{"report_id":"73cf53c0-bf54-4441-bf29-b62045fa5dbb","version":6,"status":"done","tags":[],"date":"2026-02-04T19:38:24Z","url":{"schema":"http","addr":"ds2video.com/","fqdn":"ds2video.com","domain":"ds2video.com","tld":"com"},"ip":{"addr":"162.19.86.186","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"title":"DoodStream","dom":{"size":26502,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (24000)","md5":"420ecf77a16d6b0c411d185736386caa","sha1":"deff12e9bbd45455463618ad88463b0ae098ead7","sha256":"378cbb44343986aa34f845df52aa9e531318c7c110b66768d717ab8cb04f84ac","sha512":"aaef9f388301b98cd010e42217971efe4397b9419ff3b9125b11a4e15ece0bedc2fe2884da8523748e72d7ff4d4225fc21fd701dbc81a12041d9b7422b42dd0c","ssdeep":"768:TZZBrk0QmON1mvAIlYqyLudx+ecepeQeeeMeeL1eeeJe1:TZZBr9OzmvAIlFyLudx+ecepeQeeeMeI","tlshash":"f3c2b83170049a3b0193c1d4b2749b1eb1e6e34ada171649e2fec3bc1fdbc96ec26694","dom_hash":"domhash99872766596d049f20623ce887708eb8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ds2video.com/","fqdn":"ds2video.com","domain":"ds2video.com","tld":"com"},"ip":{"addr":"162.19.86.186","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T19:38:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"ds2video.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"doodstream.com","ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2020-01-27","domain_rank":110237,"first_seen":"2020-01-27T09:30:00Z","last_seen":"2026-01-30T18:38:19.6861Z","alert_count":8,"request_count":8,"received_data":141870,"sent_data":4475,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"i.doodcdn.io","ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-05","domain_rank":200454,"first_seen":"2025-03-05T21:16:34.795928Z","last_seen":"2026-01-30T08:37:45.322946Z","alert_count":0,"request_count":5,"received_data":1214596,"sent_data":2162,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"image.crisp.chat","ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":456330,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2026-01-30T06:56:01.792806Z","alert_count":0,"request_count":4,"received_data":6610,"sent_data":2366,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-01T22:29:52.319656Z","alert_count":0,"request_count":3,"received_data":2580732,"sent_data":1476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-01T22:25:59.829418Z","alert_count":0,"request_count":3,"received_data":5157,"sent_data":1302,"comment":"","tags":null,"fingerprints":null},{"fqdn":"client.relay.crisp.chat","ip":{"addr":"134.209.238.18","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2017-06-09","domain_rank":159579,"first_seen":"2017-07-02T12:24:26Z","last_seen":"2026-01-28T20:58:31.376751Z","alert_count":0,"request_count":1,"received_data":441,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ds2video.com","ip":{"addr":"162.19.86.186","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2023-08-04","domain_rank":1961987,"first_seen":"2023-08-04T14:11:33Z","last_seen":"2026-01-20T20:35:49.360072Z","alert_count":2,"request_count":2,"received_data":18122,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":1,"received_data":89170,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.doodcdn.io","ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-05","domain_rank":224488,"first_seen":"2025-03-05T21:16:34.803152Z","last_seen":"2026-01-30T18:38:19.650547Z","alert_count":0,"request_count":9,"received_data":710201,"sent_data":4728,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"client.crisp.chat","ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":168029,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2026-01-29T01:38:50.625574Z","alert_count":0,"request_count":8,"received_data":544027,"sent_data":3942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"myvidplay.com","ip":{"addr":"104.26.13.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-28","domain_rank":0,"first_seen":"2025-11-28T08:15:07.243732Z","last_seen":"2026-02-01T07:01:04.015781Z","alert_count":0,"request_count":1,"received_data":18592,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"doodstream.com/js/dood_load.js","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3da62de56e20742d00f9bed95160562","sha1":"909b8918114646d0290e0e9ed3fd38e8954a5860","sha256":"d9e6077900d21940206069ce5b05bae5e2ef6f100187cfe49dda6c41a10863e7","sha512":"2a116aa39967b096a737581f7cfa13ba988f44366e330054c97b426669a8927a46da0b0b592ab010ca9573c64a1bae5c49c26cb50e7cf7b9b830f9ef9c46149b","ssdeep":"","tlshash":"955130e9b21221b601f65ab621ffa340b6752145301390216c7e8cd96e3ffea6253e5f","size":2959,"data":"","first_seen":"2024-05-02T22:14:39Z","last_seen":"2026-04-15T20:24:43.725449Z","times_seen":2194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/home_page.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3166b84236e9f39ed19cf578c39b6d25","sha1":"be4121a314ae601b8a7db70d92691e5ed933fc1c","sha256":"4733022d78c4c270b6f2d84f236c0dd9ce6c69cfcb6f6210b87c0fad2188dddc","sha512":"f44ca4fe3540bad4cbf389e1b38711c5a8e8e1010a529898705031d94318c64ed5d95d89864543afa8820a2df7df2db5666b18188a5e4592e5922d9f0474ef66","ssdeep":"6144:vf5c6kZwWgCz9+SmFoXp0sF62CrK1o+cCNvmskMrmzKU:G/gihF60camskMoKU","tlshash":"87d4e888ba95b07543a375b4002f510bf27bba2d744d44e8f265d8e5bcb898e513bf38","size":629900,"data":"","first_seen":"2025-02-23T23:30:19.089135Z","last_seen":"2026-04-15T20:24:43.735745Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/en_default_439a0bf.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3798413bf1ccb16acf1abc0c3663244d","sha1":"f8fce6b5457016a1c4860632fb1a87d57cf3c0e1","sha256":"209cce05246757bb8a9de3c366be408caefc3d8de3df7b232ecfaba67aaccb74","sha512":"1943ed45d17688133da38b5a44d040ef99a1977a245a2f7e889d18ca3a198937708071188570b61390ccc3abcd7b6f6b441de9ec07c8e5877a4e729dfb76a6f7","ssdeep":"192:+FmXut8HXikEeMeTAFGySAU1RrUWYGfu7nOmrY2FYXCM7+RmvKNXEHr4H:+FmX68HXikEeMeYGySfRrLzms7EJgrO","tlshash":"ee52a40eef36de7b02774b83b184b6124ab511b106d0687ed45d497c02a8ecab65bf4d","size":14189,"data":"","first_seen":"2026-02-02T20:44:56.919691Z","last_seen":"2026-02-06T07:28:37.176123Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43bae97fc23b565f81e5b41c36b5c3e6","sha1":"f9e0e83a879959097c8edae3bff63bac47d055ac","sha256":"26bb843dda6c3b83d69eb273f392010af0450172f81d28a25d16ebee5d7586e4","sha512":"5ff816e6d43f169c7fc1865cf835e7ee7ef4ad2d71038cd6e0190ced72324f87c1864afae5fdf169eb29a927be7654645f768147a9739a4f00d6d729f74a86cc","ssdeep":"","tlshash":"db1132772a14a0390b7209e1e2ffcab0e492301cb16885d8a511dac83e69ccfcf19484","size":1019,"data":"","first_seen":"2026-01-28T08:28:19.381695Z","last_seen":"2026-02-05T21:51:33.63524Z","times_seen":1823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-15T21:40:40.168395Z","times_seen":117966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9ad5f07ac9b6631dc95e185158d1231","sha1":"cc07bb1b9eb5443f8c751abe5523e113694d43e8","sha256":"d205e7c10960112046f732f3d4ae68e8d28c0641dc14ba23b724aa884a3c016e","sha512":"33c77ca379b451d8792f8c22d859cfbb67d4d7ff04e934620402c35f1514ca8fe246168477eab7c1f004e95f4dadbb4553e85c2c41517103a3d744583e9e1358","ssdeep":"","tlshash":"ad014c3e5491f62442e060fc195a185891f48f8735b9b944eb75c73d2a72e4348ec8a3","size":690,"data":"","first_seen":"2023-03-09T17:40:07Z","last_seen":"2026-04-15T20:24:43.736676Z","times_seen":793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43bae97fc23b565f81e5b41c36b5c3e6","sha1":"f9e0e83a879959097c8edae3bff63bac47d055ac","sha256":"26bb843dda6c3b83d69eb273f392010af0450172f81d28a25d16ebee5d7586e4","sha512":"5ff816e6d43f169c7fc1865cf835e7ee7ef4ad2d71038cd6e0190ced72324f87c1864afae5fdf169eb29a927be7654645f768147a9739a4f00d6d729f74a86cc","ssdeep":"","tlshash":"db1132772a14a0390b7209e1e2ffcab0e492301cb16885d8a511dac83e69ccfcf19484","size":1019,"data":"","first_seen":"2026-01-28T08:28:19.381695Z","last_seen":"2026-02-05T21:51:33.63524Z","times_seen":1823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b3a094376cfe3e33ed8f9d82603ece","sha1":"eab5e41e43a91a7504ab7fb9dbb3d3d356e7b885","sha256":"388e49befc814df2bb67dc55a9ccae07e1a49b812e2fcab91d4367d688245d5d","sha512":"7f0f355ac986f1dcfd868affbc0f09b16f3d6fab25b2613347ba54e8e549b5089bc16051c740e8496c86c69a148ace414583e008410f86ddc1c6c5c57547d0ce","ssdeep":"192:EjSfZ0VsU+ZO09SOQal5eK5Y+91Edlng99dgY3AjL/7Cb/+io:/+IHmMeK5Y6iu9uY3Abkk","tlshash":"49f183173269603505a362ef123b2a49f03361295c85825cb569ecf1297ce4fa13bffe","size":7755,"data":"","first_seen":"2026-02-02T20:44:56.895393Z","last_seen":"2026-02-06T07:28:37.159687Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/theme_panel.