GET cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
104.17.25.14200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP 104.17.25.14:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1973565
expires: Thu, 02 Jan 2025 21:33:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SmS%2F4%2FaQDEBSRDVPM0IrRUshucCG2fTJHcByTuO41CbO033KaQjcbEGYwH4K6M4wjEdu1YXEAQFaKMD3AGPWS9BwrDRN4Xr%2FoVINCQ6KZ8tK4ECVBZzoo2oeGfq0Fkm%2BtuTZcCRd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8450c21c8b3156a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
104.17.25.14200 OK 591 B URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP 104.17.25.14:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4113175
expires: Thu, 02 Jan 2025 21:33:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xC0Z9nb6WY%2FzAjd%2BR8lvrV4FgBZ4gRGPz7JtAlnHEtgkBEKszG3Y83VFIU2ZaDLhkcZNTY5rCWVLVWkZ45kPzwyhRDAblZLWSqnaB9rkE3zqb5i8R1N8mj%2F%2FdiJpNaDaXiuFqffv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8450c21c8b3a56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.doodcdn.co/img/no_video_3.svg
172.67.70.190200 OK 2.8 kB URL GET HTTP/2 i.doodcdn.co/img/no_video_3.svg
IP 172.67.70.190:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Mon, 12 Feb 2024 02:06:11 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 56973
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v1Yt%2BUyZS%2BAlB5z%2FCwQq%2BO%2BeQ1%2F%2FEx9KVsiHLWZhY68Ys93a4Wl%2B%2BCIvp3ilk0ERADTlI0tSmTuaM5J9izfplrOpdsKGjGd7UlGTGI5ZMzsIsjbyzVsuK0cMQ37y1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c21cdbcfb51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.doodcdn.co/theme_2/css/style.css?v=0.1
172.67.70.190200 OK 39 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/style.css?v=0.1
IP 172.67.70.190:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65465)
Hash 6ff549c82309fe93cb6f38f8fcf60e49
c5621629b2a258c7fb572ab9d03517c7d60896fd
668326f298c9701a6422f5b7f229966fd87ae68940381a9c0c898197667a8c4c
GET /theme_2/css/style.css?v=0.1 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=249272
expires: Sun, 12 Jan 2025 02:03:30 GMT
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 56840
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4IDSBiLBD1mJpCBKc8litlK%2B388t7KY0uxUb99sFVSW4yNOQFiSganuvbI%2B2KyskrkJoQftYnWuLTkzyB3nvF4XMxLCPCn9hpB3v%2BaB5wNwdznPRSxD8XLBEGGKLPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c21cdbcbb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js
212.117.190.201200 OK 63 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js
IP 212.117.190.201:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint83:75:D2:91:80:F4:A7:F7:80:C6:89:7E:42:70:72:64:D7:BC:59:90
ValidityTue, 09 Jan 2024 12:55:23 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File type gzip compressed data, max speed, from Unix
Hash 5a90a75498f3047e128d459b66ad2a43
b8279fffb3158e2988d4bf3ccf5bd8428d00052e
01efa7f3983cd227ade8eb63904d1502715f8cb07e718db79d2e849967ac6862
GET /lv/esnk/1841674/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: application/javascript
last-modified: Thu, 11 Jan 2024 10:33:02 GMT
vary: Accept-Encoding
etag: W/"659fc3de-19f5a"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET i.doodcdn.co/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
172.67.70.190200 OK 184 kB URL GET HTTP/3 i.doodcdn.co/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
IP 172.67.70.190:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 184476, version 330.-16253
Size 184 kB (184476 bytes)
Hash 2a6dec1227f9970376f578270a642d06
150a6a7ffdec6e2e2ff4c712d7cee8bd9b930284
e228b909313044a18dec1a674cfd4935071c36eb3eb6a0cd38a45afac6ae3996
GET /theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://do0od.com
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: font/woff2
content-length: 184476
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sun, 11 Feb 2024 15:37:30 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 32677
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QCYnd3UFS6wLQeLfo9UYiK2324GqJoIIjteW1DbxqQXybYygXQ8IJWeoYRdUMPVzbgCZcstNUkqaUXExugfmh1xUmFVSGxsk%2FhiMRE%2FvQ9VB9q6h%2BlnjEDwCErIXaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c21fceaa1c12-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/theme_2/fonts/avertastd-bold-webfont.woff2
