dood.re/d/nngobc5wbgle
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d/nngobc5wbgle HTTP/1.1
Host: dood.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Dec 2022 11:49:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 07 Dec 2022 12:49:32 GMT
Location: https://dood.re/d/nngobc5wbgle
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5OYaZODTlRcOuKeIhO%2BCrFV4PXzMqkh1l2twTL2%2BuVt9z45jCiH5knoRu36sL14HTuH0OuNRZZWwtSY3femeH30PbAniEiXsFGiRSoHaGG7Xr7vTkjTo8GQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775d09dc1e4cb51b-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4694
Expires: Wed, 07 Dec 2022 13:07:46 GMT
Date: Wed, 07 Dec 2022 11:49:32 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4646
Cache-Control: max-age=86352
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:32 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 11:48:44 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9288
Expires: Wed, 07 Dec 2022 14:24:20 GMT
Date: Wed, 07 Dec 2022 11:49:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 11:20:28 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1744
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: XTNHHWRS49GApMEKr4mYIid3dXouUYz+aUbfkZB5cDulrTMkUdkjifx8hl2FmKmZZ5VzgyeabYU=
x-amz-request-id: B8AC5VWGF41VKW10
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 11:47:29 GMT
age: 123
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/CdZu0duK_F8
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/CdZu0duK_F8
IP
Hash 84c05ded7362435df5b879e9abbf3874
044fea4d17d77b2039b286adb8bebe538888f75d
11a7a8635b1d418328fc5695e3158657ef542e7d2764f8955b4da0361b7a11bb
POST /s/gts1p5/CdZu0duK_F8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:32 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/CdZu0duK_F8
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/CdZu0duK_F8
IP
Hash 84c05ded7362435df5b879e9abbf3874
044fea4d17d77b2039b286adb8bebe538888f75d
11a7a8635b1d418328fc5695e3158657ef542e7d2764f8955b4da0361b7a11bb
POST /s/gts1p5/CdZu0duK_F8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:32 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dood.re/d/nngobc5wbgle
200 OK 3.5 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7166), with no line terminators
Hash 1d55f1d46c97fea07c7e95fe37880f73
22b31ec378c8373785b9a87f75d05ee7493441e2
ac486e2b6859306dbd0d757259b114fcec5e7bfb74bebebe9ca8a4ead0d8d38f
GET /d/nngobc5wbgle HTTP/1.1
Host: dood.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:32 GMT
content-type: text/html; charset=UTF-8
expires: Tue, 06 Dec 2022 11:49:32 GMT
set-cookie: lang=1; domain=.dood.re; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ly%2BKiL25aOtIX4bF8rIXt%2FZLXRmp0d8S9aFfNIHWvGy7Ns5K3%2BJtuQiPgvQan8Rp7t4RY0pbeatyuD2XHldQOAoqY5r7%2Bawslf3wMwp37CyOQg7nM2mVDxk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 775d09defeb4b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 638a4990025383a0f83ebf29bdb84a68
153e8818dc42f598e47fde8cf398f1447649a4d0
878e34b89800bb271d3588e526eb3598eb3822e263f3bdaf53645847d39d0ad6
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3580797
expires: Mon, 27 Nov 2023 11:49:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yvhQ6WeGQPY8hg9PlVSuGXXnoWmjcX5B9eJGVdBT0Jxo1mBrDGa7%2FntHnohsbiRgcIT9%2FhXv90HYgNzn1yNLah8kxfKEsfRaht10UIZPM47yreitnYW%2Bf6Z0OIiZgqDRou79zvM6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 775d09e1cfa10b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash ecee3d06bd7e88eab17bf02f8e0ee2c9
7329bcd18fe94bc8481a90e34ac995446304c9a1
573b67bda034b7e3d50b77a47b4c2dbded4e6c539895bf9c1cdb29fa180439c5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "573B67BDA034B7E3D50B77A47B4C2DBDED4E6C539895BF9C1CDB29FA180439C5"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3970
Expires: Wed, 07 Dec 2022 12:55:43 GMT
Date: Wed, 07 Dec 2022 11:49:33 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash ecee3d06bd7e88eab17bf02f8e0ee2c9
7329bcd18fe94bc8481a90e34ac995446304c9a1
573b67bda034b7e3d50b77a47b4c2dbded4e6c539895bf9c1cdb29fa180439c5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "573B67BDA034B7E3D50B77A47B4C2DBDED4E6C539895BF9C1CDB29FA180439C5"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3970
Expires: Wed, 07 Dec 2022 12:55:43 GMT
Date: Wed, 07 Dec 2022 11:49:33 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 39 kB IP
ASN #20940 Akamai International B.V.