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fa6b76c00dbf823e604ce777da79763","sha1":"21eb3a34c12f4bf7d7b2087157b39d1be96a69ab","sha256":"a6bb2b1a9d9727048a5a0927db6ee35d4f5c335e645715dd2e4dc693669951ad","sha512":"604f3719abd132aaac8c453788b20ca6eb6cd560ea1c9ae86323a3d4739d9b219902c40e1956708602a41205be1df028b539c3ff904ad7c0870f22216905e643","ssdeep":"3072:HuQmXnY6zIX8bYSHPX4w/5D3GCe9Q2gKqxxHuT65MBGO4lHPWbMZ7qp5OR:OQm97bYnw/5D9LKqx98BBGhHPWs7qpUR","tlshash":"b784d5cdb685b0b207eb60b5407f560bf237a959b44a8190f265e8d46d7c98e603bf3c","size":404365,"data":"","first_seen":"2023-11-22T17:53:16Z","last_seen":"2026-04-15T20:24:43.705041Z","times_seen":711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_439a0bf.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb8b6eb9c885a6e4183925c474558217","sha1":"a0a5e348ce1857806bd978d6b32b0da5703b2c91","sha256":"a40f3bda1500b77981729e7eee7575c88ac5b02b4a6a31f1c5ee1291b4f21a75","sha512":"af89d1d3aeb2df9a7621344f1eb9395ec0f9e8cda2cda384465b3ee995da8a2a5ebcd62e9118931be7db891a133c61e6cdd9d32f9db70669ca78b5599345400b","ssdeep":"6144:pLHetYTHOg8MjmtBqFq/OyklLLjcZpcm5pnornY:FHOPCZfcZpp5pnoLY","tlshash":"4a64199a7265a83313f682d7a4320942f339255d7486803cf36cadef664ce8571e7bb4","size":328110,"data":"","first_seen":"2026-02-02T20:44:56.940711Z","last_seen":"2026-02-06T07:28:37.169429Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d11689ba15ba8302e17ce8789a703ea","sha1":"4177d68d211d40d026cdced43983322cbfad3582","sha256":"581272bddd7d45428b263f78cdbaaa2edadf506f34902f152861ad122e454abc","sha512":"590747367733068b7c3ec5b6cd94f8b213125f21db8a0f65ca779bfd1530922d62d51447932923c2eaba9fd71021574dfcad59645e042e6e83ba687e2a067c02","ssdeep":"12288:CM0QsPsDmunObfvpfyv9p0tjgg27RGO3Pr:v0IMfVyv9pmgdR1z","tlshash":"72055be9b553347252a2baf284bb204ca37d9665d85c0c9db165c4f02ff0809b17beb7","size":859335,"data":"","first_seen":"2026-01-27T01:13:21.608817Z","last_seen":"2026-03-31T18:55:46.754314Z","times_seen":13184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43bae97fc23b565f81e5b41c36b5c3e6","sha1":"f9e0e83a879959097c8edae3bff63bac47d055ac","sha256":"26bb843dda6c3b83d69eb273f392010af0450172f81d28a25d16ebee5d7586e4","sha512":"5ff816e6d43f169c7fc1865cf835e7ee7ef4ad2d71038cd6e0190ced72324f87c1864afae5fdf169eb29a927be7654645f768147a9739a4f00d6d729f74a86cc","ssdeep":"","tlshash":"db1132772a14a0390b7209e1e2ffcab0e492301cb16885d8a511dac83e69ccfcf19484","size":1019,"data":"","first_seen":"2026-01-28T08:28:19.381695Z","last_seen":"2026-02-05T21:51:33.63524Z","times_seen":1823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"5783eab6fe4da9ee66d04d2cbbafdd7d","sha1":"acaf9a909a7ae0e0904d8364fed5afdc10571c1d","sha256":"d456bc6e2bd967ab3031ed6de08bbff1c9079de02e15b7655ed8c9a924deaf70","sha512":"4199c4b32a99b122051b80665f4b3e75cde91fd58991b506cfcc9a69c36217d5e6b0b8a7e1350d57556fece007b1fbcd580f54ede87a8915d7528250600552be","ssdeep":"","tlshash":"58c08cd620eee4250d8b7080603a16a1b80804a100442084fa98cc94996a83013296ac","size":152,"data":"","first_seen":"2023-04-17T14:55:52Z","last_seen":"2026-04-15T20:24:43.738469Z","times_seen":795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/main.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3a42471153d54fbf4b183289b167756","sha1":"4640a875a7cb3243dc7d37837a2dd209573a1535","sha256":"c59ce1b4bc31922985373919061227a3de57354ae471b793ac1d9a3f442815bc","sha512":"12b361b999202904318d147e5eee95d215e89821ecb8b74574e328c6f52c8f1c7222d05cbf1310883f4702a8756f575902092d9e12536d374924324b4b44a271","ssdeep":"192:RFa1RNga83KfjwfRFajdEwEK1ASXoZkC2M+PYCnRW9GmI0D/VAgCjfy7:/ANAKfjwfnUdEnK1rY2ZRW9qHi","tlshash":"0122451524b75a910e6375ff45bf5a047626803b8a0bee007f5d23d85f9ce28e271a1f","size":10721,"data":"","first_seen":"2025-02-23T23:30:19.055145Z","last_seen":"2026-04-15T20:24:43.698492Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4363b0418550ad592dccbe0a97bb89b7","sha1":"07e200860f93275b0e1a659407404fe3fd0555c5","sha256":"be98493dc921c222190fed0c5127220baa665d634614997273167128763ba411","sha512":"8717bd94261b24f4b47a69801fec327ff711ad0e13182cabdebb2d8eb6dfab08802bdc9fd92bc6bdf1860cc6ab24cd7a04d331c700de3b8bae6c76e8d8456eb4","ssdeep":"","tlshash":"84d0a7193254153004d913bea073d7bd64a3215b1a5772018868cded2d50ea75951e98","size":234,"data":"","first_seen":"2023-03-09T17:40:07Z","last_seen":"2026-04-15T20:24:43.737573Z","times_seen":798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d11689ba15ba8302e17ce8789a703ea","sha1":"4177d68d211d40d026cdced43983322cbfad3582","sha256":"581272bddd7d45428b263f78cdbaaa2edadf506f34902f152861ad122e454abc","sha512":"590747367733068b7c3ec5b6cd94f8b213125f21db8a0f65ca779bfd1530922d62d51447932923c2eaba9fd71021574dfcad59645e042e6e83ba687e2a067c02","ssdeep":"12288:CM0QsPsDmunObfvpfyv9p0tjgg27RGO3Pr:v0IMfVyv9pmgdR1z","tlshash":"72055be9b553347252a2baf284bb204ca37d9665d85c0c9db165c4f02ff0809b17beb7","size":859335,"data":"","first_seen":"2026-01-27T01:13:21.608817Z","last_seen":"2026-03-31T18:55:46.754314Z","times_seen":13184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d11689ba15ba8302e17ce8789a703ea","sha1":"4177d68d211d40d026cdced43983322cbfad3582","sha256":"581272bddd7d45428b263f78cdbaaa2edadf506f34902f152861ad122e454abc","sha512":"590747367733068b7c3ec5b6cd94f8b213125f21db8a0f65ca779bfd1530922d62d51447932923c2eaba9fd71021574dfcad59645e042e6e83ba687e2a067c02","ssdeep":"12288:CM0QsPsDmunObfvpfyv9p0tjgg27RGO3Pr:v0IMfVyv9pmgdR1z","tlshash":"72055be9b553347252a2baf284bb204ca37d9665d85c0c9db165c4f02ff0809b17beb7","size":859335,"data":"","first_seen":"2026-01-27T01:13:21.608817Z","last_seen":"2026-03-31T18:55:46.754314Z","times_seen":13184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"ds2video.com/","fqdn":"ds2video.com","domain":"ds2video.com","tld":"com"},"ip":{"addr":"162.19.86.186","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T19:37:58.215Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ds2video.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Wed, 04 Feb 2026 19:37:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://myvidplay.com/\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17887,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T21:38:41.569918Z","times_seen":13799339,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":22,"dns":0,"connect":22,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"ds2video.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-ray: 9c8ca02e4bd04c11-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1437385\r\nexpires: Mon, 25 Jan 2027 19:37:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bhyo%2F%2F0%2F2oMP0JqYok4TXdWvL9tVwr6zg2dihT39yJc38BOQXq4fjRDn%2BNvVQu41B%2FxyhPoTDgCSmjMJfBSrR%2BxVSIU8RqLhG4VJZaGgHBl3H25hYIq0dWfA4hTJxFClazDLQsuY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-15T21:40:40.168395Z","times_seen":117966,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":9,"dns":1,"connect":3,"send":0,"wait":13,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/theme_2/img/f-pass.svg?v=1","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET /theme_2/img/f-pass.svg?v=1 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=sjUbo5PJW04LFaMR; __ddg10_=1770233878; __ddg9_=91.90.42.154; __ddg1_=wRyIKUZqc82CHn96CHhg; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wuJ0K8ikfK6YtrwR; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg10_=1770233878; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11717\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 19:37:58 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50ebd9e535d150a08e140eb31c00e7f7","sha1":"e1cd70ad437f97e2677e606c32038c8ee9781e6d","sha256":"78802a815085f2809c523105bc27ffb015f2ba163d093dfef8ec0985cdfe153b","sha512":"40462240f3b5aad4d8da00972bf351969dc474eac8ba517f0966d521efbf2e0032cb1352011c1f1c010381e9be81c0a95e7cfa93fcac7809674d8fe024bf2107","ssdeep":"192:WycyzdJviyTyetpCytyAvkM8SCGssY3wpfyiWJWZ:FzmyTy+Cy8AvxKG99lyiww","tlshash":"713284b5a31a963d598a0b58c7d504e9207c60cb3079d2dca72b03ab5d21eff81fc975","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.73471Z","times_seen":799,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/main.