172.67.70.190200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-bold-webfont.woff2
IP 172.67.70.190:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23604, version 1.0
Hash e9133fd11f14c09a2e4556c395a0ef7d
00fad09605f3342df5c9aeba130156fe19ade8b0
06244cc9cd0c998581b1bf93f5222deee7d2d0b09299190e163961afa973ba91
GET /theme_2/fonts/avertastd-bold-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://do0od.com
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: font/woff2
content-length: 23604
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sun, 11 Feb 2024 15:37:30 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 32676
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6UjFJAmTkHZDY9F%2BpROsoPHPz1gsqcRcVHP2jpRHb0boVjdlDdc%2BquHN98Zb05ngLydFwCZ647%2BojUv1RNgf7MroKyMZ7%2B6D7LabwXBTKIRLold%2FppxhVukKdPf71Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c21fceab1c12-OSL
alt-svc: h3=":443"; ma=86400
GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
104.17.25.14200 OK 591 B URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP 104.17.25.14:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4113176
expires: Thu, 02 Jan 2025 21:33:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vwUfznASMa35It03BCExfbHAAaJJcWIAEtIC0HljdkmcpmMNMuYqmQXKAr8oNT4iXjTaLJ0fkvvgF33qVJx9M9OXraef2Lym1%2F3elxgR7u1BzObSAp3PfLV%2BQ9dNo5rRco2XXp7e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8450c2204dff56ab-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/ads/ad.js
172.67.70.190200 OK 18 B IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 071c641b229d2bfadd243b8fa2a9c88d
4048ed3ad506f9bb9052c23283912d0cfea8bcc6
3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Sat, 11 Jan 2025 02:28:54 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 56654
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d6ttyKa3pp3mvw2L5qgUuXj%2B1PjshzXHUvdaUGQ%2FWiNzIa1nXWGqlisB6YLXfujRiGLUp4jdX8MuMbCqnjGEgj%2F419KUUYuGNB6E30JfpwQ6pF0HmQDa4FRvc7xftg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c2204a0e7128-OSL
alt-svc: h3=":443"; ma=86400
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
104.17.25.14200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP 104.17.25.14:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4463996
expires: Thu, 02 Jan 2025 21:33:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ljeicVKa%2BriRkFGxtFh4e4jSs6qITp26LhgepNLzwq8XOa74WH7YaBwU%2BvR7Fw3RbiD1vnOroPBeE4BS%2BuEUz1rqyH2vpquTfNQ4zKoS1wwl%2BNFII43YvWbWTfwRBnrlZ0o1fGxO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8450c2204dfd56ab-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/js/embed2.js
172.67.70.190200 OK 339 kB URL GET HTTP/3 i.doodcdn.co/js/embed2.js
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size 339 kB (339271 bytes)
Hash cac27d72c22014f70500e507a7a82231
edcac36287bfc654b2ee6c0fe0727cdc725a9fe5
01c49e02b98bc8a4275650b65787cdd100c362abc7e54e8b9e99396b6117c2c6
GET /js/embed2.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: application/javascript
content-length: 339271
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=339527
etag: "61d3187c-52e47"
expires: Sun, 11 Feb 2024 05:58:11 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 59149
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VMnCXZBygZGyED%2FBMlb8oGmRQNCAEN744fJh3DbOUSOjHXl9qJceGV6tm8Z%2F6KBNafgaPgCydGkgKU8vfmiTlXOow6%2Bs4hrlzcJUyFMi3zjamqZkTd2klSflKvQAVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c2204a147128-OSL
alt-svc: h3=":443"; ma=86400
GET img.doodcdn.co/splash/61gjvevnrtu75vo9.jpg
172.67.70.190200 OK 72 kB URL GET HTTP/3 img.doodcdn.co/splash/61gjvevnrtu75vo9.jpg
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1275x640, components 3
Hash 1be7e8fae2d3df4302b1763481fc530e
a9085312b7bbd8ec660729ffefa5c68311cf5f4f
07a33955e5a835d40ea55efcd0bfe4b2bc6cd61093638448e631e50465396243
GET /splash/61gjvevnrtu75vo9.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: image/jpeg
content-length: 72228
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=72710
etag: "65804ce8-11c06"
expires: Sat, 27 Jan 2024 19:48:51 GMT