Hash 8a12a648c9c3d9fd242c6d2f0e8ba315
3772f48b618d67fc428c455d464d15a6da5d1ded
8a56b37c3d89eacea47188fe831631a4bc9888e4fecafb4aa89df048fd2e6d6e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "573B67BDA034B7E3D50B77A47B4C2DBDED4E6C539895BF9C1CDB29FA180439C5"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3970
Expires: Wed, 07 Dec 2022 12:55:43 GMT
Date: Wed, 07 Dec 2022 11:49:33 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash ecee3d06bd7e88eab17bf02f8e0ee2c9
7329bcd18fe94bc8481a90e34ac995446304c9a1
573b67bda034b7e3d50b77a47b4c2dbded4e6c539895bf9c1cdb29fa180439c5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "573B67BDA034B7E3D50B77A47B4C2DBDED4E6C539895BF9C1CDB29FA180439C5"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3970
Expires: Wed, 07 Dec 2022 12:55:43 GMT
Date: Wed, 07 Dec 2022 11:49:33 GMT
Connection: keep-alive
i.doodcdn.co/img/no_video_3.svg
200 OK 2.8 kB URL HTTP/2 i.doodcdn.co/img/no_video_3.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (2789)
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Thu, 05 Jan 2023 08:12:08 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 51124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bObjZK6h%2FO50%2FujTQTczpIFRKciS6wI4SyZ%2BIf5%2Fnpp7HgviMdAYwNOggziA6B5Ww736ikV2fdaN19II0%2FpQNzBTx4OFZfkgaZ9CgxUb%2BtWv2vPTvZz33orpnRGVOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775d09e21e18b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
IP
Hash 518a67f167be6411e6c654f040bb3c40
8e4b6783203cec4ef130632c841d6e585e34d62d
40d720ab5876b37ff199eb9642368e1ea6995370defe276850cf5d5159e26149
GET /css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 11:49:33 GMT
date: Wed, 07 Dec 2022 11:49:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7ad12c520055780d27c5ddb0fa333104
fc0c359652dd2fd538fb5eee8c703021cf94dd89
edecea9df4e2dae66b8263619f30d0f4b8e49fae3ee941f310364c22450ca34e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDECEA9DF4E2DAE66B8263619F30D0F4B8E49FAE3EE941F310364C22450CA34E"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5328
Expires: Wed, 07 Dec 2022 13:18:21 GMT
Date: Wed, 07 Dec 2022 11:49:33 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4644
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Last-Modified: Wed, 07 Dec 2022 10:32:09 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9084a518c70ad57bb3226fb519b648fd
79348ebe6f5900a035d4d65e08a7409fd9708f15
f0c6b0f66c31aa7cb2d2808eb4c04c3681d48e731efc8cbba0f3fef1d218ce7b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=explicit
200 OK 554 B URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit
IP
File type ASCII text, with very long lines (852), with no line terminators
Hash 0a628b8a14a877262721824930709597
31bbb380c04a4229a099a1fb6dea09cf717bcb5f
6c63432c24b1f8eed67f792c68214710fd6444ede5c28f56202e966770d20121
GET /recaptcha/api.js?render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 07 Dec 2022 11:49:33 GMT
date: Wed, 07 Dec 2022 11:49:33 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f5e79f3a6859e8983efa3bc7edfa1bdd
4b3fceafb0c5b770a93bc596fc5583fec9171d00
cf32067d296e27fea6e16bba4e148f5088da9e479297f95aa55bae1cf9d58467
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5029
Cache-Control: max-age=131323
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Etag: "638fc823-117"
Expires: Fri, 09 Dec 2022 00:18:16 GMT
Last-Modified: Tue, 06 Dec 2022 22:54:27 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash f5e79f3a6859e8983efa3bc7edfa1bdd
4b3fceafb0c5b770a93bc596fc5583fec9171d00
cf32067d296e27fea6e16bba4e148f5088da9e479297f95aa55bae1cf9d58467
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5029
Cache-Control: max-age=131323
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Etag: "638fc823-117"
Expires: Fri, 09 Dec 2022 00:18:16 GMT
Last-Modified: Tue, 06 Dec 2022 22:54:27 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a3c1030bf146424f52bc6c59141937e4
70e6c797aaaa7c750c9a8055d5104a1c823aa2e5
f244bcb8d3e0d89ad81ae99c8328f72df1337a837c75ec887faea7b3b53e5542
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F244BCB8D3E0D89AD81AE99C8328F72DF1337A837C75EC887FAEA7B3B53E5542"
Last-Modified: Tue, 06 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14125
Expires: Wed, 07 Dec 2022 15:44:58 GMT
Date: Wed, 07 Dec 2022 11:49:33 GMT
Connection: keep-alive
cdn.pncloudfl.com/pn/22f/364/08f/22f36408fa53a35e3e2d8f90e8ff4ba5949e1ce6.jpg
200 OK 41 kB URL HTTP/2 cdn.pncloudfl.com/pn/22f/364/08f/22f36408fa53a35e3e2d8f90e8ff4ba5949e1ce6.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b327da35933db17bcb333bf31fd61b44
90d81a781d0fdeb325c075782c591e44c0deb1ed
fc57383dc9ddcfdcb05449ae5ffecb144c5000c019592f828dfce4adc0770adb