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/js/main.js?v=7.7 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 01 Jun 2023 17:39:53 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\nexpires: Thu, 04 Feb 2027 11:10:10 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frmtRKd7Z8y8gvT5JhmeTpcVX7MUKpAuoI%2F%2FULfHj%2FSqOe3LtOf30o4%2BO54TFXDJVz9oEKR0pVKGn8uiqzbySQ58klx2sbmeFIQ4\"}]}\r\naccess-control-allow-origin: *\r\nage: 30468\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c8ca02e99100daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (525)","md5":"f3a42471153d54fbf4b183289b167756","sha1":"4640a875a7cb3243dc7d37837a2dd209573a1535","sha256":"c59ce1b4bc31922985373919061227a3de57354ae471b793ac1d9a3f442815bc","sha512":"12b361b999202904318d147e5eee95d215e89821ecb8b74574e328c6f52c8f1c7222d05cbf1310883f4702a8756f575902092d9e12536d374924324b4b44a271","ssdeep":"192:RFa1RNga83KfjwfRFajdEwEK1ASXoZkC2M+PYCnRW9GmI0D/VAgCjfy7:/ANAKfjwfnUdEnK1rY2ZRW9qHi","tlshash":"0122451524b75a910e6375ff45bf5a047626803b8a0bee007f5d23d85f9ce28e271a1f","first_seen":"2025-02-23T23:30:19.055145Z","last_seen":"2026-04-15T20:24:43.698492Z","times_seen":604,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-semibold-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-semibold-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23800\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 11:10:56 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 30422\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FApkWHAnbPcaf5qs1CFGctaZKjx1lyILzIx7h66ufUGvHkcY4QGCK0YgxZxr5bX9QJlTzz46Oolt9LOHFBETnL6fJ6tsF885hyWUbpH7AA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0304f704e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23800, version 1.524","md5":"3ec2d18c5a3d480b0161ce3c9a69aa5c","sha1":"a12a5815c1ec2eb7c04dab567ba99c82d7b3d2e0","sha256":"eca03a9512b9c95df8bc4589fc70bd8ca33319245b95d67e84b5cb584a9fc5fe","sha512":"c910040d60f1bbd047f2f640b4ad41c280c16e25d53bdedaeb0a47611e271dcc4035e0b9e478ea419f2e6cc604b11b54c0e8f7127d302bfab05565cbff0836d4","ssdeep":"384:EfVHZ9RQK7HDG1S+yiKKOLG5R8gvL0TQdELFthfVA5GH1WLPlfz7bNkz8HM:EdHZlnZLipv70jfV9VWLPlJk4s","tlshash":"82b2d1eff314a101b9d7bbb499bfd7994f7ce52f582a8f82224b3a89414839531404a7","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.711703Z","times_seen":1013,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":6,"dns":1,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-black-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-black-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22820\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 02:57:31 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 60027\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stkvgYXuoI0fqcmVg1L9hgk7vfFvl5YEvYYF4r47VvLdC2tmq9S7zlM5r6dj0CySPxMGWDs0OxXOBKEnXLNhRvOCoDVakSGPyxUiSMNDGYw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0304f6e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22820, version 1.0","md5":"1e976387cb594982692bdbdffde86f91","sha1":"9546836a7d80c17d85cdd37a9553852f00af031b","sha256":"4dc982a61a00481f4c9545f9f2da64098428b4aec96838de3c194fa82373ce1d","sha512":"f63f58e1dfe0c08f3c262ef14bd4567c8604873486b50ce31d4d1db8976926f0bb65ffd792181144da049f74a362d52114277bedd5fd75f5b067aa2269c95155","ssdeep":"384:Dmtr9L0ILBYhzpVK87bfeTGzgdLN0vdCmyfA+IUF9/LgLnq/g4J6:DO9L/BYhdQSDea0/Dm9NUTMbqIm6","tlshash":"dfa2d0eef042f863db1207a4857f222187b7a8ec41021d13fe2f6259d4a1d456db2db7","first_seen":"2023-04-08T19:13:00Z","last_seen":"2026-04-15T20:24:43.700599Z","times_seen":1469,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":6,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/avatar/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/60/?1768215312850","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:02.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /avatar/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/60/?1768215312850 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 698\r\ncf-ray: 9c8ca0454e791525-OSL\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"2ba-19c1d0bf419\"\r\nexpires: Sat, 02 Feb 2036 19:38:02 GMT\r\nlast-modified: Mon, 02 Feb 2026 06:30:48 GMT\r\nage: 28923\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55afeddaa09092df2069c9389fcc8fbe","sha1":"270cddf6d583d4fbdc01776654f04354e1eea00a","sha256":"48e0c086bcf157de5ece61a2edc72a4f90a146c735a3183a1b130aa1307069ae","sha512":"0d896a73833dd14a6ad2aeb5a145b03dad90b4918bbc2753de61e118930861d9f3a891510a0a15f21e832c2d543bd04ebfe6051b2d4a48dfbb8fe92a6ad31e74","ssdeep":"","tlshash":"8201942e6619131cc6972a0c82701332b1d6442b14bf5ba0e80ed2e75600d8809c8fb9","first_seen":"2024-06-22T00:10:11Z","last_seen":"2026-04-15T20:24:43.72451Z","times_seen":612,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T19:37:58.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sjUbo5PJW04LFaMR; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg10_=1770233878; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg1_=wRyIKUZqc82CHn96CHhg; Domain=.doodstream.com; HttpOnly; Path=/; Expires=Thu, 04-Feb-2027 19:37:58 GMT\nlang=1; domain=.doodstream.com; path=/; HttpOnly\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Wed, 04 Feb 2026 19:38:03 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":17887,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17887), with no line terminators","md5":"adaed3f2fafada30bf46defe756f43aa","sha1":"0621316dcab457bf6a0c061fe23c476edc417007","sha256":"c6ac218db23f00fd296c21681ec396889fe3e03096461a7c863b7e1aaaefe024","sha512":"c30af3253eca8fdb16f2e69f6b696f147b85b4fe71d16766018465e24e75e56b23001499b64262f6fce257acee23b5fea01bd23b8829eea343a188439cdbf6c1","ssdeep":"192:LooMi5wZCvHgArswgCDwvHgAneM1BFbvHgAPmvzsIlQxOulnLumIaG+:ko1bH1IHhFjHRmvzsIlQxdnLufx+","tlshash":"c08264313408ae3741c3c1d8b7749b0ab2d6d346da1b1649a2fec3ad4febc95dc252a5","first_seen":"2025-11-21T02:28:14.956795Z","last_seen":"2026-04-15T20:24:43.697458Z","times_seen":371,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":92,"dns":28,"connect":20,"send":0,"wait":79,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/js/dood_load.js","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET /js/dood_load.js HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=sjUbo5PJW04LFaMR; __ddg10_=1770233878; __ddg9_=91.90.42.154; __ddg1_=wRyIKUZqc82CHn96CHhg; lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qnH1jHZT8G400U0u; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg10_=1770233878; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2959\r\nlast-modified: Wed, 23 Apr 2025 23:27:28 GMT\r\netag: \"68097760-b8f\"\r\nexpires: Fri, 06 Mar 2026 19:37:58 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2959), with no line terminators","md5":"e3da62de56e20742d00f9bed95160562","sha1":"909b8918114646d0290e0e9ed3fd38e8954a5860","sha256":"d9e6077900d21940206069ce5b05bae5e2ef6f100187cfe49dda6c41a10863e7","sha512":"2a116aa39967b096a737581f7cfa13ba988f44366e330054c97b426669a8927a46da0b0b592ab010ca9573c64a1bae5c49c26cb50e7cf7b9b830f9ef9c46149b","ssdeep":"","tlshash":"955130e9b21221b601f65ab621ffa340b6752145301390216c7e8cd96e3ffea6253e5f","first_seen":"2024-05-02T22:14:39Z","last_seen":"2026-04-15T20:24:43.725449Z","times_seen":2194,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-extrabold-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-extrabold-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24364\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 11:10:59 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 30419\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMoByzS8wijG3Yv2FxXAymk8fVna%2FNX6H%2FxvyPMn8xoVf8T5U9PpcB0i5OevG1O4rT2YV4lY%2FOs6F8R34j4IcE1mduS5dXdo5cwu%2B86dO0o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0304f734e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24364,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24364, version 