{"report_id":"3d915698-91e2-48fe-86b6-c70e5ba9bd80","version":0,"status":"done","tags":[],"date":"2026-09-04T14:37:22Z","url":{"schema":"http","addr":"doodling.app/","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"doodling.app/#/login","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"title":"Doodles Admin","dom":{"size":4442,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1809)","md5":"3cfadf5e42fe3790415b1c41607103b9","sha1":"fe74b78e2241fbe60e29ceb88fafbb1770ee0207","sha256":"acbac86c866d1c12b41f35def90b87258c62b2b82a80da8788247d5633d032f4","sha512":"04bdc8bb3a7091de3705e0eb9dd00086a84c41d2e4ec6513f6c34b37a5e022dac39029fc1b5eb9088624ad11f828a0461a150017c014ab8c53cbd4ba10694cf7","ssdeep":"96:jFhO++g054kGNRYEnbk4A86/BVU+EHA6oFTF:jFhO+D02kGNPnbk4rW/UADp","tlshash":"f191a7b3ef8031352013da6679fdfa9c1237905ade13c868f6bd021557a36b901a339a","dom_hash":"domhash5550f55a662f9bec63c79757fcefff92","first_seen":"2026-09-04T14:37:31.708635Z","last_seen":"2026-09-04T14:37:31.708635Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"doodling.app/","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T14:37:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"doodling.app","ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":8,"received_data":4351984,"sent_data":3689,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-30T23:29:53.363005Z","alert_count":0,"request_count":2,"received_data":7373052,"sent_data":1034,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":3,"received_data":545521,"sent_data":1551,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"doodling.app/main.dart.js","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f860b59bfcc01870d8b85cbb9af984e9","sha1":"6f31ec2f6b46128fb957631c1b0c1ebda64823d5","sha256":"d30bdebacc14e291da7577af1c9fa077f200b26c7abd7386e799830ad3641126","sha512":"f35aac64f35ee55bcf6837c18d1a6d7fca793b50b6633b0ee7068378b5ce8f48d378ab9ee1666310ac6b92384ee8c43d67dfbc179f099059db88b541e3730c98","ssdeep":"49152:DpGbaF6cN2v629lVLnUpOvFbGHjRUiLZR9abbyIEJx/LgySfBJbJ0H4aQR4J0IN3:DpG7zi","tlshash":"2816d7c839f278e8e76244d4544b2253e91dacb7d81c0938b4f6ccd6b5386699b31bbc","size":4291023,"data":"","first_seen":"2026-09-04T14:37:31.723808Z","last_seen":"2026-09-04T14:37:31.723808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"56145fac2c4114778c20e83883051a15","sha1":"796bddd3377f87b88182a585602b6931af0ab433","sha256":"52b8cf41bb11399166cb426f16c7caae6497f2445ce4ba610b2b5307f183c32f","sha512":"18db6d6da7000fc8702c7c2064cd4159a3f8cdfbf68b488bda26e8be1d2242e8fb332183d0879613a6e8845142f37be2d326eca80f0e6ea31dbaed67f8f03171","ssdeep":"","tlshash":"c3c0122513f9547850b3f39a534f7f01152305cfc048ef007e588e826f3001a2950ada","size":183,"data":"","first_seen":"2026-09-04T14:37:31.725261Z","last_seen":"2026-09-04T14:37:31.725261Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"35bdb762395d47939273e105db0e7321","sha1":"0af1279ef34da1fecbe8fd81018da3e066952b99","sha256":"8e39f70b3df81edcec22a2860117a076f953cb4c1a6235f9794a98cdf3f7dc68","sha512":"8c8d244a5c8d64f5e9e957bd16694894b6d8180aa09b72b877835d7ad538aad17ba04c5e8656fff696615eea31be1432440777ce38c5f92c580b97f9e4afb14b","ssdeep":"","tlshash":"2bd0c98d4fe9d91316a3746f4c2a8304213b944260499e00bfbe17b14f4242853a7588","size":229,"data":"","first_seen":"2026-09-04T14:37:31.726576Z","last_seen":"2026-09-04T14:37:31.726576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/flutter_bootstrap.js","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"edbcda973fe54a4ac79643617d925aff","sha1":"a014a16a2db93e95e17f8a9b302795b06d3574b2","sha256":"b81b7c22ca40e65846cd6d469d0c1811dd84c795e47f8fcea478ad06eeb22a40","sha512":"496b1c9a42bff8667887aa6768f9ad01dde782d9b905d5d2e49df82d8bf7a5d41e930406e042b932f6236f8ec1ed07ef24475ee9fc75deb9c871e363f8206551","ssdeep":"192:titA3hgf2WfeHPAi5r8kjCxshI7kofLqyFF8aoRCKr542OC3d6xp0UAD556zb3m+:otyG1fYt5r8oCGI7JqyD+RCU5OOI2+","tlshash":"e64209e61fb7e23c1685b651fd3a13a2e35a825a108cc149b2dd4b6c279bc499136f31","size":12927,"data":"","first_seen":"2026-09-04T14:37:31.711699Z","last_seen":"2026-09-04T14:37:31.711699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/5f77625673248ee5846fbcaf5d3e1a3878386fd7/canvaskit.