GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
104.17.24.14200 OK 1.3 kB URL
cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP / ASN
104.17.24.14
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (1266)
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 8305
Size 1.3 kB (1300 bytes)
MD5 4412bf8023109ee9eb1f1f226d391329
SHA1 c273960aa874a87dd022b5e597887142f1b8e34f
SHA256 d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
Certificate Info
Issuer Google Trust Services
Subject cdnjs.cloudflare.com
Fingerprint 4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
Validity Thu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 949330adafb556c3-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 877269
expires: Sat, 23 May 2026 01:31:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vxIpYAq%2Bej0%2Bw1gCuWtja6g%2BwAS2ddmNp8CVUOYb9x0uIygZuEozN3QvIqVVyoTSq%2FKrgGbt4PJ268FRlk%2F9ADT95MUyJdR5tkgK3KdR8vOTMOzGEBJjWgOIaE6HLaQAUpuzAAc%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.doodcdn.io/splash/n89n8w1gddt8y9gs.jpg
172.67.75.50200 OK 110 kB URL
img.doodcdn.io/splash/n89n8w1gddt8y9gs.jpg
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 110 kB (109939 bytes)
MD5 61b7c7413278c53ec209d9ead4d7eccc
SHA1 e548585c02c901fddcd02028f475a239e8de2597
SHA256 967836e3b412c4f2555eb385337e81cf5079aba38094a2bda5e265a2223f2b4e
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /splash/n89n8w1gddt8y9gs.jpg HTTP/1.1
Host: img.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: image/jpeg
content-length: 109939
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b58937569b-OSL
cf-bgj: imgq:100,h2pri
cf-polished: origSize=111171
access-control-allow-origin: *
cache-control: max-age=1209600
etag: "645a2dfb-1b243"
expires: Mon, 16 Jun 2025 01:29:46 GMT
last-modified: Tue, 09 May 2023 11:26:51 GMT
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2FjOl%2BqNiCAjAg9oFesh6fnT7FmtBpoNZmWGtC4NYkDlgFhJpNSGqkO6cW5%2BpX%2BvyDpPiG4P%2B3moCj1j6zodmV5T1jS79E7O0CYagWuhrQvfmZVmR55RqORKPz3RImgX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10062&min_rtt=3218&rtt_var=10189&sent=85&recv=13&lost=0&retrans=1&sent_bytes=85717&recv_bytes=2064&delivery_rate=185580&cwnd=35700&unsent_bytes=0&cid=99249cfcae8b4476&ts=1374&x=1", cfExtPri, cfHdrFlush;dur=20
GET i.doodcdn.io/fonts/avertastd-regular-webfont.woff2
172.67.75.50200 OK 24 kB URL
i.doodcdn.io/fonts/avertastd-regular-webfont.woff2
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524
First Seen 2023-04-05
Last Seen 2025-08-01
Times Seen 2974
Size 24 kB (23812 bytes)
MD5 eb586e5a1b86dbf1c866e3ed80f9d18e
SHA1 280ee78d19c017ab9335f769595e5157d3c4a343
SHA256 714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: font/woff2
content-length: 23812
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330bb292b568e-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Tue, 01 Jul 2025 06:05:54 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 35619
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X7avT5k6hT7wqBJe%2BcHDRmPKR07GhVfUiCW%2F5VNUAx1jrVUKQfkhCoby4OSJskeZ3gJP%2Bir3QR7uGaT70e4G9WbmAEjuXAq3LUuenGQu%2FTxj14Ktjy4gZHdHd51TRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8377&min_rtt=3806&rtt_var=3398&sent=218&recv=15&lost=0&retrans=0&sent_bytes=244199&recv_bytes=2750&delivery_rate=5731070&cwnd=192000&unsent_bytes=0&cid=ac9ab601dde309da&ts=1732&x=1", cfExtPri, cfHdrFlush;dur=0
GET leforgotteddisg.com/RXYxQ3dqSVIwShIwYy86EThWGRsMNXIuQi4gcAo/JDFrEDUyNxc3HiFLCHRDd0IEZQcsEgxyT2MFRSIDMAUMclEsGFcsSmMADHJZdVgDbUJjAwxyUTEGUCRKdFBBNwMpSwB0Q31OA3RPckEGdUE
104.21.43.220204 No Content 0 B URL
leforgotteddisg.com/RXYxQ3dqSVIwShIwYy86EThWGRsMNXIuQi4gcAo/JDFrEDUyNxc3HiFLCHRDd0IEZQcsEgxyT2MFRSIDMAUMclEsGFcsSmMADHJZdVgDbUJjAwxyUTEGUCRKdFBBNwMpSwB0Q31OA3RPckEGdUE
IP / ASN
104.21.43.220
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject leforgotteddisg.com
Fingerprint DE:81:E2:9B:D5:56:DF:5B:6C:11:F1:0B:3B:70:1A:45:63:21:02:65
Validity Tue, 22 Apr 2025 10:34:47 GMT - Mon, 21 Jul 2025 11:32:53 GMT
GET /RXYxQ3dqSVIwShIwYy86EThWGRsMNXIuQi4gcAo/JDFrEDUyNxc3HiFLCHRDd0IEZQcsEgxyT2MFRSIDMAUMclEsGFcsSmMADHJZdVgDbUJjAwxyUTEGUCRKdFBBNwMpSwB0Q31OA3RPckEGdUE HTTP/1.1
Host: leforgotteddisg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 02 Jun 2025 01:31:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Amm7A6cTOpjbF4tNEI4oCKMg4Z9hUekZFhStQ%2FUHnPcbx2SYzdKEl0aunKTN0v0aSKKNk46adJyxtN3YMAp5zkhR47qe4yzvvuzJDLJsi7MW"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 949330bd4fea0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS segarkojiri.top/cuid/?f=https%3A%2F%2Fdoply.net
94.242.236.147200 OK 0 B URL
segarkojiri.top/cuid/?f=https%3A%2F%2Fdoply.net
IP / ASN
94.242.236.147
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer ZeroSSL
Subject segarkojiri.top
Fingerprint B1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7
Validity Tue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /cuid/?f=https%3A%2F%2Fdoply.net HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://doply.net/
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jun 2025 01:31:18 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://doply.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET cdn.tsyndicate.com/sdk/v1/puengine.js
45.133.44.71200 OK 90 kB URL
cdn.tsyndicate.com/sdk/v1/puengine.js
IP / ASN
45.133.44.71
#39572 DataWeb Global Group B.V.
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-01-15
Last Seen 2025-08-02
Times Seen 903
Size 90 kB (89562 bytes)
MD5 87781e1d7683222115078304d2414b35
SHA1 8bf54dd8a67d75a6f38ab240d47007c12c6e2fdc
SHA256 37cf30c764c95d5900378ec4e56d09a6088a8b90ed7540c0b7cd3abebba37459
Certificate Info
Issuer Let's Encrypt
Subject cdn.tsyndicate.com
Fingerprint C8:21:B5:22:CE:B2:90:D0:CE:CF:F7:57:FA:B4:14:52:BA:AF:3B:EF
Validity Fri, 04 Apr 2025 07:32:05 GMT - Thu, 03 Jul 2025 07:32:04 GMT
GET /sdk/v1/puengine.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Wed, 15 Jan 2025 14:08:26 GMT
etag: W/"6787c15a-15dda"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Wed, 04 Jun 2025 01:31:18 GMT
vary: Accept-Encoding
x-cdn-host-id: ah1742,ds9201
x-proxy-cache: HIT
X-Firefox-Spdy: h2
GET isolatedovercomepasted.com/jserror?type=banner&abvar=0&build=1.0.552&zoneid=1841674&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F
94.242.247.24200 OK 0 B URL
isolatedovercomepasted.com/jserror?type=banner&abvar=0&build=1.0.552&zoneid=1841674&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint BB:6D:E1:77:DE:80:15:9D:0B:90:58:D2:8F:D7:8F:9A:59:F5:B5:53
Validity Mon, 03 Mar 2025 23:53:40 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /jserror?type=banner&abvar=0&build=1.0.552&zoneid=1841674&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F HTTP/1.1
Host: isolatedovercomepasted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: cart=1; cart_p=2; CHCK=1; UID=25060120315ccdb2f0c3c648beadb6fc8c1d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:19 GMT
content-type: application/octet-stream
content-length: 0
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.74.35200 OK 40 kB URL
fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
First Seen 2025-01-08
Last Seen 2025-08-02
Times Seen 97599
Size 40 kB (40128 bytes)
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
Validity Mon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 May 2025 10:03:46 GMT
expires: Fri, 29 May 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 314865
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET doply.net/d/c3x5qidmvwtw/
104.26.4.85200 OK 18 kB URL
doply.net/d/c3x5qidmvwtw/
IP / ASN
104.26.4.85
#13335 CLOUDFLARENET
Resource Info
File type HTML document, ASCII text, with very long lines (18317), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 18 kB (18317 bytes)
MD5 8bf5b47eb7f0ebceffe4ff18c5d56d4c
SHA1 190ef292c6dbd0e252348400bf040c29437b8f1b
SHA256 85ebdb7c1c2291ad74b731348bbed2b5360430f4b50306a921aa2f8df9449315
Certificate Info
Issuer Google Trust Services
Subject doply.net
Fingerprint 4E:5D:5F:2C:19:38:42:0B:22:C2:28:41:55:6E:DA:EC:FA:5E:1A:AF
Validity Sun, 18 May 2025 10:09:34 GMT - Sat, 16 Aug 2025 11:07:21 GMT
GET /d/c3x5qidmvwtw/ HTTP/1.1
Host: doply.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:14 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 949330a99e585688-OSL
vary: Accept-Encoding
expires: Sun, 01 Jun 2025 01:31:14 GMT
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7cYsy9AuaRcuPM7j4MkcavOMBvlMFWBEGmbm9nTHIL1IRK%2FnXN3xPz4FwwTrVApyklOYi4GQf%2FfiKDklGny%2BUv%2FXli2c2IPWM5kNV7vdO9yPpNgY2NGcbsb2Qw%3D%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: lang=1; HttpOnly; Path=/; Domain=doply.net
server-timing: cfL4;desc="?proto=TCP&rtt=5573&min_rtt=383&rtt_var=10352&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3270&recv_bytes=1255&delivery_rate=7489655&cwnd=254&unsent_bytes=0&cid=e75c8c00dd34e57f&ts=137&x=0"
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
104.17.24.14200 OK 88 kB URL
cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP / ASN
104.17.24.14
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65451)
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 75345
Size 88 kB (88145 bytes)
MD5 220afd743d9e9643852e31a135a9f3ae
SHA1 88523924351bac0b5d560fe0c5781e2556e7693d
SHA256 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
Certificate Info
Issuer Google Trust Services
Subject cdnjs.cloudflare.com
Fingerprint 4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
Validity Thu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 949330ad5f9656c3-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 259363
expires: Sat, 23 May 2026 01:31:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKQE6XLfHrYbuQ%2BL7IaDjIQh3%2F7MlhD4G00LUvm7zXUgGIaEDMrQKiXK%2FzZp5zY4iDoVQSwi8xWgDqmQUJt1HBsV4b4UJxwGAShLI9hRz03ujqFKLur2%2B05A89GiioyORs1%2FQdTW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.doodcdn.io/theme_2/fonts/avertastd-bold-webfont.woff2
172.67.75.50200 OK 24 kB URL
i.doodcdn.io/theme_2/fonts/avertastd-bold-webfont.woff2
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 23604, version 1.0
First Seen 2023-04-30
Last Seen 2025-08-01
Times Seen 1010
Size 24 kB (23604 bytes)
MD5 e9133fd11f14c09a2e4556c395a0ef7d
SHA1 00fad09605f3342df5c9aeba130156fe19ade8b0
SHA256 06244cc9cd0c998581b1bf93f5222deee7d2d0b09299190e163961afa973ba91
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /theme_2/fonts/avertastd-bold-webfont.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: font/woff2
content-length: 23604
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b09c1c568e-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Tue, 01 Jul 2025 11:22:32 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 34351
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dkHkWH3OyoAVfha%2BuQfKdxStBjNiAKdA7XPr3tpyczIzBoLSz36dlSNIgIzZvn%2FreX%2ByhLKOyOABNT5ZgsEOc%2Bk9e9YlhCK5MntZEi0bp4Z6doEHgT8aU2gB1wYEiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4931&min_rtt=3806&rtt_var=2231&sent=24&recv=8&lost=0&retrans=0&sent_bytes=16191&recv_bytes=1900&delivery_rate=168659&cwnd=12000&unsent_bytes=0&cid=ac9ab601dde309da&ts=37&x=1", cfExtPri, cfHdrFlush;dur=29
GET undefined/Q2JuR04iAA0qcSJfDGE7MQ5TYnwFR1wBKjZSHjIqcxEKKyM5BEAkIiwXCiE8LAwaaSAmFkt1CAsxBXYZDiU/NwcpCjkQNHcJIyB/JwQ2KyUBJCg0HhAwOAYgIBIhEg8KL1wKehUwLDQEOjQIBCQzFSkqGyQjPSR+ETNaLwI5BSgXDyAXDQIfJi4ABSMFBQk1BzknIBYnewggFn8VAC0wNxYOAmJ8AQMXCRwUMQ0uAgUJJw0nOxgvLgRmUCgefBo0OCk+Lys4LAUPCycvH3MkWiEaKyc/HyZ6OBkFBSYPBistKCRaIR0FOC0pNnYBGQojIVFXKh0FKEt1DCIlQxE3EjoGfgQGOCwiHzsML3YMKAQ2fxgVDAE2A3IvPg0ZKwkKKxR1BCkeDxU6Hn8tNCg7Cw0SCTgWBy8sNgoNCgwaYnwBOwZyGyEmBjUPEkQENCEtElMLGwcpBCU7KQkMKXsbLw0
0.0.0.0 0 B URL
undefined/Q2JuR04iAA0qcSJfDGE7MQ5TYnwFR1wBKjZSHjIqcxEKKyM5BEAkIiwXCiE8LAwaaSAmFkt1CAsxBXYZDiU/NwcpCjkQNHcJIyB/JwQ2KyUBJCg0HhAwOAYgIBIhEg8KL1wKehUwLDQEOjQIBCQzFSkqGyQjPSR+ETNaLwI5BSgXDyAXDQIfJi4ABSMFBQk1BzknIBYnewggFn8VAC0wNxYOAmJ8AQMXCRwUMQ0uAgUJJw0nOxgvLgRmUCgefBo0OCk+Lys4LAUPCycvH3MkWiEaKyc/HyZ6OBkFBSYPBistKCRaIR0FOC0pNnYBGQojIVFXKh0FKEt1DCIlQxE3EjoGfgQGOCwiHzsML3YMKAQ2fxgVDAE2A3IvPg0ZKwkKKxR1BCkeDxU6Hn8tNCg7Cw0SCTgWBy8sNgoNCgwaYnwBOwZyGyEmBjUPEkQENCEtElMLGwcpBCU7KQkMKXsbLw0
IP / ASN
0.0.0.0
#0
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /Q2JuR04iAA0qcSJfDGE7MQ5TYnwFR1wBKjZSHjIqcxEKKyM5BEAkIiwXCiE8LAwaaSAmFkt1CAsxBXYZDiU/NwcpCjkQNHcJIyB/JwQ2KyUBJCg0HhAwOAYgIBIhEg8KL1wKehUwLDQEOjQIBCQzFSkqGyQjPSR+ETNaLwI5BSgXDyAXDQIfJi4ABSMFBQk1BzknIBYnewggFn8VAC0wNxYOAmJ8AQMXCRwUMQ0uAgUJJw0nOxgvLgRmUCgefBo0OCk+Lys4LAUPCycvH3MkWiEaKyc/HyZ6OBkFBSYPBistKCRaIR0FOC0pNnYBGQojIVFXKh0FKEt1DCIlQxE3EjoGfgQGOCwiHzsML3YMKAQ2fxgVDAE2A3IvPg0ZKwkKKxR1BCkeDxU6Hn8tNCg7Cw0SCTgWBy8sNgoNCgwaYnwBOwZyGyEmBjUPEkQENCEtElMLGwcpBCU7KQkMKXsbLw0 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
POST betotodilea.com/401/4857535?oo=1&sw_version=v1.635.0&oaid=u4fv480434sh227722217w7w4xlwx742&tgp=
139.45.197.104200 OK 2.4 kB URL
betotodilea.com/401/4857535?oo=1&sw_version=v1.635.0&oaid=u4fv480434sh227722217w7w4xlwx742&tgp=
IP / ASN
139.45.197.104
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 2.4 kB (2407 bytes)
MD5 ade805735d7f7e6d6afc0d5a21f1dff3
