| dood.wf/d/dxwo8ums8z8r |  104.26.8.113 | 301 Moved Permanently | 0 B |
IP104.26.8.113:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d/dxwo8ums8z8r HTTP/1.1
Host: dood.wf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 31 Jan 2023 06:41:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 31 Jan 2023 07:41:53 GMT
Location: https://dood.wf/d/dxwo8ums8z8r
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xBI1GUHWTizCX0U4Y6f4aAIw5Eeffry0F1vtcb79yVulwarNQqj1hRHJqwows2%2BkYQ4cm%2BCZqLjb5cxG2ZROn1efJLvlWFVv4hlDtgJ7SGZNd7ju1V9OXgQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792076d6fa8afab4-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5eb7c9bc996a0ff420e58af45526f053 8c2614832b8efe1c9da0bbd465d6f3f172d95a9e c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16964
Expires: Tue, 31 Jan 2023 11:24:37 GMT
Date: Tue, 31 Jan 2023 06:41:53 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash62de35a6c8e4efd7633fc5236b5b086f 6a92912a86dfcd0330d040cef06bef36889c76ab ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17346
Expires: Tue, 31 Jan 2023 11:30:59 GMT
Date: Tue, 31 Jan 2023 06:41:53 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 05:43:17 GMT
content-type: application/json
age: 3516
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash09ee4b0fe6cf4ca5ed31b24452338d00 7e62b6e20f0d4737f4a8d94f9818a0883027839e 56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8241
Expires: Tue, 31 Jan 2023 08:59:14 GMT
Date: Tue, 31 Jan 2023 06:41:53 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash89ca81967727951f2dd5ad5f9bdeaa50 343f817e52e8a7458ed5c0dfb0fbc588aa444198 7983fb58fa26afaeca95d28363413ff5383fdbf54936a890b7e200b55582f60c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1229
Cache-Control: max-age=117926
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 06:41:53 GMT
Etag: "63d7dd0a-118"
Expires: Wed, 01 Feb 2023 15:27:19 GMT
Last-Modified: Mon, 30 Jan 2023 15:06:50 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 05MmJUQT42aWMG0PPoWXxVg6QOkOAZNuKfTsrBNQEqtE1Zu7N5rU39cjjeCLuD22VM5SsnFhiiFq16aT6LjMJQ==
x-amz-request-id: 4MPQMYC6Y5P1AA6Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 06:22:06 GMT
age: 1187
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash89ca81967727951f2dd5ad5f9bdeaa50 343f817e52e8a7458ed5c0dfb0fbc588aa444198 7983fb58fa26afaeca95d28363413ff5383fdbf54936a890b7e200b55582f60c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1230
Cache-Control: max-age=117926
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 06:41:54 GMT
Etag: "63d7dd0a-118"
Expires: Wed, 01 Feb 2023 15:27:20 GMT
Last-Modified: Mon, 30 Jan 2023 15:06:50 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js |  104.17.25.14 | 200 OK | 591 B |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (1266) Hash414869f16aa77a65b4928a018f7f1abb cea521f7a2958a50239526ed6b068f0937527653 afee364ce513c6517247b81cce5eb5eadb1dbbb35e439eb3fa97bbc15fac2cd3
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7741207
expires: Sun, 21 Jan 2024 06:41:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u1F88h8Eo9kqEsR9T6aSeqriCnW9jgVYGPU8%2FOcJ9YTS8a%2BcVLgEFC%2Fml24t6XEOfJli0sBJ2hr0qz8kvz%2BwJi4ar2f6pj9R4NdXdJYletA0JRB80uf%2BPRJijKjdKm4tj8qedQ2o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 792076db3c1fb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js | 104.17.25.14 | 200 OK | 28 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (65451) Hash638a4990025383a0f83ebf29bdb84a68 153e8818dc42f598e47fde8cf398f1447649a4d0 878e34b89800bb271d3588e526eb3598eb3822e263f3bdaf53645847d39d0ad6
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 879898
expires: Sun, 21 Jan 2024 06:41:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Y924xnniGMHBboeZDGB8JvF6FGrUUqkdgqovu44Le8p6PHnco%2BvsVJzsyAZSNbtcLdM3feJCIj7xHXXL7IAV693nkzpdeuoE7b3%2BtGas953NduGSwoxnPVrqv3vLJu%2F2eF76xR3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 792076db4c2fb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 345 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1d23fd9eba021b5ef9ddf4cb3120c1fe 00243d008c9e87bff4a7a6139ffcb789ee0ecc83 5eff62e8c931e73e6ea07374f3d61bd2179185030c06df4a9ef8daee4c974c32
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5EFF62E8C931E73E6EA07374F3D61BD2179185030C06DF4A9EF8DAEE4C974C32"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3425
Expires: Tue, 31 Jan 2023 07:38:59 GMT
Date: Tue, 31 Jan 2023 06:41:54 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 345 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1d23fd9eba021b5ef9ddf4cb3120c1fe 00243d008c9e87bff4a7a6139ffcb789ee0ecc83 5eff62e8c931e73e6ea07374f3d61bd2179185030c06df4a9ef8daee4c974c32
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5EFF62E8C931E73E6EA07374F3D61BD2179185030C06DF4A9EF8DAEE4C974C32"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3425
Expires: Tue, 31 Jan 2023 07:38:59 GMT
Date: Tue, 31 Jan 2023 06:41:54 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 345 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1d23fd9eba021b5ef9ddf4cb3120c1fe 00243d008c9e87bff4a7a6139ffcb789ee0ecc83 5eff62e8c931e73e6ea07374f3d61bd2179185030c06df4a9ef8daee4c974c32
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5EFF62E8C931E73E6EA07374F3D61BD2179185030C06DF4A9EF8DAEE4C974C32"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3425
Expires: Tue, 31 Jan 2023 07:38:59 GMT
Date: Tue, 31 Jan 2023 06:41:54 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash40bac282ee9730b7a7fde839fcf58736 be00063ec5c760560f34663d0a6a9cad87cfebe4 45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 06:41:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| i.doodcdn.co/img/no_video_3.svg | 104.26.7.74 | 200 OK | 2.8 kB |
URL HTTP/2i.doodcdn.co/img/no_video_3.svg IP104.26.7.74:0
File typeSVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (2789) Hash077bfdaa49ae4877a42611b739ec4752 a2f9e1222b7af9abc05122411ab8902efcc08ead 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Wed, 01 Mar 2023 08:23:51 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 32432