last-modified: Mon, 18 Dec 2023 13:45:12 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k3BAprObJWGf2q2EuG13IWBpa%2Fus8avg2gP72QADmIy2TZ8uxYdMaKq4WrxL%2BTgE8IgzNZ14onWPNGiATHKakNeDBB6GFSRKNJ1XJquaEvItJ6NJnxTp4r%2FLPOF1ZTo9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c2205a1c7128-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/img/no_video_3.svg
172.67.70.190200 OK 2.8 kB URL GET HTTP/2 i.doodcdn.co/img/no_video_3.svg
IP 172.67.70.190:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Mon, 12 Feb 2024 02:06:11 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 56974
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OtyyHD95Py1oDHFwxNeuIdc9ZRjZPy83ZUQe8NSAiGy3oyjnGh9v3m0EkBvI6sWzwTdKrtyidxS%2F82upBtZcnBabvExc78tBktP3IkqMlhGm56r5pz8tj%2Bf9QBRwqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c2217b727128-OSL
alt-svc: h3=":443"; ma=86400
GET qb.capletstyldia.com/r0X1YnXeCeRhn3/MQmjG
23.109.170.115200 OK 20 B URL GET HTTP/1.1 qb.capletstyldia.com/r0X1YnXeCeRhn3/MQmjG
IP 23.109.170.115:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerLet's Encrypt
Subjectqb.capletstyldia.com
Fingerprint10:71:62:BD:67:CF:52:C5:50:C3:91:70:4B:F6:89:AE:4A:26:AF:BD
ValidityFri, 01 Dec 2023 13:52:06 GMT - Thu, 29 Feb 2024 13:52:05 GMT
File type gzip compressed data, from Unix
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /r0X1YnXeCeRhn3/MQmjG HTTP/1.1
Host: qb.capletstyldia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 13 Jan 2024 21:33:34 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://do0od.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGY54k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNDqk5u; expires=Sun, 14-Jan-2024 21:33:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sun, 14-Jan-2024 21:33:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
54.230.241.143200 OK 97 kB URL GET HTTP/2 d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
IP 54.230.241.143:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash 52cbb9ba5f28ae828379c388060ecaec
95a0ee163a2d81b54014f80092876f838d0732d4
2ab516257b8193ea1523d8b37e2a08e44c91dec0486c076b1746d0bf40d55282
GET /?srvfd=908056 HTTP/1.1
Host: d1f05vr3sjsuy7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 97190
date: Sat, 13 Jan 2024 21:33:34 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qIYMn7nM6e5A-x0DhG0f1UJudH2xgq6T96raRvVqNDK9jNbhyJCHEg==
X-Firefox-Spdy: h2
GET do0od.com/favicon.ico
172.67.74.57200 OK 15 kB IP 172.67.74.57:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerGoogle Trust Services LLC
Subjectdo0od.com
FingerprintC3:D1:47:5D:FD:F4:12:17:80:C8:02:C0:6C:EA:1A:A6:F0:BA:9F:F3
ValidityTue, 26 Dec 2023 18:03:29 GMT - Mon, 25 Mar 2024 18:03:28 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico HTTP/1.1
Host: do0od.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/d/w9l72m5eo6v1
Cookie: lang=1; dref_url=none
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: image/x-icon
content-length: 15406
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Thu, 08 Feb 2024 17:22:17 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 360677
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FOaWwwuCRNd7ut7ET6999g7n%2BrC9abqbpJ1QKItnw27YoKuKZnDAy0I6We7eWOuivATByqFLmlsw6ecI8fkR0aoRjhms24RWWiIkjgUrb%2BxPSe14e7U6rbr%2FRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c222ace6b511-OSL
X-Firefox-Spdy: h2
GET d18t35yyry2k49.cloudfront.net/?ryytd=919672
143.204.42.39200 OK 52 kB URL GET HTTP/2 d18t35yyry2k49.cloudfront.net/?ryytd=919672
IP 143.204.42.39:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15952)
Hash 1df73152075f7e3c12185f1d53d5f115
b2e3d0e6f63ba3e92cac00bff0827f28d7389b8e
10d9f28588fc2aefa4dcfcef05206bf775d80bbdb3f260a2aaaa17910d580798
GET /?ryytd=919672 HTTP/1.1
Host: d18t35yyry2k49.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 51646
date: Sat, 13 Jan 2024 21:33:34 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vnfzR2uV-goH6AsKrUldwILZw6mztndUyKxkIQEM084WKMYJJOz4gw==
X-Firefox-Spdy: h2
GET i.doodcdn.co/img/logo-s.png
172.67.70.190200 OK 1.9 kB URL GET HTTP/3 i.doodcdn.co/img/logo-s.png
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 8211fb3cc137d3e1c1e399b86476f951
136d8ef228959aa0cee12e5ed463b6e6a4fcf720
2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Sun, 11 Feb 2024 15:11:51 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 56561