SHA1 06b331054d85c17fe072b7b6bd11861bc5b05db4
SHA256 f9f5b97b8b0197a799657007660fad7c61b2d7e01f16a7facde57fcaf2a51c38
Certificate Info
Issuer Let's Encrypt
Subject betotodilea.com
Fingerprint 52:DD:84:C3:DF:8B:D7:F5:39:6F:8F:B6:E3:0A:14:B3:B2:C8:75:06
Validity Wed, 09 Apr 2025 02:23:21 GMT - Tue, 08 Jul 2025 02:23:20 GMT
POST /401/4857535?oo=1&sw_version=v1.635.0&oaid=u4fv480434sh227722217w7w4xlwx742&tgp= HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2545
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: OAID=0301dc418fcc4810f66c4496ffbf1b8b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:19 GMT
content-type: application/json
x-trace-id: 10f7658f3ce8de1d968f3ceacab1c435
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://doply.net
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
set-cookie: OAID=u4fv480434sh227722217w7w4xlwx742; expires=Tue, 02 Jun 2026 01:31:19 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET doply.net/e/c3x5qidmvwtw
104.26.4.85200 OK 38 kB URL
doply.net/e/c3x5qidmvwtw
IP / ASN
104.26.4.85
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type HTML document, ASCII text, with very long lines (37721), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 38 kB (37721 bytes)
MD5 16c4fef4f7051d83bbb93f96f7755273
SHA1 df26b88e65e158923424daaaa2b70d65ea8f2b12
SHA256 e9997c984851b8cd88cb1e07fac2ad334e820b129516b863cf49070d362c79f4
Certificate Info
Issuer Google Trust Services
Subject doply.net
Fingerprint 4E:5D:5F:2C:19:38:42:0B:22:C2:28:41:55:6E:DA:EC:FA:5E:1A:AF
Validity Sun, 18 May 2025 10:09:34 GMT - Sat, 16 Aug 2025 11:07:21 GMT
GET /e/c3x5qidmvwtw HTTP/1.1
Host: doply.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/d/c3x5qidmvwtw/
Cookie: lang=1; dref_url=none
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: text/html; charset=UTF-8
cf-ray: 949330b049695688-OSL
server: cloudflare
content-encoding: br
vary: Accept-Encoding
expires: Sun, 01 Jun 2025 01:31:15 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3s%2BOX4xkJNuIKIe4X%2FGSvpJ5rKLffU6bXLWfhd8p1y%2BW8CPS8PN3j2um%2By3Hf4O36fL8NLeTdpWeXXaobhkcU76CVwq6%2FIFXwesY%2FKmrXJucJ9oXJ%2FZRsTSR7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1967&min_rtt=383&rtt_var=1561&sent=45&recv=37&lost=0&retrans=1&sent_bytes=50909&recv_bytes=1495&delivery_rate=2903466&cwnd=257&unsent_bytes=0&cid=e75c8c00dd34e57f&ts=1167&x=0"
X-Firefox-Spdy: h2
GET my.rtmark.net/gid.js
104.18.41.22200 OK 65 B IP / ASN
104.18.41.22
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 65 B (65 bytes)
MD5 cf00a7c0bc0dbaedebe7868afdc1388d
SHA1 c5b30f7a97812503a68b923499266f4ef55b6417
SHA256 19a93c960493e843f9de3788bc8807c1fc6d5308106a0d4a2c16a776cbd8c6ea
Certificate Info
Issuer Google Trust Services
Subject my.rtmark.net
Fingerprint 61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
Validity Fri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://doply.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0801dcfd3ec54e37e8f966d1a360153c; expires=Tue, 02 Jun 2026 01:31:17 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 949330b7697ab51e-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js
104.17.24.14200 OK 589 kB URL
cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js
IP / ASN
104.17.24.14
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (48459)
First Seen 2023-10-15
Last Seen 2025-07-31
Times Seen 1617
Size 589 kB (589278 bytes)
MD5 d7fdaaab43bc993b85290c713fd2d289
SHA1 46bf3d27b2cf38b0e999d3b0a7613011181c87f9
SHA256 c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e
Certificate Info
Issuer Google Trust Services
Subject cdnjs.cloudflare.com
Fingerprint 4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
Validity Thu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 949330b55c205691-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 876241
expires: Sat, 23 May 2026 01:31:16 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=npuE1XFNaV7emWiMSstoNqzJVtgJpl8KZ6OuOzBlUKZvIivnwZHug99SsKEjc9jxcnz9BZdTuXkgGTx8sK110VBDYZpcNlMWz4vVY5tV5CHHo4PCEsomT9wKunvLHpQI6C%2FLfnEV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET betotodilea.com/impression/hrHyj87P6RdEPVSUKa8v-UfvpNvXTp1d8s7QtduCCdoPpeqC40f0vXfmdt-kervGgvaFP6yFUH_s5MOpA7CAhEagU3u4TqXnYP3i37IfHdYFZRTP4ROxYWPs-v1llzZSS5uwdWGvYsyo2QySa4Z639E-MdA9rk3w1oTtJew1Y7wcSSnTXkTM3B4NeiL_OErvh6UJ3F602NH0Lel4eYx4GXOz2FqIyGmE_jT3kUIS6G6F8BXu_ZpNspSfASdgiWp1WHufC9eEjTu-pn2XbYoPK0HDTiiTlLGzKhtnf5KCwNmQD17j-FuhOmecJjF7OxkyEhn6L5ISqqeHcP2VwUOURQmTDjNANBOmOh5o7S7ZcKf-W58ilYY5gsczAHqVb1wtPfrLIBfGdUa60PntAPm3bL5IKS6FrL4kNai_5QTY1vvCbarCDgV5_SXb4qeZgT1N15sOLKggR-KkgodiDPpGud5hzg2WbvWwkqMmxE9R5mGnbWWgPIus4oVdrN0XtBBxEOsnTtshdjFNb4ZIGLkyrLMYymwXuRR-uszAex3sr9o96v92uVp6rfNTHAtQ2rH-G9aFIZt_R0Kv8VsDK0JC64fv3CvZbc24tLwG28GjzSuYXaWSzqwsT7OZvAJPL2wGTMJn9IFg8Pk4Fm5AUAMXS8c24NULNRBlbkKJg-q4gTZtLt3JQGeJq6L0wvXPncoB4-6C2JYfS-crnyZcoZrZWS8jVF8bnYidsUE521_EoZbI8XfN_Pq780AY5GRFfdo4kxuCGSYAlmWb3YxepsYA7IS3cKjt6VnCs79cq5XktqJb5dFr77cfokQGRvuk0hBc_TRNbxTT_VASTSx9SXP796R2URwcv7uf8OUZLQ==?_z=4857535&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1
139.45.197.104200 OK 43 B URL
betotodilea.com/impression/hrHyj87P6RdEPVSUKa8v-UfvpNvXTp1d8s7QtduCCdoPpeqC40f0vXfmdt-kervGgvaFP6yFUH_s5MOpA7CAhEagU3u4TqXnYP3i37IfHdYFZRTP4ROxYWPs-v1llzZSS5uwdWGvYsyo2QySa4Z639E-MdA9rk3w1oTtJew1Y7wcSSnTXkTM3B4NeiL_OErvh6UJ3F602NH0Lel4eYx4GXOz2FqIyGmE_jT3kUIS6G6F8BXu_ZpNspSfASdgiWp1WHufC9eEjTu-pn2XbYoPK0HDTiiTlLGzKhtnf5KCwNmQD17j-FuhOmecJjF7OxkyEhn6L5ISqqeHcP2VwUOURQmTDjNANBOmOh5o7S7ZcKf-W58ilYY5gsczAHqVb1wtPfrLIBfGdUa60PntAPm3bL5IKS6FrL4kNai_5QTY1vvCbarCDgV5_SXb4qeZgT1N15sOLKggR-KkgodiDPpGud5hzg2WbvWwkqMmxE9R5mGnbWWgPIus4oVdrN0XtBBxEOsnTtshdjFNb4ZIGLkyrLMYymwXuRR-uszAex3sr9o96v92uVp6rfNTHAtQ2rH-G9aFIZt_R0Kv8VsDK0JC64fv3CvZbc24tLwG28GjzSuYXaWSzqwsT7OZvAJPL2wGTMJn9IFg8Pk4Fm5AUAMXS8c24NULNRBlbkKJg-q4gTZtLt3JQGeJq6L0wvXPncoB4-6C2JYfS-crnyZcoZrZWS8jVF8bnYidsUE521_EoZbI8XfN_Pq780AY5GRFfdo4kxuCGSYAlmWb3YxepsYA7IS3cKjt6VnCs79cq5XktqJb5dFr77cfokQGRvuk0hBc_TRNbxTT_VASTSx9SXP796R2URwcv7uf8OUZLQ==?_z=4857535&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1
IP / ASN
139.45.197.104
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type GIF image data, version 89a, 1 x 1
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 80193
Size 43 B (43 bytes)
MD5 b4491705564909da7f9eaf749dbbfbb1
SHA1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8
SHA256 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Certificate Info
Issuer Let's Encrypt
Subject betotodilea.com
Fingerprint 52:DD:84:C3:DF:8B:D7:F5:39:6F:8F:B6:E3:0A:14:B3:B2:C8:75:06
Validity Wed, 09 Apr 2025 02:23:21 GMT - Tue, 08 Jul 2025 02:23:20 GMT
GET /impression/hrHyj87P6RdEPVSUKa8v-UfvpNvXTp1d8s7QtduCCdoPpeqC40f0vXfmdt-kervGgvaFP6yFUH_s5MOpA7CAhEagU3u4TqXnYP3i37IfHdYFZRTP4ROxYWPs-v1llzZSS5uwdWGvYsyo2QySa4Z639E-MdA9rk3w1oTtJew1Y7wcSSnTXkTM3B4NeiL_OErvh6UJ3F602NH0Lel4eYx4GXOz2FqIyGmE_jT3kUIS6G6F8BXu_ZpNspSfASdgiWp1WHufC9eEjTu-pn2XbYoPK0HDTiiTlLGzKhtnf5KCwNmQD17j-FuhOmecJjF7OxkyEhn6L5ISqqeHcP2VwUOURQmTDjNANBOmOh5o7S7ZcKf-W58ilYY5gsczAHqVb1wtPfrLIBfGdUa60PntAPm3bL5IKS6FrL4kNai_5QTY1vvCbarCDgV5_SXb4qeZgT1N15sOLKggR-KkgodiDPpGud5hzg2WbvWwkqMmxE9R5mGnbWWgPIus4oVdrN0XtBBxEOsnTtshdjFNb4ZIGLkyrLMYymwXuRR-uszAex3sr9o96v92uVp6rfNTHAtQ2rH-G9aFIZt_R0Kv8VsDK0JC64fv3CvZbc24tLwG28GjzSuYXaWSzqwsT7OZvAJPL2wGTMJn9IFg8Pk4Fm5AUAMXS8c24NULNRBlbkKJg-q4gTZtLt3JQGeJq6L0wvXPncoB4-6C2JYfS-crnyZcoZrZWS8jVF8bnYidsUE521_EoZbI8XfN_Pq780AY5GRFfdo4kxuCGSYAlmWb3YxepsYA7IS3cKjt6VnCs79cq5XktqJb5dFr77cfokQGRvuk0hBc_TRNbxTT_VASTSx9SXP796R2URwcv7uf8OUZLQ==?_z=4857535&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: OAID=0801dcfd3ec54e37e8f966d1a360153c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:31 GMT
content-type: image/gif
content-length: 43
x-trace-id: 37bb24deccec4bec1a6675260efd9aec
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET isolatedovercomepasted.com/lv/esnk/1841674/code.js
94.242.247.24200 OK 165 kB URL
isolatedovercomepasted.com/lv/esnk/1841674/code.js
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-05-30
Last Seen 2025-06-09
Times Seen 35
Size 165 kB (165399 bytes)
MD5 e3d2b19ecfb98d95b3290bd6e482d5f7
SHA1 424eee51654ed31775afc62009bf017058c7c452
SHA256 04d9e4b21013337d0e86c6d2585112fc9bc365259ade972f4dc8e4b5b9be26fe
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint BB:6D:E1:77:DE:80:15:9D:0B:90:58:D2:8F:D7:8F:9A:59:F5:B5:53
Validity Mon, 03 Mar 2025 23:53:40 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /lv/esnk/1841674/code.js HTTP/1.1
Host: isolatedovercomepasted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 30 May 2025 10:36:20 GMT
vary: Accept-Encoding
etag: W/"68398a24-286bd"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
142.250.74.10200 OK 18 kB URL
fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
IP / ASN
142.250.74.10
#15169 GOOGLE
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ASCII text
First Seen 2024-10-17
Last Seen 2025-06-02
Times Seen 122
Size 18 kB (18255 bytes)
MD5 16d769de72b66648b48ea896755da441
SHA1 28e1c4468bc980bb8b9bfdab5bd256acb0b6dcf4
SHA256 c3482415177813410f604787dd9f27ba54bea4f4eca78f83cc2afaebd7b56392
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint 1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73
Validity Mon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
GET /css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 02 Jun 2025 01:31:15 GMT
date: Mon, 02 Jun 2025 01:31:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET doply.net/sw.js
104.26.4.85200 OK 103 kB IP / ASN
104.26.4.85
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-03-08
Last Seen 2025-07-30
Times Seen 312
Size 103 kB (102634 bytes)
MD5 5a640158e056b33f4b8d128d6391abfe
SHA1 771038c5e54ac3ea809bf5243aa17214ada6faeb
SHA256 38a182529482fb6c78544580680b0fcd567260a220e36f8b208f65043289469e
Certificate Info
Issuer Google Trust Services
Subject doply.net
Fingerprint 4E:5D:5F:2C:19:38:42:0B:22:C2:28:41:55:6E:DA:EC:FA:5E:1A:AF
Validity Sun, 18 May 2025 10:09:34 GMT - Sat, 16 Aug 2025 11:07:21 GMT
GET /sw.js HTTP/1.1
Host: doply.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/d/c3x5qidmvwtw/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: application/javascript
content-length: 38291
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 949330acef915688-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Sun, 24 May 2026 15:50:05 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 726070
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h5S6tU6NpYl2Zko6GxNeLLGCTeMBrGmJSDK7kfqUsnRE9mDZgJS7Vd55S6J7cQn%2BfPVNI%2BxTkra4SNaD3sYl%2BOHuXOnRcgcxILiENvrAUZhAMFjwfrguUJBYKw%3D%3D"}],"group":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=2475&min_rtt=383&rtt_var=4022&sent=14&recv=19&lost=0&retrans=0&sent_bytes=10095&recv_bytes=1388&delivery_rate=11383647&cwnd=257&unsent_bytes=0&cid=e75c8c00dd34e57f&ts=558&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/css/embed.css
172.67.75.50200 OK 80 kB URL
i.doodcdn.io/css/embed.css
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type Unicode text, UTF-8 text, with very long lines (40048)
First Seen 2025-04-07
Last Seen 2025-07-31
Times Seen 702
Size 80 kB (79889 bytes)
MD5 c4907b4a84bd80e4ccec940bf9d7f1ec
SHA1 d36c11083cb2f86b99e2380d8c22cf13e74dbb29
SHA256 f9535c07a6c50f5094b5a0caf5475823b3b32e9998a72cf6ad6d811dc7985d3d
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: text/css
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b53914569b-OSL
last-modified: Wed, 05 Mar 2025 20:32:22 GMT
vary: Accept-Encoding
etag: W/"67c8b4d6-13811"
expires: Tue, 01 Jul 2025 05:55:46 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 69591
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XFhVhBWz2zJEYXK9NrZcLu8o6gEPfk4QhVlhEfLyVXZLiOzkjjiPCHwfhbQEwboFofWFcf06qZzzrPkon5muxaNnWHU7iCSKo8RIpXlaI%2BFWeT9vib4O5NrJF%2F2Gqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5012&min_rtt=3218&rtt_var=2488&sent=14&recv=8&lost=0&retrans=0&sent_bytes=4981&recv_bytes=1402&delivery_rate=197908&cwnd=12000&unsent_bytes=0&cid=99249cfcae8b4476&ts=1146&x=1", cfExtPri, cfHdrFlush;dur=0
GET divisiondrearilyunfiled.com/aas/r45d/vki/1941940/4d81a660.js
94.242.247.24200 OK 153 kB URL
divisiondrearilyunfiled.com/aas/r45d/vki/1941940/4d81a660.js
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-05-30
Last Seen 2025-06-09
Times Seen 124
Size 153 kB (152806 bytes)
MD5 14e540919fb85e015b956488c44c00ca
SHA1 7499cdf4a275673cdae275454cf4ad059373b957
SHA256 43d7e1583f1b68abdd831637745eab7e3b15424546f64f578e9dddb361bf3e29
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint CF:34:D4:54:A1:7A:18:F4:1A:75:2E:BB:C8:B3:74:87:96:B5:A3:6C
Validity Mon, 03 Mar 2025 23:54:00 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /aas/r45d/vki/1941940/4d81a660.js HTTP/1.1
Host: divisiondrearilyunfiled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 30 May 2025 10:36:20 GMT
vary: Accept-Encoding
etag: W/"68398a24-2558a"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdn.tsyndicate.com/ed85951b219e49ffa74b7b74a3c8089c.js
45.133.44.71404 Not Found 0 B URL
cdn.tsyndicate.com/ed85951b219e49ffa74b7b74a3c8089c.js
IP / ASN
45.133.44.71
#39572 DataWeb Global Group B.V.
