| r10.o.lencr.org/ |  23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd53da2de4fc4634a067495f858d15c81 be0d08371e49c3ff6bb6eb6760b0142bb5e49181 a4dfb633c3d6c80962fe436220800f7f6fac707a55806bfc1757d4fa49af8cdc
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A4DFB633C3D6C80962FE436220800F7F6FAC707A55806BFC1757D4FA49AF8CDC"
Last-Modified: Fri, 20 Sep 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7402
Expires: Sat, 21 Sep 2024 15:27:31 GMT
Date: Sat, 21 Sep 2024 13:24:09 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash722b54139ecda6f9a52afbc6bb4affc0 5b6aa33d2346081ba80b762fa828436187ff9675 34c785ded009e264c1e65d51f0c18f9967badf244a2e279a8521945ed1338fed
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "34C785DED009E264C1E65D51F0C18F9967BADF244A2E279A8521945ED1338FED"
Last-Modified: Sat, 21 Sep 2024 05:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10923
Expires: Sat, 21 Sep 2024 16:26:12 GMT
Date: Sat, 21 Sep 2024 13:24:09 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash16bea3ffe29b9735fad4571ef8803b94 6f860655a49c7f758f856e75d1a66ecd16399610 1e2d60a034b27bc9479b7c4d22c5549b83de2ee7dc1928436e42361f9b657709
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1E2D60A034B27BC9479B7C4D22C5549B83DE2EE7DC1928436E42361F9B657709"
Last-Modified: Sat, 21 Sep 2024 06:50:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20154
Expires: Sat, 21 Sep 2024 19:00:03 GMT
Date: Sat, 21 Sep 2024 13:24:09 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash18c18929295da072e565830bef9bc83f 51e2f8f748e303427e08b82b1bd7ec9181fad6a0 d5d38a421b62d5dc17fad4af813d4199dafff91cc7c3574703a991d328763756
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D5D38A421B62D5DC17FAD4AF813D4199DAFFF91CC7C3574703A991D328763756"
Last-Modified: Sat, 21 Sep 2024 03:10:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16779
Expires: Sat, 21 Sep 2024 18:03:49 GMT
Date: Sat, 21 Sep 2024 13:24:10 GMT
Connection: keep-alive
|
|
| funcrot.icu/video/?id=1326&part=ometv |  45.13.133.245 | 200 OK | 4.9 kB |
URL User Request GET HTTP/2funcrot.icu/video/?id=1326&part=ometv IP45.13.133.245:443 ASN#47583 Hostinger International Limited
CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typeJavaScript source, ASCII text, with very long lines (498), with CRLF line terminators Hash0d8b4a80a9ac035c8d21f0d491d4e202 140f484b0f92e436e088418baaee397bc0d0487a 850fb279936c2733a3ffca15b67ea7190fa9cf7f47123a55d647472e77fd8392
GET /video/?id=1326&part=ometv HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.1.29
content-type: text/html; charset=UTF-8
content-length: 4905
content-encoding: br
vary: Accept-Encoding,User-Agent
date: Sat, 21 Sep 2024 13:24:10 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashab75bd5628dfa037a646ec3e8a66426b 6f4322d74907a5a6a5745a8cb739fa59de99db8b 419ebe5e4b2dd5b44c8b55c3fb6e8058ea8191e4391dab67f8b5f7276a17ac75
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Sep 2024 13:24:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| funcrot.com/img/ometv/Vcs%20ZP68.jpg |  104.21.70.28 | 200 OK | 20 kB |
URL GET HTTP/2funcrot.com/img/ometv/Vcs%20ZP68.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x400, components 3 Hash169cc96b0d617124ee594464b9edafc1 ff9f65a9ca47581fc951269978ca840119fc2a5d 3704cfc4dfda436316b7865de9dd4dbadac006b46ebd3691bd2e68424f098de2
GET /img/ometv/Vcs%20ZP68.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 19814
cache-control: public, max-age=604800
expires: Sun, 22 Sep 2024 20:55:41 GMT
last-modified: Mon, 05 Aug 2024 07:01:41 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 491309
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=entElgdZQP4%2BcIi%2BrhZ4Ev%2Bsj47GnI90bf9flL3pQx297aOASDr7TKZAwCACo6N0%2Fs%2FdLYSVUVKrbdsmCBWHWuOXNP8NsgOwX8Izb%2Bpo0L9kOiMdrG2VP7HcTMZLhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01baf1c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Chamet%20ZP64.jpg | 104.21.70.28 | 200 OK | 31 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP64.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 604x483, components 3 Hashb5e544d4aef83799631be24722652f67 37144ef4376021d4cefd1b4055f65a600bccfa3c 25d1029ff0d8ed124ed63ae60bfb081de44de4e88d2f74530b0c265ab51ff35a
GET /img/ometv/Chamet%20ZP64.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 31038
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 13:42:40 GMT
last-modified: Wed, 03 Jul 2024 20:48:24 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 85290
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VhKB9uF4DI8kd5KmALc%2FOZ%2BkwVuG40QE%2BfU2y8x7XkUHIL9pYCkj6jx0Z0d72RyuWitBNB0i5q5Dx2TtZgsEUnfzD5BhrE0ptAkUCwJ%2F7Js6D%2BqgSWwjfpDu%2FsBu%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bb41c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Vcs%20ZP60.jpg | 104.21.70.28 | 200 OK | 23 kB |
URL GET HTTP/2funcrot.com/img/ometv/Vcs%20ZP60.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 483x386, components 3 Hash071a5087ebbe5764ba8a5b41c08b1395 0cecf8596fb1481f01ef116c2a045222a0455b38 ee7cf1a2c709875e0203f45936dde8e8b2cbaf9ec29fea36f8fe35c306b9dd39
GET /img/ometv/Vcs%20ZP60.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 22593
cache-control: public, max-age=604800
expires: Sun, 22 Sep 2024 20:55:49 GMT
last-modified: Wed, 31 Jul 2024 08:11:31 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 491301
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JirAMqFBvcydCcUsfFiE0t%2F1qEhq%2BCTFpS4yc%2FVcnv6cSX3uVOQ9W1jf22UOa8k1ZKPAiybhJqaF5Y2A%2BBp0yWker3wb75RjmfotHlvPwqIN8veJuMTgrfUv0OOfMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bb91c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.icu/video/video.css | 45.13.133.245 | 404 Not Found | 1.3 kB |
URL GET HTTP/3funcrot.icu/video/video.css IP45.13.133.245:443 ASN#47583 Hostinger International Limited