GET /pn/22f/364/08f/22f36408fa53a35e3e2d8f90e8ff4ba5949e1ce6.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: image/webp
content-length: 41414
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=75052
content-disposition: inline; filename="22f36408fa53a35e3e2d8f90e8ff4ba5949e1ce6.webp"
etag: 6f63015de48cba62d904725b26f263d4
expires: Thu, 08 Dec 2022 08:07:27 GMT
last-modified: Wed, 26 Oct 2022 09:59:28 GMT
vary: Accept
x-openstack-request-id: tx2a583cc62cb8427b838f0-0063845686
x-proxy-cache: REVALIDATED
x-timestamp: 1666778367.25440
x-trans-id: tx2a583cc62cb8427b838f0-0063845686
cf-cache-status: HIT
age: 99726
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 775d09e52d731c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/e55/376/5eb/e553765ebeda25c6a22430c1c54462117cad993f.jpg
200 OK 20 kB URL HTTP/2 cdn.pncloudfl.com/pn/e55/376/5eb/e553765ebeda25c6a22430c1c54462117cad993f.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 825c72780278daf43e3e165cd278cd9d
c10fb3323d1747b698a98e1ad2485779fe634000
0def76221a18652217eaca770acc50cce0216c12bc45f17acc0f4b132f6f6d94
GET /pn/e55/376/5eb/e553765ebeda25c6a22430c1c54462117cad993f.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: image/webp
content-length: 19872
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=36515
content-disposition: inline; filename="e553765ebeda25c6a22430c1c54462117cad993f.webp"
etag: 1c9abe457899d24923a76820324b4c32
expires: Thu, 08 Dec 2022 01:17:33 GMT
last-modified: Mon, 20 Jun 2022 12:05:11 GMT
vary: Accept
x-openstack-request-id: txf419c4b7a60b406383023-0062b0627d
x-proxy-cache: HIT
x-timestamp: 1655726710.33702
x-trans-id: txf419c4b7a60b406383023-0062b0627d
cf-cache-status: HIT
age: 124320
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 775d09e52d7a1c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash f5e79f3a6859e8983efa3bc7edfa1bdd
4b3fceafb0c5b770a93bc596fc5583fec9171d00
cf32067d296e27fea6e16bba4e148f5088da9e479297f95aa55bae1cf9d58467
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5029
Cache-Control: max-age=131323
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Etag: "638fc823-117"
Expires: Fri, 09 Dec 2022 00:18:16 GMT
Last-Modified: Tue, 06 Dec 2022 22:54:27 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=eba17f70333148660cb47d242671016e1670420973&psp=AZsfFn2I-zK3w0IlrBhFCU34C58lE14dwT9JPokRHbhLYaOXtoqmck_hMkB44SDATiQrEvipgA-tAYDE9qXqT510yLM5SmRmkFsw4eM_4IRgKjU_-NxcUCmGQxhuQHPHbxt1NgANvHIMDYryAdFuHlXs_qmdfrx5DbcNgKMxg7KLq65anCGaAUFzKHrGCWp33XFoq_ozqDKjQUj2BlgAEdodBO1ort_nX7tky9b4YXZ232LpuxbB0VPmuqXooht60-UTAAgBbpTMI0VPaZntQLlYINtTQW0-FzR48-dJiZAOt3JoKYmLu8ln_bWg5nEcPoRYIGxUO5Hf0125ETDX9-mQEW41IUXuekwfA_k-9gI6Cv3EboyMcJJ04ZEDJ365Uei13EkUEfy0GSLnXB0qbyssDKTSd-HEyyTj--LR1CfnTg2LzBZ_HpYP3SVVqvM1f64ZT7mQG0lSFI11boOv13P3MJyKtCKk6-UB3xTgoiuhqYMtCnf2kYFUS7-yI75YZ74V-QsPNEHjEpQga_VpdGAZicmJXmm1pLUGZ9_kajGFJJ3HL93u7Yxj2TxBmrPtv1TAYt_YkG1mlsKP_cBXOvjtg0f-ebq8rC80EefSXhS7sq5hboaVA52doQiBEtapeGqVGel7cskIWh2NxrnUhojrLqntSadHUBSwqZtG-r1H4KhLY1DqzBXhPoxuSIr7lz6yjxZf2uBPvHt2oS6UIrrNi_J5Cy-A55FWnyO5Te22xw-a4gtzfy017-IQjlnoHRNdX68zKW4tCNqy3_19VBLLM2yYsiIiLNzK&abvar=0&os=0
200 OK 15 kB URL HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=eba17f70333148660cb47d242671016e1670420973&psp=AZsfFn2I-zK3w0IlrBhFCU34C58lE14dwT9JPokRHbhLYaOXtoqmck_hMkB44SDATiQrEvipgA-tAYDE9qXqT510yLM5SmRmkFsw4eM_4IRgKjU_-NxcUCmGQxhuQHPHbxt1NgANvHIMDYryAdFuHlXs_qmdfrx5DbcNgKMxg7KLq65anCGaAUFzKHrGCWp33XFoq_ozqDKjQUj2BlgAEdodBO1ort_nX7tky9b4YXZ232LpuxbB0VPmuqXooht60-UTAAgBbpTMI0VPaZntQLlYINtTQW0-FzR48-dJiZAOt3JoKYmLu8ln_bWg5nEcPoRYIGxUO5Hf0125ETDX9-mQEW41IUXuekwfA_k-9gI6Cv3EboyMcJJ04ZEDJ365Uei13EkUEfy0GSLnXB0qbyssDKTSd-HEyyTj--LR1CfnTg2LzBZ_HpYP3SVVqvM1f64ZT7mQG0lSFI11boOv13P3MJyKtCKk6-UB3xTgoiuhqYMtCnf2kYFUS7-yI75YZ74V-QsPNEHjEpQga_VpdGAZicmJXmm1pLUGZ9_kajGFJJ3HL93u7Yxj2TxBmrPtv1TAYt_YkG1mlsKP_cBXOvjtg0f-ebq8rC80EefSXhS7sq5hboaVA52doQiBEtapeGqVGel7cskIWh2NxrnUhojrLqntSadHUBSwqZtG-r1H4KhLY1DqzBXhPoxuSIr7lz6yjxZf2uBPvHt2oS6UIrrNi_J5Cy-A55FWnyO5Te22xw-a4gtzfy017-IQjlnoHRNdX68zKW4tCNqy3_19VBLLM2yYsiIiLNzK&abvar=0&os=0
IP
Hash 765e4288ccbf93ca0b6bda257572af7f
ef4278ff7bf654cd7634571fe19301f005fa66cd
35233ec6b54eee71e9555ca58a976c2eab7f4d1e00d94795a5f23140efec0e4a
GET /chicken.gif?z=1841679&pb=eba17f70333148660cb47d242671016e1670420973&psp=AZsfFn2I-zK3w0IlrBhFCU34C58lE14dwT9JPokRHbhLYaOXtoqmck_hMkB44SDATiQrEvipgA-tAYDE9qXqT510yLM5SmRmkFsw4eM_4IRgKjU_-NxcUCmGQxhuQHPHbxt1NgANvHIMDYryAdFuHlXs_qmdfrx5DbcNgKMxg7KLq65anCGaAUFzKHrGCWp33XFoq_ozqDKjQUj2BlgAEdodBO1ort_nX7tky9b4YXZ232LpuxbB0VPmuqXooht60-UTAAgBbpTMI0VPaZntQLlYINtTQW0-FzR48-dJiZAOt3JoKYmLu8ln_bWg5nEcPoRYIGxUO5Hf0125ETDX9-mQEW41IUXuekwfA_k-9gI6Cv3EboyMcJJ04ZEDJ365Uei13EkUEfy0GSLnXB0qbyssDKTSd-HEyyTj--LR1CfnTg2LzBZ_HpYP3SVVqvM1f64ZT7mQG0lSFI11boOv13P3MJyKtCKk6-UB3xTgoiuhqYMtCnf2kYFUS7-yI75YZ74V-QsPNEHjEpQga_VpdGAZicmJXmm1pLUGZ9_kajGFJJ3HL93u7Yxj2TxBmrPtv1TAYt_YkG1mlsKP_cBXOvjtg0f-ebq8rC80EefSXhS7sq5hboaVA52doQiBEtapeGqVGel7cskIWh2NxrnUhojrLqntSadHUBSwqZtG-r1H4KhLY1DqzBXhPoxuSIr7lz6yjxZf2uBPvHt2oS6UIrrNi_J5Cy-A55FWnyO5Te22xw-a4gtzfy017-IQjlnoHRNdX68zKW4tCNqy3_19VBLLM2yYsiIiLNzK&abvar=0&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2212070649847660d5bc8447598daa330e14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACLHBwAAAAAAAAAB; Path=/; Expires=Fri, 06 Jan 2023 11:49:33 GMT; Secure; SameSite=None