1.524","md5":"5ea3b4ccd4ed6a7262f654e017025345","sha1":"a5d5d0ed221b9a30f4eec356a4d51bb1da52e7ff","sha256":"2b8fd40fb88ea6f4b81fde243bbe103aa1d12cd2f2ced9bd456f41b0b7cd3b71","sha512":"390d14f9370a9dfb144516bc1509a8c1982879abe4b6e80ea350a5f02693a8e975a37da278ac06179a00e0d9c885f1543f1142d979c461a7b763a36720fc4eb8","ssdeep":"384:x6an+iEQuwx7Zoatz9TJIW5gvQPJzEQXYt4oNmGFjvHCvGDu5VOFvinxYuAn:x6aHoa/TOWuGzZYFAGFG+kVKKnVAn","tlshash":"69b2f15f84d01126e082c720fa8a8f9f186c905b35bc1ba4d6d71dc5615a9ebbbcb0b7","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.733294Z","times_seen":754,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-bold-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-bold-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23604\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 02:56:53 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 60065\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04a7WvxJs9FU7HeWUx%2FSbf15mWezSj6SnWPJepFG2Rz%2F5MVvz74JqpJDBekB1cKXmfCxJzgvcXSNGMR04W1FGmV7DMd0CGjzNACXkQtNeR8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0305f744e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23604, version 1.0","md5":"e9133fd11f14c09a2e4556c395a0ef7d","sha1":"00fad09605f3342df5c9aeba130156fe19ade8b0","sha256":"06244cc9cd0c998581b1bf93f5222deee7d2d0b09299190e163961afa973ba91","sha512":"d5308125b08c886657d3093adea3f425f3d641983464e76fed107722dac947691ae18f2434bc186311e855e64603451a7dd3c6b2766d4011de015bf4426fded2","ssdeep":"384:l3TfNjWicLkpy2Ll25J7RwOh8VMb+WR32Cv+rfGSw4WLYu7FqC4ltA:lrN6iccc51MMb+WR32Z6SXyHL4DA","tlshash":"57b2e072b73e170ed587507260ab6dff65f40a68029b283422079116786bdcf75b4afc","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.706996Z","times_seen":1603,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nReferer: https://doodstream.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=kZYPrX9Oo16wcwg1; __ddg10_=1770233879; __ddg9_=91.90.42.154; __ddg1_=wRyIKUZqc82CHn96CHhg; lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AcqCzEsmOTG4g3uC; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\n__ddg10_=1770233879; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Wed, 04 Feb 2026 19:38:04 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17887,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17887), with no line terminators","md5":"adaed3f2fafada30bf46defe756f43aa","sha1":"0621316dcab457bf6a0c061fe23c476edc417007","sha256":"c6ac218db23f00fd296c21681ec396889fe3e03096461a7c863b7e1aaaefe024","sha512":"c30af3253eca8fdb16f2e69f6b696f147b85b4fe71d16766018465e24e75e56b23001499b64262f6fce257acee23b5fea01bd23b8829eea343a188439cdbf6c1","ssdeep":"192:LooMi5wZCvHgArswgCDwvHgAneM1BFbvHgAPmvzsIlQxOulnLumIaG+:ko1bH1IHhFjHRmvzsIlQxdnLufx+","tlshash":"c08264313408ae3741c3c1d8b7749b0ab2d6d346da1b1649a2fec3ad4febc95dc252a5","first_seen":"2025-11-21T02:28:14.956795Z","last_seen":"2026-04-15T20:24:43.697458Z","times_seen":371,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 29 Jan 2026 10:25:43 GMT\r\nexpires: Fri, 29 Jan 2027 10:25:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 21 Jan 2026 23:35:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 551536\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":859335,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6d11689ba15ba8302e17ce8789a703ea","sha1":"4177d68d211d40d026cdced43983322cbfad3582","sha256":"581272bddd7d45428b263f78cdbaaa2edadf506f34902f152861ad122e454abc","sha512":"590747367733068b7c3ec5b6cd94f8b213125f21db8a0f65ca779bfd1530922d62d51447932923c2eaba9fd71021574dfcad59645e042e6e83ba687e2a067c02","ssdeep":"12288:CM0QsPsDmunObfvpfyv9p0tjgg27RGO3Pr:v0IMfVyv9pmgdR1z","tlshash":"72055be9b553347252a2baf284bb204ca37d9665d85c0c9db165c4f02ff0809b17beb7","first_seen":"2026-01-27T01:13:21.608817Z","last_seen":"2026-03-31T18:55:46.754314Z","times_seen":13184,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":140,"dns":2,"connect":32,"send":0,"wait":8,"receive":16,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/prelude/?2026-1-4-19-37","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/prelude/?2026-1-4-19-37 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://doodstream.com/\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Wed, 04 Feb 2026 23:37:59 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 18:37:09 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c8ca0334953b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"768237d4fa79fc0158265acea444f6f7","sha1":"2b338397c4c926653f5717dad9324da3512d769d","sha256":"dbc5e40be55321fa7b024490fea072393adf60cb26abf92d53ff82c91d259ab9","sha512":"6c0b8cabfef813769e479e8db3d85c63d40a6ab9007b1fa2ec41f299a7b38aef5a20021d892a2b23d793fd0ca962931a80716ba6f17a7c5f590279ca105e90fb","ssdeep":"","tlshash":"89e0c29e06f440705bbd436e240df97d207741af50a630fd56989c2c28312e91b3a230","first_seen":"2026-01-12T18:14:32.993693Z","last_seen":"2026-02-07T10:40:43.090078Z","times_seen":66,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F1%2Fb%2Fe%2F8%2F1be8bf4185fa3d00%2Fleilani-angel-k84vnnzxmtq-unsp_g3rsqj.jpg\u0026width=60\u0026height=60\u00261768215312850","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:02.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F1%2Fb%2Fe%2F8%2F1be8bf4185fa3d00%2Fleilani-angel-k84vnnzxmtq-unsp_g3rsqj.jpg\u0026width=60\u0026height=60\u00261768215312850 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1488\r\ncf-ray: 9c8ca0454e761525-OSL\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"5d0-19c27253b09\"\r\nexpires: Sat, 02 Feb 2036 19:38:02 GMT\r\nlast-modified: Wed, 04 Feb 2026 05:34:37 GMT\r\ncf-cache-status: HIT\r\nage: 26883\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 60x60, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d3414a581c85e4b7a3cfec8956bc7950","sha1":"213d5bb0b87c2340e4db361f5de6f890e6a1e949","sha256":"c278139d14fc5986b5be80db606623add98ce13a3f1843aa2be26cc4fdfd95b5","sha512":"6e28972769675113473582e8da35201303d302130e44e2110c07cd1a3ba5fe453ef8d25739066ee322c963b604be356b8b9e0b20d1a158064bb3d9067329ace5","ssdeep":"","tlshash":"e3311cd68e0d0517d589d455cd6479b76f6087071491ca004afc8120551f67f7c0b5cd","first_seen":"2025-03-21T06:22:04.865583Z","last_seen":"2026-04-15T20:24:43.729927Z","times_seen":482,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/home_page.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/js/home_page.js?v=7.7 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 15 Sep 2022 07:36:42 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\nexpires: Thu, 04 Feb 2027 07:39:40 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGrepXBbQyWLyC7FMYgVaTChvkJGns91kBiXvB69fdT1p7GM7BTXqIL3BOakwuooqmsapObg%2B1tgjpXI15SYL27fksVQrBecKnDa\"}]}\r\naccess-control-allow-origin: *\r\nage: 43098\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c8ca02e99090daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"3166b84236e9f39ed19cf578c39b6d25","sha1":"be4121a314ae601b8a7db70d92691e5ed933fc1c","sha256":"4733022d78c4c270b6f2d84f236c0dd9ce6c69cfcb6f6210b87c0fad2188dddc","sha512":"f44ca4fe3540bad4cbf389e1b38711c5a8e8e1010a529898705031d94318c64ed5d95d89864543afa8820a2df7df2db5666b18188a5e4592e5922d9f0474ef66","ssdeep":"6144:vf5c6kZwWgCz9+SmFoXp0sF62CrK1o+cCNvmskMrmzKU:G/gihF60camskMoKU","tlshash":"87d4e888ba95b07543a375b4002f510bf27bba2d744d44e8f265d8e5bcb898e513bf38","first_seen":"2025-02-23T23:30:19.089135Z","last_seen":"2026-04-15T20:24:43.735745Z","times_seen":602,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myvidplay.com/","fqdn":"myvidplay.com","domain":"myvidplay.com","tld":"com"},"ip":{"addr":"104.26.13.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T19:37:58.