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kvpmpQBd1M7XrWIMa4u3oqy3%2Fun08VlL21sey5XC47%2F0uG3bI0JgwKki90WEIY%2FbAKoVKXUiR3sWzlkCVZF8cRTmB9boWp9dc03lcuISOwNGN70igk4XR2ykNwWkQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 792076dbfa2db4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 06:41:42 GMT
age: 12
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11673
Expires: Tue, 31 Jan 2023 09:56:27 GMT
Date: Tue, 31 Jan 2023 06:41:54 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 345 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1d23fd9eba021b5ef9ddf4cb3120c1fe 00243d008c9e87bff4a7a6139ffcb789ee0ecc83 5eff62e8c931e73e6ea07374f3d61bd2179185030c06df4a9ef8daee4c974c32
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5EFF62E8C931E73E6EA07374F3D61BD2179185030C06DF4A9EF8DAEE4C974C32"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3425
Expires: Tue, 31 Jan 2023 07:38:59 GMT
Date: Tue, 31 Jan 2023 06:41:54 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash40bac282ee9730b7a7fde839fcf58736 be00063ec5c760560f34663d0a6a9cad87cfebe4 45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 06:41:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| i.doodcdn.co/theme_2/css/style.css?v=0.1 | 104.26.7.74 | 200 OK | 61 kB |
URL HTTP/2i.doodcdn.co/theme_2/css/style.css?v=0.1 IP104.26.7.74:0
File typeASCII text, with very long lines (65465) Hash0e135375e83351c09a8a0607a5a35e49 be35bba48b65e522966b9cb47bfc2046f330a1fe c1e4d01fd9154ceeb740b282faa55b446bf17e6a9e6bc342bc03963030bd51c7
GET /theme_2/css/style.css?v=0.1 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=249272
expires: Tue, 30 Jan 2024 08:54:23 GMT
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 47633
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UMBJuJCawPzS8q6W79Y4lCsxynYefO6yt4E7YoY0ya%2FDjFJqkL%2FMqg%2FX082k%2FxuxJUAc9MPbZUMfUSNxaI2uiSl8%2Btmhc%2BIz4EHa7BVSdpyg%2Bfm5VVkC%2FM78i2u4BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792076dbfa32b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3acba29f57728b539222c70f27b10ed0 5a8c90feaa8c755c958437db4d6e1aef13c8e50b e6982095e8e4f486281dbc01f580db18495556ac9fb7f91b309341353507f717
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E6982095E8E4F486281DBC01F580DB18495556AC9FB7F91B309341353507F717"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5533
Expires: Tue, 31 Jan 2023 08:14:07 GMT
Date: Tue, 31 Jan 2023 06:41:54 GMT
Connection: keep-alive
|
|
| cdn.pncloudfl.com/pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png | 104.22.59.221 | 200 OK | 27 kB |
URL HTTP/2cdn.pncloudfl.com/pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png IP104.22.59.221:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash0bc7572129e84749c119db04346b0f07 bf8ae67f194c2faeb6a47d419d130dde27b9ae6f 6363f6dc72449ab775a6af3103e61617ecf70ebb8140996b9384a3eaa8b3698d
GET /pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: image/webp
content-length: 26892
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=70331
content-disposition: inline; filename="b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.webp"
etag: def74d9769fe75363891a2868865d99a
expires: Wed, 01 Feb 2023 21:53:33 GMT
last-modified: Tue, 22 Nov 2022 09:19:36 GMT
vary: Accept
x-openstack-request-id: txa3bf70e532dd40ea8f5b2-00637c9634
x-proxy-cache: HIT
x-timestamp: 1669108775.40440
x-trans-id: txa3bf70e532dd40ea8f5b2-00637c9634
cf-cache-status: HIT
age: 31701
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 792076de2ccdb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.pncloudfl.com/pn/71a/dd2/7d5/71add27d5bb61aab24af91ebe2af7f4205a35feb.jpg | 104.22.59.221 | 200 OK | 49 kB |
URL HTTP/2cdn.pncloudfl.com/pn/71a/dd2/7d5/71add27d5bb61aab24af91ebe2af7f4205a35feb.jpg IP104.22.59.221:0
File typeRIFF (little-endian) data, Web/P image\012- data Hasheedf689c4a33b79c440062e703d60ff6 a8300edf1b950a50086eb44165a6f6ae278e5057 b8b368d98eb9d04ce213fa62fa781f3bad8d48e5a57f98359cb880ab9600579f
GET /pn/71a/dd2/7d5/71add27d5bb61aab24af91ebe2af7f4205a35feb.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: image/webp
content-length: 48676
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=83221
content-disposition: inline; filename="71add27d5bb61aab24af91ebe2af7f4205a35feb.webp"
etag: 1df69ad2c9b78c9186aaa33fa40c237f
expires: Wed, 01 Feb 2023 22:18:49 GMT
last-modified: Thu, 06 Oct 2022 02:00:51 GMT
vary: Accept
x-openstack-request-id: txe73bad396e604f28ab17d-00633e3eef
x-proxy-cache: HIT
x-timestamp: 1665021650.87526
x-trans-id: txe73bad396e604f28ab17d-00633e3eef
cf-cache-status: HIT
age: 30185
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 792076de3cd1b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.43.158.219 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.43.158.219:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dUVMq+GWlI9xwY+i9yWxSg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: smLrhmNvgtmKhBrQx9SCciUN0Y8=
|
|
| alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=sx7nZw5ayDspsTxfqT7fraDfupGQUmnG8-SlywwLiVbsa8D_32tA059DtRXnBmx5riIA-T3tIpr1Q6u3UR_5DjwM_s0y6BT_49HPTYddQnEZTAK2G8DGZqh0a9vLTo5O-TISpzEwANxWRpiBRZUG62PgdtjcYOw1fgUKhPk5KAlhTAgwSbAQTzzrvYBgt-z1ixRxloLZ6owuXnaMDklEIM61FAgiifxCiMuBsTa-OSkDtzq73QQ9NV4p87wIuXeR29NWT34oADoH7eM52OLWtFIgQizTFTVHJcz70VJQjSG1CUpuYpoet358o82uluaSqNtTbKJCEgnAarjgVOKE-JLy11cXDhR-4x1Qgl8B0vEn3tFcKQpxWicd-cSaVekLlU5O_7-ZDj8K5n00bt8po_bVD71bzehtYKqi4hTAjKnItvhBsPO7I3Uqxb-b-fbTyQX0y4ueD6rv51vDDD43cSAasUc2d3Io-YZYLOEaIflCL2sQJnRHYL3Mei9ivdc9ayMyQzx_10ZHSyxYA0rCDETHRMVWcZi7Tkbd4rO2JWi8hLgGNHk6FvtOBBi0z4jfWg2fHmdm5vtfSWy1xImt2ZFQ9D4-SxKLSPqZuA2JNmkBqxUNreMPiKxaT4teLd8eqqXEtI8iTQJS7JYhgT5GtinqU6KJXYFQp993awv0_wuWE3XLxHy8xbfolIpJbesSFkU8DlfwrJvpN_rwl3Op13-zv7sNGIT8pV5PGX-z70UXNKxYTycnfLinTL2qXya4coUY31bemfGYpcjghS1_1db505i-_kQ3XepInpmEQyCR8Wb3-V-V2fvMyb1yU7wM_hUHlyn0fewCBweIMQ4CM6wN8eUOLuFMI6c=&abvar=23&os=0 |  62.122.171.6 | 200 OK | 43 B |