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0e52934f95b3110d951b67f56c9d9ab0","sha1":"0c6310118813bddae0e1f070db530735cde5ad90","sha256":"bb559f6080c7d312ac2a912b4abec9f68ff3d3022d4a603c7796b9b31460642b","sha512":"af9007441b4cab009c3401fb53041b7fe1fb47a7cd2b05ff246d0495d21fee0d5a5c1833e790590bda67dcf34aa9afd5179e631b1943dc4c52eb8ee971c6be47","ssdeep":"1536:lI9alRYVmCtNqBh3JrAs9IPx7P/5Mi4MJIu98zBCYNM/BJtWD6qBOA3pfL:PCtWrA5nyhBM/qL","tlshash":"b2832b8a72aa6045031360b5546f004ff13edd68e0888c98b686ede97cf99dd527bf3d","size":86987,"data":"","first_seen":"2026-07-20T07:13:50.639545Z","last_seen":"2026-09-04T14:37:31.713449Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"Injecting \u003cscript\u003e tag. Using callback.","filename":"https://doodling.app/flutter_bootstrap.js","line_number":1,"column_number":2533}]},"http":[{"url":{"schema":"https","addr":"doodling.app/","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:36:50.326Z","timestamp":1788532610326,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 1997\r\nLast-Modified: Thu, 03 Sep 2026 22:03:49 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eec5-7cd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":1997,"size_decoded":2236,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1b26e498ad394579181a78e7e1180b25","sha1":"8d3db86327169d018bc191db0b30bef4271aff3a","sha256":"14eefa646fdbf1e452ba911d6c0758d95b59a3842d46690526489c0091502369","sha512":"af2fe77f1ec3a0c2647cce76e172fba619270398b4052ae8eabb85918b3cb91b23b73854fbb8b5d27ea000c6b3b96ec5722b5884f280b027239a8da7267dad7f","ssdeep":"","tlshash":"1441b493cfc46827a042ab2e2edef554427fd40e9188d40076dd92241f227a142f369e","first_seen":"2026-09-04T14:37:31.710428Z","last_seen":"2026-09-04T14:37:31.710428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":75,"connect":20,"send":0,"wait":20,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/flutter_bootstrap.js","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:50.663Z","timestamp":1788532610663,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET /flutter_bootstrap.js HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://doodling.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 12927\r\nLast-Modified: Thu, 03 Sep 2026 22:03:48 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eec4-327f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12927,"size_decoded":13181,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4251)","md5":"edbcda973fe54a4ac79643617d925aff","sha1":"a014a16a2db93e95e17f8a9b302795b06d3574b2","sha256":"b81b7c22ca40e65846cd6d469d0c1811dd84c795e47f8fcea478ad06eeb22a40","sha512":"496b1c9a42bff8667887aa6768f9ad01dde782d9b905d5d2e49df82d8bf7a5d41e930406e042b932f6236f8ec1ed07ef24475ee9fc75deb9c871e363f8206551","ssdeep":"192:titA3hgf2WfeHPAi5r8kjCxshI7kofLqyFF8aoRCKr542OC3d6xp0UAD556zb3m+:otyG1fYt5r8oCGI7JqyD+RCU5OOI2+","tlshash":"e64209e61fb7e23c1685b651fd3a13a2e35a825a108cc149b2dd4b6c279bc499136f31","first_seen":"2026-09-04T14:37:31.711699Z","last_seen":"2026-09-04T14:37:31.711699Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/favicon.png","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:50.690Z","timestamp":1788532610690,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://doodling.