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash8150f458ed6fb9b1db4e5cfa57a1a281 6e5726854d28687b560d7fdcb5c782c425c7dfb9 4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
GET /video/video.css HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/video/?id=1326&part=ometv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 21 Sep 2024 13:24:10 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|
| funcrot.icu/video/zeepornvideostyle.css | 45.13.133.245 | 200 OK | 1.7 kB |
URL GET HTTP/3funcrot.icu/video/zeepornvideostyle.css IP45.13.133.245:443 ASN#47583 Hostinger International Limited
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typeASCII text, with CRLF line terminators Hash5726bf8a5bce2e7e1c372ecd4ba8bffb 2eb52ad71944955065c3d9636afcefae6e5787ee f67accdf4ee44fc45f9cec5a13ac50a8015b280cee53b88824b813ff3a968eea
GET /video/zeepornvideostyle.css HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/video/?id=1326&part=ometv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:10 GMT
content-type: text/css
last-modified: Sun, 11 Aug 2024 04:07:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1685
date: Sat, 21 Sep 2024 13:24:10 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
|
|
| funcrot.com/img/ometv/Chamet%20ZP53.jpg | 104.21.70.28 | 200 OK | 24 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP53.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 478x382, components 3 Hash4428915fd40bd1cf06f4c613b292874b 0ae1b448a6bab5501463de47ae2cea6441d43b05 8612e7f4dbac0354c3b32f7495f9ba0bd15d5ea1da67a6299d191816b14b7d26
GET /img/ometv/Chamet%20ZP53.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 24069
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 13:47:22 GMT
last-modified: Thu, 20 Jun 2024 10:55:26 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 85008
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lCTb%2BGraYekeQOdb0jaoD8fFEaoCuHGwigtvJZwwfSXn2ReQKN1E6AVntgqVAvGDCDWyzcMKW6GyUuVJXjFw2UTexoBdIZg2lumT460v5IsudFsSfDKeXLNdtxYpDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bb11c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Vcs%20ZP65.jpg | 104.21.70.28 | 200 OK | 20 kB |
URL GET HTTP/2funcrot.com/img/ometv/Vcs%20ZP65.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 499x399, components 3 Hash4841753cf915b32491bb7064044f9f94 21fed0baa1889b75e8db7a845b5a4bb4b7c3f63e 24cc97d3fcad0a1cda820147238a6f964c27f0fb954c7c904b601c79d5fab496
GET /img/ometv/Vcs%20ZP65.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 19987
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 14:44:14 GMT
last-modified: Mon, 05 Aug 2024 07:01:39 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 81596
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0l8RuE3IO6%2FlQdNOkIW0UT0HSLDc7MNnOcxZvCVL3vxgn%2Fl68GF3w%2FrE19OjarsD%2BKz449B1ai58967OyGNB4%2F8rPE4yUrH9%2FLdWp1j4Dxf5KgLJrbCztPyBqxmyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bc41c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Chamet%20ZP37.jpg | 104.21.70.28 | 200 OK | 22 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP37.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 485x388, components 3 Hasha4391d960f4359f779a2a30930cd0299 f4d802202eadbf8034aaabc3ce843f56fa4e9817 505ecec8a00de9da2fde1c123a17f660128cc054227e0397c71f4b63eaa4e1bd
GET /img/ometv/Chamet%20ZP37.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 21606
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 13:54:33 GMT
last-modified: Tue, 11 Jun 2024 15:11:33 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 84576
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n0LTKngJ76JEiUCTwsHDN438ssgkatfqgOlAELUR%2BITlCe9QIdJDmcSKDyOwYazHThlXxrJAhaxhpfLpbm9jh1a5BFgQ9PZzlYc0RaiJg9zAGZ3w2ijfBZ5OzMonlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bcd1c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Chamet%20ZP55.jpg | 104.21.70.28 | 200 OK | 36 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP55.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 564x451, components 3 Hash4106043b0cbb9b6d05704fcdb2734954 5b28ad4de6a91339b8593374fe5ed6e7937508c0 813abdeb1b0dbaffecf2e38824f96b992d072949b56583517ea6e4f62611aa2a
GET /img/ometv/Chamet%20ZP55.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 36383
cache-control: public, max-age=604800
expires: Sun, 22 Sep 2024 20:56:12 GMT
last-modified: Sun, 30 Jun 2024 10:23:05 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 491277
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4k9FVaVc9kWU%2BhkzdqBgzlk4UzsnODbm%2F%2BFa6xwb8rB6UswUtn8bS7p6L8qoAIQ7fxmWHoBJzRR%2FOzX7lAr7Xbx7Xt8jLiAexf2UY%2FJOOT0xj5r2NNFRZAg5Bi6jLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bbe1c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Chamet%20ZP65.jpg | 104.21.70.28 | 200 OK | 38 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP65.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 593x474, components 3 Hashc0c257813240de135c2c5ff96084a00e e286259111195e24879e02e947173c0dede81aa2 663056225a517f5de3175c4a0d59dc5bff4592ff8a1c5c818426eef9bade245e
GET /img/ometv/Chamet%20ZP65.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 38434
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 13:47:22 GMT
last-modified: Wed, 03 Jul 2024 20:48:24 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 85008
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gPTddV5NwnyxQV1h2ei2k8lGssf8B9%2BmqZ5QJdmqAMe5z3Mwa6DcHQ%2Ft817TIxWcPROFUvMyIIMT5dhJPKSVKxoYxZyKyCQb9sCh6xH2rwoRIbSZACL4XvWvA%2FXB%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bc61c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Chamet%20ZP70.jpg | 104.21.70.28 | 200 OK | 44 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP70.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 604x483, components 3 Hashb9311b14b6d8dfd3a5e3085601831afd fad1c8ccc52c7b4609d2f7acbe846be194b95706 306405647c9725c7f3c03a5195b877686936be4bd382c637b6853539ec6412b4