OACIBLOCK=ACLHBwAAAABjkB3Q; Path=/; Expires=Fri, 06 Jan 2023 11:49:33 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Thu, 08 Dec 2022 11:49:33 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 5.7 kB IP
File type ASCII text, with very long lines (12966), with no line terminators
Hash d40254dda364d3864ff6541fbc457bf7
ffecfdcf54862d27074bded4e32bf19c4dff06b4
e443b335d32c88cf054c96f4347b4347aacf4b27a01f49f6b8c6ab83c987bc64
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zF%2BXE8Fmxg5hnKZvV0DLvN3LIh32kH629eXz%2Bi9NevPgvv48sKHcsvoxc0bQAeBEDYf6XvMeRa3HnyXzvRHcj9ULN8kJQBvD7Zm7NhbVpmpCCv3PzQd%2Buuo44whSZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775d09e5af240b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=eba17f70333148660cb47d242671016e1670420973&psp=8otwMYP0p-lIPrfSJ52yK51wWTqrUpIXyvw9k0J919RfyHIGzN3Ph6hg78ClPYcZ4fr41H5AskU5sEQyqwmYZb87Ge474igiTvADy1UZ53oxcFhCNYqnbCm-kb8CMG6yqff5SnHZXfgS0srI7Ksj_MOtHm6kJTDqOm9wLTy5fZGgGpWLdz47rWnzithnDiYBJ8QsmVnNfccJ2yNhzz4x0Gx1nPkK-GXAZgLVUJvar2W-F6RhZH9t68i79JlCXbxGb5zVHe5dHysfqFAsp4K1MPyDyxFN-tz86W6N1jJhDEd7uGNM-beTHtMg0oB-V2yaoGp87MYkJdW9ifXgHw08tuQgTWuhhj12BTqrAw5UwBbRkks57XW-X2m7RdjouKLI5zqeIhaAGND6KLiHJ-UI7a5B2LotzXV2qzbzxYWbcyzU5drzQMqv-RgrKCajpkgu46gSOjmGmufIJ8yUbhp9pliLkxVf2bry7StVeELBtAKA4sNPMcJRWc7tNneHcVnaFxb8WnOsvv1Z--4c-eF1QcLAqpsShyTyLjNFL4icYpWgEyVIKc07-PCWn3MjPbdlFszNam1fPKEQYWcKf69ENxLQ6cISgPCqBdD10JaxZ62WyF4CRsc1Q-SV3v7IwWJ_ImPyrihWe0eZ7R7EUm2K8ZatG4hxXCVpPen9HQ18wqxKA-wIQYUJX2ElDJnfY_g6aUzbQba5i6pjFncbgszJLtKquMJa5njlx1QabbK4_CQ1LaVlZ0KSViQG6k05VrALJEzal-RvyvkDeKFaZfenFCQSKob7LWaMv1ps&abvar=0&os=0
200 OK 43 B URL HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=eba17f70333148660cb47d242671016e1670420973&psp=8otwMYP0p-lIPrfSJ52yK51wWTqrUpIXyvw9k0J919RfyHIGzN3Ph6hg78ClPYcZ4fr41H5AskU5sEQyqwmYZb87Ge474igiTvADy1UZ53oxcFhCNYqnbCm-kb8CMG6yqff5SnHZXfgS0srI7Ksj_MOtHm6kJTDqOm9wLTy5fZGgGpWLdz47rWnzithnDiYBJ8QsmVnNfccJ2yNhzz4x0Gx1nPkK-GXAZgLVUJvar2W-F6RhZH9t68i79JlCXbxGb5zVHe5dHysfqFAsp4K1MPyDyxFN-tz86W6N1jJhDEd7uGNM-beTHtMg0oB-V2yaoGp87MYkJdW9ifXgHw08tuQgTWuhhj12BTqrAw5UwBbRkks57XW-X2m7RdjouKLI5zqeIhaAGND6KLiHJ-UI7a5B2LotzXV2qzbzxYWbcyzU5drzQMqv-RgrKCajpkgu46gSOjmGmufIJ8yUbhp9pliLkxVf2bry7StVeELBtAKA4sNPMcJRWc7tNneHcVnaFxb8WnOsvv1Z--4c-eF1QcLAqpsShyTyLjNFL4icYpWgEyVIKc07-PCWn3MjPbdlFszNam1fPKEQYWcKf69ENxLQ6cISgPCqBdD10JaxZ62WyF4CRsc1Q-SV3v7IwWJ_ImPyrihWe0eZ7R7EUm2K8ZatG4hxXCVpPen9HQ18wqxKA-wIQYUJX2ElDJnfY_g6aUzbQba5i6pjFncbgszJLtKquMJa5njlx1QabbK4_CQ1LaVlZ0KSViQG6k05VrALJEzal-RvyvkDeKFaZfenFCQSKob7LWaMv1ps&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841674&pb=eba17f70333148660cb47d242671016e1670420973&psp=8otwMYP0p-lIPrfSJ52yK51wWTqrUpIXyvw9k0J919RfyHIGzN3Ph6hg78ClPYcZ4fr41H5AskU5sEQyqwmYZb87Ge474igiTvADy1UZ53oxcFhCNYqnbCm-kb8CMG6yqff5SnHZXfgS0srI7Ksj_MOtHm6kJTDqOm9wLTy5fZGgGpWLdz47rWnzithnDiYBJ8QsmVnNfccJ2yNhzz4x0Gx1nPkK-GXAZgLVUJvar2W-F6RhZH9t68i79JlCXbxGb5zVHe5dHysfqFAsp4K1MPyDyxFN-tz86W6N1jJhDEd7uGNM-beTHtMg0oB-V2yaoGp87MYkJdW9ifXgHw08tuQgTWuhhj12BTqrAw5UwBbRkks57XW-X2m7RdjouKLI5zqeIhaAGND6KLiHJ-UI7a5B2LotzXV2qzbzxYWbcyzU5drzQMqv-RgrKCajpkgu46gSOjmGmufIJ8yUbhp9pliLkxVf2bry7StVeELBtAKA4sNPMcJRWc7tNneHcVnaFxb8WnOsvv1Z--4c-eF1QcLAqpsShyTyLjNFL4icYpWgEyVIKc07-PCWn3MjPbdlFszNam1fPKEQYWcKf69ENxLQ6cISgPCqBdD10JaxZ62WyF4CRsc1Q-SV3v7IwWJ_ImPyrihWe0eZ7R7EUm2K8ZatG4hxXCVpPen9HQ18wqxKA-wIQYUJX2ElDJnfY_g6aUzbQba5i6pjFncbgszJLtKquMJa5njlx1QabbK4_CQ1LaVlZ0KSViQG6k05VrALJEzal-RvyvkDeKFaZfenFCQSKob7LWaMv1ps&abvar=0&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2212070649847660d5bc8447598daa330e14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACLHBwAAAAAAAAAB; Path=/; Expires=Fri, 06 Jan 2023 11:49:33 GMT; Secure; SameSite=None
OACIBLOCK=ACLHBwAAAABjkB3Q; Path=/; Expires=Fri, 06 Jan 2023 11:49:33 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Thu, 08 Dec 2022 11:49:33 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=eba17f70333148660cb47d242671016e1670420973&psp=bD0Nyv8T5hTocl9v5Aqy23erjqtpSHFyVlcLkS8K1TgeE_SNhR8vdLCFnrBrzsBgWtVY7EDxa5kQn7KcLeOOaUwJaTXZs7WlxDhTxpCeWZfUrM-89Nf6DS5gcancjKHXCMx84f3jW-setw5jjYRhA7XAC7Td8W5rdRJrg93RAIhWcr31IADqemrDuckPyvPjKQR9PjG5-7427TjddPPiQpu2-1lENmvCxx8-fZPjiaNHGC7BHqReCsV9lKYfStb2Xsyfjj_59pBHsvN1i1Zg-M3nKAax2mKEBwmamdwXc4nnIX8tMkjq3GISnrVCvNY3ydYIb1oOzW7wYkXNDXYpB5LFGwWLe4Sn7iO1F0YB5zFzgFEJVYKjB5vRH0aRxVn9XJhKN_sSyzLOIHhYj8XQots61rV7JvPe9ak8EcZTpsl-IuuxbXc03lX1_Hngys82TIRakPmyctLh8AprnviJL0uyXl2-A1K-Eb-zWgOr1gDh1iuGheOk2o_WSpYL6luQlfFiv3I-bLRNIfORArz9CG84zvmtVvotj-hlZSImMNXZx7trMPwmSCGFW8rYlH0nEqTl4aKz81rPnJlCPh_aAMOXqtUyG9ypiIa69792y4KPcP8VVbMLZOigdDCC7Bk8yVhpgSBBXlyrCWiBLnp0nQrr_bmY&abvar=0&os=0