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject cdn.tsyndicate.com
Fingerprint C8:21:B5:22:CE:B2:90:D0:CE:CF:F7:57:FA:B4:14:52:BA:AF:3B:EF
Validity Fri, 04 Apr 2025 07:32:05 GMT - Thu, 03 Jul 2025 07:32:04 GMT
GET /ed85951b219e49ffa74b7b74a3c8089c.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 02 Jun 2025 01:31:18 GMT
content-type: text/html; charset=utf-8
server: nginx
content-encoding: gzip
x-cdn-host-id: ah1742,ds9201
x-proxy-cache: HIT
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMYW1WB6mSoeaxpx6oZOt2sQQWyYQSXBOEcnHXC1n8WcWeGb9fc9qViXnyTPFbOlHhCr_6klA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827878986968
173.194.73.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMYW1WB6mSoeaxpx6oZOt2sQQWyYQSXBOEcnHXC1n8WcWeGb9fc9qViXnyTPFbOlHhCr_6klA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827878986968
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint 31:37:65:D4:D0:2D:38:C0:2E:38:70:AC:D7:8C:63:87:F6:17:32:F7
Validity Mon, 12 May 2025 08:43:08 GMT - Mon, 04 Aug 2025 08:43:07 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMYW1WB6mSoeaxpx6oZOt2sQQWyYQSXBOEcnHXC1n8WcWeGb9fc9qViXnyTPFbOlHhCr_6klA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827878986968 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 02 Jun 2025 01:31:19 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-o41G3PR1HXNsohNRf8TZ0A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4AFqKlLDbhI.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=0cf28b2a-e781-49c9-9ca9-10b5f9c1f335
139.45.195.252200 OK 12 B URL
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=0cf28b2a-e781-49c9-9ca9-10b5f9c1f335
IP / ASN
139.45.195.252
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JSON text data
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 49658
Size 12 B (12 bytes)
MD5 adb4650bfc9d2a73d4dd69583b0ceb14
SHA1 1ce399d6e936232aaf2192cd7903a279c5015f22
SHA256 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Certificate Info
Issuer Sectigo Limited
Subject fleraprt.com
Fingerprint 23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0
Validity Wed, 11 Dec 2024 00:00:00 GMT - Sun, 11 Jan 2026 23:59:59 GMT
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=0cf28b2a-e781-49c9-9ca9-10b5f9c1f335 HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1412
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Mon, 02 Jun 2025 01:31:20 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://doply.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
GET betotodilea.com/500/4857535?excludes=&oaid=0801dcfd3ec54e37e8f966d1a360153c&var=&ymid=&tgp=&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1
139.45.197.104200 OK 2.2 kB URL
betotodilea.com/500/4857535?excludes=&oaid=0801dcfd3ec54e37e8f966d1a360153c&var=&ymid=&tgp=&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1
IP / ASN
139.45.197.104
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 2.2 kB (2199 bytes)
MD5 0dae2ce339fcfe9b91e7a86625d0f2db
SHA1 ac249a5c4984c5e327bb2699df86169374de5e86
SHA256 8545b44a162535f871d524e474c798bf4a442fcc852945395a733945a5d31072
Certificate Info
Issuer Let's Encrypt
Subject betotodilea.com
Fingerprint 52:DD:84:C3:DF:8B:D7:F5:39:6F:8F:B6:E3:0A:14:B3:B2:C8:75:06
Validity Wed, 09 Apr 2025 02:23:21 GMT - Tue, 08 Jul 2025 02:23:20 GMT
GET /500/4857535?excludes=&oaid=0801dcfd3ec54e37e8f966d1a360153c&var=&ymid=&tgp=&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: OAID=u4fv480434sh227722217w7w4xlwx742
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:21 GMT
content-type: application/javascript
x-trace-id: a50b04a3fb1830f6525a38b522b67fd5
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://doply.net
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
set-cookie: OAID=0801dcfd3ec54e37e8f966d1a360153c; expires=Tue, 02 Jun 2026 01:31:21 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
POST betotodilea.com/split_track?action=first_match&zone=4857535&oaid=undefined&requesting%20options%20with%20retry=false
139.45.197.104204 No Content 0 B URL
betotodilea.com/split_track?action=first_match&zone=4857535&oaid=undefined&requesting%20options%20with%20retry=false
IP / ASN
139.45.197.104
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject betotodilea.com
Fingerprint 52:DD:84:C3:DF:8B:D7:F5:39:6F:8F:B6:E3:0A:14:B3:B2:C8:75:06
Validity Wed, 09 Apr 2025 02:23:21 GMT - Tue, 08 Jul 2025 02:23:20 GMT
POST /split_track?action=first_match&zone=4857535&oaid=undefined&requesting%20options%20with%20retry=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: OAID=0301dc418fcc4810f66c4496ffbf1b8b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
server: nginx
date: Mon, 02 Jun 2025 01:31:16 GMT
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, favicon
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
104.17.24.14200 OK 90 kB URL
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP / ASN
104.17.24.14
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, ASCII text, with very long lines (65451)
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 127510
Size 90 kB (89476 bytes)
MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a
SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342
SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Certificate Info
Issuer Google Trust Services
Subject cdnjs.cloudflare.com
Fingerprint 4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
Validity Thu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 949330b53c125691-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 258262
expires: Sat, 23 May 2026 01:31:16 GMT
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPMUETRPn96yc8XTnEmIputS4lgqAyf8qSjm8ACPyAdc1KUhCzbN%2FbcHt0VijFYgQKQ0qUqt6UlGDPhToq4rtjbB5NNSZHl29pwOrj8ySohKTAf7eg4qLSbgiy2gjmJ8AYkWkHSG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET i.doodcdn.io/ads/ad.js
172.67.75.50200 OK 20 B URL
i.doodcdn.io/ads/ad.js
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type ASCII text, with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 1738
Size 20 B (20 bytes)
MD5 69a305bcdc8e061bbd43294a477a3678
SHA1 506582a1d912d546f5942d95ffae95ec7f4c37ce
SHA256 8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: application/javascript
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b53913569b-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: public, max-age=2592000
expires: Sun, 31 May 2026 22:46:29 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 72135
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1FDmXXZX44%2BAfvw0NFTZVPZBbdz3iAwDbGpFkap2ujgHZsGrZhBQ9fDF%2FEnu17Vy5bRZYDv4zOJSd8SIjXJbf%2Fsp%2FM3ptuufUSJ5%2B%2B4kgt6G8QQY9i78wwRsnR8qaA%3D%3D"}],"group":"cf-nel","max_age":604800}
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5012&min_rtt=3218&rtt_var=2488&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4157&recv_bytes=1402&delivery_rate=197908&cwnd=12000&unsent_bytes=0&cid=99249cfcae8b4476&ts=1146&x=1", cfExtPri, cfHdrFlush;dur=0
GET appointeeivyspongy.com/jserror?type=banner&abvar=0&build=1.0.552&zoneid=1841679&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F
94.242.247.24200 OK 0 B URL
appointeeivyspongy.com/jserror?type=banner&abvar=0&build=1.0.552&zoneid=1841679&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint 22:0A:29:24:35:4B:B9:91:E2:D5:B4:B8:11:B7:D6:27:9C:32:E6:30
Validity Mon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /jserror?type=banner&abvar=0&build=1.0.552&zoneid=1841679&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F HTTP/1.1
Host: appointeeivyspongy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: cart=1; cart_p=2; CHCK=1; UID=250601203127b0e0cfd94e40d2af2873cfda
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: application/octet-stream
content-length: 0
X-Firefox-Spdy: h2
OPTIONS hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
94.242.236.142200 OK 0 B URL
hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
IP / ASN
94.242.236.142
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject hoptreeperrie.shop
Fingerprint C6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85
Validity Tue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://doply.net/
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jun 2025 01:31:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://doply.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMIfcRZhD4m4FpSiJD3c7yBHqC8RQpeyuPB6a0Whq9McgtcCJKzbk76IOUUNUb_RSC9GsdmXA
173.194.73.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMIfcRZhD4m4FpSiJD3c7yBHqC8RQpeyuPB6a0Whq9McgtcCJKzbk76IOUUNUb_RSC9GsdmXA
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint 31:37:65:D4:D0:2D:38:C0:2E:38:70:AC:D7:8C:63:87:F6:17:32:F7
Validity Mon, 12 May 2025 08:43:08 GMT - Mon, 04 Aug 2025 08:43:07 GMT
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMIfcRZhD4m4FpSiJD3c7yBHqC8RQpeyuPB6a0Whq9McgtcCJKzbk76IOUUNUb_RSC9GsdmXA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:-tLV9Xh8hXVZvh_Yg9vfzn2suIg6qA:dFO8E1I4TAe5iiPD;Path=/;Expires=Wed, 02-Jun-2027 01:31:19 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 02 Jun 2025 01:31:19 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOPL0-XWlocoVZBOfLT3D6MMlDlWH_KcCUOwyexA9wmaa1vFHsVyZWqoncxZWbcFP0P-WMP&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827879127423
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-2hGy1SssWc4AlaKTY_RFOQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 414
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ol651oon.cloudatacdn.com/favicon.ico?i
54.38.85.148200 OK 15 kB URL
ol651oon.cloudatacdn.com/favicon.ico?i
IP / ASN
54.38.85.148
#16276 OVH SAS
Requested by moz-nullprincipal:{a1e0d783-66c8-48c8-9a51-2f18a74b183e}?https://doply.net
Resource Info
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
First Seen 2023-04-05
Last Seen 2025-08-01
Times Seen 2540
Size 15 kB (15406 bytes)
MD5 30d3656f43c817e38c3e7d70b2bfbdad
SHA1 1aa43b43755e7cba5e145d0978517f7bedad7da6
SHA256 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
Certificate Info
Issuer Sectigo Limited
Subject *.cloudatacdn.com
Fingerprint D9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B
Validity Wed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
GET /favicon.ico?i HTTP/1.1
Host: ol651oon.cloudatacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jun 2025 01:31:20 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
GET bobapsoabauns.com/www/images/c8e226f2ae8c3f4af7477b3681f07cd2.png
172.67.166.60200 OK 29 kB URL
bobapsoabauns.com/www/images/c8e226f2ae8c3f4af7477b3681f07cd2.png
IP / ASN
172.67.166.60
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
First Seen 2025-05-12
Last Seen 2025-07-13
Times Seen 115
Size 29 kB (28672 bytes)
MD5 c8e226f2ae8c3f4af7477b3681f07cd2
SHA1 2de6f877d53a61f9a96a46f2b238eb35627baf2c
SHA256 2480203e9479426d4835a11bc7e1e82980a92041d7033b6f0450e66fe3027088
Certificate Info
Issuer Google Trust Services
Subject bobapsoabauns.com
Fingerprint 8C:C2:83:27:EF:DF:2F:25:DF:58:17:A2:0F:5F:E7:86:EA:92:7F:D9
Validity Wed, 21 May 2025 20:50:33 GMT - Tue, 19 Aug 2025 21:47:54 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /www/images/c8e226f2ae8c3f4af7477b3681f07cd2.png HTTP/1.1
Host: bobapsoabauns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:31 GMT
content-type: image/png
content-length: 28672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XPfSpKGegYVkCRqHdKVsIhz6AhNFYPxSq1PaHgQm6FCIe7U7twCM5UQtxvkmbniREUfKtTOaCJXFZO8r9l2eIXCAP8qNEX6C76VWDb%2Bgensyp%2FvT7D6CPAkgHsLcJIMed8OoXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 08 Apr 2025 11:57:00 GMT
etag: "67f50f0c-7000"
expires: Mon, 02 Jun 2025 04:15:19 GMT
cache-control: max-age=86400
timing-allow-origin: *
accept-ranges: bytes
age: 76572
cf-cache-status: HIT
cf-ray: 94933113dc5d56b7-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6869&min_rtt=4659&rtt_var=5697&sent=33&recv=32&lost=0&retrans=0&sent_bytes=4897&recv_bytes=2438&delivery_rate=603921&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=e52530d177753b27&ts=10147&x=80"
GET i.doodcdn.io/theme_2/css/style.css?v=0.1
172.67.75.50200 OK 249 kB URL
i.doodcdn.io/theme_2/css/style.css?v=0.1
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ASCII text
First Seen 2024-12-01
Last Seen 2025-07-31
Times Seen 362
Size 249 kB (249272 bytes)
MD5 59b293159a38ec92d8bd5fa4d09f8d59
SHA1 7167b460de2cb4d2534163de707b0aa0e84b73cf
SHA256 3f81f845eb11d647c4bd80b76d7af054203e52eab24bc359ddd5cb4f33efddd4
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /theme_2/css/style.css?v=0.1 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: text/css
content-length: 40748
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330adce2d7131-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Mon, 01 Jun 2026 04:58:10 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 71033
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=20LMbjzhHr81RciAf7W%2FZU3COIIVDxZg9BIvj1m5uRRzi%2FAyeCEC7w5rOExEK6J5IzecHu2wXh86vkCpKt%2FBMhD8RSuG6ZEdtvolaL6lhvGtGXqvkbkE8PqGodcxIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2610&min_rtt=891&rtt_var=1997&sent=12&recv=14&lost=0&retrans=0&sent_bytes=6845&recv_bytes=1276&delivery_rate=1500129&cwnd=254&unsent_bytes=0&cid=6cc073d676332f0d&ts=99&x=0"
X-Firefox-Spdy: h2
GET et.vizierspavan.com/fnWM0kwI7wCwkEF/111551