URL HTTP/2alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=sx7nZw5ayDspsTxfqT7fraDfupGQUmnG8-SlywwLiVbsa8D_32tA059DtRXnBmx5riIA-T3tIpr1Q6u3UR_5DjwM_s0y6BT_49HPTYddQnEZTAK2G8DGZqh0a9vLTo5O-TISpzEwANxWRpiBRZUG62PgdtjcYOw1fgUKhPk5KAlhTAgwSbAQTzzrvYBgt-z1ixRxloLZ6owuXnaMDklEIM61FAgiifxCiMuBsTa-OSkDtzq73QQ9NV4p87wIuXeR29NWT34oADoH7eM52OLWtFIgQizTFTVHJcz70VJQjSG1CUpuYpoet358o82uluaSqNtTbKJCEgnAarjgVOKE-JLy11cXDhR-4x1Qgl8B0vEn3tFcKQpxWicd-cSaVekLlU5O_7-ZDj8K5n00bt8po_bVD71bzehtYKqi4hTAjKnItvhBsPO7I3Uqxb-b-fbTyQX0y4ueD6rv51vDDD43cSAasUc2d3Io-YZYLOEaIflCL2sQJnRHYL3Mei9ivdc9ayMyQzx_10ZHSyxYA0rCDETHRMVWcZi7Tkbd4rO2JWi8hLgGNHk6FvtOBBi0z4jfWg2fHmdm5vtfSWy1xImt2ZFQ9D4-SxKLSPqZuA2JNmkBqxUNreMPiKxaT4teLd8eqqXEtI8iTQJS7JYhgT5GtinqU6KJXYFQp993awv0_wuWE3XLxHy8xbfolIpJbesSFkU8DlfwrJvpN_rwl3Op13-zv7sNGIT8pV5PGX-z70UXNKxYTycnfLinTL2qXya4coUY31bemfGYpcjghS1_1db505i-_kQ3XepInpmEQyCR8Wb3-V-V2fvMyb1yU7wM_hUHlyn0fewCBweIMQ4CM6wN8eUOLuFMI6c=&abvar=23&os=0 IP62.122.171.6:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=sx7nZw5ayDspsTxfqT7fraDfupGQUmnG8-SlywwLiVbsa8D_32tA059DtRXnBmx5riIA-T3tIpr1Q6u3UR_5DjwM_s0y6BT_49HPTYddQnEZTAK2G8DGZqh0a9vLTo5O-TISpzEwANxWRpiBRZUG62PgdtjcYOw1fgUKhPk5KAlhTAgwSbAQTzzrvYBgt-z1ixRxloLZ6owuXnaMDklEIM61FAgiifxCiMuBsTa-OSkDtzq73QQ9NV4p87wIuXeR29NWT34oADoH7eM52OLWtFIgQizTFTVHJcz70VJQjSG1CUpuYpoet358o82uluaSqNtTbKJCEgnAarjgVOKE-JLy11cXDhR-4x1Qgl8B0vEn3tFcKQpxWicd-cSaVekLlU5O_7-ZDj8K5n00bt8po_bVD71bzehtYKqi4hTAjKnItvhBsPO7I3Uqxb-b-fbTyQX0y4ueD6rv51vDDD43cSAasUc2d3Io-YZYLOEaIflCL2sQJnRHYL3Mei9ivdc9ayMyQzx_10ZHSyxYA0rCDETHRMVWcZi7Tkbd4rO2JWi8hLgGNHk6FvtOBBi0z4jfWg2fHmdm5vtfSWy1xImt2ZFQ9D4-SxKLSPqZuA2JNmkBqxUNreMPiKxaT4teLd8eqqXEtI8iTQJS7JYhgT5GtinqU6KJXYFQp993awv0_wuWE3XLxHy8xbfolIpJbesSFkU8DlfwrJvpN_rwl3Op13-zv7sNGIT8pV5PGX-z70UXNKxYTycnfLinTL2qXya4coUY31bemfGYpcjghS1_1db505i-_kQ3XepInpmEQyCR8Wb3-V-V2fvMyb1yU7wM_hUHlyn0fewCBweIMQ4CM6wN8eUOLuFMI6c=&abvar=23&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2301310141812521f9da9748f1a3da739144
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACMMIAAAAAAAAAAB; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
OACIBLOCK=ACMMIAAAAABj2K5g; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Wed, 01 Feb 2023 06:41:54 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=O0qLYPk-yOnOT8AZ7YKqJYeKDiJ3tr-KMz2xIBEX_beGg5rJf8GFQtQDfvjc3OxRU0hjafhGy0CmQLkvZa16qnZP9a9yKI3KHwXEZVzQ0IzDTLAc4jfY6LvM_EKaLqoHwTgo_hMjb4QCGIxHbPL5NHyROhjUgGP1L1qIL7jltRyJil_XKOj3RaeJGacHlUFp4q_8gyOPJMoUYKeFqPbg_D4Y7zaKCCzGcBfQnFPFQdX0H-d_XaF45ywDGqSql3-gr-E-QsDPoxtQM1xy-Nk7zAaFFXLvSsv7x5mxv4zgEXBAs7YbAtmtFfnBY6vZ9zZkc-YefcGU_AlbNrf4dXkL93KL3vJcwr1V8j0Nups9hSA0d15oYEpKbVwoI-us5ZJl-763004SwhxBtJgfec_APvpheWCROJ9bnHmKq2m2VsiaMVSx14D4w9zLdl96V-mCdV_AMmBZkOpXv4d4Uq-Td-34QfWe1z3JnXjuTIbkjqXgmBjHYUVfC_LYFcjuZpfDcmGbcoU-Ags0hEJWo4pEheiBqed75X0KJzGYeMkV0Vihu0Wb1a0RtoQkZMiIWJXRIwOPgOaI-OW8nxzO60If-D6-sj3GaLyk2uTNYdthWhnJbBY0262r4jx74VF26TLI72dTMiPYvvC01XaFJEdAYENhM7mGShjZ2_t4-Xx-iEhy8jUh0KmyQyu7gEaluv8OdQ3JnCjIsP43_-Gxmym-AMnkAcJgk-rrCOp5Be2niCaQxY4_ssdDK9GcQg6fPWoRRUwzEjsv_iRdVeut29_E_cPNUqszTo5CPJ8vWY0qMX1NSdojJ7TOQq4UfRqPU1u3YTrIKUef2sstv6yPDHIFRYxlEh3bDrvw8sA=&abvar=22&os=0 | 62.122.171.6 | 200 OK | 43 B |
URL HTTP/2alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=O0qLYPk-yOnOT8AZ7YKqJYeKDiJ3tr-KMz2xIBEX_beGg5rJf8GFQtQDfvjc3OxRU0hjafhGy0CmQLkvZa16qnZP9a9yKI3KHwXEZVzQ0IzDTLAc4jfY6LvM_EKaLqoHwTgo_hMjb4QCGIxHbPL5NHyROhjUgGP1L1qIL7jltRyJil_XKOj3RaeJGacHlUFp4q_8gyOPJMoUYKeFqPbg_D4Y7zaKCCzGcBfQnFPFQdX0H-d_XaF45ywDGqSql3-gr-E-QsDPoxtQM1xy-Nk7zAaFFXLvSsv7x5mxv4zgEXBAs7YbAtmtFfnBY6vZ9zZkc-YefcGU_AlbNrf4dXkL93KL3vJcwr1V8j0Nups9hSA0d15oYEpKbVwoI-us5ZJl-763004SwhxBtJgfec_APvpheWCROJ9bnHmKq2m2VsiaMVSx14D4w9zLdl96V-mCdV_AMmBZkOpXv4d4Uq-Td-34QfWe1z3JnXjuTIbkjqXgmBjHYUVfC_LYFcjuZpfDcmGbcoU-Ags0hEJWo4pEheiBqed75X0KJzGYeMkV0Vihu0Wb1a0RtoQkZMiIWJXRIwOPgOaI-OW8nxzO60If-D6-sj3GaLyk2uTNYdthWhnJbBY0262r4jx74VF26TLI72dTMiPYvvC01XaFJEdAYENhM7mGShjZ2_t4-Xx-iEhy8jUh0KmyQyu7gEaluv8OdQ3JnCjIsP43_-Gxmym-AMnkAcJgk-rrCOp5Be2niCaQxY4_ssdDK9GcQg6fPWoRRUwzEjsv_iRdVeut29_E_cPNUqszTo5CPJ8vWY0qMX1NSdojJ7TOQq4UfRqPU1u3YTrIKUef2sstv6yPDHIFRYxlEh3bDrvw8sA=&abvar=22&os=0 IP62.122.171.6:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=O0qLYPk-yOnOT8AZ7YKqJYeKDiJ3tr-KMz2xIBEX_beGg5rJf8GFQtQDfvjc3OxRU0hjafhGy0CmQLkvZa16qnZP9a9yKI3KHwXEZVzQ0IzDTLAc4jfY6LvM_EKaLqoHwTgo_hMjb4QCGIxHbPL5NHyROhjUgGP1L1qIL7jltRyJil_XKOj3RaeJGacHlUFp4q_8gyOPJMoUYKeFqPbg_D4Y7zaKCCzGcBfQnFPFQdX0H-d_XaF45ywDGqSql3-gr-E-QsDPoxtQM1xy-Nk7zAaFFXLvSsv7x5mxv4zgEXBAs7YbAtmtFfnBY6vZ9zZkc-YefcGU_AlbNrf4dXkL93KL3vJcwr1V8j0Nups9hSA0d15oYEpKbVwoI-us5ZJl-763004SwhxBtJgfec_APvpheWCROJ9bnHmKq2m2VsiaMVSx14D4w9zLdl96V-mCdV_AMmBZkOpXv4d4Uq-Td-34QfWe1z3JnXjuTIbkjqXgmBjHYUVfC_LYFcjuZpfDcmGbcoU-Ags0hEJWo4pEheiBqed75X0KJzGYeMkV0Vihu0Wb1a0RtoQkZMiIWJXRIwOPgOaI-OW8nxzO60If-D6-sj3GaLyk2uTNYdthWhnJbBY0262r4jx74VF26TLI72dTMiPYvvC01XaFJEdAYENhM7mGShjZ2_t4-Xx-iEhy8jUh0KmyQyu7gEaluv8OdQ3JnCjIsP43_-Gxmym-AMnkAcJgk-rrCOp5Be2niCaQxY4_ssdDK9GcQg6fPWoRRUwzEjsv_iRdVeut29_E_cPNUqszTo5CPJ8vWY0qMX1NSdojJ7TOQq4UfRqPU1u3YTrIKUef2sstv6yPDHIFRYxlEh3bDrvw8sA=&abvar=22&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2301310141812521f9da9748f1a3da739144
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACMMIAAAAAAAAAAB; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
OACIBLOCK=ACMMIAAAAABj2K5g; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Wed, 01 Feb 2023 06:41:54 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=bE4JhbPS1wt9isBojXlvB2cM1T6R7aZ-gnMo32pTRgRGrI44aZncdL-I7PdiuipprBiINVWRXfBKKiTsn9LZtmcSiADHEhJymlmeYYadoLdDwL-wiaSbHb2_i4_2m4n6ujt3YWxq1Loa2zDsI0E4C8kyfZURIDxI274gAMJSOECPuNmQMI7KeOzjMNVtxxaJkl2iXGDnMx8QNcJx0Yd9921-AUgIhDXO0krntB2OZjNJZX727QsWmc4CQw5G7bt3uyxiEO62Ng1AJukyAeitCbMQW9fY38bpOqfHFjZOGSbJ_JUmbgt4vjhCF7Gt2Bq9zbFFvnl5h09R1MUmLIW_4HFZF-2i3tX03I2Ft_jRSc4f4kis1IcyT8g3bByF8JM1IewIqGHtIQvHxBwY5bq1PxEyX1An35aZfq20UcSv_sZhDILDtaMSoU7nRbwQWUz003sTT0399LEhMtxOsjMNFziCtCA7Hq5VGXk7YS6G0t0h54irD3kEpRTeebo5b_UEzr-QCXhcEcFKiYJszkIUJuDprHWIzPkQ4y6vRtuQPEq-zwWhkmZEAb-4A05m8e-5mMvS244EVMGiUt_dzqP1AVQQOpvBQpLwDqUGfNYAIXferbgO67u5xlhOCw-CimRCVLWk-WcNUiqiviYcrXPLYKsj0eXUMaZB8pSCyXormPpch9jPbpHBufi44HLVLoyXQDOvWxcQ0VAooGYKkf7A6Q2Ra6NPUdPMJU_oivVf7VJZGvzM1Nht90-9PwFcMOziYigpECpQikn4YOuQtvkrKVh49plLZdWBpfNMJh0QCkjcwyTE7TnY8K8PcusP4QzHWG0v-CfHfIOba3iVF9n8s36qdJhsHsVl&abvar=23&os=0 | 62.122.171.6 | 200 OK | 43 B |