200 OK 43 B URL HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=eba17f70333148660cb47d242671016e1670420973&psp=bD0Nyv8T5hTocl9v5Aqy23erjqtpSHFyVlcLkS8K1TgeE_SNhR8vdLCFnrBrzsBgWtVY7EDxa5kQn7KcLeOOaUwJaTXZs7WlxDhTxpCeWZfUrM-89Nf6DS5gcancjKHXCMx84f3jW-setw5jjYRhA7XAC7Td8W5rdRJrg93RAIhWcr31IADqemrDuckPyvPjKQR9PjG5-7427TjddPPiQpu2-1lENmvCxx8-fZPjiaNHGC7BHqReCsV9lKYfStb2Xsyfjj_59pBHsvN1i1Zg-M3nKAax2mKEBwmamdwXc4nnIX8tMkjq3GISnrVCvNY3ydYIb1oOzW7wYkXNDXYpB5LFGwWLe4Sn7iO1F0YB5zFzgFEJVYKjB5vRH0aRxVn9XJhKN_sSyzLOIHhYj8XQots61rV7JvPe9ak8EcZTpsl-IuuxbXc03lX1_Hngys82TIRakPmyctLh8AprnviJL0uyXl2-A1K-Eb-zWgOr1gDh1iuGheOk2o_WSpYL6luQlfFiv3I-bLRNIfORArz9CG84zvmtVvotj-hlZSImMNXZx7trMPwmSCGFW8rYlH0nEqTl4aKz81rPnJlCPh_aAMOXqtUyG9ypiIa69792y4KPcP8VVbMLZOigdDCC7Bk8yVhpgSBBXlyrCWiBLnp0nQrr_bmY&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841674&pb=eba17f70333148660cb47d242671016e1670420973&psp=bD0Nyv8T5hTocl9v5Aqy23erjqtpSHFyVlcLkS8K1TgeE_SNhR8vdLCFnrBrzsBgWtVY7EDxa5kQn7KcLeOOaUwJaTXZs7WlxDhTxpCeWZfUrM-89Nf6DS5gcancjKHXCMx84f3jW-setw5jjYRhA7XAC7Td8W5rdRJrg93RAIhWcr31IADqemrDuckPyvPjKQR9PjG5-7427TjddPPiQpu2-1lENmvCxx8-fZPjiaNHGC7BHqReCsV9lKYfStb2Xsyfjj_59pBHsvN1i1Zg-M3nKAax2mKEBwmamdwXc4nnIX8tMkjq3GISnrVCvNY3ydYIb1oOzW7wYkXNDXYpB5LFGwWLe4Sn7iO1F0YB5zFzgFEJVYKjB5vRH0aRxVn9XJhKN_sSyzLOIHhYj8XQots61rV7JvPe9ak8EcZTpsl-IuuxbXc03lX1_Hngys82TIRakPmyctLh8AprnviJL0uyXl2-A1K-Eb-zWgOr1gDh1iuGheOk2o_WSpYL6luQlfFiv3I-bLRNIfORArz9CG84zvmtVvotj-hlZSImMNXZx7trMPwmSCGFW8rYlH0nEqTl4aKz81rPnJlCPh_aAMOXqtUyG9ypiIa69792y4KPcP8VVbMLZOigdDCC7Bk8yVhpgSBBXlyrCWiBLnp0nQrr_bmY&abvar=0&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2212070649847660d5bc8447598daa330e14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: ppucnt=0; Path=/; Expires=Thu, 08 Dec 2022 11:49:33 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=eba17f70333148660cb47d242671016e1670420973&psp=UveuQYKAlY2Sj0_LjpPt0d4whVH-QVWxjv6EkZVij-MNrhITp1zhLfm1ulQZA__0OOfvhDnUolazcBggfwxVfWF9J9J52DtcclukJ9BJsISur7m_dtV4XKSY9GmVifAqtKkCsBu5tAEt5_yWulOAiWFVIUkFy4gxA2oe9N-NNR49iYd9wEtlzJsRnvYXfe8IyzmbSM4CeylaBskuN-RwYarNPI7NOWoBAnXVNPGzy0OMogLnKiovW_fdnBpzkhJrVMHZRyBnrpC5DoC8NYuCb6lOqTi_CQu11AsGCqXgeQwlZl5OXRVzCKFXSF7grSTdRomQ7IH9Xwt2cRc--ZmGJdlLwxTGmHkYzD1twKT81dbhCAaK2RljJG81HSEhUf4Ie90BEkIjKcLtjxREtNCUQm5qlujYg_dRLegLz6O643HReZ6iugO_L9C55GGAffVzZlJPcc2olXfRVNTT0N4N7Qb2ba9gpYmcwTpYALj9ubUEE4DCi3ISojdRjh85PqBEzT6mSKXBAIJAq_a5UzFuwCR8l_Bu3LemaLrCCf_sVDOy6LCstSz2MEZgni3GIl-OV1PszWZfJuqBxJEZ-PxYa9-DXNhICCVGVxGjFIByfDzQRa7Pwb7gRp51YzE8fTkC0HYZstoTqOssC4hURWUBwLL9Gdgx&abvar=0&os=0
200 OK 43 B URL HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=eba17f70333148660cb47d242671016e1670420973&psp=UveuQYKAlY2Sj0_LjpPt0d4whVH-QVWxjv6EkZVij-MNrhITp1zhLfm1ulQZA__0OOfvhDnUolazcBggfwxVfWF9J9J52DtcclukJ9BJsISur7m_dtV4XKSY9GmVifAqtKkCsBu5tAEt5_yWulOAiWFVIUkFy4gxA2oe9N-NNR49iYd9wEtlzJsRnvYXfe8IyzmbSM4CeylaBskuN-RwYarNPI7NOWoBAnXVNPGzy0OMogLnKiovW_fdnBpzkhJrVMHZRyBnrpC5DoC8NYuCb6lOqTi_CQu11AsGCqXgeQwlZl5OXRVzCKFXSF7grSTdRomQ7IH9Xwt2cRc--ZmGJdlLwxTGmHkYzD1twKT81dbhCAaK2RljJG81HSEhUf4Ie90BEkIjKcLtjxREtNCUQm5qlujYg_dRLegLz6O643HReZ6iugO_L9C55GGAffVzZlJPcc2olXfRVNTT0N4N7Qb2ba9gpYmcwTpYALj9ubUEE4DCi3ISojdRjh85PqBEzT6mSKXBAIJAq_a5UzFuwCR8l_Bu3LemaLrCCf_sVDOy6LCstSz2MEZgni3GIl-OV1PszWZfJuqBxJEZ-PxYa9-DXNhICCVGVxGjFIByfDzQRa7Pwb7gRp51YzE8fTkC0HYZstoTqOssC4hURWUBwLL9Gdgx&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841679&pb=eba17f70333148660cb47d242671016e1670420973&psp=UveuQYKAlY2Sj0_LjpPt0d4whVH-QVWxjv6EkZVij-MNrhITp1zhLfm1ulQZA__0OOfvhDnUolazcBggfwxVfWF9J9J52DtcclukJ9BJsISur7m_dtV4XKSY9GmVifAqtKkCsBu5tAEt5_yWulOAiWFVIUkFy4gxA2oe9N-NNR49iYd9wEtlzJsRnvYXfe8IyzmbSM4CeylaBskuN-RwYarNPI7NOWoBAnXVNPGzy0OMogLnKiovW_fdnBpzkhJrVMHZRyBnrpC5DoC8NYuCb6lOqTi_CQu11AsGCqXgeQwlZl5OXRVzCKFXSF7grSTdRomQ7IH9Xwt2cRc--ZmGJdlLwxTGmHkYzD1twKT81dbhCAaK2RljJG81HSEhUf4Ie90BEkIjKcLtjxREtNCUQm5qlujYg_dRLegLz6O643HReZ6iugO_L9C55GGAffVzZlJPcc2olXfRVNTT0N4N7Qb2ba9gpYmcwTpYALj9ubUEE4DCi3ISojdRjh85PqBEzT6mSKXBAIJAq_a5UzFuwCR8l_Bu3LemaLrCCf_sVDOy6LCstSz2MEZgni3GIl-OV1PszWZfJuqBxJEZ-PxYa9-DXNhICCVGVxGjFIByfDzQRa7Pwb7gRp51YzE8fTkC0HYZstoTqOssC4hURWUBwLL9Gdgx&abvar=0&os=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2212070649847660d5bc8447598daa330e14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: ppucnt=0; Path=/; Expires=Thu, 08 Dec 2022 11:49:33 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.re