23.109.170.255200 OK 6 B URL
et.vizierspavan.com/fnWM0kwI7wCwkEF/111551
IP / ASN
23.109.170.255
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ASCII text, with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 9129
Size 6 B (6 bytes)
MD5 4fc71bf68a1d477bd1523733e34d1e90
SHA1 15119105cffbe108b6cf290146ab02c9aa8517ba
SHA256 74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
Certificate Info
Issuer Let's Encrypt
Subject et.vizierspavan.com
Fingerprint 68:2F:AA:17:29:26:89:9C:1D:42:97:F7:95:82:E3:8C:D6:78:15:5A
Validity Wed, 28 May 2025 08:08:41 GMT - Tue, 26 Aug 2025 08:08:40 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fnWM0kwI7wCwkEF/111551 HTTP/1.1
Host: et.vizierspavan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jun 2025 01:31:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 6
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Origin
Access-Control-Expose-Headers: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Megageocheckolololo, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, OPTIONS
Set-Cookie: GGI10=G/IAAASeD7dNK/dmKv8IjKne3vVF23LHD4p/239bRbcCCoMg63NMJOcmHtdgLENcdVb9C/8fcU22F4TMszPXDn3bi0JM1sszQtMiPRle3iuF+nW+PadvTJQWghuEE2erh7OxP8CGug0ouFXNMz9sX8bofOhPVVBMTsv72LAiF5aGU46qKWF8uZ1fb+RKCE0MoKV13JEH4pvoZXocf6ywyRddqbWmm1R6/v8=; max-age=3600000; path=/; secure; SameSite=None
GUI4=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; max-age=3600000; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET tomlldahehun.org/multi?cs=T0dPM1R9fnYGYXp2dgVteHd9AmA&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=1&tid=901258&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fdoply.net%2Fe%2Fc3x5qidmvwtw&osr=doply.net&jst=8&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_sItf=1748827878405&crc=1
52.85.49.3200 OK 3.9 kB URL
tomlldahehun.org/multi?cs=T0dPM1R9fnYGYXp2dgVteHd9AmA&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=1&tid=901258&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fdoply.net%2Fe%2Fc3x5qidmvwtw&osr=doply.net&jst=8&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_sItf=1748827878405&crc=1
IP / ASN
52.85.49.3
#16509 AMAZON-02
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type ASCII text, with very long lines (3918), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 3.9 kB (3918 bytes)
MD5 060cbfa09804c1a47ec1a643f46e5c89
SHA1 e134dcf412cf282fe326a8de5a115505cce7cd5a
SHA256 23a2220828a06749f1de9b9904464ed0d2274778dd7287f386c3e9d4d8506d3a
Certificate Info
Issuer Amazon
Subject tomlldahehun.org
Fingerprint 6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D
Validity Sun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
GET /multi?cs=T0dPM1R9fnYGYXp2dgVteHd9AmA&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=1&tid=901258&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fdoply.net%2Fe%2Fc3x5qidmvwtw&osr=doply.net&jst=8&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_sItf=1748827878405&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1958
date: Mon, 02 Jun 2025 01:31:18 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=l0f91wwarqVZEXY2iC3165OBlfhTnTZa/rDT+A0m5omq6KcB98/dXUHXk60QM9Y4/aW6JRoeIHE2hE5kCi6eza+piGvzG0QlrL2R3Goo9+B/H38ytmRVrDUW9tsS; Expires=Mon, 09 Jun 2025 01:31:18 GMT; Path=/
AWSALBCORS=l0f91wwarqVZEXY2iC3165OBlfhTnTZa/rDT+A0m5omq6KcB98/dXUHXk60QM9Y4/aW6JRoeIHE2hE5kCi6eza+piGvzG0QlrL2R3Goo9+B/H38ytmRVrDUW9tsS; Expires=Mon, 09 Jun 2025 01:31:18 GMT; Path=/; SameSite=None
csu=85ad340c-b904-465f-9df7-11cd0638dfcf
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://doply.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 bd29d18ddcad5397b0dff22184078bfc.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: 1N7dCnXvRHY_JcCdQT4ArVpTG0nhQdKvXDUAkTkXPtQs7HJYrHJyzw==
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
173.194.73.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BA:92:EA:4A:65:E4:20:C4:FB:DD:45:2B:E1:80:37:BF:6E:2D:2C:E5
Validity Mon, 12 May 2025 08:44:53 GMT - Mon, 04 Aug 2025 08:44:52 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:b9bGl7eizjj9XvweHTQ9n0Rc2ssPAw:xB0QyuhD5loXiIxo; Expires=Wed, 02-Jun-2027 01:31:18 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 02 Jun 2025 01:31:18 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMIfcRZhD4m4FpSiJD3c7yBHqC8RQpeyuPB6a0Whq9McgtcCJKzbk76IOUUNUb_RSC9GsdmXA
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-krD-E_43oMv5yR1oiCokxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET divisiondrearilyunfiled.com/get/1941940?zoneid=1941940&jp=_clizmkybjvaityimfrskbg&dr=49&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=5KcQfWgaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&ix=0&x=1110&y=624&md=0&psu=U9zfm4UaHR0cHM6Ly9kb3BseS5uZXQvZS9jM3g1cWlkbXZ3dHc&afid=6588535648119808&caifrq=ADPmFwAAAAAAAAAB&eclog=0&snc=0&ssc=2&vp=1&dto=2&im=1&noch=1&de=0&cs=2&uf=0
94.242.247.24200 OK 3.3 kB URL
divisiondrearilyunfiled.com/get/1941940?zoneid=1941940&jp=_clizmkybjvaityimfrskbg&dr=49&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=5KcQfWgaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&ix=0&x=1110&y=624&md=0&psu=U9zfm4UaHR0cHM6Ly9kb3BseS5uZXQvZS9jM3g1cWlkbXZ3dHc&afid=6588535648119808&caifrq=ADPmFwAAAAAAAAAB&eclog=0&snc=0&ssc=2&vp=1&dto=2&im=1&noch=1&de=0&cs=2&uf=0
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type ASCII text, with very long lines (3337), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 3.3 kB (3337 bytes)
MD5 39baa1f758c9d1e82ab31cf844faf094
SHA1 3e2f0ea8fc51b17dcf0eead86770fa9f006309e6
SHA256 36d29a1b74d6872a190d584faa50c29ea20178d1b8b310e5e3cfc6f3bac7fd5b
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint CF:34:D4:54:A1:7A:18:F4:1A:75:2E:BB:C8:B3:74:87:96:B5:A3:6C
Validity Mon, 03 Mar 2025 23:54:00 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /get/1941940?zoneid=1941940&jp=_clizmkybjvaityimfrskbg&dr=49&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=5KcQfWgaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&ix=0&x=1110&y=624&md=0&psu=U9zfm4UaHR0cHM6Ly9kb3BseS5uZXQvZS9jM3g1cWlkbXZ3dHc&afid=6588535648119808&caifrq=ADPmFwAAAAAAAAAB&eclog=0&snc=0&ssc=2&vp=1&dto=2&im=1&noch=1&de=0&cs=2&uf=0 HTTP/1.1
Host: divisiondrearilyunfiled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:18 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Mon, 06 Jul 2026 01:31:18 GMT; Secure; SameSite=None
UID=250601203125c27a58d3c84d9588d206bffa; Path=/; Expires=Mon, 06 Jul 2026 01:31:18 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET playhubconnect.com/bn/024/6b3/74b/0246b374b303e14e775e06492e9de2fc4a707f24.mp4
104.18.14.39206 Partial Content 953 kB URL
playhubconnect.com/bn/024/6b3/74b/0246b374b303e14e775e06492e9de2fc4a707f24.mp4
IP / ASN
104.18.14.39
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ISO Media, MP4 v2 [ISO 14496-14]
First Seen 2025-06-01
Last Seen 2025-07-03
Times Seen 35
Size 953 kB (953211 bytes)
MD5 1e21f365acaddae1a9234478f3479422
SHA1 0246b374b303e14e775e06492e9de2fc4a707f24
SHA256 7fdd1c401f2e5d7a0171528bc9e449ee427f73c6a7a2231c76fbd8dfb0e42cd6
Certificate Info
Issuer Google Trust Services
Subject playhubconnect.com
Fingerprint 2D:1F:FB:2B:88:35:8C:8D:A2:9A:DC:7D:D0:1A:7E:79:7F:76:1A:AA
Validity Mon, 19 May 2025 17:44:53 GMT - Sun, 17 Aug 2025 18:44:46 GMT
GET /bn/024/6b3/74b/0246b374b303e14e775e06492e9de2fc4a707f24.mp4 HTTP/1.1
Host: playhubconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: video/mp4
content-length: 953211
x-amz-id-2: 4HoYbY6y8fdcEb1opDYxb7GnbMD/O8YPvOvQUpwLlLTp/IcJvB27kcozPj4j5RJByTMOMA3uB4AXiN3C40DQ8g==
x-amz-request-id: 65NFWTX5H9NZ32EM
last-modified: Fri, 06 Dec 2024 13:30:12 GMT
etag: "1e21f365acaddae1a9234478f3479422"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 1889532
expires: Thu, 03 Jul 2025 01:31:17 GMT
cache-control: public, max-age=2678400
content-range: bytes 0-953210/953211
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 949330b95e2e0b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET leforgotteddisg.com/Q0w1RnBsc1Y1TSIhfHYnBSBXEyENPVcASRANB3cfFn14DhIEdBMyGSdxDHZIc3kCYAAqKAh3VjA4VDIFMHEEYBktKlp7VjVxBGhDd2IGcF53akB7QWU4RScXfn0TNgQ3IAh3R3d0DXRHe3sCcUJz
104.21.43.220204 No Content 0 B URL
leforgotteddisg.com/Q0w1RnBsc1Y1TSIhfHYnBSBXEyENPVcASRANB3cfFn14DhIEdBMyGSdxDHZIc3kCYAAqKAh3VjA4VDIFMHEEYBktKlp7VjVxBGhDd2IGcF53akB7QWU4RScXfn0TNgQ3IAh3R3d0DXRHe3sCcUJz
IP / ASN
104.21.43.220
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject leforgotteddisg.com
Fingerprint DE:81:E2:9B:D5:56:DF:5B:6C:11:F1:0B:3B:70:1A:45:63:21:02:65
Validity Tue, 22 Apr 2025 10:34:47 GMT - Mon, 21 Jul 2025 11:32:53 GMT
GET /Q0w1RnBsc1Y1TSIhfHYnBSBXEyENPVcASRANB3cfFn14DhIEdBMyGSdxDHZIc3kCYAAqKAh3VjA4VDIFMHEEYBktKlp7VjVxBGhDd2IGcF53akB7QWU4RScXfn0TNgQ3IAh3R3d0DXRHe3sCcUJz HTTP/1.1
Host: leforgotteddisg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 02 Jun 2025 01:31:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=59U8ub4EwA8bvnxkEt9KtTRKRkgbF7pXyKTgyLOtSqpPqfMV6rbCtyPQDy0UShVHEbI3ieJap5U8GPJgJm0qzUF81DaLwVBjc3aV8id%2B8Iv8"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 949330bd4fe90afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET playhubconnect.com/bn/024/6b3/74b/0246b374b303e14e775e06492e9de2fc4a707f24.mp4
104.18.14.39206 Partial Content 953 kB URL
playhubconnect.com/bn/024/6b3/74b/0246b374b303e14e775e06492e9de2fc4a707f24.mp4
IP / ASN
104.18.14.39
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ISO Media, MP4 v2 [ISO 14496-14]
First Seen 2025-06-01
Last Seen 2025-07-03
Times Seen 35
Size 953 kB (953211 bytes)
MD5 1e21f365acaddae1a9234478f3479422
SHA1 0246b374b303e14e775e06492e9de2fc4a707f24
SHA256 7fdd1c401f2e5d7a0171528bc9e449ee427f73c6a7a2231c76fbd8dfb0e42cd6
Certificate Info
Issuer Google Trust Services
Subject playhubconnect.com
Fingerprint 2D:1F:FB:2B:88:35:8C:8D:A2:9A:DC:7D:D0:1A:7E:79:7F:76:1A:AA
Validity Mon, 19 May 2025 17:44:53 GMT - Sun, 17 Aug 2025 18:44:46 GMT
GET /bn/024/6b3/74b/0246b374b303e14e775e06492e9de2fc4a707f24.mp4 HTTP/1.1
Host: playhubconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Mon, 02 Jun 2025 01:31:19 GMT
content-type: video/mp4
content-length: 953211
x-amz-id-2: 4HoYbY6y8fdcEb1opDYxb7GnbMD/O8YPvOvQUpwLlLTp/IcJvB27kcozPj4j5RJByTMOMA3uB4AXiN3C40DQ8g==
x-amz-request-id: 65NFWTX5H9NZ32EM
last-modified: Fri, 06 Dec 2024 13:30:12 GMT
etag: "1e21f365acaddae1a9234478f3479422"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 1889534
expires: Thu, 03 Jul 2025 01:31:19 GMT
cache-control: public, max-age=2678400
content-range: bytes 0-953210/953211
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 949330c45ba056cb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET appointeeivyspongy.com/lv/esnk/1841679/code.js
94.242.247.24200 OK 165 kB URL
appointeeivyspongy.com/lv/esnk/1841679/code.js
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-05-30
Last Seen 2025-06-09
Times Seen 37
Size 165 kB (165391 bytes)
MD5 f8c085efe9a4a1ab524c83224ee90202
SHA1 4cfda20c1ed0bf0f8c2dcbbb85ca48018530df2e
SHA256 1c9014b96943c93a06d275de3ccfa4c2c6a17e5d9b11098a118775c3d5792968
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint 22:0A:29:24:35:4B:B9:91:E2:D5:B4:B8:11:B7:D6:27:9C:32:E6:30
Validity Mon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /lv/esnk/1841679/code.js HTTP/1.1
Host: appointeeivyspongy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 30 May 2025 10:36:20 GMT
vary: Accept-Encoding
etag: W/"68398a24-286bd"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
104.17.24.14200 OK 1.3 kB URL
cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP / ASN
104.17.24.14
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, ASCII text, with very long lines (1266)
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 8305
Size 1.3 kB (1300 bytes)
MD5 4412bf8023109ee9eb1f1f226d391329
SHA1 c273960aa874a87dd022b5e597887142f1b8e34f
SHA256 d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
Certificate Info
Issuer Google Trust Services
Subject cdnjs.cloudflare.com
Fingerprint 4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
Validity Thu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 949330b53c135691-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 877270
expires: Sat, 23 May 2026 01:31:16 GMT
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDZm82F26CtsFKZQQlS8HVvZoZok%2B%2F7KfduwkMFkHXecank5tolj4iCixw5n7FeEm2UKnIhWiADL99EJ5HwwZZK5IOir%2F1hVpk%2BtiTPUr0Y6QAfejfEWk7QjiHpKTh8pLiF5JJoz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET i.doodcdn.io/img/logo-s.png
172.67.75.50200 OK 1.9 kB URL
i.doodcdn.io/img/logo-s.png
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type RIFF (little-endian) data, Web/P image
First Seen 2025-02-23
Last Seen 2025-07-01
Times Seen 581
Size 1.9 kB (1932 bytes)
MD5 f0c6bed8c2b7297aab801aa1c449dd14
SHA1 f44f3ee770d099eedc8ecc32fe5d5a2be9d6bd16
SHA256 0c591bf4d1b3bd51127f30c9c1f4a727bdf146a60d1a8106bfd575f2bf68c9f3
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: image/webp
content-length: 1932
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330bb1b7a569b-OSL
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Mon, 30 Jun 2025 17:24:29 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 76683