URL HTTP/2alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=bE4JhbPS1wt9isBojXlvB2cM1T6R7aZ-gnMo32pTRgRGrI44aZncdL-I7PdiuipprBiINVWRXfBKKiTsn9LZtmcSiADHEhJymlmeYYadoLdDwL-wiaSbHb2_i4_2m4n6ujt3YWxq1Loa2zDsI0E4C8kyfZURIDxI274gAMJSOECPuNmQMI7KeOzjMNVtxxaJkl2iXGDnMx8QNcJx0Yd9921-AUgIhDXO0krntB2OZjNJZX727QsWmc4CQw5G7bt3uyxiEO62Ng1AJukyAeitCbMQW9fY38bpOqfHFjZOGSbJ_JUmbgt4vjhCF7Gt2Bq9zbFFvnl5h09R1MUmLIW_4HFZF-2i3tX03I2Ft_jRSc4f4kis1IcyT8g3bByF8JM1IewIqGHtIQvHxBwY5bq1PxEyX1An35aZfq20UcSv_sZhDILDtaMSoU7nRbwQWUz003sTT0399LEhMtxOsjMNFziCtCA7Hq5VGXk7YS6G0t0h54irD3kEpRTeebo5b_UEzr-QCXhcEcFKiYJszkIUJuDprHWIzPkQ4y6vRtuQPEq-zwWhkmZEAb-4A05m8e-5mMvS244EVMGiUt_dzqP1AVQQOpvBQpLwDqUGfNYAIXferbgO67u5xlhOCw-CimRCVLWk-WcNUiqiviYcrXPLYKsj0eXUMaZB8pSCyXormPpch9jPbpHBufi44HLVLoyXQDOvWxcQ0VAooGYKkf7A6Q2Ra6NPUdPMJU_oivVf7VJZGvzM1Nht90-9PwFcMOziYigpECpQikn4YOuQtvkrKVh49plLZdWBpfNMJh0QCkjcwyTE7TnY8K8PcusP4QzHWG0v-CfHfIOba3iVF9n8s36qdJhsHsVl&abvar=23&os=0 IP62.122.171.6:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=bE4JhbPS1wt9isBojXlvB2cM1T6R7aZ-gnMo32pTRgRGrI44aZncdL-I7PdiuipprBiINVWRXfBKKiTsn9LZtmcSiADHEhJymlmeYYadoLdDwL-wiaSbHb2_i4_2m4n6ujt3YWxq1Loa2zDsI0E4C8kyfZURIDxI274gAMJSOECPuNmQMI7KeOzjMNVtxxaJkl2iXGDnMx8QNcJx0Yd9921-AUgIhDXO0krntB2OZjNJZX727QsWmc4CQw5G7bt3uyxiEO62Ng1AJukyAeitCbMQW9fY38bpOqfHFjZOGSbJ_JUmbgt4vjhCF7Gt2Bq9zbFFvnl5h09R1MUmLIW_4HFZF-2i3tX03I2Ft_jRSc4f4kis1IcyT8g3bByF8JM1IewIqGHtIQvHxBwY5bq1PxEyX1An35aZfq20UcSv_sZhDILDtaMSoU7nRbwQWUz003sTT0399LEhMtxOsjMNFziCtCA7Hq5VGXk7YS6G0t0h54irD3kEpRTeebo5b_UEzr-QCXhcEcFKiYJszkIUJuDprHWIzPkQ4y6vRtuQPEq-zwWhkmZEAb-4A05m8e-5mMvS244EVMGiUt_dzqP1AVQQOpvBQpLwDqUGfNYAIXferbgO67u5xlhOCw-CimRCVLWk-WcNUiqiviYcrXPLYKsj0eXUMaZB8pSCyXormPpch9jPbpHBufi44HLVLoyXQDOvWxcQ0VAooGYKkf7A6Q2Ra6NPUdPMJU_oivVf7VJZGvzM1Nht90-9PwFcMOziYigpECpQikn4YOuQtvkrKVh49plLZdWBpfNMJh0QCkjcwyTE7TnY8K8PcusP4QzHWG0v-CfHfIOba3iVF9n8s36qdJhsHsVl&abvar=23&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2301310141812521f9da9748f1a3da739144
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACQ6xAAAAAAAAAAB; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
OACIBLOCK=ACQ6xAAAAABj2KBQ; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Wed, 01 Feb 2023 06:41:54 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=Hjn11Qn-YJbKponTVHjojiiPwS8BAz-xbjXsgEpReoByPBExZopmXQf8uHMwmMSLWS4G7RYEXtzQRdhWuiPj_kkyr9zVEUgTEmI4C5V3iuk8J35rgsZ_VsHzPHfD54L0IMUNNggqwfwDm3PElZ69XEncsXTJxJXN7SCb8Gcbo51pM5tFheIWtOPMukF7BYlUOcWRobDaWCSjpA8rRFLkcFq6c2PiNpozqwStbeaJNBn-eWnniBtCh3QXq4hXkXs2MMYMhNp50kVwLrFAdSf7_ndBUuM6Anf06n1q8mZagmAbz66nmpLl6FCMKzfhGkR3SAftRbCRUj1_m-QDJtWujAzOTRE4-3--mWAjx7sMSk1ykKbw4Zay1OPR8EPd-GUUdpqIFQpNKJcunNiBWjWhHpjjLktbucHmp5WF98XwKmYQnkQTa_hAxS5yvSlT8faO6Oc8mLF-zp7AWcxXefV9Ds4_7KJkc5oGyC4YjWL8JYcM7sz-kyvdPblDibOMdSLQk3z0cbhosd9E_olYBVq8uMhtZA8wqGRhubncP9X9OxwnHc6c2mjiRFxG35LCNIY2zRKMOdJEehGHfeaHmgLCZrth7iz6TquDjrlOGe5IIR59CKMTKl6Y_pVBobD_vB8lIR9DuxNaBinHW54lUaSTQvdGvq3hOwEp8xFRuTGOItPkOenrFIcNLuMSooslj52niyHMKSJFrQvzjl5cPyFI3jqVC0fuXNMpJ_3lVzZCAsF8qda0M9otsP-Krygxa25eQvdKXeSvq9K0COr6n5cKka-ZqiHdzbIokhowftvjXXmufaTSzyjTT6fhbmIzppH67UPKdDNzPyErEU1cy6k4QxEP1bTu4ji_&abvar=22&os=0 | 62.122.171.6 | 200 OK | 43 B |
URL HTTP/2alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=Hjn11Qn-YJbKponTVHjojiiPwS8BAz-xbjXsgEpReoByPBExZopmXQf8uHMwmMSLWS4G7RYEXtzQRdhWuiPj_kkyr9zVEUgTEmI4C5V3iuk8J35rgsZ_VsHzPHfD54L0IMUNNggqwfwDm3PElZ69XEncsXTJxJXN7SCb8Gcbo51pM5tFheIWtOPMukF7BYlUOcWRobDaWCSjpA8rRFLkcFq6c2PiNpozqwStbeaJNBn-eWnniBtCh3QXq4hXkXs2MMYMhNp50kVwLrFAdSf7_ndBUuM6Anf06n1q8mZagmAbz66nmpLl6FCMKzfhGkR3SAftRbCRUj1_m-QDJtWujAzOTRE4-3--mWAjx7sMSk1ykKbw4Zay1OPR8EPd-GUUdpqIFQpNKJcunNiBWjWhHpjjLktbucHmp5WF98XwKmYQnkQTa_hAxS5yvSlT8faO6Oc8mLF-zp7AWcxXefV9Ds4_7KJkc5oGyC4YjWL8JYcM7sz-kyvdPblDibOMdSLQk3z0cbhosd9E_olYBVq8uMhtZA8wqGRhubncP9X9OxwnHc6c2mjiRFxG35LCNIY2zRKMOdJEehGHfeaHmgLCZrth7iz6TquDjrlOGe5IIR59CKMTKl6Y_pVBobD_vB8lIR9DuxNaBinHW54lUaSTQvdGvq3hOwEp8xFRuTGOItPkOenrFIcNLuMSooslj52niyHMKSJFrQvzjl5cPyFI3jqVC0fuXNMpJ_3lVzZCAsF8qda0M9otsP-Krygxa25eQvdKXeSvq9K0COr6n5cKka-ZqiHdzbIokhowftvjXXmufaTSzyjTT6fhbmIzppH67UPKdDNzPyErEU1cy6k4QxEP1bTu4ji_&abvar=22&os=0 IP62.122.171.6:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=Hjn11Qn-YJbKponTVHjojiiPwS8BAz-xbjXsgEpReoByPBExZopmXQf8uHMwmMSLWS4G7RYEXtzQRdhWuiPj_kkyr9zVEUgTEmI4C5V3iuk8J35rgsZ_VsHzPHfD54L0IMUNNggqwfwDm3PElZ69XEncsXTJxJXN7SCb8Gcbo51pM5tFheIWtOPMukF7BYlUOcWRobDaWCSjpA8rRFLkcFq6c2PiNpozqwStbeaJNBn-eWnniBtCh3QXq4hXkXs2MMYMhNp50kVwLrFAdSf7_ndBUuM6Anf06n1q8mZagmAbz66nmpLl6FCMKzfhGkR3SAftRbCRUj1_m-QDJtWujAzOTRE4-3--mWAjx7sMSk1ykKbw4Zay1OPR8EPd-GUUdpqIFQpNKJcunNiBWjWhHpjjLktbucHmp5WF98XwKmYQnkQTa_hAxS5yvSlT8faO6Oc8mLF-zp7AWcxXefV9Ds4_7KJkc5oGyC4YjWL8JYcM7sz-kyvdPblDibOMdSLQk3z0cbhosd9E_olYBVq8uMhtZA8wqGRhubncP9X9OxwnHc6c2mjiRFxG35LCNIY2zRKMOdJEehGHfeaHmgLCZrth7iz6TquDjrlOGe5IIR59CKMTKl6Y_pVBobD_vB8lIR9DuxNaBinHW54lUaSTQvdGvq3hOwEp8xFRuTGOItPkOenrFIcNLuMSooslj52niyHMKSJFrQvzjl5cPyFI3jqVC0fuXNMpJ_3lVzZCAsF8qda0M9otsP-Krygxa25eQvdKXeSvq9K0COr6n5cKka-ZqiHdzbIokhowftvjXXmufaTSzyjTT6fhbmIzppH67UPKdDNzPyErEU1cy6k4QxEP1bTu4ji_&abvar=22&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2301310141812521f9da9748f1a3da739144
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACQ6xAAAAAAAAAAB; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
OACIBLOCK=ACQ6xAAAAABj2KBQ; Path=/; Expires=Thu, 02 Mar 2023 06:41:54 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Wed, 01 Feb 2023 06:41:54 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash284c5fcae28e8b46244552924c6e6aa7 78d4747a895800bdc495214eecfd1f3a76fa9260 e84429ee63c15e6179d4d143d25410fef0d8e658c745b772a2fbc693ede8c715
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E84429EE63C15E6179D4D143D25410FEF0D8E658C745B772A2FBC693EDE8C715"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2155
Expires: Tue, 31 Jan 2023 07:17:49 GMT
Date: Tue, 31 Jan 2023 06:41:54 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash17234afade9bbc17ceea1cbfcb17dfda 0f89f397eda5009be0e9efe14c6a980b19e7fda1 4b488db50d11b1493f762afea16eb068e50932106c599db637521d7532c3a27a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4404
Cache-Control: max-age=120046
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 06:41:55 GMT
Etag: "63d7d8ed-117"
Expires: Wed, 01 Feb 2023 16:02:41 GMT
Last-Modified: Mon, 30 Jan 2023 14:49:17 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash17234afade9bbc17ceea1cbfcb17dfda 0f89f397eda5009be0e9efe14c6a980b19e7fda1 4b488db50d11b1493f762afea16eb068e50932106c599db637521d7532c3a27a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4404