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 06:50:11 GMT
expires: Thu, 07 Dec 2023 06:50:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 17962
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 006bb180a40612ecb5c5d88eb741957d
a6893fed89f7a538cf8d5c6ff25f6996b60e9e02
36ac9650d965d5e8890bb973ae6ff7136bafd6aad8e0542ae5a561f3e7491271
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +AtmofyKf8g3ki6egCUIhA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: d+6R47BP57RgrXkn00zVu6v5jqw=
uthecrimorew.com/utx?tid=926820&top=dood.re&cb=zz80QHXIrNHe
204 No Content 0 B URL HTTP/2 uthecrimorew.com/utx?tid=926820&top=dood.re&cb=zz80QHXIrNHe
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=926820&top=dood.re&cb=zz80QHXIrNHe HTTP/1.1
Host: uthecrimorew.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.re
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 07 Dec 2022 11:49:34 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://dood.re
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 07 Dec 2022 11:50:34 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RUh5jv6_eVxrqWObHo4lRfLpl6SHe02nBAQCiQS3gIQ9HLMF28wQpQ==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 36f1e49c3bdeda15408a6f36c440be82
4c4dfd446bba9e9b315504514498f2b28538cc2e
7c8f91838f7b9194933317395f552b9e5459b5d8dec8f06dd1c1e41bc6124c90
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 11:49:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 00:52:19 GMT
Expires: Mon, 12 Dec 2022 00:52:18 GMT
Etag: "4c4dfd446bba9e9b315504514498f2b28538cc2e"
Cache-Control: max-age=391963,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 775d09e73d97b503-OSL
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 901
Origin: https://dood.re
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 07 Dec 2022 11:49:39 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://dood.re
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a51cdbb45b070981cb7bfad4def51ed3
d5a2ce00d05f9aeb9d656828260e276008a55c94
a5dbf12eb41137bba0b2e9cd8b6977e836cac05a2d1c2101ddebefa738e1d785
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5DBF12EB41137BBA0B2E9CD8B6977E836CAC05A2D1C2101DDEBEFA738E1D785"
Last-Modified: Mon, 05 Dec 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2284
Expires: Wed, 07 Dec 2022 12:27:38 GMT
Date: Wed, 07 Dec 2022 11:49:34 GMT
Connection: keep-alive
ehappy.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ehappy.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 375
Origin: https://dood.re
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
ehappy.buzz/eUVUbXIiZ21fREF3ZE9eW2d4TxRMIWVUQU4neV9BHSd5WRMfdnlUFEh1eVxGHXViVEJOJGIPQFtpdg9GHSFiC0sfaDFUFEpoYF1FQWhsDBQfaGxZFxpzNlsQTSRgW1BVZycaUFVnMQUTCTUtQxAMPy5PXlt0ZENHW2kyDB4KIHgLExU2MUEUGCknCC8
200 OK 13 kB URL HTTP/2 ehappy.buzz/eUVUbXIiZ21fREF3ZE9eW2d4TxRMIWVUQU4neV9BHSd5WRMfdnlUFEh1eVxGHXViVEJOJGIPQFtpdg9GHSFiC0sfaDFUFEpoYF1FQWhsDBQfaGxZFxpzNlsQTSRgW1BVZycaUFVnMQUTCTUtQxAMPy5PXlt0ZENHW2kyDB4KIHgLExU2MUEUGCknCC8
IP
File type ASCII text, with very long lines (33855), with no line terminators
Hash 04757d6608ff486e39c60832b3038d82
896eecb0fefab0f6ccdfbc15bba67676472b9f16
3e484e2de573702ca6a725470ae5a184a1471bffe9acf8eaa938a2918f13fd65
GET /eUVUbXIiZ21fREF3ZE9eW2d4TxRMIWVUQU4neV9BHSd5WRMfdnlUFEh1eVxGHXViVEJOJGIPQFtpdg9GHSFiC0sfaDFUFEpoYF1FQWhsDBQfaGxZFxpzNlsQTSRgW1BVZycaUFVnMQUTCTUtQxAMPy5PXlt0ZENHW2kyDB4KIHgLExU2MUEUGCknCC8 HTTP/1.1
Host: ehappy.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: ec0049f608ceb6198b4427c8aa47619d=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"843f-02do9n+J3FGZcBDWoC2bXUd4U2I"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ehappy.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ehappy.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.re/
Content-Type: text/plain;charset=UTF-8
Origin: https://dood.re
Content-Length: 345
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6790
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 11:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6790
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 11:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6790
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 11:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6790
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 11:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6790
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 11:49:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:11:41 GMT
age: 20274
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e5de346-6863-4521-9b1c-e74cf4df1d53.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e5de346-6863-4521-9b1c-e74cf4df1d53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2409529ecac5140de749d864da85af0d