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyTCPvLUppI3Zio6WcqklPfE%2FxPohim6XvMFYM6U15bNd95Aw0Ba9%2FSsNl1DO0n42ZUM17RrGc72x%2BhNkcLmmjJqyV8EA8wOXIxynUUD6JMOs4%2FXQpfc0b3E7nVI%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=20667&min_rtt=3218&rtt_var=17587&sent=236&recv=20&lost=0&retrans=1&sent_bytes=259832&recv_bytes=3078&delivery_rate=1722314&cwnd=104700&unsent_bytes=0&cid=99249cfcae8b4476&ts=2083&x=1", cfExtPri, cfHdrFlush;dur=0
GET ukankingwithea.com/
104.21.48.1200 OK 26 B IP / ASN
104.21.48.1
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 26 B (26 bytes)
MD5 117e7b184c0740fd5edf628a2b528e68
SHA1 e4a360705c22899b1796f94aa7cac55a9f462cdd
SHA256 459aa894765d3644f21c8cc0677f2699e674c7e92f50fe31ebdb33d9cfe14e73
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint 02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
Validity Tue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:18 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://doply.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uMjIC6s1kgPkKv4rkMmGTvQ1MZrYf9M74EMjQqk%2FA3oElPgovUamxYCDKQQxVr84FP%2B%2BA2r7OGiKdoU%2FAPeKgW7Xux0nCFAz1UgSnVhk490%3D"}]}
content-encoding: br
set-cookie: csu=346792538622876@1@1748827878; SameSite=None; Secure; Max-Age=31104000
cf-ray: 949330bd6c607128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.48.1200 OK 27 B IP / ASN
104.21.48.1
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 27 B (27 bytes)
MD5 1c462321a9571242a9efad806d030af2
SHA1 8cd7a85424ad2c91e2655a0963edc122139b81ed
SHA256 147c74945886bf8323b5fa68dab4d1148661b37bfe5e1cbf91e1013d6f48d1a2
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint 02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
Validity Tue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:18 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://doply.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kcuq%2FiUDq3T%2FBeLomX8Ci0gV6zFwHuod0gXC0jhjrJkO6q9Vhcf%2BBbvKTA3dBoQxVWogNntdwwkiT6zi3eoJTxuNLf5NALW3J%2Bhg6L1MDMo%3D"}]}
content-encoding: br
set-cookie: csu=1157796205872518@1@1748827878; SameSite=None; Secure; Max-Age=31104000
cf-ray: 949330bd4c4a7128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET my.rtmark.net/gid.js?userId=u4fv480434sh227722217w7w4xlwx742
104.18.41.22200 OK 65 B URL
my.rtmark.net/gid.js?userId=u4fv480434sh227722217w7w4xlwx742
IP / ASN
104.18.41.22
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 65 B (65 bytes)
MD5 cf00a7c0bc0dbaedebe7868afdc1388d
SHA1 c5b30f7a97812503a68b923499266f4ef55b6417
SHA256 19a93c960493e843f9de3788bc8807c1fc6d5308106a0d4a2c16a776cbd8c6ea
Certificate Info
Issuer Google Trust Services
Subject my.rtmark.net
Fingerprint 61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
Validity Fri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
GET /gid.js?userId=u4fv480434sh227722217w7w4xlwx742 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: ID=0801dcfd3ec54e37e8f966d1a360153c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://doply.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0801dcfd3ec54e37e8f966d1a360153c; expires=Tue, 02 Jun 2026 01:31:17 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=3,i=?0
server: cloudflare
cf-ray: 949330bd39c0569a-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOPL0-XWlocoVZBOfLT3D6MMlDlWH_KcCUOwyexA9wmaa1vFHsVyZWqoncxZWbcFP0P-WMP&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827879127423
173.194.73.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOPL0-XWlocoVZBOfLT3D6MMlDlWH_KcCUOwyexA9wmaa1vFHsVyZWqoncxZWbcFP0P-WMP&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827879127423
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint 31:37:65:D4:D0:2D:38:C0:2E:38:70:AC:D7:8C:63:87:F6:17:32:F7
Validity Mon, 12 May 2025 08:43:08 GMT - Mon, 04 Aug 2025 08:43:07 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOPL0-XWlocoVZBOfLT3D6MMlDlWH_KcCUOwyexA9wmaa1vFHsVyZWqoncxZWbcFP0P-WMP&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827879127423 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 02 Jun 2025 01:31:19 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-hqG1iG7o6ahm3WpiZeZ5Sw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4AFqKlLDbhI.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET my.rtmark.net/gid.js?userId=u4fv480434sh227722217w7w4xlwx742
104.18.41.22200 OK 65 B URL
my.rtmark.net/gid.js?userId=u4fv480434sh227722217w7w4xlwx742
IP / ASN
104.18.41.22
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 65 B (65 bytes)
MD5 cf00a7c0bc0dbaedebe7868afdc1388d
SHA1 c5b30f7a97812503a68b923499266f4ef55b6417
SHA256 19a93c960493e843f9de3788bc8807c1fc6d5308106a0d4a2c16a776cbd8c6ea
Certificate Info
Issuer Google Trust Services
Subject my.rtmark.net
Fingerprint 61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
Validity Fri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
GET /gid.js?userId=u4fv480434sh227722217w7w4xlwx742 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: ID=0801dcfd3ec54e37e8f966d1a360153c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:19 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://doply.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0801dcfd3ec54e37e8f966d1a360153c; expires=Tue, 02 Jun 2026 01:31:19 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=3,i=?0
server: cloudflare
cf-ray: 949330c9bf66569a-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET pringed.space/T2NreTc0QRgOaDoRB1sNbQsfDUc8WURWUyATBwAZIQYfVkQ4TQEKFWNBGBRRbVlaVRU8Dh1bDW1XRUkVY0EfGFAQCg9bDW1aWU8PfVNJVRU8FgkmXitRSUMVKVYPSA58VAlUBXwHCVQDLgVYVA4pUltUBnsHW08Of1QKT1V9QRY
34.225.16.8200 OK 64 kB URL
pringed.space/T2NreTc0QRgOaDoRB1sNbQsfDUc8WURWUyATBwAZIQYfVkQ4TQEKFWNBGBRRbVlaVRU8Dh1bDW1XRUkVY0EfGFAQCg9bDW1aWU8PfVNJVRU8FgkmXitRSUMVKVYPSA58VAlUBXwHCVQDLgVYVA4pUltUBnsHW08Of1QKT1V9QRY
IP / ASN
34.225.16.8
#14618 AMAZON-AES
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (63763), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 64 kB (63763 bytes)
MD5 fe5d98f97bd4bb97fd53fe3e2adbc2eb
SHA1 ce5c28b99b586ee13e1532fa78af53f33f447d61
SHA256 b9c1e63ffecf007ff781fdb6cd5773911d4cbeb627d76d81f53f47b464f9f237
Certificate Info
Issuer Let's Encrypt
Subject pringed.space
Fingerprint 81:07:1E:81:74:98:8C:EF:C9:03:0E:E3:20:3F:CE:26:B8:10:67:EB
Validity Tue, 22 Apr 2025 13:26:20 GMT - Mon, 21 Jul 2025 13:26:19 GMT
GET /T2NreTc0QRgOaDoRB1sNbQsfDUc8WURWUyATBwAZIQYfVkQ4TQEKFWNBGBRRbVlaVRU8Dh1bDW1XRUkVY0EfGFAQCg9bDW1aWU8PfVNJVRU8FgkmXitRSUMVKVYPSA58VAlUBXwHCVQDLgVYVA4pUltUBnsHW08Of1QKT1V9QRY HTTP/1.1
Host: pringed.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 9cd861cb60ee9556db32c468b5b34cf1=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"f913-zlwouZtYbuE+FTL6eK9T8z9EfWE"
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
GET isolatedovercomepasted.com/check.html
94.242.247.24200 OK 926 B URL
isolatedovercomepasted.com/check.html
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type HTML document, ASCII text
First Seen 2024-11-22
Last Seen 2025-08-02
Times Seen 5117
Size 926 B (926 bytes)
MD5 088dba8e97eede53134c93219f7ebbae
SHA1 adb707654d1fe0af7d0d7a9f55660d22bd3625e4
SHA256 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint BB:6D:E1:77:DE:80:15:9D:0B:90:58:D2:8F:D7:8F:9A:59:F5:B5:53
Validity Mon, 03 Mar 2025 23:53:40 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /check.html HTTP/1.1
Host: isolatedovercomepasted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 19 May 2025 08:12:42 GMT
vary: Accept-Encoding
etag: W/"682ae7fa-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET img.doodcdn.io/splash/n89n8w1gddt8y9gs.jpg
172.67.75.50200 OK 111 kB URL
img.doodcdn.io/splash/n89n8w1gddt8y9gs.jpg
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1264x715, components 3
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 111 kB (111171 bytes)
MD5 84a29c9d18950ff045c65559dcced7ee
SHA1 331387644ec655370954fb44466a48cd3f5a1148
SHA256 9be84c9c2cdf439be9dcde82dc9a858e4857ef1ac0f897b7825193394f25135c
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /splash/n89n8w1gddt8y9gs.jpg HTTP/1.1
Host: img.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: image/jpeg
content-length: 111171
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330bb0b77569b-OSL
last-modified: Tue, 09 May 2023 11:26:51 GMT
etag: "645a2dfb-1b243"
expires: Mon, 16 Jun 2025 01:31:17 GMT
cache-control: max-age=1209600
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZinPs2AFV6IS%2FZG5U0sWXw5sRrRuWOzPj75Ydp2ikMZrCBM4t1H9ZkAOAomHh05PcwyKH2WnCnvcR3Yhf4rrBzI3sdENxi%2BjyGSeb9hLoTXpUpmhzEpb95Ppm2Yl%2Fie4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16694&min_rtt=2288&rtt_var=16690&sent=242&recv=23&lost=0&retrans=1&sent_bytes=263846&recv_bytes=3460&delivery_rate=76902&cwnd=104700&unsent_bytes=0&cid=99249cfcae8b4476&ts=2266&x=1", cfExtPri, cfHdrFlush;dur=0
GET undefined/UTdiM1AwVQFebzAKABUlI1tfFmIXElB1NCQHEkY0YUQGXz0rUUxQPD5CBlUiPlkWHT40Q0cBFjNVJXkZBHEBYxQCblBSEjZ7LnRhJG8kfWYLYFt4FTtYU34GFHAoShFmcTdEPR9kLHgTFURHARYeZRpVGgNYFXFhHHAnWRYwYRV1YhhPO3Q0BnUachEcWiwBIBp1G2oqMFtTdhsFZlNmBgtCKHAzFXQ6ZjsdUAVyGwJmBXsBPkIGWhkfbxtmdWNxLmIFHn0mdSkJXjAKNjxTKGYYOQMrcgUceyYLNxkHBgUJFVw7YWMhUDhfKBxSKmU7HVwGBQkSdiR3GHwCCVA8aVAAZBo/cSRhaDVgM0YCYkcFeQIhfwdLFjxvU2k9CH9XeQUZUFF+N2l9KAAGPXwOcWQIYAZQBWJfClA8ZGQuWTs9dDNiPhp/KFYaGVsIamAbZABaBiBvMxU6IlgMQ208fQVYYR91BAVlGA
0.0.0.0 0 B URL
undefined/UTdiM1AwVQFebzAKABUlI1tfFmIXElB1NCQHEkY0YUQGXz0rUUxQPD5CBlUiPlkWHT40Q0cBFjNVJXkZBHEBYxQCblBSEjZ7LnRhJG8kfWYLYFt4FTtYU34GFHAoShFmcTdEPR9kLHgTFURHARYeZRpVGgNYFXFhHHAnWRYwYRV1YhhPO3Q0BnUachEcWiwBIBp1G2oqMFtTdhsFZlNmBgtCKHAzFXQ6ZjsdUAVyGwJmBXsBPkIGWhkfbxtmdWNxLmIFHn0mdSkJXjAKNjxTKGYYOQMrcgUceyYLNxkHBgUJFVw7YWMhUDhfKBxSKmU7HVwGBQkSdiR3GHwCCVA8aVAAZBo/cSRhaDVgM0YCYkcFeQIhfwdLFjxvU2k9CH9XeQUZUFF+N2l9KAAGPXwOcWQIYAZQBWJfClA8ZGQuWTs9dDNiPhp/KFYaGVsIamAbZABaBiBvMxU6IlgMQ208fQVYYR91BAVlGA
IP / ASN
0.0.0.0
#0
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /UTdiM1AwVQFebzAKABUlI1tfFmIXElB1NCQHEkY0YUQGXz0rUUxQPD5CBlUiPlkWHT40Q0cBFjNVJXkZBHEBYxQCblBSEjZ7LnRhJG8kfWYLYFt4FTtYU34GFHAoShFmcTdEPR9kLHgTFURHARYeZRpVGgNYFXFhHHAnWRYwYRV1YhhPO3Q0BnUachEcWiwBIBp1G2oqMFtTdhsFZlNmBgtCKHAzFXQ6ZjsdUAVyGwJmBXsBPkIGWhkfbxtmdWNxLmIFHn0mdSkJXjAKNjxTKGYYOQMrcgUceyYLNxkHBgUJFVw7YWMhUDhfKBxSKmU7HVwGBQkSdiR3GHwCCVA8aVAAZBo/cSRhaDVgM0YCYkcFeQIhfwdLFjxvU2k9CH9XeQUZUFF+N2l9KAAGPXwOcWQIYAZQBWJfClA8ZGQuWTs9dDNiPhp/KFYaGVsIamAbZABaBiBvMxU6IlgMQ208fQVYYR91BAVlGA HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
POST segarkojiri.top/cuid/?f=https%3A%2F%2Fdoply.net
94.242.236.147200 OK 32 B URL
segarkojiri.top/cuid/?f=https%3A%2F%2Fdoply.net
IP / ASN
94.242.236.147
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 32 B (32 bytes)
MD5 63c50c78d2449ec1c60b30ed059903a5
SHA1 56437536bfe72e221dbb89724c4bfb8b8f077455
SHA256 1a0aaebe45f20045d7edd4a23a8cf0777c24c8c22b2cc904dc38696066ef36b6
Certificate Info
Issuer ZeroSSL
Subject segarkojiri.top
Fingerprint B1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7
Validity Tue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /cuid/?f=https%3A%2F%2Fdoply.net HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
Content-Type: application/json
Content-Length: 10
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jun 2025 01:31:18 GMT
Content-Type: application/json
Content-Length: 32
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://doply.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: a97fa794a0f9=67c6f8192f2444a7a0ebce; expires=Wed, 16 Oct 2052 07:43:40 GMT; domain=segarkojiri.top; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET isolatedovercomepasted.com/get/1841674?zoneid=1841674&pid=__clb-1841674_1&jp=_clmvyiuodljsqvcyzdliwk&dr=52&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=dVKq4TRaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&afid=6025585694640128&eclog=0&snc=0&ssc=1&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0
94.242.247.24200 OK 6.7 kB URL
isolatedovercomepasted.com/get/1841674?zoneid=1841674&pid=__clb-1841674_1&jp=_clmvyiuodljsqvcyzdliwk&dr=52&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=dVKq4TRaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&afid=6025585694640128&eclog=0&snc=0&ssc=1&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ASCII text, with very long lines (6657), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 6.7 kB (6657 bytes)
MD5 15abf24859a20c076302f30623dc666c
SHA1 f22bfa5420b1f8af212d98731ced06f4c7ed1133
SHA256 5698f19daa376a609ffd3dba96bfc79f19a92b4898c324eb1d2d2906052c36f6
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint BB:6D:E1:77:DE:80:15:9D:0B:90:58:D2:8F:D7:8F:9A:59:F5:B5:53
Validity Mon, 03 Mar 2025 23:53:40 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /get/1841674?zoneid=1841674&pid=__clb-1841674_1&jp=_clmvyiuodljsqvcyzdliwk&dr=52&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=dVKq4TRaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&afid=6025585694640128&eclog=0&snc=0&ssc=1&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0 HTTP/1.1
Host: isolatedovercomepasted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:18 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Mon, 06 Jul 2026 01:31:18 GMT; Secure; SameSite=None
UID=25060120315ccdb2f0c3c648beadb6fc8c1d; Path=/; Expires=Mon, 06 Jul 2026 01:31:18 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
POST fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=0cf28b2a-e781-49c9-9ca9-10b5f9c1f335