Cache-Control: max-age=120046
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 06:41:55 GMT
Etag: "63d7d8ed-117"
Expires: Wed, 01 Feb 2023 16:02:41 GMT
Last-Modified: Mon, 30 Jan 2023 14:49:17 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash70e707c42c801a1049e860e866986ba9 c9cee0a9eb8f1177a433ae72d351964c40071806 20fabe4860cf874d6512c2f2277a812c6ac57b7d25cf6e7ed9a98e323b761b5b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "20FABE4860CF874D6512C2F2277A812C6AC57B7D25CF6E7ED9A98E323B761B5B"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7775
Expires: Tue, 31 Jan 2023 08:51:30 GMT
Date: Tue, 31 Jan 2023 06:41:55 GMT
Connection: keep-alive
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 2.2 kB |
IP172.64.155.188:0
Hash49f61bec8555684e575c5d2483ad3a77 0958f555f62acda0a4cf1ee0480455115e01f6ba 7017bf0c3a4feed435a3b7d1d6bf5d8bab34b112835349f490722216268769a2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:41:55 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 03:49:35 GMT
Expires: Sun, 05 Feb 2023 03:49:34 GMT
Etag: "65d899c3fd847edfcf36417f4c88e94c7f12647e"
Cache-Control: max-age=421058,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792076e06fc6b506-OSL
|
|
| fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f | 139.45.195.254 | 200 OK | 12 B |
URL HTTP/1.1fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f IP139.45.195.254:0
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 901
Origin: https://dood.wf
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 31 Jan 2023 06:41:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://dood.wf
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| tzegilo.com/stattag.js | 104.21.89.122 | 200 OK | 21 kB |
IP104.21.89.122:0
File typeASCII text, with very long lines (13121), with no line terminators Hash8a6b890697050f4f4087fbf535ef4598 e0caf0838eab50de02198f3fc1d358f763fbe872 71d64d27422f5495f63a0dc0bb4a22d665f60385b45841a50cfe1fcd1ab1e62d
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:55 GMT
content-type: application/javascript
last-modified: Thu, 29 Dec 2022 16:01:28 GMT
etag: W/"63adb9d8-3341"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4090
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3glTJHbsSahPbaHuUx%2B9cC7KBsBBWf8owvFFd3vS%2FQtrM7tqPDcCdPDmRWY4X1p4enmG5GNxswfmS1TnCZSPYfPaW1nMPlWYbrsGQrJ4FB%2B095VxtrkauLb3aT6TeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 792076df4fa10afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf90597ac725c17232fb0e807e80359b2 6d88f61dd41cce96246caa8ed81b7593455e4671 2456263dd21986d49ea478d5a5d69ee7b741b3291bb456e9cc4f9cf0cf2a5cb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2456263DD21986D49EA478D5A5D69EE7B741B3291BB456E9CC4F9CF0CF2A5CB2"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19633
Expires: Tue, 31 Jan 2023 12:09:08 GMT
Date: Tue, 31 Jan 2023 06:41:55 GMT
Connection: keep-alive
|
|
| alas4kanmfa6a4mubte.com/whob.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=bE4JhbPS1wt9isBojXlvB2cM1T6R7aZ-gnMo32pTRgRGrI44aZncdL-I7PdiuipprBiINVWRXfBKKiTsn9LZtmcSiADHEhJymlmeYYadoLdDwL-wiaSbHb2_i4_2m4n6ujt3YWxq1Loa2zDsI0E4C8kyfZURIDxI274gAMJSOECPuNmQMI7KeOzjMNVtxxaJkl2iXGDnMx8QNcJx0Yd9921-AUgIhDXO0krntB2OZjNJZX727QsWmc4CQw5G7bt3uyxiEO62Ng1AJukyAeitCbMQW9fY38bpOqfHFjZOGSbJ_JUmbgt4vjhCF7Gt2Bq9zbFFvnl5h09R1MUmLIW_4HFZF-2i3tX03I2Ft_jRSc4f4kis1IcyT8g3bByF8JM1IewIqGHtIQvHxBwY5bq1PxEyX1An35aZfq20UcSv_sZhDILDtaMSoU7nRbwQWUz003sTT0399LEhMtxOsjMNFziCtCA7Hq5VGXk7YS6G0t0h54irD3kEpRTeebo5b_UEzr-QCXhcEcFKiYJszkIUJuDprHWIzPkQ4y6vRtuQPEq-zwWhkmZEAb-4A05m8e-5mMvS244EVMGiUt_dzqP1AVQQOpvBQpLwDqUGfNYAIXferbgO67u5xlhOCw-CimRCVLWk-WcNUiqiviYcrXPLYKsj0eXUMaZB8pSCyXormPpch9jPbpHBufi44HLVLoyXQDOvWxcQ0VAooGYKkf7A6Q2Ra6NPUdPMJU_oivVf7VJZGvzM1Nht90-9PwFcMOziYigpECpQikn4YOuQtvkrKVh49plLZdWBpfNMJh0QCkjcwyTE7TnY8K8PcusP4QzHWG0v-CfHfIOba3iVF9n8s36qdJhsHsVl&abvar=23&os=0 | 62.122.171.6 | 200 OK | 43 B |
URL HTTP/2alas4kanmfa6a4mubte.com/whob.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=bE4JhbPS1wt9isBojXlvB2cM1T6R7aZ-gnMo32pTRgRGrI44aZncdL-I7PdiuipprBiINVWRXfBKKiTsn9LZtmcSiADHEhJymlmeYYadoLdDwL-wiaSbHb2_i4_2m4n6ujt3YWxq1Loa2zDsI0E4C8kyfZURIDxI274gAMJSOECPuNmQMI7KeOzjMNVtxxaJkl2iXGDnMx8QNcJx0Yd9921-AUgIhDXO0krntB2OZjNJZX727QsWmc4CQw5G7bt3uyxiEO62Ng1AJukyAeitCbMQW9fY38bpOqfHFjZOGSbJ_JUmbgt4vjhCF7Gt2Bq9zbFFvnl5h09R1MUmLIW_4HFZF-2i3tX03I2Ft_jRSc4f4kis1IcyT8g3bByF8JM1IewIqGHtIQvHxBwY5bq1PxEyX1An35aZfq20UcSv_sZhDILDtaMSoU7nRbwQWUz003sTT0399LEhMtxOsjMNFziCtCA7Hq5VGXk7YS6G0t0h54irD3kEpRTeebo5b_UEzr-QCXhcEcFKiYJszkIUJuDprHWIzPkQ4y6vRtuQPEq-zwWhkmZEAb-4A05m8e-5mMvS244EVMGiUt_dzqP1AVQQOpvBQpLwDqUGfNYAIXferbgO67u5xlhOCw-CimRCVLWk-WcNUiqiviYcrXPLYKsj0eXUMaZB8pSCyXormPpch9jPbpHBufi44HLVLoyXQDOvWxcQ0VAooGYKkf7A6Q2Ra6NPUdPMJU_oivVf7VJZGvzM1Nht90-9PwFcMOziYigpECpQikn4YOuQtvkrKVh49plLZdWBpfNMJh0QCkjcwyTE7TnY8K8PcusP4QzHWG0v-CfHfIOba3iVF9n8s36qdJhsHsVl&abvar=23&os=0 IP62.122.171.6:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1841679&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=bE4JhbPS1wt9isBojXlvB2cM1T6R7aZ-gnMo32pTRgRGrI44aZncdL-I7PdiuipprBiINVWRXfBKKiTsn9LZtmcSiADHEhJymlmeYYadoLdDwL-wiaSbHb2_i4_2m4n6ujt3YWxq1Loa2zDsI0E4C8kyfZURIDxI274gAMJSOECPuNmQMI7KeOzjMNVtxxaJkl2iXGDnMx8QNcJx0Yd9921-AUgIhDXO0krntB2OZjNJZX727QsWmc4CQw5G7bt3uyxiEO62Ng1AJukyAeitCbMQW9fY38bpOqfHFjZOGSbJ_JUmbgt4vjhCF7Gt2Bq9zbFFvnl5h09R1MUmLIW_4HFZF-2i3tX03I2Ft_jRSc4f4kis1IcyT8g3bByF8JM1IewIqGHtIQvHxBwY5bq1PxEyX1An35aZfq20UcSv_sZhDILDtaMSoU7nRbwQWUz003sTT0399LEhMtxOsjMNFziCtCA7Hq5VGXk7YS6G0t0h54irD3kEpRTeebo5b_UEzr-QCXhcEcFKiYJszkIUJuDprHWIzPkQ4y6vRtuQPEq-zwWhkmZEAb-4A05m8e-5mMvS244EVMGiUt_dzqP1AVQQOpvBQpLwDqUGfNYAIXferbgO67u5xlhOCw-CimRCVLWk-WcNUiqiviYcrXPLYKsj0eXUMaZB8pSCyXormPpch9jPbpHBufi44HLVLoyXQDOvWxcQ0VAooGYKkf7A6Q2Ra6NPUdPMJU_oivVf7VJZGvzM1Nht90-9PwFcMOziYigpECpQikn4YOuQtvkrKVh49plLZdWBpfNMJh0QCkjcwyTE7TnY8K8PcusP4QzHWG0v-CfHfIOba3iVF9n8s36qdJhsHsVl&abvar=23&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2301310141812521f9da9748f1a3da739144; OACICAP=ACQ6xAAAAAAAAAAB; OACIBLOCK=ACQ6xAAAAABj2KBQ; ppucnt=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:55 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| alas4kanmfa6a4mubte.com/whob.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=Hjn11Qn-YJbKponTVHjojiiPwS8BAz-xbjXsgEpReoByPBExZopmXQf8uHMwmMSLWS4G7RYEXtzQRdhWuiPj_kkyr9zVEUgTEmI4C5V3iuk8J35rgsZ_VsHzPHfD54L0IMUNNggqwfwDm3PElZ69XEncsXTJxJXN7SCb8Gcbo51pM5tFheIWtOPMukF7BYlUOcWRobDaWCSjpA8rRFLkcFq6c2PiNpozqwStbeaJNBn-eWnniBtCh3QXq4hXkXs2MMYMhNp50kVwLrFAdSf7_ndBUuM6Anf06n1q8mZagmAbz66nmpLl6FCMKzfhGkR3SAftRbCRUj1_m-QDJtWujAzOTRE4-3--mWAjx7sMSk1ykKbw4Zay1OPR8EPd-GUUdpqIFQpNKJcunNiBWjWhHpjjLktbucHmp5WF98XwKmYQnkQTa_hAxS5yvSlT8faO6Oc8mLF-zp7AWcxXefV9Ds4_7KJkc5oGyC4YjWL8JYcM7sz-kyvdPblDibOMdSLQk3z0cbhosd9E_olYBVq8uMhtZA8wqGRhubncP9X9OxwnHc6c2mjiRFxG35LCNIY2zRKMOdJEehGHfeaHmgLCZrth7iz6TquDjrlOGe5IIR59CKMTKl6Y_pVBobD_vB8lIR9DuxNaBinHW54lUaSTQvdGvq3hOwEp8xFRuTGOItPkOenrFIcNLuMSooslj52niyHMKSJFrQvzjl5cPyFI3jqVC0fuXNMpJ_3lVzZCAsF8qda0M9otsP-Krygxa25eQvdKXeSvq9K0COr6n5cKka-ZqiHdzbIokhowftvjXXmufaTSzyjTT6fhbmIzppH67UPKdDNzPyErEU1cy6k4QxEP1bTu4ji_&abvar=22&os=0 | 62.122.171.6 | 200 OK | 43 B |
