d353","sha1":"205fd1d845694739ba9c4485a6beebafe0d3d81f","sha256":"402ae00e870964c3eca77bf8a11ce7970ceb8a9a44bb5f2dd6916f619c0ff029","sha512":"94814ccaf4fcd4e2a52635e2dd08fa088f7231c3f99748fee8336abdca4adb7b31a16a3052eef8057a637e00ad6eff3492b534478653dc319c268066908b6704","ssdeep":"192:TFw8L6z2I107FZCxfWa+1xxBiRVvj1xnfD3bp1jIB1niijiKmfn5b:W8GAZCxVCBiraidxPJ","tlshash":"1b02c6abac61d53a53819379aad6f0189b722193811d8c48b0cc90ec6fd5fecc1db7b5","first_seen":"2026-07-07T11:53:04.390212Z","last_seen":"2026-07-07T11:53:04.390212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":92,"connect":29,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/vendor-cbbffefe.css","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:18.822Z","timestamp":1783425138822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/vendor-cbbffefe.css HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-162b3\"\r\nexpires: Tue, 07 Jul 2026 23:39:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5okMrO9Tv675f1PYLuKBgs7SPpC7a96ODgu79dY8rKYKETLp4cqzrbmoQwSpBEWDgYMD8u3%2FaNwM%2Bn69udmkBeBxcBwM8m0WbvkpvHQmLK10LMUqhLrMOrn1UgY2Gw%3D\"}]}\r\ncf-ray: a176a46dae30b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90803,"size_decoded":38382,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"4e321c1b433ce795f658223828ba0fb4","sha1":"a7f17d447bb7c759c6c718054f09650c7ed26b2a","sha256":"cbbffefebe97e1ac5db2d62572324349803ad6a4641b19bf0c7e6547e60ccd30","sha512":"50318b3c26cfea72391e14f21ce79dd3951eb172101ac6b2ad4e6b859c8cc0aba931a08207ca149308be951f6df859d8b96d814a72900cfa3f78dde9aa9b164d","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8DK6m:BnNIClDsIxuVS8Lm","tlshash":"8493d4a5a5c461fcaf2af2659b4766e8f13cf671cc01daa0f109415d0fc7bf50623a2a","first_seen":"2026-07-07T11:41:26.826556Z","last_seen":"2026-07-08T02:06:35.005336Z","times_seen":5,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/index-e60e8bf0.js","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:19.186Z","timestamp":1783425139186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/index-e60e8bf0.js HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a4946c9-2649a\"\r\nexpires: Tue, 07 Jul 2026 15:18:25 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rlc%2Bj5lv97AW%2FuGXYHSA3hnISpE%2F2FbONRIhbbpxjFgDxEklvWhM0k%2Fi45CW0bfUxZBDOcxWq15dumDNJfdCSdhBM4GBf5UiMCWIHmIWhgaa4D%2BcdFGVmQ9Wg7WC070%3D\"}]}\r\ncf-ray: a176a46fee7bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156826,"size_decoded":41510,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65484), with no line terminators","md5":"49de1e169ab53a30f4775d9cd708575b","sha1":"199f445cb79a4f63022d6a1ef5041ec71b6aea34","sha256":"583897a591cd4dce871f095cc83c51635e3b1f31f78b978d204b0ac8b2e4a59d","sha512":"c192c43c160c1ff2eee703b6b234e68f0abb23f4f31f5084ae415e16283e2197fbfa1e3524369b0eb11696b4302094a4d34b02066a6ec16472d76f49797330db","ssdeep":"3072:HJqxRGfbmHyJRH+foQg0qJQdwxxIV8Nh+fPZAIRDdurnvmb:HExRGfbmHyJV7Qg0qJ5IV8Nh+fPZAIRv","tlshash":"a4e33c4e98058fff7dbe0514b95a085020ad1fa791cd88e372fe9a5827f6ce5a34c724","first_seen":"2026-07-07T11:41:26.752406Z","last_seen":"2026-07-08T02:06:34.988614Z","times_seen":5,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/resource/svg/light/gou-yuyanno.svg?2.0.1783187035300","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.177Z","timestamp":1783425141177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /resource/svg/light/gou-yuyanno.svg?2.0.1783187035300 HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a494676-ee\"\r\nlast-modified: Sat, 04 Jul 2026 17:44:22 