139.45.195.252200 OK 0 B URL
fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=0cf28b2a-e781-49c9-9ca9-10b5f9c1f335
IP / ASN
139.45.195.252
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Sectigo Limited
Subject fleraprt.com
Fingerprint 23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0
Validity Wed, 11 Dec 2024 00:00:00 GMT - Sun, 11 Jan 2026 23:59:59 GMT
POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=0cf28b2a-e781-49c9-9ca9-10b5f9c1f335 HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 450
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Mon, 02 Jun 2025 01:31:20 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://doply.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
GET i.doodcdn.io/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
172.67.75.50200 OK 184 kB URL
i.doodcdn.io/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 184476, version 330.-16253
First Seen 2023-04-30
Last Seen 2025-08-01
Times Seen 967
Size 184 kB (184476 bytes)
MD5 2a6dec1227f9970376f578270a642d06
SHA1 150a6a7ffdec6e2e2ff4c712d7cee8bd9b930284
SHA256 e228b909313044a18dec1a674cfd4935071c36eb3eb6a0cd38a45afac6ae3996
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: font/woff2
content-length: 184476
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b09c1d568e-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Tue, 01 Jul 2025 11:22:28 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 34351
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fd6a4iHKCX%2Fcu9p5AFpE8M9bjSzaRja8e8EnKy5Z14FWRaAoZ%2Fw6YsWpo%2FNPv5guYJCc8jD2FZ3hc5Mn%2BEpISo4Zv0Wv7FWxcO4BtOSauHbatAiydfMkHnNHtKxc%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4931&min_rtt=3806&rtt_var=2231&sent=24&recv=8&lost=0&retrans=0&sent_bytes=16191&recv_bytes=1900&delivery_rate=168659&cwnd=12000&unsent_bytes=0&cid=ac9ab601dde309da&ts=37&x=1", cfExtPri, cfHdrFlush;dur=40
GET appointeeivyspongy.com/get/1841679?zoneid=1841679&pid=__clb-1841679_1&jp=_clguazjehcphsbcmnrlibw&dr=52&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=jlbQnO1aHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&afid=6307060671327232&eclog=0&snc=0&ssc=1&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0
94.242.247.24200 OK 6.6 kB URL
appointeeivyspongy.com/get/1841679?zoneid=1841679&pid=__clb-1841679_1&jp=_clguazjehcphsbcmnrlibw&dr=52&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=jlbQnO1aHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&afid=6307060671327232&eclog=0&snc=0&ssc=1&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ASCII text, with very long lines (6641), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 6.6 kB (6641 bytes)
MD5 e8caf411557172a1a36a3e47ce3fa084
SHA1 a278a1de0bafc4b9dd28e75734dc6e9b2ea58b5d
SHA256 4bb6598f8a74e9feb250dcc5523e2116377ff503af37993629100e9f3cc810e0
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint 22:0A:29:24:35:4B:B9:91:E2:D5:B4:B8:11:B7:D6:27:9C:32:E6:30
Validity Mon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /get/1841679?zoneid=1841679&pid=__clb-1841679_1&jp=_clguazjehcphsbcmnrlibw&dr=52&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=jlbQnO1aHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&afid=6307060671327232&eclog=0&snc=0&ssc=1&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0 HTTP/1.1
Host: appointeeivyspongy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Mon, 06 Jul 2026 01:31:16 GMT; Secure; SameSite=None
UID=250601203127b0e0cfd94e40d2af2873cfda; Path=/; Expires=Mon, 06 Jul 2026 01:31:16 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET doply.net/pass_md5/72919064-91-90-1748827875-a57cddca057cf80dae7c789d8ef1f228/vlxltkdd3da20ju7dx2m0fdx
104.26.4.85200 OK 105 B URL
doply.net/pass_md5/72919064-91-90-1748827875-a57cddca057cf80dae7c789d8ef1f228/vlxltkdd3da20ju7dx2m0fdx
IP / ASN
104.26.4.85
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 105 B (105 bytes)
MD5 59c7ed12a43937349fe5407f9a61f755
SHA1 3df8ca06705f7b21d74b91435421cb8403052d2a
SHA256 cfdbefcf68af318f8c33ece587e6a73aebce243cc2764b66cfc92e85a7c0e4e3
Certificate Info
Issuer Google Trust Services
Subject doply.net
Fingerprint 4E:5D:5F:2C:19:38:42:0B:22:C2:28:41:55:6E:DA:EC:FA:5E:1A:AF
Validity Sun, 18 May 2025 10:09:34 GMT - Sat, 16 Aug 2025 11:07:21 GMT
GET /pass_md5/72919064-91-90-1748827875-a57cddca057cf80dae7c789d8ef1f228/vlxltkdd3da20ju7dx2m0fdx HTTP/1.1
Host: doply.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://doply.net/e/c3x5qidmvwtw
Cookie: lang=1; dref_url=none; UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADPmFwAAAAAAAAAB%22%2C%22CAIFRT%22%3A%22ADPmFwAAAABoPQWg%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: text/html; charset=UTF-8
cf-ray: 949330bb0dec5688-OSL
server: cloudflare
content-encoding: br
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gsjZog4igyfmY%2F%2FdD0Jvxmh7sYrzL67cthm%2BuMqqkth45KPLyupHBRR0Erk%2Bxc5ILlacJyT1h%2Bq8IBLsh0KG4%2BJhL5flagKhJwfDGiYYjNz%2B6YAmgGnPIqvGWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=614&min_rtt=383&rtt_var=41&sent=74&recv=66&lost=0&retrans=1&sent_bytes=81960&recv_bytes=1941&delivery_rate=25506775&cwnd=257&unsent_bytes=0&cid=e75c8c00dd34e57f&ts=2885&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/theme_2/img/loader.svg
172.67.75.50200 OK 694 B URL
i.doodcdn.io/theme_2/img/loader.svg
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type exported SGML document, ASCII text
First Seen 2023-04-30
Last Seen 2025-08-02
Times Seen 1469
Size 694 B (694 bytes)
MD5 be00fc4a29d03016e78b28c9943e3f51
SHA1 10f2025f5aa96706cc81e050eadfcaa9bcc55af5
SHA256 eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/css/embed.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: image/svg+xml
cf-ray: 949330bb2b87569b-OSL
server: cloudflare
content-encoding: br
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Tue, 01 Jul 2025 18:04:19 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 8383
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d4il56m%2Fvsm9csNicfQKAfLlRpHbnoMz3bCd5bHZjUOaBmy6hBUhJDwuz3yv3qhhFrnzS%2FvRuIKxU1D8Kmsv2GPO3%2Fy4acwwh6TU3DbwrFerRULBXIff2dSDR0fd4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18370&min_rtt=2288&rtt_var=17785&sent=240&recv=22&lost=0&retrans=1&sent_bytes=262708&recv_bytes=3415&delivery_rate=183313&cwnd=104700&unsent_bytes=0&cid=99249cfcae8b4476&ts=2099&x=1", cfExtPri, cfHdrFlush;dur=0
GET du0pud0sdlmzf.cloudfront.net/0T25lYVEsAQsHbjsHAVxof1ZVVGZpHhcEN3IKChE9NkALBCVpBBYOPz9TJApoIg1RJykbSBEbNXJeQw0wIQlYRzQhDVhQdy4KB1xlaRoVDjpyGhwFMy4aEhA5KUgQAGwiAR8IPSMPQFMXekBVRGN/RhIIPysBEhJ0fV4LFXR9XlRRf39LViN0fV4SCD95Wk-BSE2pcVRlne0tWI3R9XhcXdHwvVFJlYV5MRGN/CQACOiBLVydjf19VUWB/X0BTYSkHFwQ3IBZAUxd+XVFPYWkbWFA
3.164.247.207200 OK 873 B URL
du0pud0sdlmzf.cloudfront.net/0T25lYVEsAQsHbjsHAVxof1ZVVGZpHhcEN3IKChE9NkALBCVpBBYOPz9TJApoIg1RJykbSBEbNXJeQw0wIQlYRzQhDVhQdy4KB1xlaRoVDjpyGhwFMy4aEhA5KUgQAGwiAR8IPSMPQFMXekBVRGN/RhIIPysBEhJ0fV4LFXR9XlRRf39LViN0fV4SCD95Wk-BSE2pcVRlne0tWI3R9XhcXdHwvVFJlYV5MRGN/CQACOiBLVydjf19VUWB/X0BTYSkHFwQ3IBZAUxd+XVFPYWkbWFA
IP / ASN
3.164.247.207
#16509 AMAZON-02
Requested by https://onsuchasricew.com/ejVPNmwbVyxbUxsILRAZCFlyE148EH1wCA8FP0MISkYrWgEAU2FVABVAK1AeFVs7GAIfQWoEKkphfQMAI2MKRS0rRgdUBgl9DmAUFVN+bDoschVGJBJWCnhfM34MXilDeyR3IDh2GUYuOGwAZhZDYQV3HBV8KAc+MEwkVD84cC14NDBQHkFcDXweWjUoTx5eKCxdHlIVTn4NBxQWVB1ZOj5fP08rEkIJexVOVApeLU9+GlE9O3I4Xy0oDQZmPzdlHnAhIlAkdDoocgETXjxnJ38lKkw8dCkSf39QOk55CW4+Q20jZD4cBnZ6OhN7f1A6TmYMclVPYiQbLilwfUYPLGcjWAlKQRh/XygMF14PIlEHQRoscwVaNSwAAmQrNBB9cC8rdAx5BTh5GU8IEFN+DzovYg0TXjxtf3Q4I2YkfioNZHx/LiB0Gk4IXwcNbjo8ZRZhBxhiCXdKEEYgWBxHdCQPARkBCU44
Resource Info
File type ASCII text, with very long lines (873), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 873 B (873 bytes)
MD5 35d414f57a428ee9e7793c67efe7d984
SHA1 9d12a1d8d1c1b47ec2bbed65cfa2bbac751748dc
SHA256 4a9cf8b1dfd292510d075d864bb7463d5bff174637937e491f6004ad1994a826
Certificate Info
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /0T25lYVEsAQsHbjsHAVxof1ZVVGZpHhcEN3IKChE9NkALBCVpBBYOPz9TJApoIg1RJykbSBEbNXJeQw0wIQlYRzQhDVhQdy4KB1xlaRoVDjpyGhwFMy4aEhA5KUgQAGwiAR8IPSMPQFMXekBVRGN/RhIIPysBEhJ0fV4LFXR9XlRRf39LViN0fV4SCD95Wk-BSE2pcVRlne0tWI3R9XhcXdHwvVFJlYV5MRGN/CQACOiBLVydjf19VUWB/X0BTYSkHFwQ3IBZAUxd+XVFPYWkbWFA HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onsuchasricew.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 626
date: Mon, 02 Jun 2025 01:31:18 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: vLhKrYgkYlHrbG_4yQXEwIMEG5YMU7WRlyL_gEsjVmwroZ8yHzQtvA==
X-Firefox-Spdy: h2
GET my.rtmark.net/gid.js?userId=u4fv480434sh227722217w7w4xlwx742
104.18.41.22200 OK 65 B URL
my.rtmark.net/gid.js?userId=u4fv480434sh227722217w7w4xlwx742
IP / ASN
104.18.41.22
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 65 B (65 bytes)
MD5 cf00a7c0bc0dbaedebe7868afdc1388d
SHA1 c5b30f7a97812503a68b923499266f4ef55b6417
SHA256 19a93c960493e843f9de3788bc8807c1fc6d5308106a0d4a2c16a776cbd8c6ea
Certificate Info
Issuer Google Trust Services
Subject my.rtmark.net
Fingerprint 61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
Validity Fri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
GET /gid.js?userId=u4fv480434sh227722217w7w4xlwx742 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: ID=0801dcfd3ec54e37e8f966d1a360153c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:19 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://doply.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0801dcfd3ec54e37e8f966d1a360153c; expires=Tue, 02 Jun 2026 01:31:19 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=3,i=?0
server: cloudflare
cf-ray: 949330c82ed8569a-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET i.doodcdn.io/theme_2/css/bootstrap.min.css
172.67.75.50200 OK 160 kB URL
i.doodcdn.io/theme_2/css/bootstrap.min.css
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ASCII text, with very long lines (65324)
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 9973
Size 160 kB (159515 bytes)
MD5 7cc40c199d128af6b01e74a28c5900b0
SHA1 d305110fb79113a961394b433d851a3410342b8c
SHA256 2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /theme_2/css/bootstrap.min.css HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: text/css
content-length: 23688
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330adbe237131-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Sun, 31 May 2026 06:42:19 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 75395
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I88eJrx6gTO63gnrzk8gw11BhZTx0oKTjr0zA2CDidebnu0XwcQ%2B6Lk0IGRWV3dmIUsOQIoA5kpEcE%2Bo5T2rjkYETXUjCrtBotwRMI7FWSfUOCujF6Uvx9rzfBp%2FLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2609&min_rtt=891&rtt_var=1175&sent=44&recv=17&lost=0&retrans=0&sent_bytes=48892&recv_bytes=1276&delivery_rate=16855583&cwnd=254&unsent_bytes=0&cid=6cc073d676332f0d&ts=143&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/img/no_video_3.svg
172.67.75.50200 OK 2.8 kB URL
i.doodcdn.io/img/no_video_3.svg
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2023-04-05
Last Seen 2025-07-31
Times Seen 2137
Size 2.8 kB (2812 bytes)
MD5 077bfdaa49ae4877a42611b739ec4752
SHA1 a2f9e1222b7af9abc05122411ab8902efcc08ead
SHA256 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: image/svg+xml
content-length: 2812
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330adbe247131-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Tue, 01 Jul 2025 05:02:20 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 69928
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cHwjXhWIZc%2BYm3EVymZ5yXXs8tq17KL9%2Ba8h%2BPahEzN0z63M5M%2BCqgqbrYGIG3Mlj%2B1l8UWWkvvaCwOFZaEgeHa4KvI2N9c5HF0JynSKyaxB6sgupD0n1kRTpUxGqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2431&min_rtt=891&rtt_var=2187&sent=8&recv=12&lost=0&retrans=0&sent_bytes=3193&recv_bytes=1190&delivery_rate=1281038&cwnd=254&unsent_bytes=0&cid=6cc073d676332f0d&ts=83&x=0"
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js
104.17.24.14200 OK 4.6 kB URL
cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js
IP / ASN
104.17.24.14
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, ASCII text, with very long lines (4505)
First Seen 2023-03-09
Last Seen 2025-07-31
Times Seen 1599
Size 4.6 kB (4580 bytes)
MD5 f2ecb2bd8a424c8e8cf507ce8bd933c2
SHA1 3cbc08ca052ea25c3b0834b9291a3ca1e9122e26
SHA256 4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099
Certificate Info
Issuer Google Trust Services
Subject cdnjs.cloudflare.com
Fingerprint 4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
Validity Thu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 1571
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 949330b55c215691-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630ad3e5-623"
last-modified: Sun, 28 Aug 2022 02:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 877660
expires: Sat, 23 May 2026 01:31:16 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ykHvBUd1TIDscdpEpDVnXu%2FZf9ysTaNMT%2Ftew%2Frn3tTBqZVP0bD%2F4m%2FKcqbO2n98c%2BT%2BJ%2BRh2QYzGEzf3BhpUYxL5rA4xDbfx2QMJxAcOCjABTjIgdClz9Q%2Bf30mVjGp1TAn%2BC%2BL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET cdn.tsyndicate.com/sdk/v1/p.js
45.133.44.71200 OK 12 kB URL
cdn.tsyndicate.com/sdk/v1/p.js
IP / ASN
45.133.44.71
#39572 DataWeb Global Group B.V.