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 917\r\nLast-Modified: Thu, 03 Sep 2026 22:03:48 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eec4-395\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":917,"size_decoded":1155,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5dcef449791fa27946b3d35ad8803796","sha1":"61a67757ed3e0129ddccda6e9fa0df255ee92962","sha256":"7ab2525f4b86b65d3e4c70358a17e5a1aaf6f437f99cbcc046dad73d59bb9015","sha512":"f8f4143a5aea2e59a2723f201a16c7a99a0533b9cd3e615da628c3420101304cc562553eb4028f1cd206997947e150a19671a93922ed46103607e396ee07ec06","ssdeep":"","tlshash":"461184917e1051d9e50a432488ee5400c477814747b2f51eb90fdc371b102830aef688","first_seen":"2023-07-01T21:14:01Z","last_seen":"2026-09-04T16:41:42.92665Z","times_seen":2582,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/5f77625673248ee5846fbcaf5d3e1a3878386fd7/canvaskit.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:50.946Z","timestamp":1788532610946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /flutter-canvaskit/5f77625673248ee5846fbcaf5d3e1a3878386fd7/canvaskit.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://doodling.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://doodling.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"flutter-team\"\r\nreport-to: {\"group\":\"flutter-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/flutter-team\"}]}\r\ncontent-length: 24455\r\ndate: Fri, 04 Sep 2026 14:36:51 GMT\r\nexpires: Sat, 04 Sep 2027 14:36:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 11 Aug 2026 17:21:28 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86987,"size_decoded":25305,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1046)","md5":"0e52934f95b3110d951b67f56c9d9ab0","sha1":"0c6310118813bddae0e1f070db530735cde5ad90","sha256":"bb559f6080c7d312ac2a912b4abec9f68ff3d3022d4a603c7796b9b31460642b","sha512":"af9007441b4cab009c3401fb53041b7fe1fb47a7cd2b05ff246d0495d21fee0d5a5c1833e790590bda67dcf34aa9afd5179e631b1943dc4c52eb8ee971c6be47","ssdeep":"1536:lI9alRYVmCtNqBh3JrAs9IPx7P/5Mi4MJIu98zBCYNM/BJtWD6qBOA3pfL:PCtWrA5nyhBM/qL","tlshash":"b2832b8a72aa6045031360b5546f004ff13edd68e0888c98b686ede97cf99dd527bf3d","first_seen":"2026-07-20T07:13:50.639545Z","last_seen":"2026-09-04T14:37:31.713449Z","times_seen":72,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/main.dart.js","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:50.951Z","timestamp":1788532610951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET /main.dart.js HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://doodling.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4291023\r\nLast-Modified: Thu, 03 Sep 2026 22:03:50 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eec6-4179cf\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4291023,"size_decoded":4291281,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (711)","md5":"2cf87634992fc8592410056556f74163","sha1":"32892417279539371b46deccefe54384b375ae01","sha256":"f0cb316a197f06b146f424e6222b1e7c185eec85a908113ffafd44e4e73cd206","sha512":"edcfff605bc80318cec80ed1ec938dd960cc5ae7cdf9b1fe46f8219c5dcfb4d9d34b84002e8b15a2240f4767b6ae55e9d48da4ea496839157440d91affda4025","ssdeep":"12288:Dpl2xL500qco37ZjiqxecNRmRqTqh8TnM9Q26gZC:DpEPEcaF6cN2t1627ZC","tlshash":"cc2584d930f3724df15250a9330b31a7d929a852a85c483c7c76ecc6d9b963e5a22f7c","first_seen":"2026-09-04T14:37:31.713996Z","last_seen":"2026-09-04T14:37:31.713996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Me4GZLCzYlKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:52.049Z","timestamp":1788532612049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v32/KFOmCnqEu92Fr1Me4GZLCzYlKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://doodling.app/\r\nOrigin: https://doodling.