URL HTTP/2alas4kanmfa6a4mubte.com/whob.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=Hjn11Qn-YJbKponTVHjojiiPwS8BAz-xbjXsgEpReoByPBExZopmXQf8uHMwmMSLWS4G7RYEXtzQRdhWuiPj_kkyr9zVEUgTEmI4C5V3iuk8J35rgsZ_VsHzPHfD54L0IMUNNggqwfwDm3PElZ69XEncsXTJxJXN7SCb8Gcbo51pM5tFheIWtOPMukF7BYlUOcWRobDaWCSjpA8rRFLkcFq6c2PiNpozqwStbeaJNBn-eWnniBtCh3QXq4hXkXs2MMYMhNp50kVwLrFAdSf7_ndBUuM6Anf06n1q8mZagmAbz66nmpLl6FCMKzfhGkR3SAftRbCRUj1_m-QDJtWujAzOTRE4-3--mWAjx7sMSk1ykKbw4Zay1OPR8EPd-GUUdpqIFQpNKJcunNiBWjWhHpjjLktbucHmp5WF98XwKmYQnkQTa_hAxS5yvSlT8faO6Oc8mLF-zp7AWcxXefV9Ds4_7KJkc5oGyC4YjWL8JYcM7sz-kyvdPblDibOMdSLQk3z0cbhosd9E_olYBVq8uMhtZA8wqGRhubncP9X9OxwnHc6c2mjiRFxG35LCNIY2zRKMOdJEehGHfeaHmgLCZrth7iz6TquDjrlOGe5IIR59CKMTKl6Y_pVBobD_vB8lIR9DuxNaBinHW54lUaSTQvdGvq3hOwEp8xFRuTGOItPkOenrFIcNLuMSooslj52niyHMKSJFrQvzjl5cPyFI3jqVC0fuXNMpJ_3lVzZCAsF8qda0M9otsP-Krygxa25eQvdKXeSvq9K0COr6n5cKka-ZqiHdzbIokhowftvjXXmufaTSzyjTT6fhbmIzppH67UPKdDNzPyErEU1cy6k4QxEP1bTu4ji_&abvar=22&os=0 IP62.122.171.6:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1841674&pb=67e45a041ea693266b41b420fb67d03f1675154514&psp=Hjn11Qn-YJbKponTVHjojiiPwS8BAz-xbjXsgEpReoByPBExZopmXQf8uHMwmMSLWS4G7RYEXtzQRdhWuiPj_kkyr9zVEUgTEmI4C5V3iuk8J35rgsZ_VsHzPHfD54L0IMUNNggqwfwDm3PElZ69XEncsXTJxJXN7SCb8Gcbo51pM5tFheIWtOPMukF7BYlUOcWRobDaWCSjpA8rRFLkcFq6c2PiNpozqwStbeaJNBn-eWnniBtCh3QXq4hXkXs2MMYMhNp50kVwLrFAdSf7_ndBUuM6Anf06n1q8mZagmAbz66nmpLl6FCMKzfhGkR3SAftRbCRUj1_m-QDJtWujAzOTRE4-3--mWAjx7sMSk1ykKbw4Zay1OPR8EPd-GUUdpqIFQpNKJcunNiBWjWhHpjjLktbucHmp5WF98XwKmYQnkQTa_hAxS5yvSlT8faO6Oc8mLF-zp7AWcxXefV9Ds4_7KJkc5oGyC4YjWL8JYcM7sz-kyvdPblDibOMdSLQk3z0cbhosd9E_olYBVq8uMhtZA8wqGRhubncP9X9OxwnHc6c2mjiRFxG35LCNIY2zRKMOdJEehGHfeaHmgLCZrth7iz6TquDjrlOGe5IIR59CKMTKl6Y_pVBobD_vB8lIR9DuxNaBinHW54lUaSTQvdGvq3hOwEp8xFRuTGOItPkOenrFIcNLuMSooslj52niyHMKSJFrQvzjl5cPyFI3jqVC0fuXNMpJ_3lVzZCAsF8qda0M9otsP-Krygxa25eQvdKXeSvq9K0COr6n5cKka-ZqiHdzbIokhowftvjXXmufaTSzyjTT6fhbmIzppH67UPKdDNzPyErEU1cy6k4QxEP1bTu4ji_&abvar=22&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2301310141812521f9da9748f1a3da739144; OACICAP=ACQ6xAAAAAAAAAAB; OACIBLOCK=ACQ6xAAAAABj2KBQ; ppucnt=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:55 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?userId=001affeab6cb44b2bef12f091c7073c5 | 139.45.195.8 | 200 OK | 65 B |
URL HTTP/2my.rtmark.net/gid.js?userId=001affeab6cb44b2bef12f091c7073c5 IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash2a06b90994859dd1d7237b62e46114bc caae8be31fae283207eb84a93109b060b8bd1fa1 d7a0cf35b57bdb05c35ee9fdabd1e08677604b8ab23ac07f81c70abd03d4689b
GET /gid.js?userId=001affeab6cb44b2bef12f091c7073c5 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.wf
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:55 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dood.wf
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=001affeab6cb44b2bef12f091c7073c5; expires=Wed, 31 Jan 2024 06:41:55 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| cdn.itskiddien.club/apu.php?zoneid=5609943 | 139.45.197.236 | 200 OK | 33 kB |
URL HTTP/2cdn.itskiddien.club/apu.php?zoneid=5609943 IP139.45.197.236:0
File typeASCII text, with very long lines (65536), with no line terminators Hash4a4885cea6e0973b9be7e96a07fb579a 1546187ffac734ae3d3bd266831490d8dacb0cf3 a74ba4d7f405e4c4f0a89b26abd10a730e037d364f3d8196e0fe80d065778fd5
GET /apu.php?zoneid=5609943 HTTP/1.1
Host: cdn.itskiddien.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:55 GMT
content-type: application/javascript
x-trace-id: a964dff07cef8d1f58bd824303d93007
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=001affeab6cb44b2bef12f091c7073c5; expires=Wed, 31 Jan 2024 06:41:55 GMT; path=/; secure; SameSite=None
oaidts=1675147315; expires=Wed, 31 Jan 2024 06:41:55 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85eb37f6d813797889e4d4f682d733d5 da43b36eab0c07b22e712075069f79332591a983 4dc719ee188d12a03893880e078df6d3f7d1c2ee6c8a4f9e3b1b536a1a8621cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4DC719EE188D12A03893880E078DF6D3F7D1C2EE6C8A4F9E3B1B536A1A8621CB"
Last-Modified: Sun, 29 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2013
Expires: Tue, 31 Jan 2023 07:15:28 GMT
Date: Tue, 31 Jan 2023 06:41:55 GMT
Connection: keep-alive
|
|
| thecoveos.com/ | 54.162.51.18 | 200 OK | 0 B |
IP54.162.51.18:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: thecoveos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 392
Origin: https://dood.wf
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| thecoveos.com/WjFjbWsBE1pfXWIDU09HeBNPTw1vVVJUWG1TTl9YPlNOWQo8Ak5UDWsBTlxfPgFVVFttUFUPWXgdQVhZPAIFVQ48HFAICGgcVwlfaBwCW15sHFtbW2wJBQ5eOABRXEl2ExAaSXYTFwUOOV4VCAQpHwACBngdQVxbdARBQQ07XRAIRzxQDx4OdlcCARg%2EbA | 54.162.51.18 | 200 OK | 13 kB |
URL HTTP/2thecoveos.com/WjFjbWsBE1pfXWIDU09HeBNPTw1vVVJUWG1TTl9YPlNOWQo8Ak5UDWsBTlxfPgFVVFttUFUPWXgdQVhZPAIFVQ48HFAICGgcVwlfaBwCW15sHFtbW2wJBQ5eOABRXEl2ExAaSXYTFwUOOV4VCAQpHwACBngdQVxbdARBQQ07XRAIRzxQDx4OdlcCARg%2EbA IP54.162.51.18:0
File typeASCII text, with very long lines (33858), with no line terminators Hash3bc6b5ae50c7d4e80f7a31b7fbe3fed6 7e2c29941187e2d21fd299939dd53e040183b923 fa36d62b5e1e5c8fbb3120c1fb8704dab7b68dcf919038b86c885fc87388e79c
GET /WjFjbWsBE1pfXWIDU09HeBNPTw1vVVJUWG1TTl9YPlNOWQo8Ak5UDWsBTlxfPgFVVFttUFUPWXgdQVhZPAIFVQ48HFAICGgcVwlfaBwCW15sHFtbW2wJBQ5eOABRXEl2ExAaSXYTFwUOOV4VCAQpHwACBngdQVxbdARBQQ07XRAIRzxQDx4OdlcCARg%2EbA HTTP/1.1