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myvidplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 03:42:32 GMT","end":"Sun, 26 Apr 2026 04:42:19 GMT"},"fingerprint":{"sha1":"9D:1B:34:2F:97:9A:43:3F:63:2E:64:3C:47:27:D9:66:B0:7D:6E:93","sha256":"7F:BA:EA:E6:75:65:D8:1A:46:91:F1:F8:02:66:68:B3:92:00:AB:E0:34:71:AC:0F:25:45:DB:1C:04:EE:A6:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: myvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-length: 0\r\nlocation: https://doodstream.com/\r\nserver: cloudflare\r\nset-cookie: lang=1; domain=.myvidplay.com; path=/\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=5,cfOrigin;dur=63\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFLY3%2F5gbBuaOMs5Nyg%2F8X8%2FP9RrlHAzxKbFqL2rLSAipyBcoG%2FdHy3%2FFuPw92J0AS%2F%2B0gJKmQNsGne3UxPU5luTHAzy03O5zcM%3D\"}]}\r\ncf-ray: 9c8ca02b7ab90afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17887,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T21:38:41.569918Z","times_seen":13799339,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":44,"dns":22,"connect":1,"send":0,"wait":73,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/css/bootstrap.min.css","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/css/bootstrap.min.css HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\nexpires: Thu, 04 Feb 2027 02:29:38 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DX4pZXFuSGZ5Yq%2F8A0e22lVRk9gMIKh8vQyr8uzkvUegiQuDPchTOZgVP4ORxX6L1nNa%2FjR4zKMlYNq4IcmUP0z661pgYz3Ewgs%2F\"}]}\r\naccess-control-allow-origin: *\r\nage: 61700\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c8ca02e99130daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"7cc40c199d128af6b01e74a28c5900b0","sha1":"d305110fb79113a961394b433d851a3410342b8c","sha256":"2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6","sha512":"ce79937f81cda05f54ea67c1e8a96101285b46f6ede02bc2687a0d574832b2c7d3a0d43ff40d1e35d51bbec4b038852825d323146da7752bebd0ba37669b13a9","ssdeep":"1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26F:a7Za4GMq3SYiLENM6HN26F","tlshash":"9ef352a6f5a0312de467c61964d0bafe152f8245d7224bfaf827376487892c70a73e4c","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-04-15T20:52:06.947375Z","times_seen":17386,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/theme_2/img/login.svg?v=1","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET /theme_2/img/login.svg?v=1 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=sjUbo5PJW04LFaMR; __ddg10_=1770233878; __ddg9_=91.90.42.154; __ddg1_=wRyIKUZqc82CHn96CHhg; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jZcSNZa8Zb3URD5E; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg10_=1770233878; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 26911\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 19:37:58 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26911,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9419e5e36b1fe20bd45c610ee8249ee7","sha1":"aab6a7732db01e520821c28a44a56f6da53e381d","sha256":"85d3500e93d6263e1e95d58d8862b5671209877c34fd010e23f1a316527800f7","sha512":"ceb2228a7731aa2c9a7264a7dd118c638fa31f78368d669659744f64ee274c5061a99f40299925f0b1aa989799f3ffbcc2c4ca79dcc2386614a2922621e1deae","ssdeep":"384:CdvrF7I455ZDGFGgD1cvfEZWD9Hr1kVMmCqCjarGhjKtXKgkpMnad/nadUqO+X0B:CB5TGFGgDWDbkV3GKtXKggHsvX0UhM","tlshash":"dac2d8b52368b2b996828b19c6e918d6359c90cbb1b291ecd77787076c205f740bcd3e","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.722774Z","times_seen":798,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/theme_panel.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/js/theme_panel.js?v=7.7 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 15 Sep 2022 07:36:42 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\nexpires: Thu, 04 Feb 2027 03:22:02 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHd0Fnyk%2FUrThtQZPr4hF14NYRegSix34MJX89NJ34ddbS3a2cKCY1TiZe4ChKm8%2BvNV9iePqp5nFXcAP5b2HXbUNzJ0UqzjBTbQ\"}]}\r\naccess-control-allow-origin: *\r\nage: 58555\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c8ca02e99180daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34233), with NEL line terminators","md5":"4fa6b76c00dbf823e604ce777da79763","sha1":"21eb3a34c12f4bf7d7b2087157b39d1be96a69ab","sha256":"a6bb2b1a9d9727048a5a0927db6ee35d4f5c335e645715dd2e4dc693669951ad","sha512":"604f3719abd132aaac8c453788b20ca6eb6cd560ea1c9ae86323a3d4739d9b219902c40e1956708602a41205be1df028b539c3ff904ad7c0870f22216905e643","ssdeep":"3072:HuQmXnY6zIX8bYSHPX4w/5D3GCe9Q2gKqxxHuT65MBGO4lHPWbMZ7qp5OR:OQm97bYnw/5D9LKqx98BBGhHPWs7qpUR","tlshash":"b784d5cdb685b0b207eb60b5407f560bf237a959b44a8190f265e8d46d7c98e603bf3c","first_seen":"2023-11-22T17:53:16Z","last_seen":"2026-04-15T20:24:43.705041Z","times_seen":711,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/stylesheets/client_default_439a0bf.css","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/stylesheets/client_default_439a0bf.css HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"6980d4a7-27fae\"\r\nexpires: Sat, 02 Feb 2036 19:37:59 GMT\r\nlast-modified: Mon, 02 Feb 2026 16:45:27 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10191\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c8ca031df4d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163758,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65439)","md5":"cd7e82f52e7979fbdb541ddb86b2eee3","sha1":"f7d4800348e2c4b9195928750c3cc560713b0066","sha256":"aa31b0e779b3a0d962479cbf687a56342f5431bf25dd7cea21242856a7b8ce1e","sha512":"7090cb1574cad92d94d877f3d4104f3a3e408fd0a3d9f0bb374b73e52402d91721570d493f4896a807adb7e14decbd2a3e3fd1114c1e721dbafc9c914e859826","ssdeep":"768:aY8VHKSw3TE4S4q6DhONKzVs//J5A7RPAbAHVq3R4YGuITyZOXj7Mj4+h4ANopR0:aKo6oUXcZJ4AMB8H3YERnyy","tlshash":"0ff3844fb26a402424d345a3bac4b73d942da8ffd211393dd62466bd4e981ff63a4738","first_seen":"2026-02-02T20:44:56.898858Z","last_seen":"2026-02-06T07:28:37.160288Z","times_seen":59,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:41 GMT","end":"Mon, 06 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"36:C1:99:7C:DE:5D:41:A3:C4:03:9C:34:84:BC:7A:51:36:08:1D:43","sha256":"15:C4:72:8A:29:9D:89:4F:B0:8F:6F:87:45:A5:5C:44:C9:94:5E:82:6D:DD:CF:36:8C:92:73:20:B5:3C:8A:83"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 04 Feb 2026 19:37:59 GMT\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"43bae97fc23b565f81e5b41c36b5c3e6","sha1":"f9e0e83a879959097c8edae3bff63bac47d055ac","sha256":"26bb843dda6c3b83d69eb273f392010af0450172f81d28a25d16ebee5d7586e4","sha512":"5ff816e6d43f169c7fc1865cf835e7ee7ef4ad2d71038cd6e0190ced72324f87c1864afae5fdf169eb29a927be7654645f768147a9739a4f00d6d729f74a86cc","ssdeep":"","tlshash":"db1132772a14a0390b7209e1e2ffcab0e492301cb16885d8a511dac83e69ccfcf19484","first_seen":"2026-01-28T08:28:19.381695Z","last_seen":"2026-02-05T21:51:33.63524Z","times_seen":1823,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/css/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/css/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 169732\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 11:10:40 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 30438\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odP1a7a28tvc0wyGxN1OxzpxINQCtJ5IKG5zQCdb3Jb3S3Gdd5XPOavUEfwKj6kidgfAPkH%2FvQVoD3CgWysHO6PVQqslWe24UFidYSgy%2BW4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0305f754e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 169732, version 330.-16253","md5":"983a20d28fbf8fbc27cfeb096f0ebd85","sha1":"c203f41e912f98d28decd9ebaf5aa287f4094c5a","sha256":"ec686d1012de783a5024affc9215692642a7b25af322ecc177062632902e6cd5","sha512":"3a3d4e8d382aafb3b8d538335945d1a34fd779474fe1a0689aaaa8af71d87ed0c2bfe5b1ffea58b436ff6981216388be3adb0fc1300e8cd1f278c8528778fd7f","ssdeep":"3072:S5Y7tL1t5dgUvwH4JOZYNC26XQR7klrt3RNL8Lgsx1gZ9/IuxIG:mY7J5iUYlXmIvBNLkx1gv/IHG","tlshash":"31f312e7a23af5d6fae36cd3a2797c36154c308112a1e5f166d578ddcf119f48a0ac08","first_seen":"2023-04-09T17:26:00Z","last_seen":"2026-04-15T20:59:27.837796Z","times_seen":1805,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/favicon.ico","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=AcqCzEsmOTG4g3uC; __ddg10_=1770233879; __ddg9_=91.90.42.154; __ddg1_=wRyIKUZqc82CHn96CHhg; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Wvi7jmjv1a5ZyuSe; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\n__ddg10_=1770233879; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-3c2e\"\r\nexpires: Fri, 06 Mar 2026 19:37:59 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-15T20:24:43.715602Z","times_seen":3548,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/fonts/noto_sans/0020-007F/noto_sans_bold.woff2?439a0bf","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:02.