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 63464\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:12 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187480\r\nlast-modified: Thu, 01 Aug 2024 20:41:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63464,"size_decoded":64297,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63464, version 1.0","md5":"e507bd45228483ae2f864d36f26bb43e","sha1":"037504f338d7390046a00c0c15856d56de51d108","sha256":"35b02ca266b79eb4996590f15817425a1ce9ebf48f84471843233ff614656bf2","sha512":"851402764c86ad35167a7a5ef725b04e8cbfd78581d388982997a1770b65b994f273015f118b717c6e3d8c7c60c32d7829cfa83f9eea31eb8a304ceef273dab2","ssdeep":"1536:Mpn9s6+NHQ5jF8FrD+Ln4OjUQ6XrXoVOnv6T/jO7CvC1rvRRP:usCor+fjUQuLCr6mUrr","tlshash":"e25302d9f62109ca2add3caa1561fea49f01fcf835fd68caab30b058b256140acd7344","first_seen":"2025-03-15T12:31:16.073357Z","last_seen":"2026-09-04T16:55:10.723957Z","times_seen":9361,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":3,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/a/1cff8098b873570abf5e194f781e85078d6b250ef5b95eb1e03c390f2ab223e2.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:52.739Z","timestamp":1788532612739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/a/1cff8098b873570abf5e194f781e85078d6b250ef5b95eb1e03c390f2ab223e2.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://doodling.app/\r\nOrigin: https://doodling.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 233857\r\ndate: Fri, 04 Sep 2026 14:36:52 GMT\r\nexpires: Sat, 04 Sep 2027 14:36:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 05 Sep 2025 21:50:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":445524,"size_decoded":234703,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"0c3f66348d36bbaac4012e62485c3425","sha1":"190852f07fc78226928d9d689eed53cfec1de001","sha256":"1cff8098b873570abf5e194f781e85078d6b250ef5b95eb1e03c390f2ab223e2","sha512":"32819c406aa29666db5ebc5ed9584e9cc1e9e9e445ea2144148430e3c445dd566de4bccb7f19c2cd2d2bc031019c2290bf98b2a0fc55ceb864edfb5f75915e89","ssdeep":"6144:Zyqy7OGJPNZQPpD3rIxYxsyMTP5bXWQT+E4ybLW6Nt91TeZjZTF+GpARimKJ2Uan:4qyaWQRjVfMl73GaivJRaBsns3xK+2m","tlshash":"fa944c43e76bdd8df74b2eb892729368166dfa3e95ed520bd105ab22e5cf0c04e804d4","first_seen":"2026-06-05T03:59:08.253995Z","last_seen":"2026-09-04T14:37:31.715427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/icons/Icon-192.png","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:50.689Z","timestamp":1788532610689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET /icons/Icon-192.png HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://doodling.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 5292\r\nLast-Modified: Thu, 03 Sep 2026 22:03:49 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eec5-14ac\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5292,"size_decoded":5532,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"ac9a721a12bbc803b44f645561ecb1e1","sha1":"293b2825c89d2abd4b17e2f5ac30c30f5ba3724f","sha256":"3dce99077602f70421c1c6b2a240bc9b83d64d86681d45f2154143310c980be3","sha512":"7de1298a7b5cf2c72d17acecc1f29834c272b3f145cc41d8a7dcaa19cc2a56f7be04678d022ea15b1bcabd00fb795fd3489b7749c295f168532e8310944d8ce8","ssdeep":"96:yA8+THu155ottxwCxV36m/l0yx9bTrWOfu3UMGp37mixLz5imG6pUlU:yAfTO155itxwcV36ENxFuOWEPhLNzUWv","tlshash":"15b18dd24cf2bef243e6b3bfb030c059d1d5b11b9a4250971de968e8e964c92fae1484","first_seen":"2023-04-14T20:11:12Z","last_seen":"2026-09-04T16:41:42.92565Z","times_seen":3517,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/flutter-canvaskit/5f77625673248ee5846fbcaf5d3e1a3878386fd7/canvaskit.wasm","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:50.949Z","timestamp":1788532610949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /flutter-canvaskit/5f77625673248ee5846fbcaf5d3e1a3878386fd7/canvaskit.wasm HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://doodling.app/\r\nOrigin: https://doodling.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: br\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/flutter-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"flutter-team\"\r\nreport-to: {\"group\":\"flutter-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/flutter-team\"}]}\r\ncontent-length: 2280162\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 07:04:21 GMT\r\nexpires: Fri, 03 Sep 2027 07:04:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 11 Aug 2026 17:21:48 GMT\r\ncontent-type: application/wasm\r\nvary: Accept-Encoding\r\nage: 113550\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":7284349,"size_decoded":2281028,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"cafc9159d0fe7a32bb67c7da1dc22846","sha1":"518239021c2b3b7343101539e7ef7650fd35c6c2","sha256":"3ec0b372bbc8da999983d4b24fe78a83259bbc903a57b5103eb18f793caeb911","sha512":"d3fc05e998c95e090429cddaad931b1d21fd0708e4d003c02159ad6cd4537460293bd1d7d06e9981a02657e9cc8f52aa8041959e542d606e1e957cb385782db3","ssdeep":"12288:wihVbaRix9+/34tsj0U2kENfLIz/lqTFrcLyfIEL1fSU6zaJ:4K434ts4U2k9zUTFOeO8","tlshash":"ce25e807b51a98aef400b9771a0da1363717999071a8717adf8d28eb7cffc05249bb70","first_seen":"2026-08-16T00:28:26.085478Z","last_seen":"2026-09-04T14:37:31.717893Z","times_seen":44,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":23,"receive":134,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/assets/FontManifest.json","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:52.016Z","timestamp":1788532612016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET /assets/FontManifest.json HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://doodling.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:52 GMT\r\nContent-Type: application/json\r\nContent-Length: 82\r\nLast-Modified: Thu, 03 Sep 2026 22:03:38 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eeba-52\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":325,"mime_type":"application/json","magic":"JSON text data","md5":"7b2a36307916a9721811788013e65289","sha1":"f83d716c83a8a1cdf2a5c7b5fa387e9a62f2d49d","sha256":"28b1eb2b3d2e1ad60b8c8b0f9100b1ccbf492f7fa97f5bebb51ea97e73926e7d","sha512":"0659dbdc8042768ce6e75c5e36fef1f93fde820dced5e2cf07f0949e59b25f87c01607f97c1926a792dbda28ebd7e4334ad942dfef3782e5ceb61de893f8df67","ssdeep":"","tlshash":"41a0120f005405d540cd9045f0957051e040284b000bc4cad164064493e2130033c307","first_seen":"2023-07-08T16:13:09Z","last_seen":"2026-09-04T16:41:42.95427Z","times_seen":1214,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/assets/fonts/MaterialIcons-Regular.otf","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:52.047Z","timestamp":1788532612047,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://doodling.