Host: thecoveos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 31f8bb3852f207210fe84532112a0024=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8442-vriZ23ri7c5BsYkeHXY1+DJAKck"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| thecoveos.com/ | 54.162.51.18 | 200 OK | 0 B |
IP54.162.51.18:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: thecoveos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.wf/
Content-Type: text/plain;charset=UTF-8
Origin: https://dood.wf
Content-Length: 346
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7978
Expires: Tue, 31 Jan 2023 08:54:54 GMT
Date: Tue, 31 Jan 2023 06:41:56 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7978
Expires: Tue, 31 Jan 2023 08:54:54 GMT
Date: Tue, 31 Jan 2023 06:41:56 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7978
Expires: Tue, 31 Jan 2023 08:54:54 GMT
Date: Tue, 31 Jan 2023 06:41:56 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7978
Expires: Tue, 31 Jan 2023 08:54:54 GMT
Date: Tue, 31 Jan 2023 06:41:56 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash42a648f9d34d8fb703f0b80a52e0deec 7ccefd66211d249ae5266c3b6ae3375a19e5cb6d a57f8792e8caa2a31045a141d019f53f51b633d5d04baebdae97387740c6639d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5903
x-amzn-requestid: f6fca787-17c1-4edd-9ab0-a00e2fccc7a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboufGeSoAMF-1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d487f6-58be6bdc5e3e767e1ea47b86;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:27:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZKuBcZgC6yolu1QcaXZKAIIDynG3Zywq1d7sWI8Jlq3ULwlr6XlhWQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 13:04:11 GMT
age: 63465
etag: "7ccefd66211d249ae5266c3b6ae3375a19e5cb6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffea501ff-acf4-4b37-aa0a-baf417cf3694.jpeg | 34.120.237.76 | 200 OK | 5.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffea501ff-acf4-4b37-aa0a-baf417cf3694.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash60fc180ec5b99ac357db8775775c3c11 c9856a488e82bc330881377528bf2e53274ef5f3 a31fd6fc84f79b0f5fb79cccf490ddf61eb58bdaf57ca27f57a911332e550d11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffea501ff-acf4-4b37-aa0a-baf417cf3694.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5394
x-amzn-requestid: 16d876fb-0afd-4b5d-b19e-1029506fd6f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIgq2E4CIAMFiFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce178-1f08dc2105b6e182677004e7;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:10:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FoTKdVc567GRCEDn8JoMOs4-enQPpdvFhPafmSRsgCFZC78q8ba5pA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 12:51:52 GMT
age: 64204
etag: "c9856a488e82bc330881377528bf2e53274ef5f3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3366ef4f8733cb9c89a5c88f63a0a441 7da46843b6d885f38a4759a08e6c899906ab7b97 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v9Wphg34UGE5kkZ9RKBcphcpPuCn54oVyepzTW5rZ3J9nkL9J501PA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:03:23 GMT
age: 31113
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa70b0b84-f0e7-44e4-a574-ee3e55fbc0d3.jpeg | 34.120.237.76 | 200 OK | 4.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa70b0b84-f0e7-44e4-a574-ee3e55fbc0d3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb43468b05cd1fd11c398263a80e4edb2 02e964ea5a88c866267ac6c5601bfcde26ffd42b 19783f05297f7ed5d7ca8cec0fc0e1676831275ac48f1510a4f410dbe2802314
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa70b0b84-f0e7-44e4-a574-ee3e55fbc0d3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4634
x-amzn-requestid: 2941da94-203c-47d1-99ee-d864bdbf6993
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffCAHF9kIAMFrUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e39a-78bb7189351d830a7ef70c67;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hWONP8eVA6h5VMyREx_CgRY2zeb9KUxipWiXdx9dHBtU2YDV07lGXQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 04:46:51 GMT
age: 6905
etag: "02e964ea5a88c866267ac6c5601bfcde26ffd42b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash63486f2a937aa8fd013fc2c2d1b32f2d e8868de34c2f79348c1edad764259eb70bebd7a6 fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mXlQ5A2PHadECkKglPquN9x68ubYk8s2to-_JjCgEQe7axfJo6K8Jw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 07:53:36 GMT
age: 82100
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5965fef2-c5a7-4a82-bcdc-41aebc355aff.jpeg | 34.120.237.76 | 200 OK | 7.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5965fef2-c5a7-4a82-bcdc-41aebc355aff.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash83d9e98a4575077e7400343c7f2038d2 6ac3ca84e97fa35afff9045f35d45499c0b34a23 da6d6d90a5ea8f5a864f3739591693b5f4b9793f2c4bb971486572f6bf2e940c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5965fef2-c5a7-4a82-bcdc-41aebc355aff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7334
x-amzn-requestid: e62c149b-ca5f-4d0c-8d2d-e8bb2a7f9d8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbvSzH2soAMFiYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d49278-1214fc750a312e46527b2fd7;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 03:11:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DHpGf24wNNYDg2RxvPCY6S011xYLiXzP1pP7O-kPNKnnP50CihUfDQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:28:52 GMT
age: 11584
etag: "6ac3ca84e97fa35afff9045f35d45499c0b34a23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| betotodilea.com/500/4857535?excludes=&oaid=001affeab6cb44b2bef12f091c7073c5&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.wf%2Fd%2Fdxwo8ums8z8r&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2betotodilea.com/500/4857535?excludes=&oaid=001affeab6cb44b2bef12f091c7073c5&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.wf%2Fd%2Fdxwo8ums8z8r&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.237:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /500/4857535?excludes=&oaid=001affeab6cb44b2bef12f091c7073c5&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.wf%2Fd%2Fdxwo8ums8z8r&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://dood.wf/