GET /img/ometv/Chamet%20ZP70.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 43473
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 14:03:06 GMT
last-modified: Wed, 24 Jul 2024 08:02:39 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 84064
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yWmh0V6jM7LZEUAF0eF7RAIhUKtXeHeeyou4IOxdKftYHQwUNhVKCb9vX0xIQKObnth%2FimMR4WSxSS64LUi2xfl6V8njrkQNQyoXKGp4%2FVGsSqUWx0XhbSELKm4C%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bc71c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Vcs%20ZP72.jpg | 104.21.70.28 | 200 OK | 39 kB |
URL GET HTTP/2funcrot.com/img/ometv/Vcs%20ZP72.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 601x481, components 3 Hash8c1ffe9f00d98dfcf046f6d3bcfc996f 65b1fc73cf8bc6f5d23631bdf2f16d2bdd62a375 5eefc672888820f3d50c7bcab0f70941e2ed8fda6c792b6359c3b8013407edbc
GET /img/ometv/Vcs%20ZP72.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 38993
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 13:53:09 GMT
last-modified: Sat, 24 Aug 2024 05:38:30 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 84661
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4RAbMD3oXUvDtCbbjSIZBWZGmmOg2MaYZy5k%2BXo0cLLq11GFwryqb7vCA1ZL%2FhWEicPRuNKc40Qd1JjklFWR0X72YQUuApWxzmnzBmeLxR5nurmevCCIRpqYgWHr0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bc01c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Ome%20Tv%20ZP248.jpg | 104.21.70.28 | 200 OK | 60 kB |
URL GET HTTP/2funcrot.com/img/ometv/Ome%20Tv%20ZP248.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1074x860, components 3 Hash3c1197e6841bedfb6556403e7586c3ee ea7c80141cd2fdfae059de0c38123bfad452649d 33530020508675a7ab895fd00e16a910358966d431b4c66390803d4e84a0f724
GET /img/ometv/Ome%20Tv%20ZP248.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 60042
cache-control: public, max-age=604800
expires: Fri, 27 Sep 2024 16:38:58 GMT
last-modified: Sat, 24 Aug 2024 05:38:26 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 74712
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2E85LQrxpM69gAq%2BfPKZ93D4Ysz7VTKX%2BLqN9Etmy9hfvKHDS4Cq%2FI0kTVlOQieOsxwVfD2bywHUDkTIDKXhpmSPDlht2n2mpjgbxuqRBXwD1LjF5XImUPXvs5Z8zA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bc21c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Ome%20Tv%20ZP239.jpg | 104.21.70.28 | 200 OK | 62 kB |
URL GET HTTP/2funcrot.com/img/ometv/Ome%20Tv%20ZP239.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1078x863, components 3 Hash2094df2b5a66e758bd6b0874f93dbfc6 75e2a75e8a749303b3f3ab24993e12baad77e6de 8ab759fe23ddf1d4086a471b306d2123006f346143422629cd453375b16ec492
GET /img/ometv/Ome%20Tv%20ZP239.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:10 GMT
content-type: image/jpeg
content-length: 61924
cache-control: public, max-age=604800
expires: Sun, 22 Sep 2024 20:55:41 GMT
last-modified: Sat, 24 Aug 2024 05:38:21 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 491308
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o7XJ27sQh9vKiH%2FR8MAD1UMvoSCyjucGkHOmcfV0pCMaz8UfOau9Fw68lclp%2Bs%2BFaEZTKNt780%2B1pAtfkvzo%2FJWA80TdaRPrJVIKW1xCrAR0o%2FTG6ewKb%2BAs7UEG3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bcb1c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.icu/img/Logo.png | 45.13.133.245 | 200 OK | 75 kB |
IP45.13.133.245:443 ASN#47583 Hostinger International Limited
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typePNG image data, 1890 x 695, 8-bit/color RGBA, non-interlaced Hash0ff07cab2e77631fd3b60282b2309c84 c08f066173e88e24a2199f9fe5d37a25105c1871 6aab13b9badc0964e59495ca69f7371725fa10dc6090006356b972eb91a1c4d5
GET /img/Logo.png HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/video/?id=1326&part=ometv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:10 GMT
content-type: image/png
last-modified: Sun, 11 Aug 2024 04:07:51 GMT
accept-ranges: bytes
content-length: 75233
date: Sat, 21 Sep 2024 13:24:10 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashab75bd5628dfa037a646ec3e8a66426b 6f4322d74907a5a6a5745a8cb739fa59de99db8b 419ebe5e4b2dd5b44c8b55c3fb6e8058ea8191e4391dab67f8b5f7276a17ac75
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Sep 2024 13:24:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| funcrot.com/img/ometv/Chamet%20ZP66.jpg | 104.21.70.28 | 200 OK | 39 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP66.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 602x481, components 3 Hashfae17496070af25b2809103b0c13be03 d48b70c3925e0b09a9ff7caadc669df5ae6ce900 fe6d4c0d72c51960f0c0490cd751034d0ed007fa81539e263286901005ca2d56
GET /img/ometv/Chamet%20ZP66.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:11 GMT
content-type: image/jpeg
content-length: 38697
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:11 GMT
last-modified: Wed, 03 Jul 2024 20:48:24 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VRwFQPPyksN2R6AE9RidX%2FK%2FcHuTdcyzGYaiTq%2Fes3m%2F70vBj0qm0xGRDZ3HpO4pdJl1ITmwfU8GGd9UAHfWUqZIj6WP93DqV1%2BZNEirdtfsA%2FDYwQppZIz%2FwUyrxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bb31c16-OSL
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash463ee307d80abd829e564c88723fd022 b0940e63694742be96c6ed64cb2686d7e08a2bf2 199a4bb13b521fd4fa29cb8b7f67a66a12fec4776ea879cf1a38f06f6c1f6b39
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Sep 2024 13:24:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDOUhdTQ3jw.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDOUhdTQ3jw.woff2 IP142.250.74.163:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintEA:6A:C6:A3:F6:90:16:40:23:03:8F:A5:6F:71:11:F6:FA:B7:5F:C3 ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16068, version 1.0 Hash180e63ab8ae269bbfa72badaeb7ca91a b06165e070b3f1070e5c3166393169c6968f6b6b 1ca366bcd4c496c368ba1e6c05c4c5e9281d1fe0bf3a22c362a1b392ca4e1158