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:52 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 37612\r\nLast-Modified: Thu, 03 Sep 2026 22:03:37 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eeb9-92ec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37612,"size_decoded":37868,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"e74b335326f801fa04e5683c008461e3","sha1":"dd97757be708a8dc01ec9c3a066d2d9e89945883","sha256":"01759192c96e7126ce09ab11820136b8268c8229e9072d3d58ccfcbdf6321da4","sha512":"5b00d9dee3c6abe17c8258f6a55ed96605c1e52306947e4f7c651369161a2bef37e36aa928e68589d17d19bd35c3a4df1feaaa87b7d6dc125d5302f4cec13585","ssdeep":"768:9HQCy1aNuKc7MHYPw0JQ64jkzR5ipPY1uXYoP+qpMmg:9ReHKKMYY0n4eKPyuXYpUs","tlshash":"acf24a265d99c7cdd047a0f9d3ba0d6142ea430b4a864e44dfb77d2ba80ddb4b60fa07","first_seen":"2026-09-04T14:37:31.718917Z","last_seen":"2026-09-04T14:37:31.718917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodling.app/assets/AssetManifest.bin.json","fqdn":"doodling.app","domain":"doodling.app","tld":"app"},"ip":{"addr":"92.5.31.229","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:52.177Z","timestamp":1788532612177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodling.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 20:26:24 GMT","end":"Wed, 02 Dec 2026 20:26:23 GMT"},"fingerprint":{"sha1":"66:8D:EE:A7:01:40:DA:07:8C:9C:07:05:0B:2F:35:BB:85:D4:2B:73","sha256":"D3:0E:06:71:A2:5E:39:4D:0F:D8:B0:F4:35:70:34:9E:BD:6C:5C:F9:68:73:C8:7A:63:19:13:62:2F:1A:59:37"}}},"request":{"raw":"GET /assets/AssetManifest.bin.json HTTP/1.1\r\nHost: doodling.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://doodling.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.31.4\r\nDate: Fri, 04 Sep 2026 14:36:52 GMT\r\nContent-Type: application/json\r\nContent-Length: 162\r\nLast-Modified: Thu, 03 Sep 2026 22:03:37 GMT\r\nConnection: keep-alive\r\nETag: \"6a99eeb9-a2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":406,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"42ca9b41433babe65ae06b7fdd28d1ea","sha1":"68f2de7f518892084e0762aeed7033ef7f9a7c2f","sha256":"e288631c6f12283ab3a83bb31867249dc6acd0907cf6186be86268ac898288d6","sha512":"76d090b90da1c20cacf445888af176ebf3fe9f44ccf637e2b8f944687406259eadc409799bb066bb81ab165c41dcd0f9ddf83bceadcc49efc1e55582ee710dc6","ssdeep":"","tlshash":"9ec08cb4074f6ec8933a67cceb848fb0142b980302701a97678742e2cf7264125f9ce2","first_seen":"2026-09-04T14:37:31.720844Z","last_seen":"2026-09-04T14:37:31.720844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/a/af2c9fa2534c5e1605d24015fabe84c697e5381b0549e4ad3a1bedc21df911ae.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodling.app/","date":"2026-09-04T14:36:52.738Z","timestamp":1788532612738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/a/af2c9fa2534c5e1605d24015fabe84c697e5381b0549e4ad3a1bedc21df911ae.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://doodling.app/\r\nOrigin: https://doodling.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 00:36:54 GMT\r\nexpires: Fri, 03 Sep 2027 00:36:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:35 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 136798\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33996,"size_decoded":23128,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"GPOS\", 8 names, Microsoft, language 0x409","md5":"ab7fa194aa31081f45ba4e69687525b1","sha1":"b5557a225321dc4354a4555d43c274986d3e2715","sha256":"af2c9fa2534c5e1605d24015fabe84c697e5381b0549e4ad3a1bedc21df911ae","sha512":"59d1679a2dbd515d26e42963e61b3483626013da53d7f27dc1934dc1d9245a8f537b14128cef05cf698ba52e158324659d26d2819c7897feed5525cbefca689e","ssdeep":"768:y8RS3UjNj5KiYRGP4NgVQzCo163qDpfcRVC4/z:bpjsbRGP4NfzCo1XDxcRVC4L","tlshash":"ebe27e1e87d27b93c2a3f9fc495512f5493dbe387bc3e39f215d9a250e402c1684aa8d","first_seen":"2025-07-05T17:47:44.169903Z","last_seen":"2026-09-04T14:37:31.721866Z","times_seen":36,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}