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TRMVHAeh95FdR6AJFdVJ3w3F8aHuHFUHPvSusUs%2BZlNMrfOzUF95mNMEw9g6dULTgLcV4LQSZ0mdwQzsJPPoMljCuNo1N%2B%2Bcjic0MkkBRHRBOzlAmubM2Vv6YqYwkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c222cd057128-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
172.67.70.190200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://do0od.com
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Mon, 12 Feb 2024 06:20:19 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 32767
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZHC%2F2x5YGLvVp2K37PhbnuFq3C9B2ynYFDnvJ5ZGhuf62scD6ZxkQc39xYsszxKPxhlBELvnUyaou0eSZ14I5N11X63L4VnVwG3kIlddHmX7r%2BjMHZIwQ%2Fo8OabpSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c222d9841c12-OSL
alt-svc: h3=":443"; ma=86400
GET img.doodcdn.co/splash/61gjvevnrtu75vo9.jpg
172.67.70.190200 OK 72 kB URL GET HTTP/3 img.doodcdn.co/splash/61gjvevnrtu75vo9.jpg
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1275x640, components 3
Hash 1be7e8fae2d3df4302b1763481fc530e
a9085312b7bbd8ec660729ffefa5c68311cf5f4f
07a33955e5a835d40ea55efcd0bfe4b2bc6cd61093638448e631e50465396243
GET /splash/61gjvevnrtu75vo9.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://do0od.com
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: image/jpeg
content-length: 72228
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=72710
etag: "65804ce8-11c06"
expires: Sat, 27 Jan 2024 20:39:52 GMT
last-modified: Mon, 18 Dec 2023 13:45:12 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z913O7%2Bwdq4bdxs4qK4Ut9ls0CRAywtB33PdKaQ%2BNy8a42e0w8hBXIaa9SoO4Yn4EXCUnopuQ10Q6iJsKnm%2Frks7znYlRHIg8TeWBwLNliTNVzsg0noISmllC0GlIk3H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c222bcec7128-OSL
alt-svc: h3=":443"; ma=86400
GET cdn.cloudfrale.com/bn/b7c/ab3/a54/b7cab3a5435f14781949ee4473960540e35690f6.mp4
45.133.44.21206 Partial Content 330 kB URL GET HTTP/2 cdn.cloudfrale.com/bn/b7c/ab3/a54/b7cab3a5435f14781949ee4473960540e35690f6.mp4
IP 45.133.44.21:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint5F:02:E3:5B:0C:B7:FA:C1:27:2A:35:DA:29:17:01:A8:47:B5:F3:A8
ValidityWed, 10 Jan 2024 08:59:56 GMT - Sun, 07 Jul 2024 21:59:00 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]
Size 330 kB (329525 bytes)
Hash 7e77144a14e32644ed5e15f0f9fb030f
b7cab3a5435f14781949ee4473960540e35690f6
9915a8f845c921ea7c24aabcf3674f8aa0818a7800108cc1fa4d178f21a8bd5b
GET /bn/b7c/ab3/a54/b7cab3a5435f14781949ee4473960540e35690f6.mp4 HTTP/1.1
Host: cdn.cloudfrale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: video/mp4
content-length: 329525
server: nginx/1.24.0
etag: 7e77144a14e32644ed5e15f0f9fb030f
last-modified: Sun, 05 Nov 2023 16:10:26 GMT
x-timestamp: 1699200625.34816
x-trans-id: txcbbd1c65758c4da994d05-006547e8a6
x-openstack-request-id: txcbbd1c65758c4da994d05-006547e8a6
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 15 Jan 2024 21:33:34 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
access-control-allow-origin: *
content-range: bytes 0-329524/329525
X-Firefox-Spdy: h2
HEAD do0od.com/e/w9l72m5eo6v1
172.67.74.57200 OK 0 B IP 172.67.74.57:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerGoogle Trust Services LLC
Subjectdo0od.com
FingerprintC3:D1:47:5D:FD:F4:12:17:80:C8:02:C0:6C:EA:1A:A6:F0:BA:9F:F3
ValidityTue, 26 Dec 2023 18:03:29 GMT - Mon, 25 Mar 2024 18:03:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/w9l72m5eo6v1 HTTP/1.1
Host: do0od.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/e/w9l72m5eo6v1
Cookie: file_id=133903009; aff=264532; ref_url=https%3A%2F%2Fdo0od.com%2Fd%2Fw9l72m5eo6v1; lang=1; dref_url=none
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Fri, 12 Jan 2024 21:33:34 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M6IbehoKzHd2ubVs2d3eBaHX7qGRePanXLuHhoQvQ0uxyoU7yiQfk3bdPAw9y7WixdFxUwz7jvGLFk9JLR9rkxJKrak5deRdBcNi%2Fyb8KcyG5snFxGXiVhxHBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c2236dc0b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET glersakr.com/tag.min.js
139.45.197.239200 OK 26 kB IP 139.45.197.239:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerLet's Encrypt
Subjectglersakr.com
Fingerprint1B:45:3A:61:1B:EC:B3:D3:6E:35:DD:51:FF:A8:D4:BE:B7:27:A6:C2
ValidityTue, 26 Dec 2023 06:00:24 GMT - Mon, 25 Mar 2024 06:00:23 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8bd801041bb5e31d4c2fbd8096c21275