GET /s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDOUhdTQ3jw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16068
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Sep 2024 16:23:14 GMT
expires: Fri, 19 Sep 2025 16:23:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:41:54 GMT
content-type: font/woff2
age: 162057
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| endowmentoverhangutmost.com/lv/esnk/2008332/code.js |  94.242.247.20 | 200 OK | 54 kB |
URL GET HTTP/2endowmentoverhangutmost.com/lv/esnk/2008332/code.js IP94.242.247.20:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerBuypass AS-983163327 Subject FingerprintA6:69:1C:17:89:EB:E3:18:A2:AB:44:48:75:FC:12:8C:1A:BF:B7:97 ValidityFri, 20 Sep 2024 14:26:10 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typegzip compressed data, max speed, from Unix Hasheaf71f40892eaf5f049734a2beccea7c bfad212d5c22d1d08740d046d7d28844d825a919 a960dcc6464d524d625bfcaa8b2ec3146795e3451add48b0326cc5de5608c4de
GET /lv/esnk/2008332/code.js HTTP/1.1
Host: endowmentoverhangutmost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:11 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 17 Sep 2024 13:00:05 GMT
vary: Accept-Encoding
etag: W/"66e97d55-23b12"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| funcrot.icu/img/Koko88.gif | 45.13.133.245 | 200 OK | 383 kB |
URL GET HTTP/3funcrot.icu/img/Koko88.gif IP45.13.133.245:443 ASN#47583 Hostinger International Limited
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typeGIF image data, version 89a, 518 x 173 Size383 kB (383105 bytes) Hash6a96f543d035eb5adeb98443583b8d4a 2a1dcfa9cdbe0c40dc58c7f814c7617a3e3168e4 1db1d9ba7449d7e935b8280f9908f51ca13822bf2dac9e3c2a64c69438fc0dfd
GET /img/Koko88.gif HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/video/?id=1326&part=ometv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:10 GMT
content-type: image/gif
last-modified: Wed, 04 Sep 2024 03:48:31 GMT
accept-ranges: bytes
content-length: 383105
date: Sat, 21 Sep 2024 13:24:10 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent
|
|
| funcrot.com/img/ometv/Chamet%20ZP75.jpg | 104.21.70.28 | 200 OK | 31 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP75.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 604x483, components 3 Hash8690a16941fc1f0561d0b7b3bdc03adc 33d5303e879bee4d1425ddd633fe98a875dcf21b 2e701309d9a1d217bfa097fe820dbd7505f36db384b5d96ba8446d884b302460
GET /img/ometv/Chamet%20ZP75.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:11 GMT
content-type: image/jpeg
content-length: 31398
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:11 GMT
last-modified: Wed, 31 Jul 2024 08:11:29 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P3DnUBxJNOZsO7zXjD%2FDhmehi4ZybcjQdU4Q4EUQIvTHb8wv7AxuCUm4NNaxd0IRZkbTFedC7vw4oAuT4TETg7F0S44a3IVYY1m8uhMQu9oWtEHaH%2F4gq2enAE9YKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bb61c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.com/img/ometv/Chamet%20ZP72.jpg | 104.21.70.28 | 200 OK | 29 kB |
URL GET HTTP/2funcrot.com/img/ometv/Chamet%20ZP72.jpg IP104.21.70.28:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectfuncrot.com FingerprintCE:5C:03:A1:C1:00:A0:8C:0C:66:7A:CC:12:36:04:55:8A:72:97:89 ValidityFri, 23 Aug 2024 13:57:50 GMT - Thu, 21 Nov 2024 13:57:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 490x392, components 3 Hash33e5efa9c517f81d241112d7bff6e330 860ec9bb10eaecf4e60db1480cd461e03c7dc5ac ace68735f3c46c7fdaef25a304c54a995dab884837db0abb0265a188ffc738d3
GET /img/ometv/Chamet%20ZP72.jpg HTTP/1.1
Host: funcrot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:11 GMT
content-type: image/jpeg
content-length: 28679
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:11 GMT
last-modified: Wed, 24 Jul 2024 08:02:39 GMT
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prG4X%2FY%2FxxiOQpLNvevxfEkQCzdYMqP1Fo82V%2FXQmh%2B8XOrCKRzHOdugQEWjGou6UPAQpeiawoFxZNesyOoRrSTiOkU4eDsJYCuAS%2FDW12%2BhP%2FM9jbHbEfHRKO0ZSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc01bc81c16-OSL
X-Firefox-Spdy: h2
|
|
| funcrot.icu/img/BantengMerah.gif | 45.13.133.245 | 200 OK | 195 kB |
URL GET HTTP/3funcrot.icu/img/BantengMerah.gif IP45.13.133.245:443 ASN#47583 Hostinger International Limited
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typeGIF image data, version 89a, 600 x 120 Size195 kB (195212 bytes) Hashad95f57d29cb8203f27dfa58caf4d848 d4c5ab2a1adafc0b4cefa7409c7762e753c30a59 a445a265c5964dc1f40e233efd7b8624aec11661e13d1a91815933d1160e7cd0
GET /img/BantengMerah.gif HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/video/?id=1326&part=ometv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:10 GMT
content-type: image/gif
last-modified: Tue, 03 Sep 2024 09:09:52 GMT
accept-ranges: bytes
content-length: 195212
date: Sat, 21 Sep 2024 13:24:10 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent
|
|
| funcrot.icu/img/JPdewa.gif | 45.13.133.245 | 200 OK | 77 kB |
URL GET HTTP/3funcrot.icu/img/JPdewa.gif IP45.13.133.245:443 ASN#47583 Hostinger International Limited
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typeGIF image data, version 89a, 600 x 120 Hash938a3cd00c22a07310f45d281446a147 4e5bf2b7d743260d50b71a4767642d11f62d8626 288d5dff4dc6d726016ace90be07938c41ba9071682ba323f550fb5cf561bfa6
GET /img/JPdewa.gif HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/video/?id=1326&part=ometv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:10 GMT
content-type: image/gif
last-modified: Tue, 03 Sep 2024 09:09:52 GMT
accept-ranges: bytes
content-length: 77149
date: Sat, 21 Sep 2024 13:24:10 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent
|
|
| r10.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP23.36.76.249:0 ASN#20940 Akamai International B.V.