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/fonts/noto_sans/0020-007F/noto_sans_bold.woff2?439a0bf HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://client.crisp.chat/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:02 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 10252\r\ncf-ray: 9c8ca0451ac9b28a-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: \"6980d4c6-280c\"\r\nexpires: Sat, 02 Feb 2036 19:38:02 GMT\r\nlast-modified: Mon, 02 Feb 2026 16:45:58 GMT\r\nage: 9801\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10252,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10252, version 1.3932","md5":"6d74a49bf6645c1c8a7940ff7f94ce6f","sha1":"433ea3334227f42a15b8853faa6ec93c371af4ba","sha256":"73d7d4ea3f62303b780f0225e5346e5047cfb41fcae7ac19e99af8a3e1950973","sha512":"6f08896b2d4c534fb8c2b15643c79ab14333afd428bd595c3597e7270d56673ba7bc6cb3b179a53cd375dc0b41025ed5bf005558697bbca121b8b2d08f723f12","ssdeep":"192:rKdkxVGer/0UYUyIX8kG46z66+VXw5jsSZ5pDKFb07vm0lIcuNteqPY:2kx80nYsz9XQoSFub06JcuNPg","tlshash":"0c22d0f71940dd6c86a1c9f23adc83f843a18891715eaea8535e6f4ca80716e8d051ba","first_seen":"2023-04-11T10:28:32Z","last_seen":"2026-04-15T20:24:43.718911Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/img/logo-s.png","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /img/logo-s.png HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 6212\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"61d3187c-1844\"\r\nexpires: Fri, 06 Mar 2026 00:28:11 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 68986\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQi2Bbm4NnvoWCa2dOIRVwLYY73M%2FVhPbcY7srfQC3IvcbMYat%2BZLnS9y%2FZ%2B1L%2FLQBuPuPz5vh7ldnJp%2FGpOOuyNEELuFD48JRQO\"}]}\r\ncf-ray: 9c8ca02e991f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 64, 8-bit/color RGBA, non-interlaced","md5":"e61aaa698c4ccb2c4235ae16ee893164","sha1":"42b50b55574c99f737a7dba72ee29eabda869b88","sha256":"6bd33fcd9c18a1c2db1571fec3304d92de0ff66232b3ba821f9bcd86f231567f","sha512":"f4cc48ea841f94099fce4442c7dcaf19d9862dd669e267fb65f4212bf7f03169448ec1fad2a99fcb523540570cfa4cad044c640d1aa3b6fb71e56a4b87b88037","ssdeep":"192:ckJknodgjgTv+SspPjD7kYvvnMl82JI+S45g:un0UIv+vFrkMPB2Jsp","tlshash":"fdd16b06fd62ed0316805b0fb6ee6a5b7e3d4315da935442edd0681390e02bee88c787","first_seen":"2023-05-31T17:57:58Z","last_seen":"2026-04-15T20:24:43.721902Z","times_seen":650,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-light-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-light-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23196\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 03:42:41 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 57317\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcwVpMG9AY0f%2FfMjRZBmhlKmcPcQ%2B35VS8SdOtqFR81aTkz6cpWEAbyEtlwkeAnEt7t4vHyVFe1TI94akR01ASpbhGPAx7g7SrP3U2eeNuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0304f714e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23196, version 1.0","md5":"c2e8bf5edd3e7f39ca8ad4a0a5e16f22","sha1":"7be4e8b2fffeaf2473d82fa5f1cac3c22c0d49c2","sha256":"57e039ecd887b28646f516242edfb903c1ec86f4ca7d6f6a8126969da31a21fa","sha512":"bc4ad78dd05a11cda2ed09d1c7ac454da869df8019c69ceec13117977f9d2a1ef5cae52ede22212b71a3242a365bd03cfaf99ca6f04c19c87048eb9f24618188","ssdeep":"384:1Nwlvq7TmO5LHtC/TlK1sY5a77r5yauOA3HUDaOC5dhYlkjaEUy1Tm+irkx8I1:1NVTtDN1d5aZuLHbOiSlkejATNirwt","tlshash":"00a2f15d64c5adef448033f24947ef21a85a347c3f6fa544d39a8c1b26b13048b7f5a1","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.726346Z","times_seen":750,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"client.relay.crisp.chat/w/f07/?EIO=4\u0026transport=websocket","fqdn":"client.relay.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"134.209.238.18","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client.relay.crisp.chat","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Jul 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:90:EE:6D:D5:63:F5:A1:37:0F:51:0C:32:82:59:67:AE:D0:33:E7","sha256":"B4:16:9C:53:C5:9E:50:98:26:14:D8:A8:13:14:9F:B0:2D:AF:A3:3A:52:8C:70:C7:1D:23:EB:2B:39:D0:CC:71"}}},"request":{"raw":"GET /w/f07/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: client.relay.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://doodstream.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ptlsLnIEO1RDqsOQ2cpccw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 04 Feb 2026 19:37:59 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: n8Uk0Q+u/UilaoNQHm+A6ZmQTjA=\r\nX-Crisp-Ray: website w:f07 10.133.31.103:3000\r\nAccess-Control-Allow-Headers: Content-Type, Origin, Upgrade\r\nAccess-Control-Allow-Methods: HEAD, GET, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 300\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T21:38:41.569918Z","times_seen":13799339,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":0,"dns":150,"connect":184,"send":0,"wait":48,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2video.com/","fqdn":"ds2video.com","domain":"ds2video.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T19:37:58.067Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ds2video.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T21:38:41.569918Z","times_seen":13799339,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":86,"dns":0,"connect":22,"send":0,"wait":0,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"ds2video.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/css/style.min.css","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/css/style.min.css HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\nexpires: Thu, 04 Feb 2027 04:05:19 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOBXlzPzCik8RkDHtPdV03%2BcprUt7X3bWkE35JYO9OA8A2T%2BrV7%2B2extdx2PbXjE8boheosZezYbY8WGB0j9%2FjsN2dMxO0GXNrG8YjtqTuI%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 55959\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c8ca02e98f80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207153,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"92602cdd110f15f792895d791130963b","sha1":"07a2c634321ab59d0510b6ad6f540f32373c84ef","sha256":"996fc10d188bec3e26c7798df7d4717dc91a71b79e55c1095775adf8a3b78ded","sha512":"3597f95f7bedc8e8beca2f5d9662ef7e4d501aada8650126c8be1b3acf2e4eee633c3b32ba3db8a4f1dc77ba4471c28eae8abcbb00e81e4012ae247c67d6af63","ssdeep":"1536:iL41aqIk+QY4H50DOUbt3I/vtX2dWGFIib2Qu8IEiy6BfAXnwo1OvMFO3kAmFZab:31bIkbYeCOUJ3i5PUIAXTU","tlshash":"fe14f1b4d41e01da7726c60fab41b27a98f6f338d5410e4af08b5c5e5de2b9801c9bed","first_seen":"2025-06-07T08:38:21.369173Z","last_seen":"2026-04-15T20:24:43.720974Z","times_seen":545,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":44,"dns":34,"connect":1,"send":0,"wait":11,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:41 GMT","end":"Mon, 06 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"36:C1:99:7C:DE:5D:41:A3:C4:03:9C:34:84:BC:7A:51:36:08:1D:43","sha256":"15:C4:72:8A:29:9D:89:4F:B0:8F:6F:87:45:A5:5C:44:C9:94:5E:82:6D:DD:CF:36:8C:92:73:20:B5:3C:8A:83"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 04 Feb 2026 19:37:58 GMT\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"43bae97fc23b565f81e5b41c36b5c3e6","sha1":"f9e0e83a879959097c8edae3bff63bac47d055ac","sha256":"26bb843dda6c3b83d69eb273f392010af0450172f81d28a25d16ebee5d7586e4","sha512":"5ff816e6d43f169c7fc1865cf835e7ee7ef4ad2d71038cd6e0190ced72324f87c1864afae5fdf169eb29a927be7654645f768147a9739a4f00d6d729f74a86cc","ssdeep":"","tlshash":"db1132772a14a0390b7209e1e2ffcab0e492301cb16885d8a511dac83e69ccfcf19484","first_seen":"2026-01-28T08:28:19.381695Z","last_seen":"2026-02-05T21:51:33.63524Z","times_seen":1823,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":201,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/theme_2/img/reg.svg?v=1","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:58.