Origin: https://dood.wf
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:42:00 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://dood.wf
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg | 172.67.22.216 | 200 OK | 11 kB |
URL HTTP/2offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg IP172.67.22.216:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data Hashc203639f459b6e675afc744dd5393fc6 c83a0142c1a7f6a07c2dd360243197a27f560932 64b4e386658d3f5764261f576a4673eb506fcad5e38e69ef085723f8dab72263
GET /www/images/c203639f459b6e675afc744dd5393fc6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:42:00 GMT
content-type: image/jpeg
content-length: 10857
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6388849a-2a69"
expires: Wed, 01 Feb 2023 05:11:01 GMT
last-modified: Thu, 01 Dec 2022 10:40:26 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 5459
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792076ffaaaab4fa-OSL
X-Firefox-Spdy: h2
|
|
| pringed.space/elczRzEBdUAwbg8lX2ULWD9HM0EJbRxoVRU4V2lGHHhAMB8QJBFrEwk6VWULS3sRNFwMdQllBVRnEWsTDjZUGFgedQllCEhhC3UBWHsRNEQYCFojA1htESEEHmYKdAYYegF0VRh6ByZXSXoKIQBKegJzVUphCncGG2FRdRMH | 52.20.131.174 | 200 OK | 0 B |
URL HTTP/2pringed.space/elczRzEBdUAwbg8lX2ULWD9HM0EJbRxoVRU4V2lGHHhAMB8QJBFrEwk6VWULS3sRNFwMdQllBVRnEWsTDjZUGFgedQllCEhhC3UBWHsRNEQYCFojA1htESEEHmYKdAYYegF0VRh6ByZXSXoKIQBKegJzVUphCncGG2FRdRMH IP52.20.131.174:0
GET /elczRzEBdUAwbg8lX2ULWD9HM0EJbRxoVRU4V2lGHHhAMB8QJBFrEwk6VWULS3sRNFwMdQllBVRnEWsTDjZUGFgedQllCEhhC3UBWHsRNEQYCFojA1htESEEHmYKdAYYegF0VRh6ByZXSXoKIQBKegJzVUphCncGG2FRdRMH HTTP/1.1
Host: pringed.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: b8ec32e55e097904694253204855d1ac=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"e0e6-TBb5ibDie6Eb92mBeujhrSXatNQ"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| betotodilea.com/500/4857535?excludes=&oaid=001affeab6cb44b2bef12f091c7073c5&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.wf%2Fd%2Fdxwo8ums8z8r&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2betotodilea.com/500/4857535?excludes=&oaid=001affeab6cb44b2bef12f091c7073c5&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.wf%2Fd%2Fdxwo8ums8z8r&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.237:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /500/4857535?excludes=&oaid=001affeab6cb44b2bef12f091c7073c5&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.wf%2Fd%2Fdxwo8ums8z8r&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://dood.wf
Connection: keep-alive
Referer: https://dood.wf/
Cookie: OAID=926f35fd721e4603a25524fe35ec159b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:42:00 GMT
content-type: application/javascript
x-trace-id: bfe988a905cd6fdd389e3923679ed909
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://dood.wf
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=001affeab6cb44b2bef12f091c7073c5; expires=Wed, 31 Jan 2024 06:42:00 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_cl831k9syornywc7bwy6eq&nojs=0&ix=0&abvar=22&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4331907106080940 | 62.122.171.6 | 200 OK | 0 B |
URL HTTP/2alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_cl831k9syornywc7bwy6eq&nojs=0&ix=0&abvar=22&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4331907106080940 IP62.122.171.6:0
GET /get/1841674?zoneid=1841674&jp=_cl831k9syornywc7bwy6eq&nojs=0&ix=0&abvar=22&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4331907106080940 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2301310141812521f9da9748f1a3da739144; Path=/; Expires=Wed, 31 Jan 2024 06:41:54 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js | 62.122.171.6 | 200 OK | 0 B |
URL HTTP/2alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js IP62.122.171.6:0
GET /lv/esnk/1841679/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 11:38:46 GMT
vary: Accept-Encoding
etag: W/"63d7ac46-1a5aa"
x-js-ab1: var23
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap IP142.250.74.106:0
GET /css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 06:41:54 GMT
date: Tue, 31 Jan 2023 06:41:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js | 104.18.6.185 | 302 Found | 0 B |
URL HTTP/2challenges.cloudflare.com/turnstile/v0/api.js IP104.18.6.185:0
GET /turnstile/v0/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 31 Jan 2023 06:41:55 GMT
vary: accept-encoding
cache-control: max-age=300, public
location: /turnstile/v0/g/c595c5c5/api.js
set-cookie: __cf_bm=8lX7BPGlSepzwO1XG7e4oBNsoIRW8KMnwKsmd9mHL5Q-1675147315-0-AY246aoeNSGoQWNrM/cF9fFQKvqDFy556gnfO7P5pMJQqARbKyogIMdaVdCPaBnXQVSYqb9hU5TTIaSiKZChW9w=; path=/; expires=Tue, 31-Jan-23 07:11:55 GMT; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 792076df8941b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dood.wf/d/dxwo8ums8z8r | 172.67.75.223 | 200 OK | 0 B |
IP172.67.75.223:0
GET /d/dxwo8ums8z8r HTTP/1.1
Host: dood.wf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 30 Jan 2023 06:41:54 GMT
set-cookie: lang=1; domain=.dood.wf; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qt%2FneKbI4oaFGP3Su%2B6dWcGugZZIAD0%2FennmSrytYA0vF9MoAaPywEeD%2B7Kixv0xI%2FWBNO8SZsxXR6w8sd0PD7c7ac9Eotsx3jMAEorVmPH5qr7o11nRyTw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792076d8bad60b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js | 62.122.171.6 | 200 OK | 0 B |
URL HTTP/2alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js IP62.122.171.6:0
GET /lv/esnk/1841674/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 11:18:41 GMT
vary: Accept-Encoding
etag: W/"63d7a791-1aca3"
x-js-ab1: var22
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| betotodilea.com/400/4857535 | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2betotodilea.com/400/4857535 IP139.45.197.237:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /400/4857535 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:41:54 GMT
content-type: application/javascript
x-trace-id: 7f4d7bfe477055820ac8577e022f380a
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=926f35fd721e4603a25524fe35ec159b; expires=Wed, 31 Jan 2024 06:41:54 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|