791ea2d20868eac446a0aff9067a9784cc982691
f4e70f572605007449ef1a55a27744dc9c783e41952bb4c7ff993e24f6dd4c4a
GET /tag.min.js HTTP/1.1
Host: glersakr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: text/javascript; charset=utf-8
content-length: 25787
content-encoding: br
x-trace-id: b804b334a758a8ffa0ae986835cf0e90
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Thu, 11 Jan 2024 13:25:24 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_clv2hzx632ta59oq2xp04w&nojs=0&abvar=0&febuild=1.0.188&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896825386364928&eclog=0&im=1&freq=0
212.117.190.201200 OK 5.1 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_clv2hzx632ta59oq2xp04w&nojs=0&abvar=0&febuild=1.0.188&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896825386364928&eclog=0&im=1&freq=0
IP 212.117.190.201:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint83:75:D2:91:80:F4:A7:F7:80:C6:89:7E:42:70:72:64:D7:BC:59:90
ValidityTue, 09 Jan 2024 12:55:23 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File type ASCII text, with very long lines (5130), with no line terminators
Hash 6a6983b9925405d2083403903ffcf968
10a3697049f2ffef51e07c282852fde24d316137
2be3e4bd95cdc36ed16223cbbd2e3c2c96cf82c2cae7f794d11322395f5fc878
GET /get/1841674?zoneid=1841674&jp=_clv2hzx632ta59oq2xp04w&nojs=0&abvar=0&febuild=1.0.188&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896825386364928&eclog=0&im=1&freq=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Cookie: CHCK=1; UID=2401131633339492038d304ae08988ebdbd6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sat, 15 Feb 2025 21:33:34 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET cdn.cloudfrale.com/bn/c50/cf9/928/c50cf9928e75954c4a192ef77469fb276f88cbc7.mp4
45.133.44.21206 Partial Content 362 kB URL GET HTTP/2 cdn.cloudfrale.com/bn/c50/cf9/928/c50cf9928e75954c4a192ef77469fb276f88cbc7.mp4
IP 45.133.44.21:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint5F:02:E3:5B:0C:B7:FA:C1:27:2A:35:DA:29:17:01:A8:47:B5:F3:A8
ValidityWed, 10 Jan 2024 08:59:56 GMT - Sun, 07 Jul 2024 21:59:00 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]
Size 362 kB (362447 bytes)
Hash f2d9f8d3f4f5e49bc0abcee950a5f982
c50cf9928e75954c4a192ef77469fb276f88cbc7
3afc095150562a4ecce69abf62467ecf77c70943404d321c23d6dd98b98573bb
GET /bn/c50/cf9/928/c50cf9928e75954c4a192ef77469fb276f88cbc7.mp4 HTTP/1.1
Host: cdn.cloudfrale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: video/mp4
content-length: 362447
server: nginx/1.24.0
etag: f2d9f8d3f4f5e49bc0abcee950a5f982
last-modified: Sun, 05 Nov 2023 16:10:35 GMT
x-timestamp: 1699200634.90242
x-trans-id: tx92bf17696f8943c2b1f3c-006547cba7
x-openstack-request-id: tx92bf17696f8943c2b1f3c-006547cba7
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 15 Jan 2024 21:33:34 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
access-control-allow-origin: *
content-range: bytes 0-362446/362447
X-Firefox-Spdy: h2
GET alas4kanmfa6a4mubte.com/get/1841679?zoneid=1841679&jp=_cl9dmxo2vo9mafe1ew2czu&nojs=0&abvar=0&febuild=1.0.188&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8556000083583488&eclog=0&im=1&freq=0
212.117.190.201200 OK 5.1 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/get/1841679?zoneid=1841679&jp=_cl9dmxo2vo9mafe1ew2czu&nojs=0&abvar=0&febuild=1.0.188&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8556000083583488&eclog=0&im=1&freq=0
IP 212.117.190.201:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint83:75:D2:91:80:F4:A7:F7:80:C6:89:7E:42:70:72:64:D7:BC:59:90
ValidityTue, 09 Jan 2024 12:55:23 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File type ASCII text, with very long lines (5130), with no line terminators
Hash 23e9cd1402f36ff9dddd6de009302caf
40787bc2c8ea368a049a74fff5adca13b211ab73
0d576ae2bc49b37b77773414b85558e09ac2afa762dc9a7e0768736c187de2ac
GET /get/1841679?zoneid=1841679&jp=_cl9dmxo2vo9mafe1ew2czu&nojs=0&abvar=0&febuild=1.0.188&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8556000083583488&eclog=0&im=1&freq=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sat, 15 Feb 2025 21:33:34 GMT; Secure; SameSite=None
UID=2401131633339492038d304ae08988ebdbd6; Path=/; Expires=Sat, 15 Feb 2025 21:33:34 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET i.doodcdn.co/css/embed.css