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnEDPYMJfxSKD57BnkQ8R0sqX3B7XGxl4CV0JJl%2FMG6KNgCdsFwIwI9l%2B1t7H%2Ba9bdKoXRwfs2TN4EmXRZ8492TPW198RODLIBf%2BDJqM121GcT%2FTdzFefxVApIApUlU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a176a47c5facb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":874,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc9f76c55946145ecd77d8f82dc47cd8","sha1":"7f1c86989996b8cc3379600c26eebe52e68244ad","sha256":"5e0b88fd6d9492a4df3462ac77aa1ef6f8187a4a8134585e3778ce863f509d20","sha512":"f62ec8f97ea00f4b66d23aef1b97db693033d831c4e48b8664356ee05eb3a551fb2ae46217df11243e8819811631138b2e04c6fe8574202c0fff4f9dd2717288","ssdeep":"","tlshash":"0bd0972e646c80080088ca002ae47c84019df0dc27c202eeb5416446c02208634aac5c","first_seen":"2025-04-25T08:37:00.552061Z","last_seen":"2026-07-08T02:06:34.997806Z","times_seen":81,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.03202543dc6a44841abcb8143a276f569.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.248Z","timestamp":1783425141248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.03202543dc6a44841abcb8143a276f569.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2683\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-oss-request-id: 6A495BF98B90443431D69573\r\naccept-ranges: bytes\r\netag: \"258B07478B77689C551D0FD1C5355F49\"\r\nlast-modified: Wed, 12 Feb 2025 05:36:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6497388461575618728\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=3202543dc6a44841abcb8143a276f569.png\r\ncache-control: max-age=14400\r\ncontent-md5: JYsHR4t3aJxVHQ/RxTVfSQ==\r\nx-oss-server-time: 7\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRS9tgrBTlU4Qt%2B8rRs124slIgNmuXmRd0VaFE4%2F1aPKtvkwt03XUYMT%2F%2Bj1ZPep61n9lXiEqMZFFnOo3E%2FxrnmtLL26nsjvtrB1xPhusI%2BOkuiikLVQ7rz%2FbHsyjNkk1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a56dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2683,"size_decoded":3689,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"258b07478b77689c551d0fd1c5355f49","sha1":"ba9e4ae222f836e49c1f1d855addb9433eb0c6a3","sha256":"b043d6cfb9ec582fa6e6037bf0ac864dcc7900775d9990fc58f413891e893835","sha512":"52c8358bd0c0749a9b0e0ac49ec2dc3abe522a282480bd6c85b4e5ade1e445e8e8ddd77a86592018a22cc17bccf0a33ba9c3ff97feea990f822ac389ce102970","ssdeep":"","tlshash":"27513b7bcbd20f47e48518973e250453d67006b5489ada05eb413286c5e956619e209b","first_seen":"2025-03-27T06:51:59.212137Z","last_seen":"2026-07-08T02:06:35.044248Z","times_seen":58,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w2703.ogac.xyz/echo2.0e3774e52199243afa50c433f41310f5a.png?2.0.1783187035300","fqdn":"w2703.ogac.xyz","domain":"ogac.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.254Z","timestamp":1783425141254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogac.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 02:23:02 GMT","end":"Sun, 27 Sep 2026 03:23:00 GMT"},"fingerprint":{"sha1":"A2:9E:F5:07:FE:98:A1:E7:09:4D:E3:54:E5:D2:3D:44:A5:F3:CD:75","sha256":"EC:07:78:65:42:04:5C:89:74:0E:6F:18:75:60:4B:79:A5:52:E7:CA:C2:2C:0B:65:E8:39:6D:30:9A:9E:60:83"}}},"request":{"raw":"GET /echo2.0e3774e52199243afa50c433f41310f5a.png?2.0.1783187035300 HTTP/1.1\r\nHost: w2703.ogac.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4281\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-oss-request-id: 6A495BF9C390C3333124F189\r\naccept-ranges: bytes\r\netag: \"F10C6B13E8D45C8EC965153BAAF25AC7\"\r\nlast-modified: Wed, 12 Feb 2025 05:32:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7856901857312251620\r\nx-oss-storage-class: Standard\r\ncontent-disposition: inline;filename=e3774e52199243afa50c433f41310f5a.png\r\ncache-control: max-age=14400\r\ncontent-md5: 8QxrE+jUXI7JZRU7qvJaxw==\r\nx-oss-server-time: 2\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4hVJHD2oXzLtAIJ0ufYlVRe%2FiIRMXkI9%2FyGLrNn2bvQoDiE9NCTKoHnjWwO%2Bu%2BlsKV%2Bn%2Ffs0KEFmUiu1ry6pBHE%2FQEKfGtF3blWgPr6BduRshxBI3S%2BBln4876NrABVJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47d0a6edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4281,"size_decoded":5289,"mime_type":"image/png","magic":"PNG image data, 61 x 64, 8-bit/color