Hash37e60e776606803afe68dd0538a0c53e 939b6bc07640216b9b3e0f64763b4f2739d24f22 8122677ee095fc85b409b745453849fdd9ae17b9c832260da8b08aacaf511a6a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8122677EE095FC85B409B745453849FDD9AE17B9C832260DA8B08AACAF511A6A"
Last-Modified: Sat, 21 Sep 2024 01:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 21 Sep 2024 19:24:11 GMT
Date: Sat, 21 Sep 2024 13:24:11 GMT
Connection: keep-alive
|
|
| mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js | 172.240.253.132 | 200 OK | 11 kB |
URL GET HTTP/1.1mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectmathematicsefficiencyburnt.com Fingerprint9C:6F:BA:12:D5:41:17:B4:E2:90:E5:B5:74:F7:8C:A8:E9:61:CF:EF ValidityFri, 23 Aug 2024 07:22:46 GMT - Thu, 21 Nov 2024 07:22:45 GMT
File typeJavaScript source, ASCII text, with very long lines (23814), with no line terminators Hash6069366b172e882ba8213e807201265b 619326c4303ddb1b84ceb60b3507ec7507824e5f 060cf12614574ccf74b4a30625469aadede6d2e4cce5e823aaf0b2a9b0160ac2
GET /184a33f08d32329eeff0be4aa5e56939/invoke.js HTTP/1.1
Host: mathematicsefficiencyburnt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: mathematicsefficiencyburnt.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 63f685842895bcc4b1f9431f168d5102
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js | 172.240.253.132 | 200 OK | 11 kB |
URL GET HTTP/1.1mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectmathematicsefficiencyburnt.com Fingerprint9C:6F:BA:12:D5:41:17:B4:E2:90:E5:B5:74:F7:8C:A8:E9:61:CF:EF ValidityFri, 23 Aug 2024 07:22:46 GMT - Thu, 21 Nov 2024 07:22:45 GMT
File typeJavaScript source, ASCII text, with very long lines (23844), with no line terminators Hash5939d8a08914f6451e2c38c3bda8c17d 3fe64ad9e61902f913bcdd3694a55261390ebb84 203348cf31ea1a209acc261f663e64dd8a4ebd03af809f887a4646e2a7bc2205
GET /184a33f08d32329eeff0be4aa5e56939/invoke.js HTTP/1.1
Host: mathematicsefficiencyburnt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: mathematicsefficiencyburnt.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8ecbe2b7f85fd1b7323659c15106d7fb
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe004fdf95a45676551f61ab6d8790e30 d56dfd42075d67d323f93ad3ff535e553f46756d 5139af7b8d8c8c3be44daa5a5f5a23481938fdf88d165ad83b3a42c6f055f81a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5139AF7B8D8C8C3BE44DAA5A5F5A23481938FDF88D165AD83B3A42C6F055F81A"
Last-Modified: Fri, 20 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7419
Expires: Sat, 21 Sep 2024 15:27:51 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe004fdf95a45676551f61ab6d8790e30 d56dfd42075d67d323f93ad3ff535e553f46756d 5139af7b8d8c8c3be44daa5a5f5a23481938fdf88d165ad83b3a42c6f055f81a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5139AF7B8D8C8C3BE44DAA5A5F5A23481938FDF88D165AD83B3A42C6F055F81A"
Last-Modified: Fri, 20 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7419
Expires: Sat, 21 Sep 2024 15:27:51 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe004fdf95a45676551f61ab6d8790e30 d56dfd42075d67d323f93ad3ff535e553f46756d 5139af7b8d8c8c3be44daa5a5f5a23481938fdf88d165ad83b3a42c6f055f81a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5139AF7B8D8C8C3BE44DAA5A5F5A23481938FDF88D165AD83B3A42C6F055F81A"
Last-Modified: Fri, 20 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7419
Expires: Sat, 21 Sep 2024 15:27:51 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe004fdf95a45676551f61ab6d8790e30 d56dfd42075d67d323f93ad3ff535e553f46756d 5139af7b8d8c8c3be44daa5a5f5a23481938fdf88d165ad83b3a42c6f055f81a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5139AF7B8D8C8C3BE44DAA5A5F5A23481938FDF88D165AD83B3A42C6F055F81A"
Last-Modified: Fri, 20 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7419
Expires: Sat, 21 Sep 2024 15:27:51 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| ocsp.r2m03.amazontrust.com/ | 54.230.218.11 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP54.230.218.11:0
Hashcffb9c6ffd4cd4f58e57b6a05bc73e59 973e1987cb4f0d48e6a02180f1036b2c1a4fa6b1 51d0b86de78db1e11f744dd76003d86d607abaf4275f7dbee2f41fcae8364d46
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 21 Sep 2024 13:24:12 GMT
Last-Modified: Sat, 21 Sep 2024 12:27:58 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wxOj1EJyKOmYp-_rF6d-pZVMC--KeCwNck0xq6E7zo-pAcFgzXC4xA==
Age: 3374
|
|
| proftrafficcounter.com/stats |  52.58.29.234 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.58.29.234:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashb8ca47a02aa2ca9d76755214069f008e f604e0e7895cc3b364fc466e33b30bd4cdfe2441 5ad12526975e72f34c733dc5e1222363e2c91ad635ba4d73359731577adef08c
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://funcrot.icu
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=c9f471db-0e17-46c2-a57c-bb217db04a67:2:1; expires=Tue, 19 Sep 2034 13:24:12 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| endowmentoverhangutmost.com/lv/esnk/2008332/code.js | 94.242.247.20 | 200 OK | 54 kB |