172.67.70.190200 OK 80 kB URL GET HTTP/3 i.doodcdn.co/css/embed.css
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: W/"61d3187c-13812"
expires: Sat, 10 Feb 2024 01:57:09 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 59215
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z2fEJ5TbUrgNh8RrZhD5wXApcBYI5HiryVgctNcuteejwK%2FUxMSYbihE9iKvDDSQ4y%2F2625BYAnPXpR2fABBrMbX6oHNSA5dAYfhKQbSFKC%2BnMQEIT1qflgthi8Vkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c2204a117128-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.com/theme_2/img/loader.svg
104.21.34.210301 Moved Permanently 694 B URL GET HTTP/2 i.doodcdn.com/theme_2/img/loader.svg
IP 104.21.34.210:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerGoogle Trust Services LLC
Subjectdoodcdn.com
Fingerprint3C:39:9E:A7:17:53:06:DC:9C:2A:59:3E:91:CC:9E:78:86:D3:15:71
ValidityTue, 12 Dec 2023 08:54:37 GMT - Mon, 11 Mar 2024 08:54:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 13 Jan 2024 21:33:34 GMT
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Sat, 13 Jan 2024 22:33:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ng0u%2FC3w3ttTUXMAfLONe86R0g%2BOXPfP7w%2BgF8OmMo%2BFS5Y7RZ6U4zz1T5bwGHczL2rprNcTjFiQjL0UBR1jdVmG8yCYgFxvfHCtLxhgP%2F6eqaBx8K6VxJTkhpD3LAL3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c2233bf20b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET do0od.com/sw.js
172.67.74.57200 OK 103 kB IP 172.67.74.57:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerGoogle Trust Services LLC
Subjectdo0od.com
FingerprintC3:D1:47:5D:FD:F4:12:17:80:C8:02:C0:6C:EA:1A:A6:F0:BA:9F:F3
ValidityTue, 26 Dec 2023 18:03:29 GMT - Mon, 25 Mar 2024 18:03:28 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (102634 bytes)
Hash 5a640158e056b33f4b8d128d6391abfe
771038c5e54ac3ea809bf5243aa17214ada6faeb
38a182529482fb6c78544580680b0fcd567260a220e36f8b208f65043289469e
GET /sw.js HTTP/1.1
Host: do0od.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/d/w9l72m5eo6v1
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: application/javascript
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Sat, 11 Jan 2025 12:27:07 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
cf-cache-status: HIT
age: 119186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dhBZLnf6HgEpoyfkxZ8D5gH8%2BW1oOmOVX6X4pD0v4KKlp7%2F5aC05vBfH3324FzdfF2sg0vJlBXNZTu1c6U2TTz1eyuvfYDIHx%2FcudBU7xyjGNZtKJKP4lf3h9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c21c6c9ab511-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET i.doodcdn.co/theme_2/img/loader.svg
172.67.70.190200 OK 694 B URL GET HTTP/3 i.doodcdn.co/theme_2/img/loader.svg
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (750), with no line terminators
Hash e0c38124a46835a055de826afbf33d9b
255567da0faa3de6c4bcef1780e9990ba7c9c0ff
e186e235e7552b286f217c94c747abdd5a8df8279c2334a61202817f937ea960
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Mon, 12 Feb 2024 05:09:44 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 51684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0yHTQDCvwrBdJdURYXtHFgTpQ9ZHhdc%2B2jvOQ8xb20NpgkStyCiqKlEDRVJ1i8W0O2DC%2Fo44q8sZM15js2sB5QjrgCvavb3mRfz5Q5TE03XayU5BSqPpYe%2FlL4xasw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c224f80c7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET do0od.com/d/w9l72m5eo6v1
172.67.74.57200 OK 5.9 kB URL User Request GET HTTP/2 IP 172.67.74.57:443
Certificate IssuerGoogle Trust Services LLC
Subjectdo0od.com
FingerprintC3:D1:47:5D:FD:F4:12:17:80:C8:02:C0:6C:EA:1A:A6:F0:BA:9F:F3
ValidityTue, 26 Dec 2023 18:03:29 GMT - Mon, 25 Mar 2024 18:03:28 GMT
File type HTML document, ASCII text, with very long lines (6106), with no line terminators
Hash ad3901bbb5ac0881f1f4da1f3ad4a9b3
332dd7561e3e1d1960f03f9e0379d84c3773fcd4
3b699ffbbd9b6149cb8f09c024ca0940ff261f452029f1697278eec65e17c89c
GET /d/w9l72m5eo6v1 HTTP/1.1
Host: do0od.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Fri, 12 Jan 2024 21:33:33 GMT
set-cookie: lang=1; domain=.do0od.com; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rMpxb5%2Fx2sDhXrsikXTo7elfZbXKf2t0NC8G1xA%2BYNNTbMj9d%2FZguVSO6SkTRiBDLT3GhddwmedKwJfw3fHZKinO5sVoRR9LT1YSxBLiYElBfupbzQ%2BHq%2B7tOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c2199966b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