99f431b4ca446996dbacb969440e2ecfb11fd9e0
81b379b16874d6644b0cf63e02c5174e44a40ab7cb4f4727bb96ad44bfcaa72f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e5de346-6863-4521-9b1c-e74cf4df1d53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6422
x-amzn-requestid: 6d0cc220-31bc-4815-ade5-7e3e5403f39f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cniYTGgRoAMF5lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c7dce-64fbea8330a62e4f741c0c4e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 11:00:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ww1ouNhiKEmc1TDn6Gwr7crmeiy6pztTeSbEd4Iw6PB_nS4hsDFgbw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 07:52:33 GMT
age: 14222
etag: "99f431b4ca446996dbacb969440e2ecfb11fd9e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ViuPsZBEVJ-aGOcsfrl3nXu244mzMUMQVhpPeNlO7W3sBrrfuUfXpA==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:32:04 GMT
age: 47851
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 604a4132da78a0c013b5818644adb121
ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566
eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpyIdH9YEXjxbGhZpBIfzoZHQxMvAKl0eCFQsgMt0e1SSeWsiuey7g==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:15:06 GMT
age: 48869
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9257f2e3b9bd1b3aa262b0f4bf57968
4bcdd6ecd63834aa1010faf19457a97f37ae99fa
9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 03:27:19 GMT
age: 30136
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9fda84db003d0cfc70d73dcb6a3763dd
5c54b4ca3db1c975b3ad7f780f0ebdc867fc2ef4
f00aa6b88dd85164d8f6ee685937a3ca8039b98b442a2e6aede1c4c421b4fc4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8997
x-amzn-requestid: 54d7ed8c-119c-4583-929c-fd053524814c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csT_8F78IAMFY6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66cc-3d9816725e7e0b1b3404bc4a;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:46:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FjScmvs74slr4Mr8vhQLRNh-88KqMx4L1FwNKdBwbUUPDuu1ivOuoQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:47:19 GMT
age: 50536
etag: "5c54b4ca3db1c975b3ad7f780f0ebdc867fc2ef4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b22490b02628e79842aa551994331a2e
238870b8a3e6ef3b6a761154e3abee386643597c
ef2e0268a5ed0ca7d64dfc1baa3d56d55f4062e4d84972bc9423fe56df585673
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF2E0268A5ED0CA7D64DFC1BAA3D56D55F4062E4D84972BC9423FE56DF585673"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1377
Expires: Wed, 07 Dec 2022 12:12:35 GMT
Date: Wed, 07 Dec 2022 11:49:38 GMT
Connection: keep-alive
my.rtmark.net/gid.js
200 OK 65 B IP
File type JSON data\012- , ASCII text
Hash 7cbcd4a1013077f55ada72dbcace4d64
a76109f789bffc3f35c8076e62e88b695b1b81b1
391e60261ea9343fded732a582b98d5a9f1090bb0e23ade536d13ab6c3ba2ce7
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.re
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:38 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dood.re
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0433b8fd1413450683f2fe54c88850b6; expires=Thu, 07 Dec 2023 11:49:38 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
betotodilea.com/500/4857535?excludes=&oaid=0433b8fd1413450683f2fe54c88850b6&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.re%2Fd%2Fnngobc5wbgle&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 betotodilea.com/500/4857535?excludes=&oaid=0433b8fd1413450683f2fe54c88850b6&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.re%2Fd%2Fnngobc5wbgle&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /500/4857535?excludes=&oaid=0433b8fd1413450683f2fe54c88850b6&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.re%2Fd%2Fnngobc5wbgle&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://dood.re/
Origin: https://dood.re
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:38 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://dood.re
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 8bbd1cb72bc92d27ab1c3155ecfc7e3d
0aff60de45cd9932f6ae0fc5e57571b818bf637c
978523dc29efb75cf77086765ad56b8f4ba70d698f881624a7b764effb6525eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5094
Cache-Control: max-age=139332
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 11:49:39 GMT
Etag: "638fe731-116"
Expires: Fri, 09 Dec 2022 02:31:51 GMT
Last-Modified: Wed, 07 Dec 2022 01:06:57 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