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, ASCII text, with very long lines (12242)
First Seen 2025-05-03
Last Seen 2025-06-04
Times Seen 166
Size 12 kB (12318 bytes)
MD5 86d871d26d14d0f6129ede98ab46bd25
SHA1 7140c1e643a3ef5394b15d86e7e53db932e25d84
SHA256 1255376ace55a89f78ef754bf13aa350163b9fa096fa0841ff6475ad1be44911
Certificate Info
Issuer Let's Encrypt
Subject cdn.tsyndicate.com
Fingerprint C8:21:B5:22:CE:B2:90:D0:CE:CF:F7:57:FA:B4:14:52:BA:AF:3B:EF
Validity Fri, 04 Apr 2025 07:32:05 GMT - Thu, 03 Jul 2025 07:32:04 GMT
GET /sdk/v1/p.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Fri, 02 May 2025 10:05:50 GMT
etag: W/"681498fe-301e"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Wed, 04 Jun 2025 01:31:17 GMT
vary: Accept-Encoding
x-cdn-host-id: ah1742,ds9201
x-proxy-cache: HIT
X-Firefox-Spdy: h2
GET divisiondrearilyunfiled.com/check.html
94.242.247.24200 OK 926 B URL
divisiondrearilyunfiled.com/check.html
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type HTML document, ASCII text
First Seen 2024-11-22
Last Seen 2025-08-02
Times Seen 5117
Size 926 B (926 bytes)
MD5 088dba8e97eede53134c93219f7ebbae
SHA1 adb707654d1fe0af7d0d7a9f55660d22bd3625e4
SHA256 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint CF:34:D4:54:A1:7A:18:F4:1A:75:2E:BB:C8:B3:74:87:96:B5:A3:6C
Validity Mon, 03 Mar 2025 23:54:00 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /check.html HTTP/1.1
Host: divisiondrearilyunfiled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 19 May 2025 08:12:42 GMT
vary: Accept-Encoding
etag: W/"682ae7fa-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
142.250.74.10200 OK 27 kB URL
fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
IP / ASN
142.250.74.10
#15169 GOOGLE
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type ASCII text, with very long lines (1572)
First Seen 2025-01-15
Last Seen 2025-06-02
Times Seen 713
Size 27 kB (26935 bytes)
MD5 da8ad2595d78edf21895319e7d02fe73
SHA1 d707ec9d6f68fbcfc0e2ebe711b97ad7d67e9aa9
SHA256 95bce9ed84dcd1e30d88c5e2b2368d24c4e6c60ca58210293d28b3394d1d629a
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint 1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73
Validity Mon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 02 Jun 2025 01:31:31 GMT
date: Mon, 02 Jun 2025 01:31:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET doply.net/favicon.ico
104.26.4.85200 OK 15 kB IP / ASN
104.26.4.85
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
First Seen 2023-04-05
Last Seen 2025-08-01
Times Seen 2540
Size 15 kB (15406 bytes)
MD5 30d3656f43c817e38c3e7d70b2bfbdad
SHA1 1aa43b43755e7cba5e145d0978517f7bedad7da6
SHA256 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
Certificate Info
Issuer Google Trust Services
Subject doply.net
Fingerprint 4E:5D:5F:2C:19:38:42:0B:22:C2:28:41:55:6E:DA:EC:FA:5E:1A:AF
Validity Sun, 18 May 2025 10:09:34 GMT - Sat, 16 Aug 2025 11:07:21 GMT
GET /favicon.ico HTTP/1.1
Host: doply.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/d/c3x5qidmvwtw/
Cookie: lang=1; dref_url=none; UGVyc2lzdFN0b3JhZ2U=%7B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: image/x-icon
content-length: 15406
server: cloudflare
vary: Accept-Encoding
cf-ray: 949330b31aaf5688-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Mon, 23 Jun 2025 15:50:03 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 726073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UmS%2FX1ZkjLgp0THIQjh0r1C6thD%2BqB8Kr9%2BoaWailMp3UgqVRFFDw8avuRmB4CBD1fHqOaiWpchn5SNrwGrL6b75s%2FpbH63TIZGhZcjMmYcLI3EawC4lDVXf%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=754&min_rtt=383&rtt_var=412&sent=60&recv=52&lost=0&retrans=1&sent_bytes=65830&recv_bytes=1641&delivery_rate=15445333&cwnd=257&unsent_bytes=0&cid=e75c8c00dd34e57f&ts=1551&x=0"
X-Firefox-Spdy: h2
GET i.doodcdn.io/get_slides/1259/n89n8w1gddt8y9gs.jpg
172.67.75.50200 OK 3.2 kB URL
i.doodcdn.io/get_slides/1259/n89n8w1gddt8y9gs.jpg
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type ASCII text
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 3.2 kB (3158 bytes)
MD5 4fb210d0d2d4f6e73aac7038b8375be8
SHA1 d680c25a8c827a2e8cb773562fbdbf4cadd0830a
SHA256 a33640b64c857edc57b2ac957f3a6fe09e8e7fec14ab149da45a7caf0be97510
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /get_slides/1259/n89n8w1gddt8y9gs.jpg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: text/vtt
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330bb191f568e-OSL
access-control-allow-origin: *
last-modified: Mon, 02 Jun 2025 01:29:46 GMT
cache-control: max-age=86400
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JvUORGRB7BivdC43HxHWQ5Fq%2FYcqUEdBont7FLGUPSbIg0RL1AAOT8xsNPNNWndaWk%2FccvM4szWbuSrZloQ3gL51u5xF8c4ZqhvHV2S2KHIkJTiLM63lbxj6jmZB1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7891&min_rtt=3806&rtt_var=3519&sent=240&recv=16&lost=0&retrans=0&sent_bytes=269358&recv_bytes=2796&delivery_rate=802878&cwnd=192000&unsent_bytes=0&cid=ac9ab601dde309da&ts=1848&x=1", cfExtPri, cfHdrFlush;dur=0
POST divisiondrearilyunfiled.com/solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=5KcQfWgaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&ix=0&x=1110&y=624&md=0&psu=U9zfm4UaHR0cHM6Ly9kb3BseS5uZXQvZS9jM3g1cWlkbXZ3dHc&afid=6588535648119808&caifrq=ADPmFwAAAAAAAAAB&eclog=0&snc=0&ssc=2&vp=1&dto=2&im=1&noch=1&de=0&cs=2
94.242.247.24200 OK 43 B URL
divisiondrearilyunfiled.com/solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=5KcQfWgaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&ix=0&x=1110&y=624&md=0&psu=U9zfm4UaHR0cHM6Ly9kb3BseS5uZXQvZS9jM3g1cWlkbXZ3dHc&afid=6588535648119808&caifrq=ADPmFwAAAAAAAAAB&eclog=0&snc=0&ssc=2&vp=1&dto=2&im=1&noch=1&de=0&cs=2
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type GIF image data, version 89a, 1 x 1
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 11421
Size 43 B (43 bytes)
MD5 28e463819a210071de3b45ebe7633613
SHA1 6dccd571828ec0912629119cf7eabfea9f33ddbc
SHA256 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint CF:34:D4:54:A1:7A:18:F4:1A:75:2E:BB:C8:B3:74:87:96:B5:A3:6C
Validity Mon, 03 Mar 2025 23:54:00 GMT - Sat, 30 Aug 2025 21:59:00 GMT
POST /solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.552&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=Mm9fe4HprcKmeiTBmma-f&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=5KcQfWgaHR0cHM6Ly9kb3BseS5uZXQvZC9jM3g1cWlkbXZ3dHcv&ix=0&x=1110&y=624&md=0&psu=U9zfm4UaHR0cHM6Ly9kb3BseS5uZXQvZS9jM3g1cWlkbXZ3dHc&afid=6588535648119808&caifrq=ADPmFwAAAAAAAAAB&eclog=0&snc=0&ssc=2&vp=1&dto=2&im=1&noch=1&de=0&cs=2 HTTP/1.1
Host: divisiondrearilyunfiled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:18 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Mon, 06 Jul 2026 01:31:18 GMT; Secure; SameSite=None
UID=2506012031f7273ec850d543fca3ee5a91a0; Path=/; Expires=Mon, 06 Jul 2026 01:31:18 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.74.35200 OK 40 kB URL
fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
First Seen 2025-01-08
Last Seen 2025-08-02
Times Seen 97599
Size 40 kB (40128 bytes)
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
Validity Mon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 May 2025 10:03:46 GMT
expires: Fri, 29 May 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 314866
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET betotodilea.com/400/4857535
139.45.197.104200 OK 145 kB URL
betotodilea.com/400/4857535
IP / ASN
139.45.197.104
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-05-31
Last Seen 2025-06-02
Times Seen 13
Size 145 kB (145273 bytes)
MD5 f9fba59612a132bbed9dec182801e37e
SHA1 53496dc737e5c2750413cffb60fb2396ab01cb43
SHA256 817db69a92d15202be3c678e08e0fb9e355e7d4d082bf653593e8035699f9c76
Certificate Info
Issuer Let's Encrypt
Subject betotodilea.com
Fingerprint 52:DD:84:C3:DF:8B:D7:F5:39:6F:8F:B6:E3:0A:14:B3:B2:C8:75:06
Validity Wed, 09 Apr 2025 02:23:21 GMT - Tue, 08 Jul 2025 02:23:20 GMT
GET /400/4857535 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: application/javascript
x-trace-id: f26dc26a44d680b5e98efb635ad4da8d
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
set-cookie: OAID=0301dc418fcc4810f66c4496ffbf1b8b; expires=Tue, 02 Jun 2026 01:31:16 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET static.doodcdn.io/js/embed3.js
172.67.75.50200 OK 113 kB URL
static.doodcdn.io/js/embed3.js
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (27236)
First Seen 2025-03-05
Last Seen 2025-07-31
Times Seen 766
Size 113 kB (112942 bytes)
MD5 2cdc3aa1ffb8ca7b629675d83b2862dc
SHA1 be0a9072b9559c544d1c852c4559f5a64833c888
SHA256 f23168d2b1910ff6e49bab3debce5786f7859e9e65ceda07a5554b66fd60f876
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: application/javascript
content-length: 112942
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b5d950569b-OSL
last-modified: Wed, 05 Mar 2025 20:27:01 GMT
etag: "67c8b395-1b92e"
expires: Tue, 01 Jul 2025 06:51:10 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 930
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vf%2BliXq9m6%2BMt1h1mss6xsFZD%2ByFVA%2B438ywOC8MJqnoN2CTD1JkbH%2BxGQp5xt7KjxFYaXPT6%2Bvs13xT2kwO%2F8cN%2BO%2FD7Q0UCZV9bPWTCCn6%2B8YeNix1Idj%2F5AvT15yqmMpe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6436&min_rtt=3218&rtt_var=3917&sent=34&recv=12&lost=0&retrans=0&sent_bytes=24817&recv_bytes=2018&delivery_rate=716610&cwnd=24000&unsent_bytes=0&cid=99249cfcae8b4476&ts=1247&x=1", cfExtPri, cfHdrFlush;dur=0
GET d18t35yyry2k49.cloudfront.net/?ryytd=919673
3.167.7.136204 No Content 0 B URL
d18t35yyry2k49.cloudfront.net/?ryytd=919673
IP / ASN
3.167.7.136
#0
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?ryytd=919673 HTTP/1.1
Host: d18t35yyry2k49.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 02 Jun 2025 01:31:17 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: tSueLoufk1qVwPAxiX4Nk3woq95EZuouK_xx5WS5oDy2mJQUqkSYtQ==
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
104.21.48.1404 Not Found 561 B URL
ukankingwithea.com/asd100.bin
IP / ASN
104.21.48.1
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2025-04-27
Last Seen 2025-07-31
Times Seen 251
Size 561 B (561 bytes)
MD5 9f3fb0948a012f975250df83e4adec47
SHA1 09fda5065170e45e4847b550cc5a232aecc76bb8
SHA256 d3dae34448fafbf40e6fef9a015397d39003ce732cbb59cd37e027bed55a7bed
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint 02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
Validity Tue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 117
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Lad7Q2oMV5RneC1RBNFrnQJ4gnTgDfvtn9FmjKJydqWGWnZBcbbwXDfdViPp6z%2BYBm33Npq%2F5DKa0W%2BDt08cKMlShkuBo60zUvbSAb1aXZM%3D"}]}
content-encoding: br
cf-ray: 949330bd6c5c7128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
173.194.73.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BA:92:EA:4A:65:E4:20:C4:FB:DD:45:2B:E1:80:37:BF:6E:2D:2C:E5
Validity Mon, 12 May 2025 08:44:53 GMT - Mon, 04 Aug 2025 08:44:52 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:T92i04g2AKYgPPyKIm9bcfUJxNJ4oQ:zA0Q9Qi49BxLNdMQ; Expires=Wed, 02-Jun-2027 01:31:18 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 02 Jun 2025 01:31:18 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiP7wW3CFdzMozUgQJ4UqOJ2afN9l2y4SBi-qYrd1ZxxWW2aFPt72zj9aVnuBHkiFnA6lPvoVw
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-6GokaGcQHZItyWEhQ7z2Ug' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2
142.250.74.35200 OK 20 kB URL
fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 20408, version 1.0
First Seen 2025-01-09
Last Seen 2025-08-02
Times Seen 7421
Size 20 kB (20408 bytes)
MD5 e8730678d4610fa908d3cba1ef0b4ddf
SHA1 1efcbee909ce74bf04878d74867f12a1e41ae7a4
SHA256 e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
Validity Mon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 May 2025 13:13:49 GMT
expires: Fri, 29 May 2026 13:13:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Jan 2025 18:23:12 GMT
content-type: font/woff2
age: 303463
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET i.doodcdn.io/theme_2/fonts/avertastd-regular-webfont.woff2
172.67.75.50200 OK 24 kB URL
i.doodcdn.io/theme_2/fonts/avertastd-regular-webfont.woff2
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524
First Seen 2023-04-05
Last Seen 2025-08-01
Times Seen 2974
Size 24 kB (23812 bytes)
MD5 eb586e5a1b86dbf1c866e3ed80f9d18e
SHA1 280ee78d19c017ab9335f769595e5157d3c4a343
SHA256 714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:15 GMT
content-type: font/woff2
content-length: 23812
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b09c1e568e-OSL
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Tue, 01 Jul 2025 11:22:28 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 35328
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n5gstmtiFvn8ymBDZ6VMnPYfMfhY3n8yas4u69kQEvpDw4r4KcrOKBXzbqT9bsCcIveLp5Ul5SsiAi2jMf5dl6e9JHvc%2Bp0Jdbf97d0BztKnc9nlPfCvtSduJmTnAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4931&min_rtt=3806&rtt_var=2231&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4191&recv_bytes=1900&delivery_rate=168659&cwnd=12000&unsent_bytes=0&cid=ac9ab601dde309da&ts=36&x=1", cfExtPri, cfHdrFlush;dur=0
GET appointeeivyspongy.com/check.html
94.242.247.24200 OK 926 B URL
appointeeivyspongy.com/check.html
IP / ASN
94.242.247.24
#7979 SERVERS-COM
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type HTML document, ASCII text
First Seen 2024-11-22
Last Seen 2025-08-02
Times Seen 5117
Size 926 B (926 bytes)
MD5 088dba8e97eede53134c93219f7ebbae
SHA1 adb707654d1fe0af7d0d7a9f55660d22bd3625e4
SHA256 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
Certificate Info
Issuer Buypass AS-983163327
Subject
Fingerprint 22:0A:29:24:35:4B:B9:91:E2:D5:B4:B8:11:B7:D6:27:9C:32:E6:30