142.250.74.106200 OK 18 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
IP 142.250.74.106:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint59:56:55:62:78:0C:21:25:FB:11:29:98:6E:A8:21:EF:64:2B:33:C0
ValidityMon, 11 Dec 2023 08:09:11 GMT - Mon, 04 Mar 2024 08:09:10 GMT
Hash 46da166e2af52022abead95ca5438c88
c05b711a3131289f7aa6e10e17d24517d6e6e7f4
f7c8ae9c7b18adee8a22a5368e7356c09303f88ad6bf59ca66d7bb206236c938
GET /css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 13 Jan 2024 21:33:33 GMT
date: Sat, 13 Jan 2024 21:33:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET glersakr.com/5/5495238/?oo=1&aab=1
139.45.197.239200 OK 3.1 kB URL GET HTTP/2 glersakr.com/5/5495238/?oo=1&aab=1
IP 139.45.197.239:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerLet's Encrypt
Subjectglersakr.com
Fingerprint1B:45:3A:61:1B:EC:B3:D3:6E:35:DD:51:FF:A8:D4:BE:B7:27:A6:C2
ValidityTue, 26 Dec 2023 06:00:24 GMT - Mon, 25 Mar 2024 06:00:23 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3375), with no line terminators
Hash fdb502b7223c2a3bbb32ebebb74a2552
0f1b22526ed7de07c5bb098b6a4243111bac4f6f
b5da5a155e2d477e79a0cd7bb066d1896ddbd938af5cd2bfe9b2611df1d71527
GET /5/5495238/?oo=1&aab=1 HTTP/1.1
Host: glersakr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://do0od.com
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: application/json
x-trace-id: 59a724d4f38e6cadd59e1fb4d93f78ef
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://do0od.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=9529e828ae5d4fe6a7bb3846d33abf11; expires=Sun, 12 Jan 2025 21:33:34 GMT; path=/; secure; SameSite=None
oaidts=1705181614; expires=Sun, 12 Jan 2025 21:33:34 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET i.doodcdn.co/theme_2/css/bootstrap.min.css
172.67.70.190200 OK 160 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/bootstrap.min.css
IP 172.67.70.190:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65324)
Size 160 kB (159515 bytes)
Hash 7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6
GET /theme_2/css/bootstrap.min.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: text/css
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Sun, 12 Jan 2025 06:08:54 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
cf-cache-status: HIT
age: 54520
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oU8CivyzEBGrlETGsIZItcyFah%2FkfWIDg6GRDK5JpCnAFZMACRlWhg%2BoketTO%2FchyxTg%2BUWHCfOEjYkZ8QWZPiWG6KH41fbk7fsvsinJS0Kt5uxyQMvjgVBBSC5vLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c21cdbd1b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
172.67.70.190200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
IP 172.67.70.190:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://do0od.com
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sun, 11 Feb 2024 13:18:46 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 32677
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oNKDUv%2FRFURFiSOYr8fZKgMKMn6VAIGOjG%2Fh4v544qtS43HmT92I0%2FoNgYIYO2W6yP9Q1V67epxBb3XbbOKjR8AxxLGsf%2BT9Hf7XoW%2F3NQmRolfTc39fnhWPvby5Lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c21fcea81c12-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/get_slides/6241/61gjvevnrtu75vo9.jpg
172.67.70.190200 OK 3.2 kB URL GET HTTP/3 i.doodcdn.co/get_slides/6241/61gjvevnrtu75vo9.jpg
IP 172.67.70.190:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerCloudflare, Inc.
Subjectdoodcdn.co
Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3
ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3268), with no line terminators
Hash 9e5ef91902356e1587393dbc946063b4
c32c78d6de5d5894cfe9695a598a9370163618cd
7500fc8aa37ddcb7076e5d52ec99980428c46d7bfa6fc01bbec989bda7ac4330
GET /get_slides/6241/61gjvevnrtu75vo9.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://do0od.com
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Sat, 13 Jan 2024 19:48:51 GMT
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rQpRWi68T5VEib%2BVhDFM4napGHMFIEYOyDzFwqvlDrI5dBo3oFjOuIwOvd%2FZTV15uZQ%2FmcsKyNE5klTPmeXWgJ3%2B2kPjRt1PtdEKS5gQo04DXLre0Ge7VNkr3MfE4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8450c222c9721c12-OSL
alt-svc: h3=":443"; ma=86400