betotodilea.com/500/4857535?excludes=&oaid=0433b8fd1413450683f2fe54c88850b6&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.re%2Fd%2Fnngobc5wbgle&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 7.1 kB URL HTTP/2 betotodilea.com/500/4857535?excludes=&oaid=0433b8fd1413450683f2fe54c88850b6&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.re%2Fd%2Fnngobc5wbgle&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash 346fda61bc60bace3ad3cf02c75d2895
09f8a09c7b54fecb0922e9e3cbcd7d7a2afc0935
1552d7e0bcfb23f22be1768babba96144100579afe2080e282b20e890556e5c2
Analyzer Verdict Alert quad9 Sinkholed
GET /500/4857535?excludes=&oaid=0433b8fd1413450683f2fe54c88850b6&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&pl=https%3A%2F%2Fdood.re%2Fd%2Fnngobc5wbgle&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://dood.re
Connection: keep-alive
Referer: https://dood.re/
Cookie: OAID=2ab57b6352ae4e4ba0f99a4ac7700455
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:39 GMT
content-type: application/javascript
x-trace-id: 826e02381b6bd17515c24c80ae792d5e
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://dood.re
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=0433b8fd1413450683f2fe54c88850b6; expires=Thu, 07 Dec 2023 11:49:38 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/css/style.css?v=0.1
200 OK 0 B URL HTTP/2 i.doodcdn.co/theme_2/css/style.css?v=0.1
IP
GET /theme_2/css/style.css?v=0.1 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=249272
expires: Wed, 06 Dec 2023 08:49:21 GMT
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 67822
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oHV8gOQxQYKFeP6vCGibHze5dNxYqPDWhSRMgc58c6OJ9qZKF9a0a%2FUECHesi9Nd05wJoCVyJo6QrROAcEOqJ%2FlVgo8psZ4dYZ64cNMfl0YdWlDHzQjz6w4IvRbXQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 775d09e20e05b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 i.doodcdn.co/theme_2/css/bootstrap.min.css
IP
GET /theme_2/css/bootstrap.min.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: text/css
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cache-control: public, max-age=2592000
expires: Thu, 07 Dec 2023 04:43:37 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 6898
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r11nwQtT38%2Ba08RFHJiCze8Xswz%2FjECCdzG30Fd0QhmJd8AAp%2FEyJQi2kn3tWpaMRX%2BIWRp7%2FsYW50keOTiI7u6ZbamIrUMP73covEJBPmeEv7TwckEtv1vMT065RQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 775d09e22e27b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js
200 OK 0 B URL HTTP/2 alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js
IP
GET /lv/esnk/1841679/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: application/javascript
last-modified: Tue, 15 Nov 2022 12:20:41 GMT
vary: Accept-Encoding
etag: W/"63738419-1aaa0"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js
200 OK 0 B URL HTTP/2 alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js
IP
GET /lv/esnk/1841674/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: application/javascript
last-modified: Tue, 15 Nov 2022 12:20:41 GMT
vary: Accept-Encoding
etag: W/"63738419-1aaa0"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_clul3htf6wjsccg3w756be&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1516847120640520
200 OK 0 B URL HTTP/2 alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_clul3htf6wjsccg3w756be&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1516847120640520
IP
GET /get/1841674?zoneid=1841674&jp=_clul3htf6wjsccg3w756be&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1516847120640520 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2212070649d50ca04090b442ad9b965892ae; Path=/; Expires=Thu, 07 Dec 2023 11:49:33 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/get/1841679?zoneid=1841679&jp=_clmp02ks3abuwedsy3bznv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4894546841147033
200 OK 0 B URL HTTP/2 alas4kanmfa6a4mubte.com/get/1841679?zoneid=1841679&jp=_clmp02ks3abuwedsy3bznv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4894546841147033
IP
GET /get/1841679?zoneid=1841679&jp=_clmp02ks3abuwedsy3bznv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4894546841147033 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2212070649847660d5bc8447598daa330e14; Path=/; Expires=Thu, 07 Dec 2023 11:49:33 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
betotodilea.com/400/4857535
200 OK 0 B URL HTTP/2 betotodilea.com/400/4857535
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /400/4857535 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.re/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 11:49:33 GMT
content-type: application/javascript
x-trace-id: 9ca47e87ae02d5595cdfc26196dc1f30
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=2ab57b6352ae4e4ba0f99a4ac7700455; expires=Thu, 07 Dec 2023 11:49:33 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.68.226
139.45.197.237
23.36.77.32
62.122.171.6
104.17.24.14