Validity Mon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
GET /check.html HTTP/1.1
Host: appointeeivyspongy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:16 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 19 May 2025 08:12:42 GMT
vary: Accept-Encoding
etag: W/"682ae7fa-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET onsuchasricew.com/ejVPNmwbVyxbUxsILRAZCFlyE148EH1wCA8FP0MISkYrWgEAU2FVABVAK1AeFVs7GAIfQWoEKkphfQMAI2MKRS0rRgdUBgl9DmAUFVN+bDoschVGJBJWCnhfM34MXilDeyR3IDh2GUYuOGwAZhZDYQV3HBV8KAc+MEwkVD84cC14NDBQHkFcDXweWjUoTx5eKCxdHlIVTn4NBxQWVB1ZOj5fP08rEkIJexVOVApeLU9+GlE9O3I4Xy0oDQZmPzdlHnAhIlAkdDoocgETXjxnJ38lKkw8dCkSf39QOk55CW4+Q20jZD4cBnZ6OhN7f1A6TmYMclVPYiQbLilwfUYPLGcjWAlKQRh/XygMF14PIlEHQRoscwVaNSwAAmQrNBB9cC8rdAx5BTh5GU8IEFN+DzovYg0TXjxtf3Q4I2YkfioNZHx/LiB0Gk4IXwcNbjo8ZRZhBxhiCXdKEEYgWBxHdCQPARkBCU44
3.167.2.84200 OK 3.1 kB URL
onsuchasricew.com/ejVPNmwbVyxbUxsILRAZCFlyE148EH1wCA8FP0MISkYrWgEAU2FVABVAK1AeFVs7GAIfQWoEKkphfQMAI2MKRS0rRgdUBgl9DmAUFVN+bDoschVGJBJWCnhfM34MXilDeyR3IDh2GUYuOGwAZhZDYQV3HBV8KAc+MEwkVD84cC14NDBQHkFcDXweWjUoTx5eKCxdHlIVTn4NBxQWVB1ZOj5fP08rEkIJexVOVApeLU9+GlE9O3I4Xy0oDQZmPzdlHnAhIlAkdDoocgETXjxnJ38lKkw8dCkSf39QOk55CW4+Q20jZD4cBnZ6OhN7f1A6TmYMclVPYiQbLilwfUYPLGcjWAlKQRh/XygMF14PIlEHQRoscwVaNSwAAmQrNBB9cC8rdAx5BTh5GU8IEFN+DzovYg0TXjxtf3Q4I2YkfioNZHx/LiB0Gk4IXwcNbjo8ZRZhBxhiCXdKEEYgWBxHdCQPARkBCU44
IP / ASN
3.167.2.84
#0
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type HTML document, ASCII text, with very long lines (3054), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 3.1 kB (3054 bytes)
MD5 3c9bde26102b0633b3b15366ad097a74
SHA1 3e0ffe13f25cb245228897ebd773f073b055d0a0
SHA256 02a44d818982e9bb3b74ad525ad7b44ce2a98a8dd0626a8142a852f48e7fd4e8
Certificate Info
Issuer Amazon
Subject onsuchasricew.com
Fingerprint C8:BA:C5:95:BC:99:3F:3F:4A:FC:F6:D4:68:84:98:E4:57:6B:9E:78
Validity Wed, 14 May 2025 00:00:00 GMT - Fri, 12 Jun 2026 23:59:59 GMT
GET /ejVPNmwbVyxbUxsILRAZCFlyE148EH1wCA8FP0MISkYrWgEAU2FVABVAK1AeFVs7GAIfQWoEKkphfQMAI2MKRS0rRgdUBgl9DmAUFVN+bDoschVGJBJWCnhfM34MXilDeyR3IDh2GUYuOGwAZhZDYQV3HBV8KAc+MEwkVD84cC14NDBQHkFcDXweWjUoTx5eKCxdHlIVTn4NBxQWVB1ZOj5fP08rEkIJexVOVApeLU9+GlE9O3I4Xy0oDQZmPzdlHnAhIlAkdDoocgETXjxnJ38lKkw8dCkSf39QOk55CW4+Q20jZD4cBnZ6OhN7f1A6TmYMclVPYiQbLilwfUYPLGcjWAlKQRh/XygMF14PIlEHQRoscwVaNSwAAmQrNBB9cC8rdAx5BTh5GU8IEFN+DzovYg0TXjxtf3Q4I2YkfioNZHx/LiB0Gk4IXwcNbjo8ZRZhBxhiCXdKEEYgWBxHdCQPARkBCU44 HTTP/1.1
Host: onsuchasricew.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1201
date: Mon, 02 Jun 2025 01:31:17 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=P4KXUvhQnr9l/LlrNsJI0Mufd4waosVvg1lf/ZrG1vYIL7EeapgECTECO0Fy9SjyAh2Z7c/IlxV2Dtte6/evsJv2z42sTR+IzLwYg6z0xsdBwAA2O3I/4BqbDtLh; Expires=Mon, 09 Jun 2025 01:31:17 GMT; Path=/
AWSALBCORS=P4KXUvhQnr9l/LlrNsJI0Mufd4waosVvg1lf/ZrG1vYIL7EeapgECTECO0Fy9SjyAh2Z7c/IlxV2Dtte6/evsJv2z42sTR+IzLwYg6z0xsdBwAA2O3I/4BqbDtLh; Expires=Mon, 09 Jun 2025 01:31:17 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: fL2eRSHhDwUFz6ftOo0agHj6A7xwsS2-TB9SGsugCuJEQA8BVjTkMg==
X-Firefox-Spdy: h2
GET leforgotteddisg.com/TDJYb1NjDTscbhZnChY3FF4ACQY4cwwpEX1haCESGVwKLgEJAn4bOigPYV9ifgdgSSMlVmVdampBLA4nOUFlXnUlXD4AbmpEZV59fBxuX314FC1SYmpGKA40cQN+Hyc4XmVeZHgKYF1kdAVvWGZ+
104.21.43.220204 No Content 0 B URL
leforgotteddisg.com/TDJYb1NjDTscbhZnChY3FF4ACQY4cwwpEX1haCESGVwKLgEJAn4bOigPYV9ifgdgSSMlVmVdampBLA4nOUFlXnUlXD4AbmpEZV59fBxuX314FC1SYmpGKA40cQN+Hyc4XmVeZHgKYF1kdAVvWGZ+
IP / ASN
104.21.43.220
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject leforgotteddisg.com
Fingerprint DE:81:E2:9B:D5:56:DF:5B:6C:11:F1:0B:3B:70:1A:45:63:21:02:65
Validity Tue, 22 Apr 2025 10:34:47 GMT - Mon, 21 Jul 2025 11:32:53 GMT
GET /TDJYb1NjDTscbhZnChY3FF4ACQY4cwwpEX1haCESGVwKLgEJAn4bOigPYV9ifgdgSSMlVmVdampBLA4nOUFlXnUlXD4AbmpEZV59fBxuX314FC1SYmpGKA40cQN+Hyc4XmVeZHgKYF1kdAVvWGZ+ HTTP/1.1
Host: leforgotteddisg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 02 Jun 2025 01:31:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NSMEv6raxazZ%2FftGhtvLIF%2FYHQHfR8Fc06rk40ytbHeLfgcMrRAqnb76l7N8eD2IsKvSRgDdmD7c01yVHeIQi6zRpkDroKZHeqhAqTT8HfCz"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 949330bd68020afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET tzegilo.com/stattag.js
104.21.11.245200 OK 18 kB URL
tzegilo.com/stattag.js
IP / ASN
104.21.11.245
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type JavaScript source, ASCII text, with very long lines (17229)
First Seen 2024-07-11
Last Seen 2025-08-02
Times Seen 2913
Size 18 kB (17879 bytes)
MD5 01227f5edc20e0ff4ed643b27cb8bb68
SHA1 d71a88f7341f2b1bdaa7deb9a66888607bd52598
SHA256 75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2
Certificate Info
Issuer Google Trust Services
Subject tzegilo.com
Fingerprint BD:3B:17:0D:E4:BF:2D:A2:D2:DE:AD:AD:5B:4E:50:C8:BC:18:2A:3A
Validity Sat, 17 May 2025 12:47:13 GMT - Fri, 15 Aug 2025 13:41:30 GMT
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:20 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jul 2024 10:23:58 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WaOljkuHQCoXyt1WvqLX0zlURISSOmLGhhCbaeLJppN4kuhVUzE1ESIfS4CRik8zA5vGXaonkYSPct67aQ8v%2FsCQQgzcki%2BUBw%3D%3D"}]}
age: 2455
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"668fb2be-45d7"
content-encoding: br
cf-ray: 949330cc2ad90b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS betotodilea.com/500/4857535?excludes=&oaid=0801dcfd3ec54e37e8f966d1a360153c&var=&ymid=&tgp=&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1
139.45.197.104200 OK 0 B URL
betotodilea.com/500/4857535?excludes=&oaid=0801dcfd3ec54e37e8f966d1a360153c&var=&ymid=&tgp=&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1
IP / ASN
139.45.197.104
#9002 RETN Limited
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject betotodilea.com
Fingerprint 52:DD:84:C3:DF:8B:D7:F5:39:6F:8F:B6:E3:0A:14:B3:B2:C8:75:06
Validity Wed, 09 Apr 2025 02:23:21 GMT - Tue, 08 Jul 2025 02:23:20 GMT
OPTIONS /500/4857535?excludes=&oaid=0801dcfd3ec54e37e8f966d1a360153c&var=&ymid=&tgp=&js_build=8&sw_version=v1.635.0&branchId=1000030&dmn=betotodilea.com&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdoply.net%2Fd%2Fc3x5qidmvwtw%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&jsp=1 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://doply.net/
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 02 Jun 2025 01:31:21 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://doply.net
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
GET bobapsoabauns.com/www/images/c8e226f2ae8c3f4af7477b3681f07cd2.png
172.67.166.60200 OK 29 kB URL
bobapsoabauns.com/www/images/c8e226f2ae8c3f4af7477b3681f07cd2.png
IP / ASN
172.67.166.60
#13335 CLOUDFLARENET
Requested by https://doply.net/d/c3x5qidmvwtw/
Resource Info
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
First Seen 2025-05-12
Last Seen 2025-07-13
Times Seen 115
Size 29 kB (28672 bytes)
MD5 c8e226f2ae8c3f4af7477b3681f07cd2
SHA1 2de6f877d53a61f9a96a46f2b238eb35627baf2c
SHA256 2480203e9479426d4835a11bc7e1e82980a92041d7033b6f0450e66fe3027088
Certificate Info
Issuer Google Trust Services
Subject bobapsoabauns.com
Fingerprint 8C:C2:83:27:EF:DF:2F:25:DF:58:17:A2:0F:5F:E7:86:EA:92:7F:D9
Validity Wed, 21 May 2025 20:50:33 GMT - Tue, 19 Aug 2025 21:47:54 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /www/images/c8e226f2ae8c3f4af7477b3681f07cd2.png HTTP/1.1
Host: bobapsoabauns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Jun 2025 01:31:21 GMT
content-type: image/png
content-length: 28672
server: cloudflare
last-modified: Tue, 08 Apr 2025 11:57:00 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "67f50f0c-7000"
expires: Mon, 02 Jun 2025 04:15:19 GMT
cache-control: max-age=86400
timing-allow-origin: *
accept-ranges: bytes
age: 76562
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=B6d7c2OBSDkaiCgvWY3cZ%2Fm7BHIB9UVBRVPQFgJXCVWx7s4zPW3MI8rFlA6%2FJjnLLeXtdxBcdjAGyMdYrvTUwZWTFP%2F8t3fCipPm7g17NQ%3D%3D"}]}
cf-ray: 949330d47e941c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET relinedtaysaam.top/r683c40c12d294/70849
23.109.170.136200 OK 62 kB URL
relinedtaysaam.top/r683c40c12d294/70849
IP / ASN
23.109.170.136
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, ASCII text, with very long lines (61948), with no line terminators
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 62 kB (61948 bytes)
MD5 476e196d921b86d02fe89827a50a691d
SHA1 11dfa79020dd608ce0499e2e03cf1a2a7e98ddbf
SHA256 928558f1c7c88791376f93b541967160a56995a4d3fa684130f89a2f7cd5aafb
Certificate Info
Issuer ZeroSSL
Subject relinedtaysaam.top
Fingerprint 17:F3:DA:B4:52:5D:C0:9E:C4:89:13:DC:EC:D3:F2:3E:C1:8B:85:80
Validity Fri, 30 May 2025 00:00:00 GMT - Thu, 28 Aug 2025 23:59:59 GMT
GET /r683c40c12d294/70849 HTTP/1.1
Host: relinedtaysaam.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jun 2025 01:31:17 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://doply.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 03-Jun-2025 01:31:17 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Tue, 03-Jun-2025 01:31:17 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET du0pud0sdlmzf.cloudfront.net/?dupud=908057
3.164.247.207200 OK 320 kB URL
du0pud0sdlmzf.cloudfront.net/?dupud=908057
IP / ASN
3.164.247.207
#16509 AMAZON-02
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 320 kB (320388 bytes)
MD5 d68977ff3d36ceb84a833e0b70ab71eb
SHA1 bcb1032dc14fae2478e6b6528cec4eb1a505fddb
SHA256 aff3c8236f28adb0c022d105ab6cb4ff12cdaadde20185705c19335ec129d779
Certificate Info
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?dupud=908057 HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 106753
date: Mon, 02 Jun 2025 01:31:17 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 41fc52a84466debf784d2dbdb0b64b36.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: h7wecgMvfcI3InKyGo2l0pvYers2KLKCsRwE9myl_zS_yzZhzIsNXg==
X-Firefox-Spdy: h2
GET i.doodcdn.io/img/no_video_3.svg
172.67.75.50200 OK 2.8 kB URL
i.doodcdn.io/img/no_video_3.svg
IP / ASN
172.67.75.50
#13335 CLOUDFLARENET
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2023-04-05
Last Seen 2025-07-31
Times Seen 2137
Size 2.8 kB (2812 bytes)
MD5 077bfdaa49ae4877a42611b739ec4752
SHA1 a2f9e1222b7af9abc05122411ab8902efcc08ead
SHA256 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
Certificate Info
Issuer Google Trust Services
Subject doodcdn.io
Fingerprint D7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B
Validity Sat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doply.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Jun 2025 01:31:17 GMT
content-type: image/svg+xml
content-length: 2812
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 949330b779f3569b-OSL
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Tue, 01 Jul 2025 05:02:20 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 69930
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IKpUwsd%2B0RccVFgaLqAP2iem6nZFMEVplf7TxVfwvCQChSRoZruLr3SB5KPl9EK2ojKCW4zmwXpOLY6nldJxzcppdhmNVj2oa9PG8PHjzbHQjI4Lex3MFqV5yGenPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21985&min_rtt=3218&rtt_var=19936&sent=230&recv=17&lost=0&retrans=1&sent_bytes=256089&recv_bytes=2489&delivery_rate=1871363&cwnd=104700&unsent_bytes=0&cid=99249cfcae8b4476&ts=1507&x=1", cfExtPri, cfHdrFlush;dur=0
POST hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
94.242.236.142200 OK 669 B URL
hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A
IP / ASN
94.242.236.142
#7979 SERVERS-COM
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type JSON text data
First Seen 2025-06-02
Last Seen 2025-06-02
Times Seen 1
Size 669 B (669 bytes)
MD5 a6f53407f1c54e3e277f458efa013bf3
SHA1 c2d1419a571f586c688d2bd07b986bc13b5c524c
SHA256 8b762e1b82a24971303952a200e30362a20e9c988d1937872c8a5f8576e7274b
Certificate Info
Issuer Let's Encrypt
Subject hoptreeperrie.shop
Fingerprint C6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85
Validity Tue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
Content-Type: application/json
Content-Length: 82
Origin: https://doply.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jun 2025 01:31:18 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://doply.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 03-Jun-2025 01:31:18 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Tue, 03-Jun-2025 01:31:18 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiP7wW3CFdzMozUgQJ4UqOJ2afN9l2y4SBi-qYrd1ZxxWW2aFPt72zj9aVnuBHkiFnA6lPvoVw
173.194.73.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiP7wW3CFdzMozUgQJ4UqOJ2afN9l2y4SBi-qYrd1ZxxWW2aFPt72zj9aVnuBHkiFnA6lPvoVw
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://doply.net/e/c3x5qidmvwtw
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605970
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BA:92:EA:4A:65:E4:20:C4:FB:DD:45:2B:E1:80:37:BF:6E:2D:2C:E5
Validity Mon, 12 May 2025 08:44:53 GMT - Mon, 04 Aug 2025 08:44:52 GMT
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiP7wW3CFdzMozUgQJ4UqOJ2afN9l2y4SBi-qYrd1ZxxWW2aFPt72zj9aVnuBHkiFnA6lPvoVw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doply.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:YkmbSbLDyt5UCCH_mzn-RMSWBBSPyw:9OtiLotCGiExHAUt;Path=/;Expires=Wed, 02-Jun-2027 01:31:18 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 02 Jun 2025 01:31:18 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMYW1WB6mSoeaxpx6oZOt2sQQWyYQSXBOEcnHXC1n8WcWeGb9fc9qViXnyTPFbOlHhCr_6klA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S87823608%3A1748827878986968
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-hVQqogDKaOcMyfFCl4IyhQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 411
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2