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET /theme_2/img/reg.svg?v=1 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=sjUbo5PJW04LFaMR; __ddg10_=1770233878; __ddg9_=91.90.42.154; __ddg1_=wRyIKUZqc82CHn96CHhg; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Fv99ASJ5NFqtiJvW; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg10_=1770233878; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 26040\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 19:37:58 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bba2eb72b60ee533d5741e119b9e0761","sha1":"76922f11d6f5c791ef36c7c734e7ec2e67b38c49","sha256":"24229ab2ce7d1b6c82854f67ee3044fdd761d04dad58345e74abc3ff149d4a7c","sha512":"0d34793605c51c48c2928cb690421d0c81ca0fa6a68cff75a23c5402ea232d6de35db376d156ebda8904849ae06367789c2a024a505f0bfaaed2961f88eee2e3","ssdeep":"384:hyHCP/8WT6rQXA484GHTn4BsEw5TJsk07VZLoOxap0uAU6MPW373Vcc9248XYq:hi1WTPXA1JvEwwoxkMPWL3VccTq","tlshash":"67c2c4b2635472bd88824b58c2e568b6317e51cbb0f6a1dcdb6b438e6c245fb41bcd34","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.714655Z","times_seen":791,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /l.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=10800\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"6980d48a-1e4b\"\r\nexpires: Wed, 04 Feb 2026 22:37:59 GMT\r\nlast-modified: Mon, 02 Feb 2026 16:44:58 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10196\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c8ca0315b12b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7661)","md5":"37b3a094376cfe3e33ed8f9d82603ece","sha1":"eab5e41e43a91a7504ab7fb9dbb3d3d356e7b885","sha256":"388e49befc814df2bb67dc55a9ccae07e1a49b812e2fcab91d4367d688245d5d","sha512":"7f0f355ac986f1dcfd868affbc0f09b16f3d6fab25b2613347ba54e8e549b5089bc16051c740e8496c86c69a148ace414583e008410f86ddc1c6c5c57547d0ce","ssdeep":"192:EjSfZ0VsU+ZO09SOQal5eK5Y+91Edlng99dgY3AjL/7Cb/+io:/+IHmMeK5Y6iu9uY3Abkk","tlshash":"49f183173269603505a362ef123b2a49f03361295c85825cb569ecf1297ce4fa13bffe","first_seen":"2026-02-02T20:44:56.895393Z","last_seen":"2026-02-06T07:28:37.159687Z","times_seen":59,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":20,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 29 Jan 2026 10:25:43 GMT\r\nexpires: Fri, 29 Jan 2027 10:25:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 21 Jan 2026 23:35:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 551536\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":859335,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6d11689ba15ba8302e17ce8789a703ea","sha1":"4177d68d211d40d026cdced43983322cbfad3582","sha256":"581272bddd7d45428b263f78cdbaaa2edadf506f34902f152861ad122e454abc","sha512":"590747367733068b7c3ec5b6cd94f8b213125f21db8a0f65ca779bfd1530922d62d51447932923c2eaba9fd71021574dfcad59645e042e6e83ba687e2a067c02","ssdeep":"12288:CM0QsPsDmunObfvpfyv9p0tjgg27RGO3Pr:v0IMfVyv9pmgdR1z","tlshash":"72055be9b553347252a2baf284bb204ca37d9665d85c0c9db165c4f02ff0809b17beb7","first_seen":"2026-01-27T01:13:21.608817Z","last_seen":"2026-03-31T18:55:46.754314Z","times_seen":13184,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":141,"dns":1,"connect":33,"send":0,"wait":23,"receive":14,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F9%2Fa%2F0%2F6%2F9a06528e60650000%2Fistockphoto-183803927-612x612_1xobj3v.jpg\u0026width=60\u0026height=60\u00261768215312850","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:02.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F9%2Fa%2F0%2F6%2F9a06528e60650000%2Fistockphoto-183803927-612x612_1xobj3v.jpg\u0026width=60\u0026height=60\u00261768215312850 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 844\r\ncf-ray: 9c8ca0454e781525-OSL\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"34c-19c271e1391\"\r\nexpires: Sat, 02 Feb 2036 19:38:02 GMT\r\nlast-modified: Wed, 04 Feb 2026 05:26:48 GMT\r\nage: 45789\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 60x60, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43374c44e6bd2a71c5a7696bd280d66d","sha1":"fd7b47d5a23417d405cad5404665aafd39b19b17","sha256":"a7d099be383cc85ee0e7d4c558ca0d65d29febf1fd7c780f10425e9aa7535650","sha512":"aeebf551792b7eed1b1f4b9c0bcb3bfca373b97972429a6217be5cbce2fc7e64b9eb8b2afa9e63b8b7ff17968937326e893e9cb01d30ea21bd7f1017989bdb0b","ssdeep":"","tlshash":"850152404850de6b94885b540872270a61948ee2e7e9d39f2d64e277dc93d6cd106f3a","first_seen":"2025-06-16T22:58:48.246142Z","last_seen":"2026-04-10T03:10:35.560009Z","times_seen":404,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:41 GMT","end":"Mon, 06 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"36:C1:99:7C:DE:5D:41:A3:C4:03:9C:34:84:BC:7A:51:36:08:1D:43","sha256":"15:C4:72:8A:29:9D:89:4F:B0:8F:6F:87:45:A5:5C:44:C9:94:5E:82:6D:DD:CF:36:8C:92:73:20:B5:3C:8A:83"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 04 Feb 2026 19:37:59 GMT\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"43bae97fc23b565f81e5b41c36b5c3e6","sha1":"f9e0e83a879959097c8edae3bff63bac47d055ac","sha256":"26bb843dda6c3b83d69eb273f392010af0450172f81d28a25d16ebee5d7586e4","sha512":"5ff816e6d43f169c7fc1865cf835e7ee7ef4ad2d71038cd6e0190ced72324f87c1864afae5fdf169eb29a927be7654645f768147a9739a4f00d6d729f74a86cc","ssdeep":"","tlshash":"db1132772a14a0390b7209e1e2ffcab0e492301cb16885d8a511dac83e69ccfcf19484","first_seen":"2026-01-28T08:28:19.381695Z","last_seen":"2026-02-05T21:51:33.63524Z","times_seen":1823,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/?op=notifications\u0026open=\u0026_=1770233879131","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 07:10:50 GMT","end":"Fri, 13 Mar 2026 07:10:49 GMT"},"fingerprint":{"sha1":"96:58:E7:46:0F:C4:60:2D:29:8F:9D:F3:2E:96:62:B8:36:AC:41:9B","sha256":"DD:CB:9A:17:40:D9:6B:C2:1D:7B:D6:7F:F5:35:07:50:D5:B1:C5:86:60:26:1A:CC:81:8B:1A:F2:81:21:D7:1B"}}},"request":{"raw":"GET /?op=notifications\u0026open=\u0026_=1770233879131 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=wuJ0K8ikfK6YtrwR; __ddg10_=1770233878; __ddg9_=91.90.42.154; __ddg1_=wRyIKUZqc82CHn96CHhg; lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kZYPrX9Oo16wcwg1; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\n__ddg10_=1770233879; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\n__ddg9_=91.90.42.154; Domain=.doodstream.com; Path=/; Expires=Wed, 04-Feb-2026 19:57:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-length: 0\r\nlocation: /\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17887,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T21:38:41.569918Z","times_seen":13799339,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_439a0bf.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/javascripts/client_default_439a0bf.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"6980d4a7-501ae\"\r\nexpires: Sat, 02 Feb 2036 19:37:59 GMT\r\nlast-modified: Mon, 02 Feb 2026 16:45:27 GMT\r\nvary: Accept-Encoding\r\nage: 10141\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c8ca031fd39b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65124)","md5":"bb8b6eb9c885a6e4183925c474558217","sha1":"a0a5e348ce1857806bd978d6b32b0da5703b2c91","sha256":"a40f3bda1500b77981729e7eee7575c88ac5b02b4a6a31f1c5ee1291b4f21a75","sha512":"af89d1d3aeb2df9a7621344f1eb9395ec0f9e8cda2cda384465b3ee995da8a2a5ebcd62e9118931be7db891a133c61e6cdd9d32f9db70669ca78b5599345400b","ssdeep":"6144:pLHetYTHOg8MjmtBqFq/OyklLLjcZpcm5pnornY:FHOPCZfcZpp5pnoLY","tlshash":"4a64199a7265a83313f682d7a4320942f339255d7486803cf36cadef664ce8571e7bb4","first_seen":"2026-02-02T20:44:56.940711Z","last_seen":"2026-02-06T07:28:37.169429Z","times_seen":59,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":5,"dns":1,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/?1768215312850","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:00.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/?1768215312850 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://doodstream.com/\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Wed, 04 Feb 2026 23:38:00 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 16:52:15 GMT\r\nage: 9945\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c8ca037bfd8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2954,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b78b49665f85c2d57cac6809b255165","sha1":"0e9494ebd21e32129e21781d767b78037c15ad4a","sha256":"6e64b5fc6617db61457fd83c942f6866c414d51ef175c8877beb282815a84e4c","sha512":"1b74438c2a4007e9cde0617bf724bff3e6c7b777a6a3c2243732d014222df67e70c70d91317e984225a2208099dc3435df5ce498c4ec10a248c392f60fb7f92f","ssdeep":"","tlshash":"ed511e0a4d9418bad5e8c358e9293f03067d6c37b2467478e59c4d2c22bfadd6332a73","first_seen":"2026-02-04T19:38:31.097955Z","last_seen":"2026-02-04T19:38:31.097955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F8%2F5%2F1%2F5%2F8515c9c950165000%2Fluis-villasmil-z4rqvrprj38-uns_5xywz8.jpg\u0026width=60\u0026height=60\u00261768215312850","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:02.