RGBA, non-interlaced","md5":"f10c6b13e8d45c8ec965153baaf25ac7","sha1":"6b448f2e716831fa82e0bfdb91c06962f15ff1dc","sha256":"c358952ce9943c048a35395789c4c8894ae842194fcdc82182705ce94de63818","sha512":"5bb24768b86468f5e7a6a7b5784488a099bd8363a6a297930dc95de0b3efcc5ad8ad50f1604e48fd2cb240ab869e39819b36586b487674d4fa4afef0e91687b9","ssdeep":"96:nB4MvzpRyAbsn/u+V4lgwH9a7wc8ZxYaNbDEm1bratrZ12:nB4Mvzz5snWWpS9a5Ix9NnfS1M","tlshash":"45919ff5c25b7e69f114a479d1e18d3d3d1f58a0e34a8e004034473b4594bbc70afb94","first_seen":"2025-03-27T06:51:59.206788Z","last_seen":"2026-07-08T02:06:35.007793Z","times_seen":59,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/10056-480206a2.png","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.203Z","timestamp":1783425141203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/10056-480206a2.png HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 16:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3816b2-1273\"\r\nexpires: Sun, 26 Jul 2026 03:01:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zaj5ajZFRlAIPSGfXIUKUErUz7JtxTK6AamIvU49Xza7CIjK7pn%2BuRyi6D0WsfHYjpb4cLYfUAhAiMxUslceRKWHNifdC8sbxSKdJ2Ck%2BavNyZnMN8ZPRKwr%2Fr%2FzozA%3D\"}]}\r\ncf-ray: a176a47c8fb4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4723,"size_decoded":5483,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"9839a80ed0a414cc6c05aa99ea43d285","sha1":"da6ba9cd64752126af2e9ce85d939d5143ff6cb3","sha256":"480206a220d98962758b2a0d509702c16a1f8021c0836ca6b57d2b393d221831","sha512":"7c9de8480d065284f989b3efab3be9e42dd483b40fbbe8306410e4309d6dbd573bde14a2a08267e5a96cd563b39035e05fea761150e3a2a9e405128e31a565ce","ssdeep":"96:Yp/ceR4GdpEm0BmIenXiQe3IQWoaGeFtjtp+8lC3WCWuR50T51L:UUKdpEmmV9WNFTVM3nND61L","tlshash":"0ea18e887b4b9f2e97d741c54160b4fcac3d4ded25685155d28c31a68b0cb79391b406","first_seen":"2026-04-06T13:07:20.321583Z","last_seen":"2026-07-08T02:06:35.014833Z","times_seen":10,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dododol.cyou/assets/3e3775b3-3e3775b3.webp","fqdn":"dododol.cyou","domain":"dododol.cyou","tld":"cyou"},"ip":{"addr":"172.67.208.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dododol.cyou/","date":"2026-07-07T11:52:21.265Z","timestamp":1783425141265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dododol.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 02:00:41 GMT","end":"Thu, 24 Sep 2026 02:58:15 GMT"},"fingerprint":{"sha1":"1D:27:8D:B7:56:B2:D6:DE:00:4F:66:5C:A8:B0:D2:40:98:D9:C0:C3","sha256":"89:2B:32:F9:30:0F:DD:9B:F3:01:EC:8D:C1:82:08:6C:E4:BE:7B:E4:25:42:D6:9D:38:CA:B9:24:14:23:F3:60"}}},"request":{"raw":"GET /assets/3e3775b3-3e3775b3.webp HTTP/1.1\r\nHost: dododol.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 11:52:21 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 17:45:45 GMT\r\npriority: u=5,i\r\netag: \"6a4946c9-f466\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYIqnBwOlLncrxTpJbYY6GqFAKsopSzYrHwtk5iqfnbUoMLJ%2BV1kLN7AOYvFOVkfPq9PCy4gerjILE5J2L4l39R2T%2Bk%2FKHm%2BQCtz5ppKC%2BHdNL627moolRCVjSj%2BSwo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a176a47cefcdb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62566,"size_decoded":63257,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8dbac1a1b1a2dad06a2a3e37e9090e03","sha1":"c59e43eed552171dc406fb8441fd23b725fb88cf","sha256":"3e3775b3fad3a22e6315f23058f4abd01c2cd08b93dfde3094f8fbedf9375f40","sha512":"252e0bcaf3996fe5bdfb7d3928f18be6d38aa1ccaede3bd25215bacb9dd275ac02158cfc69b41eb14eb9a3562084ed36f1d5a2f5dd49952b54b0815cf4786d85","ssdeep":"1536:gfCSXB4ifmt93aqaJ5uEr3EIt3gbzVM3oJp4/gJz:gaSXBfOHaqGow8es","tlshash":"825302949266a6c04a34533e48345fe4ffd76d153bc99bedb009aef2e884f0d061290a","first_seen":"2026-04-06T13:07:20.257348Z","last_seen":"2026-07-08T02:06:34.995552Z","times_seen":12,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dododol.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}