GET pringed.space/bVFZUGMWcyonPBgjNXJZTzktJBMea3Z%2FBwJhNjRNDj40fxAafzMjQUFzKj0FT2tofEEePC9yWU9ld2BBQXMtMQQyOD1yWU9oa2ZbX2F7fEEeJDsPCglje2pBC2Q9YVpeZjt9UV41O31XDDdqfVoLYGl9Ulk1aWZaXWY4ZgFfcyQ
34.195.224.242200 OK 57 kB URL GET HTTP/2 pringed.space/bVFZUGMWcyonPBgjNXJZTzktJBMea3Z%2FBwJhNjRNDj40fxAafzMjQUFzKj0FT2tofEEePC9yWU9ld2BBQXMtMQQyOD1yWU9oa2ZbX2F7fEEeJDsPCglje2pBC2Q9YVpeZjt9UV41O31XDDdqfVoLYGl9Ulk1aWZaXWY4ZgFfcyQ
IP 34.195.224.242:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerLet's Encrypt
Subjectpringed.space
Fingerprint80:39:01:85:4D:3A:2E:D8:6C:7B:ED:DA:B3:43:51:5E:3E:8C:DA:0C
ValiditySun, 31 Dec 2023 10:13:47 GMT - Sat, 30 Mar 2024 10:13:46 GMT
File type ASCII text, with very long lines (56947), with no line terminators
Hash 4de5867a0815492544e038f1b18acbb5
5c6861a8a062ab806bc1e8d8472f44e0575178b9
55594d2dcd445aa54547d957b7264aab56dbef05dbbff985fc5187759803b9a4
GET /bVFZUGMWcyonPBgjNXJZTzktJBMea3Z%2FBwJhNjRNDj40fxAafzMjQUFzKj0FT2tofEEePC9yWU9ld2BBQXMtMQQyOD1yWU9oa2ZbX2F7fEEeJDsPCglje2pBC2Q9YVpeZjt9UV41O31XDDdqfVoLYGl9Ulk1aWZaXWY4ZgFfcyQ HTTP/1.1
Host: pringed.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: f14def60c6eb26dd3332f2ca2411368c=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"de73-XGhhqKBiq4BrwejYRy9E4FdReLk"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET betotodilea.com/400/4857535
139.45.196.61200 OK 89 kB URL GET HTTP/2 betotodilea.com/400/4857535
IP 139.45.196.61:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintF9:42:B3:D3:3E:00:51:3E:DC:78:E8:27:D6:4B:E1:D1:1E:6A:C3:2A
ValidityMon, 27 Nov 2023 20:58:15 GMT - Sun, 25 Feb 2024 20:58:14 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 27637db1580bd5b7e968e352ae140685
e9edfab86483eb1c33fc858bacf36c0f9bedeb38
128cb68f2a4770896b24b6ef30d9c27eed2d68d68d14789a6f96ec0f2d1b4d06
GET /400/4857535 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: application/javascript
x-trace-id: 84e7a1f26a65ba08ed57b6929a53135c
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=314e325a0171482f95f364f033d52c9e; expires=Sun, 12 Jan 2025 21:33:34 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET do0od.com/pass_md5/133903009-91-90-1705181613-78eece09ec58870ed2c8b5ae7e68cd66/vcq51im0tecjg7t8ex4fopil
172.67.74.57200 OK 108 B URL GET HTTP/2 do0od.com/pass_md5/133903009-91-90-1705181613-78eece09ec58870ed2c8b5ae7e68cd66/vcq51im0tecjg7t8ex4fopil
IP 172.67.74.57:443
Requested by https://do0od.com/e/w9l72m5eo6v1
Certificate IssuerGoogle Trust Services LLC
Subjectdo0od.com
FingerprintC3:D1:47:5D:FD:F4:12:17:80:C8:02:C0:6C:EA:1A:A6:F0:BA:9F:F3
ValidityTue, 26 Dec 2023 18:03:29 GMT - Mon, 25 Mar 2024 18:03:28 GMT
File type ASCII text, with no line terminators
Hash ce71c0d9426add58ab45f02a03d440b2
44b36890c1a5362a48824893a8724cdd6b1b5b6e
a4f795f99dd91fee9f62fc9cb0b6a9f64acff8a8f42491cc7eb55cad41faeca5
GET /pass_md5/133903009-91-90-1705181613-78eece09ec58870ed2c8b5ae7e68cd66/vcq51im0tecjg7t8ex4fopil HTTP/1.1
Host: do0od.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/e/w9l72m5eo6v1
Cookie: lang=1; dref_url=none
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 13 Jan 2024 21:33:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4fmVPPw%2B%2FpCj9LAnGMudiIUuU9FSmXSvblcHFHqwy5BKAWWF3oJHuBCD3MhjxQP%2BNqAOQdGnvns7CznAwqF5W17IIM9FE69LgibzjJN7ShruoDdQsRj%2F0cV%2FRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8450c222ad01b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js
212.117.190.201200 OK 106 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js
IP 212.117.190.201:443
Requested by https://do0od.com/d/w9l72m5eo6v1
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint83:75:D2:91:80:F4:A7:F7:80:C6:89:7E:42:70:72:64:D7:BC:59:90
ValidityTue, 09 Jan 2024 12:55:23 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File type ASCII text, with very long lines (65107)
Size 106 kB (106265 bytes)
Hash 9404efcf296af76abb895038b3179cf9
16df2052472aa4b3a9ec76553ad2850c046049a0
154f953a6f107797521c6672496cdd160c743b9a0bdaaf79525b5c5f3cdb28da
GET /lv/esnk/1841679/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do0od.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 13 Jan 2024 21:33:33 GMT
content-type: application/javascript
last-modified: Thu, 11 Jan 2024 10:33:02 GMT
vary: Accept-Encoding
etag: W/"659fc3de-19f5a"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2