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F8%2F5%2F1%2F5%2F8515c9c950165000%2Fluis-villasmil-z4rqvrprj38-uns_5xywz8.jpg\u0026width=60\u0026height=60\u00261768215312850 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1138\r\ncf-ray: 9c8ca0454e741525-OSL\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"472-19c281425d7\"\r\nexpires: Sat, 02 Feb 2036 19:38:02 GMT\r\nlast-modified: Wed, 04 Feb 2026 09:55:34 GMT\r\nage: 25013\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1138,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 60x60, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d7307e1cba4ecc6feb9df444242e4a7","sha1":"bcf1a2f16559d0b5bd6eade3c65b43c4e74e59e7","sha256":"f4e0ed1d7bb69e85b6dc150edcabd126380a71c960507937a9db3b203edbb442","sha512":"ce4d61fcc9b4fe1d67470cc84bb8bae1652698aa23bcf84a2874fe03256afd04438094c75ed422bc327a4fa3baa354e91980984d65fef8d80a6484e187820b01","ssdeep":"","tlshash":"8a21f91e92b16cabd402fc47a2392543a55e864157b2feb28bce0cc59883f8c08509e3","first_seen":"2025-03-21T06:22:04.883618Z","last_seen":"2026-04-15T20:24:43.731748Z","times_seen":429,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/fonts/noto_sans/0020-007F/noto_sans_regular.woff2?439a0bf","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:02.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/fonts/noto_sans/0020-007F/noto_sans_regular.woff2?439a0bf HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://client.crisp.chat/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:02 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 10340\r\ncf-ray: 9c8ca0451ad3b28a-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: \"6980d4c6-2864\"\r\nexpires: Sat, 02 Feb 2036 19:38:02 GMT\r\nlast-modified: Mon, 02 Feb 2026 16:45:58 GMT\r\nage: 9801\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10340, version 1.3932","md5":"78fa8c47eac0b8da9cca3a18bf86c011","sha1":"b90a9205a440c4a45271a4f325e32d1b05189206","sha256":"6a3dd77dcb09b4dd4f21dc57d0babf83c04d10eedd13037572384179d30106e5","sha512":"fc3f1c0af848540ba24f63bc837d1a7af28784ce0e33e3ff1ed62d7257dffa24fcd8de91106de6828328f088db362a87e6ab852a27ec682bf03e2934dd01b332","ssdeep":"192:tWsBBhOAaNbZh7Ykr9LY9qbEVExuidBU3t5akR+6bx+uhF7xKr8uaxwk:t5QMCY9q2Exu2a95OutPKYua/","tlshash":"9222bff11dc72c9ed05484706039de4ac9a7d69686ed06fc5ba314c31810f9ee1e3ae9","first_seen":"2023-04-11T10:28:32Z","last_seen":"2026-04-15T20:24:43.719987Z","times_seen":2474,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-regular-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23812\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 07:25:33 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 43945\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjsJa3gkVB8eEU2bo7B%2FKDFzxt%2FwyKQoo%2FG9g4hDLFEY7FaPyHomUwlbQL%2FkAfNyFliL8rzLFwQTPXaA2k2hfAtBq586efVIs5yTd%2FYGM2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0304f6f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23812, version 1.524","md5":"eb586e5a1b86dbf1c866e3ed80f9d18e","sha1":"280ee78d19c017ab9335f769595e5157d3c4a343","sha256":"714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf","sha512":"18b5a9996a6d0fd263f778b1ce4b7a84c42febf2dfcd5187bdc74192c156571823e973d6720f45536ef1048a355313169a4f1de1ebc30bdb0989065a1ff9ffea","ssdeep":"384:bdPI9PvaAAoKG+zf3bAVYGlg96u6Z+tUF7ZrzSkorNYlVFLhfkZv9wPXcqEbJtuE:bdPIdCA7+jVhvUFtrzSkMNOp9k99h7dr","tlshash":"c2b2e17ad02cde72f5b6f3a59b2486e2d136d235232333e2151b89ba826170e1d16bd0","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-15T20:24:43.69963Z","times_seen":4083,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:43:18 GMT","end":"Thu, 26 Mar 2026 12:43:16 GMT"},"fingerprint":{"sha1":"ED:51:39:E2:76:3B:BB:16:28:CA:4F:D7:EF:87:76:50:21:F8:2E:6F","sha256":"DB:B4:AE:81:82:C8:BF:6A:D7:A4:FA:78:C6:86:5D:8A:B1:06:81:E3:CB:88:A2:3E:DA:53:26:F7:62:0D:C7:71"}}},"request":{"raw":"GET /theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:37:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 184476\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 06 Mar 2026 08:34:54 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nage: 39784\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPmHkI%2FljUlWstdmOa15BuR8e70V1uc42%2FyYpxoOv4E4jCp2fTLd28Icr%2FNHDUHQjkiPM1yVzbW1JRymVIk42v2grQVdvusuSZRN%2BdkVcrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c8ca0304f724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 184476, version 330.-16253","md5":"2a6dec1227f9970376f578270a642d06","sha1":"150a6a7ffdec6e2e2ff4c712d7cee8bd9b930284","sha256":"e228b909313044a18dec1a674cfd4935071c36eb3eb6a0cd38a45afac6ae3996","sha512":"47bd75a477eb7174248c25c18f73fd9d9b61f6626f2153fe9f564bd3e59fff48b557349d2e6c7c0d0f54f1e6d7b339bd190a4353af3518548f36f18bd10fb9a6","ssdeep":"3072:8tamB2NjJw1UqNxymy/a/No8qP5ObEgDcSQpBJ0/tU+l6owzIvAS4GKVJvt6kt/0:aaRhJiUwsmy/oNY7G/u2icoAkt/t/+6E","tlshash":"8b04127b2ad7b6bcc6d2f853776580631489413cb9f6459e70eb73d22638d8c32c81a6","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-04-15T20:24:43.706056Z","times_seen":1614,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:37:59.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /recaptcha/releases/N67nZn4AqZkNcbeMu4prBgzg/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 364623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 29 Jan 2026 10:25:43 GMT\r\nexpires: Fri, 29 Jan 2027 10:25:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 21 Jan 2026 23:35:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 551536\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":859335,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6d11689ba15ba8302e17ce8789a703ea","sha1":"4177d68d211d40d026cdced43983322cbfad3582","sha256":"581272bddd7d45428b263f78cdbaaa2edadf506f34902f152861ad122e454abc","sha512":"590747367733068b7c3ec5b6cd94f8b213125f21db8a0f65ca779bfd1530922d62d51447932923c2eaba9fd71021574dfcad59645e042e6e83ba687e2a067c02","ssdeep":"12288:CM0QsPsDmunObfvpfyv9p0tjgg27RGO3Pr:v0IMfVyv9pmgdR1z","tlshash":"72055be9b553347252a2baf284bb204ca37d9665d85c0c9db165c4f02ff0809b17beb7","first_seen":"2026-01-27T01:13:21.608817Z","last_seen":"2026-03-31T18:55:46.754314Z","times_seen":13184,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":93,"dns":21,"connect":7,"send":0,"wait":12,"receive":36,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/en_default_439a0bf.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2026-02-04T19:38:00.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/javascripts/en_default_439a0bf.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://client.crisp.chat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 19:38:00 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"6980d4a7-376d\"\r\nexpires: Sat, 02 Feb 2036 19:38:00 GMT\r\nlast-modified: Mon, 02 Feb 2026 16:45:27 GMT\r\nvary: Accept-Encoding\r\nage: 12245\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c8ca037f88fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14189,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14095)","md5":"3798413bf1ccb16acf1abc0c3663244d","sha1":"f8fce6b5457016a1c4860632fb1a87d57cf3c0e1","sha256":"209cce05246757bb8a9de3c366be408caefc3d8de3df7b232ecfaba67aaccb74","sha512":"1943ed45d17688133da38b5a44d040ef99a1977a245a2f7e889d18ca3a198937708071188570b61390ccc3abcd7b6f6b441de9ec07c8e5877a4e729dfb76a6f7","ssdeep":"192:+FmXut8HXikEeMeTAFGySAU1RrUWYGfu7nOmrY2FYXCM7+RmvKNXEHr4H:+FmX68HXikEeMeYGySfRrLzms7EJgrO","tlshash":"ee52a40eef36de7b02774b83b184b6124ab511b106d0687ed45d497c02a8ecab65bf4d","first_seen":"2026-02-02T20:44:56.919691Z","last_seen":"2026-02-06T07:28:37.176123Z","times_seen":55,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