URL GET HTTP/2endowmentoverhangutmost.com/lv/esnk/2008332/code.js IP94.242.247.20:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerBuypass AS-983163327 Subject FingerprintA6:69:1C:17:89:EB:E3:18:A2:AB:44:48:75:FC:12:8C:1A:BF:B7:97 ValidityFri, 20 Sep 2024 14:26:10 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typegzip compressed data, max speed, from Unix Hash82000e09036dee1f51c8d85d7d926393 5280ad4f313dbc3a81b83a4a320b5a6b75378fa1 5c8bed5fd1f17c54845c9e2287a0868babd95047cd75750e7c4b0f1639b3cfad
GET /lv/esnk/2008332/code.js HTTP/1.1
Host: endowmentoverhangutmost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 17 Sep 2024 13:00:05 GMT
vary: Accept-Encoding
etag: W/"66e97d55-23b12"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 52.58.29.234 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.58.29.234:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash96e68aad7964c7d958cc365cecbb229d 7d7bbc572e95aef6faf9de7a2786811ffef6e263 18a75aacd99c83431cc999895cbab872d292af4e4c79699045a8f430cf465cb7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://funcrot.icu
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93:3:1; expires=Tue, 19 Sep 2034 13:24:12 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js | 172.240.253.132 | 200 OK | 11 kB |
URL GET HTTP/1.1mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectmathematicsefficiencyburnt.com Fingerprint9C:6F:BA:12:D5:41:17:B4:E2:90:E5:B5:74:F7:8C:A8:E9:61:CF:EF ValidityFri, 23 Aug 2024 07:22:46 GMT - Thu, 21 Nov 2024 07:22:45 GMT
File typeJavaScript source, ASCII text, with very long lines (23844), with no line terminators Hash5939d8a08914f6451e2c38c3bda8c17d 3fe64ad9e61902f913bcdd3694a55261390ebb84 203348cf31ea1a209acc261f663e64dd8a4ebd03af809f887a4646e2a7bc2205
GET /184a33f08d32329eeff0be4aa5e56939/invoke.js HTTP/1.1
Host: mathematicsefficiencyburnt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: mathematicsefficiencyburnt.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8819076cc941e8a37a92ff5e38d80a8e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| r10.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP23.36.76.249:0 ASN#20940 Akamai International B.V.
Hash8486a022aafdc2c4b1afa90a40de07f1 9a45d2a01325247f7617eed730a3e261ad878f2b d805542ba1519bfcf03be12f1af256ed56557a9e37a6caced18def3353a5ee15
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D805542BA1519BFCF03BE12F1AF256ED56557A9E37A6CACED18DEF3353A5EE15"
Last-Modified: Sat, 21 Sep 2024 06:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16115
Expires: Sat, 21 Sep 2024 17:52:47 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| proftrafficcounter.com/stats | 52.58.29.234 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.58.29.234:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash96e68aad7964c7d958cc365cecbb229d 7d7bbc572e95aef6faf9de7a2786811ffef6e263 18a75aacd99c83431cc999895cbab872d292af4e4c79699045a8f430cf465cb7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Cookie: uid_id2=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://funcrot.icu
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| endowmentoverhangutmost.com/check.html | 94.242.247.20 | 200 OK | 11 kB |
URL GET HTTP/2endowmentoverhangutmost.com/check.html IP94.242.247.20:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerBuypass AS-983163327 Subject FingerprintA6:69:1C:17:89:EB:E3:18:A2:AB:44:48:75:FC:12:8C:1A:BF:B7:97 ValidityFri, 20 Sep 2024 14:26:10 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typeHTML document, ASCII text, with very long lines (23841) Hash2d376789761b850962c63e3cfb30d837 a44d344298125a6e2d613da19aa917205987937d 6f333b60b2c3c2bc4e28b5e99682897075e4eaa9a95a5c44dc0990ade64a81ca
GET /check.html HTTP/1.1
Host: endowmentoverhangutmost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 29 Aug 2024 09:36:44 GMT
vary: Accept-Encoding
etag: W/"66d0412c-394"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| obtaintrout.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js | 192.243.61.225 | 200 OK | 34 kB |
URL GET HTTP/1.1obtaintrout.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectobtaintrout.com Fingerprint7F:96:95:14:A5:D4:8F:37:DD:C6:1F:C0:FF:7C:EE:6A:A6:93:DA:D4 ValidityMon, 12 Aug 2024 09:57:29 GMT - Sun, 10 Nov 2024 09:57:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashcb85c8e674982d2a24aadb787d2e9e9a bf88cfe3acac98142c94682177ecf5ac4c655dd6 c21bf3dc5814a28997901b31ba4100d4f4ec66251b2414a8c538d69e04a56252
GET /7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js HTTP/1.1
Host: obtaintrout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 65cd5822b83d4de1bed54acd90a45578
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js | 104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 131359
expires: Thu, 11 Sep 2025 13:24:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LkwxtmMINEYFFKoxDD%2B224jVpxjMES8QSaLFe9D5d5wMKPpKr%2Fh%2BJ%2B27Ib1JCKh2OSu8PVMZOjeGDy75qz%2FuLgyZgZDcNe%2BUaxP5mnpGnWv97yUEXKrlWwhwzhJcH1EiczKwM8fX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8c6a5fcaacc95693-OSL
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Nunito:wght@300&display=swap | 142.250.74.106 | 200 OK | 138 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Nunito:wght@300&display=swap IP142.250.74.106:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC6:E8:36:27:AB:3A:34:33:0B:85:2C:D8:6C:0A:74:34:71:6A:F5:62 ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT
File typegzip compressed data, max compression Size138 kB (137942 bytes) Hashc4bc66252f694cd6cdf435ead6966f80 34de77e3608ac5356015788541509fbf92845caa cc36ac7d50d250bde830fb163e7c92ef10825a197d08ae233bcbe65511252073
GET /css2?family=Nunito:wght@300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 21 Sep 2024 13:24:10 GMT
date: Sat, 21 Sep 2024 13:24:10 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js | 104.17.25.14 | 200 OK | 1.6 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (4505) Hashf2ecb2bd8a424c8e8cf507ce8bd933c2 3cbc08ca052ea25c3b0834b9291a3ca1e9122e26 4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099
GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 1571
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630ad3e5-623"
last-modified: Sun, 28 Aug 2022 02:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 238417
expires: Thu, 11 Sep 2025 13:24:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Q7krP5dZj0V5bjPzpAYXaPJ6AyKpw5XE9o8%2Bs7efdI7PrXbwOL1VNFwFMDR8TLSWv2y0gwcKx59Tz1Wc0rRnriBsiUFOk25lUP1qEv4J4deLzIzlEKOpwVA9eyHfiCMN986VXe%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8c6a5fcaed305693-OSL
X-Firefox-Spdy: h2
|
|
| obtaintrout.com/watch.987551250288.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=c9f471db-0e17-46c2-a57c-bb217db04a67%3A2%3A1 | 192.243.61.225 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1obtaintrout.com/watch.987551250288.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=c9f471db-0e17-46c2-a57c-bb217db04a67%3A2%3A1 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectobtaintrout.com Fingerprint7F:96:95:14:A5:D4:8F:37:DD:C6:1F:C0:FF:7C:EE:6A:A6:93:DA:D4 ValidityMon, 12 Aug 2024 09:57:29 GMT - Sun, 10 Nov 2024 09:57:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.987551250288.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=c9f471db-0e17-46c2-a57c-bb217db04a67%3A2%3A1 HTTP/1.1
Host: obtaintrout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Location: https://obtaintrout.com/watch.987551250288.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=0100ccd24d20753b74a37e9d8b083db77885fb6b2d74e2412c88368a9b4764e93972a527694eef1d310a2b800c11d672185fab41ea1385200c392fa5ef0b2a773e54c3b9183b7673ec42729ecf2119b2a638006439e9cfb60f8a4f3e4805&tz=0&uuid=c9f471db-0e17-46c2-a57c-bb217db04a67%3A2%3A1
Set-Cookie: u_pl=22526023; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ; expires=Sat, 21 Sep 2024 13:25:12 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 773e9bffdbb31260215e22636b518ce2
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js | 104.17.25.14 | 200 OK | 591 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (1266) Hash4412bf8023109ee9eb1f1f226d391329 c273960aa874a87dd022b5e597887142f1b8e34f d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 120942
expires: Thu, 11 Sep 2025 13:24:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vi9cuRyVyDaGmglXwfShW5DVcSOhAi4Rtagcds91cHDQ%2BsNoTJZWhi6hKyaWz%2B8jiTo7iy02st7fxanBOdxszNPtL4cmf%2FUchtYkxTJnUUlFeP9P%2BktxbTr3k4De1pcXTeymVHwg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8c6a5fcafd435693-OSL
X-Firefox-Spdy: h2
|
|
| bathingdelicatedemise.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js | 192.243.59.20 | 200 OK | 34 kB |
URL GET HTTP/1.1bathingdelicatedemise.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbathingdelicatedemise.com FingerprintDB:E4:B6:AC:95:06:71:94:41:CD:C6:53:EB:01:DD:38:C6:3F:45:75 ValidityMon, 12 Aug 2024 09:56:53 GMT - Sun, 10 Nov 2024 09:56:52 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashd09367cf0f1285100e5090e6b9ee9f6d f033e124078c3002331554d6a97141eb5ef7768b 457e90448bbbcb16f0675336d35167913bdb250fc3d10d1c86f18a933dc0962d
GET /7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js HTTP/1.1
Host: bathingdelicatedemise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 1aff479227d84318cc396fb907ec7a79
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js | 172.240.253.132 | 200 OK | 11 kB |
URL GET HTTP/1.1mathematicsefficiencyburnt.com/184a33f08d32329eeff0be4aa5e56939/invoke.js IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectmathematicsefficiencyburnt.com Fingerprint9C:6F:BA:12:D5:41:17:B4:E2:90:E5:B5:74:F7:8C:A8:E9:61:CF:EF ValidityFri, 23 Aug 2024 07:22:46 GMT - Thu, 21 Nov 2024 07:22:45 GMT
File typeJavaScript source, ASCII text, with very long lines (23841), with no line terminators Hashcb6f1d65f3d8d944722062c185aef1f7 7786740462a1d81c9c1bfee8f8ebceebf531fc9a 2557cf4efa2e1995b56eb884ad7429a3d801316772306ea830432ce21eacf23c
GET /184a33f08d32329eeff0be4aa5e56939/invoke.js HTTP/1.1
Host: mathematicsefficiencyburnt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: mathematicsefficiencyburnt.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c5a2fbcd4eca6ae5965bb8b951cd567d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| i.doodcdn.co/ads/ad.js | 104.26.6.74 | 200 OK | 18 B |
IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeASCII text, with no line terminators Hash071c641b229d2bfadd243b8fa2a9c88d 4048ed3ad506f9bb9052c23283912d0cfea8bcc6 3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Sat, 20 Sep 2025 23:32:04 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 22250
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDZXA5KdEilsuyfIqJ%2B6jKSASnVhqpCQAwyp8RvIixtPD5P8DnSn6HOv980ov3f5M38M1XWBGIZOayzU7%2BemJZ9UbYIYJbAGSYZgyCkXgDVbHxol5wkS631u2%2Bg80w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fcb3c8656c6-OSL
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/img/no_video_3.svg | 104.26.6.74 | 200 OK | 2.8 kB |
URL GET HTTP/2i.doodcdn.co/img/no_video_3.svg IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeSVG Scalable Vector Graphics image Hash077bfdaa49ae4877a42611b739ec4752 a2f9e1222b7af9abc05122411ab8902efcc08ead 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Sun, 20 Oct 2024 18:39:31 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 22250
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qyWvkDoUyWtcT5tuzWx0NiEFO2O0Z4W1SSsg2E%2BtF84ErHZjNE%2Fc3HXb9JWwtlUPIfiC3u6CRq8stZEzd47ig23JVEuNXv23Io9rziUWrDFh44BKHorE6tdn0YWNqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fcb3c8856c6-OSL
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf61f7b2dd250f302c6c77833469fd89a 07825773231cb752c0af6c97470f32cdc87da759 4dacf8a2fe284df9c103cc396cb6525eb6a90fdef625a81689386bb958ff1dea
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4DACF8A2FE284DF9C103CC396CB6525EB6A90FDEF625A81689386BB958FF1DEA"
Last-Modified: Fri, 20 Sep 2024 03:11:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13734
Expires: Sat, 21 Sep 2024 17:13:06 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| static.doodcdn.co/js/embed3.js | 104.26.6.74 | 200 OK | 113 kB |
URL GET HTTP/2static.doodcdn.co/js/embed3.js IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators Size113 kB (112790 bytes) Hash59698656a40921f7585e25a5bb347955 75de624e80155463ff8bb09090b712098eb74dd6 69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript
content-length: 112790
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=112944
etag: "65bf48c8-1b930"
expires: Sun, 20 Oct 2024 18:38:15 GMT
last-modified: Sun, 04 Feb 2024 08:20:24 GMT
cf-cache-status: HIT
age: 22199
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JYFpP5HQyS2P%2BBUHukpjAc1JV%2BgjC72H8edgTmzfftaKZXkWq92d5jY9%2BeluZH5UAGNt1Q%2BHzEETjC7ZsqpW%2B0kQ4UVYzT%2B74kCHKfZY%2BWNyMAKF63WxxbH57X%2F0mcTVHSWd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fcb5ca756c6-OSL
X-Firefox-Spdy: h2
|
|
| bathingdelicatedemise.com/pixel/purst?dl=0&th=0&sc=0&rs=2617&rd=2617&fd=585&bv=24.8.8180&tmpl=136 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1bathingdelicatedemise.com/pixel/purst?dl=0&th=0&sc=0&rs=2617&rd=2617&fd=585&bv=24.8.8180&tmpl=136 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbathingdelicatedemise.com FingerprintDB:E4:B6:AC:95:06:71:94:41:CD:C6:53:EB:01:DD:38:C6:3F:45:75 ValidityMon, 12 Aug 2024 09:56:53 GMT - Sun, 10 Nov 2024 09:56:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2617&rd=2617&fd=585&bv=24.8.8180&tmpl=136 HTTP/1.1
Host: bathingdelicatedemise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| bathingdelicatedemise.com/watch.730546270511.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 172.240.108.76 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1bathingdelicatedemise.com/watch.730546270511.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP172.240.108.76:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbathingdelicatedemise.com FingerprintDB:E4:B6:AC:95:06:71:94:41:CD:C6:53:EB:01:DD:38:C6:3F:45:75 ValidityMon, 12 Aug 2024 09:56:53 GMT - Sun, 10 Nov 2024 09:56:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.730546270511.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bathingdelicatedemise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Location: https://bathingdelicatedemise.com/watch.730546270511.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=712e04421ff6d1edfed54d8b56aea9ce410239d6bb15b2474e8da8676b2f69988f85b61082e20651d7751704eb81e2a8d7a69e0e2c6c24b771d0640968ba54008685d83f135c8e050a248ac5a0db6580a62fa23ae04898078010f1&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1
Set-Cookie: u_pl=22526023; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ; expires=Sat, 21 Sep 2024 13:25:12 GMT; path=/; secure; SameSite=None
Host: bathingdelicatedemise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e639c722827a7979fdea0c7fd2287dc1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| img.doodcdn.co/splash/xy0vubz9rlpuugvc.jpg | 104.26.6.74 | 200 OK | 28 kB |
URL GET HTTP/2img.doodcdn.co/splash/xy0vubz9rlpuugvc.jpg IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 333x715, components 3 Hashae8603b3111a2bf84e5d693bcca0d622 504459e253396e87903170abd5cf8d1cd269b427 eb7dbe9aae57e5aef7672870da1eb0b8a0ca8d5b95e8124f4015e82eadef2c24
GET /splash/xy0vubz9rlpuugvc.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: image/jpeg
content-length: 28255
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=28777
etag: "66e2b055-7069"
expires: Fri, 04 Oct 2024 19:42:21 GMT
last-modified: Thu, 12 Sep 2024 09:11:49 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EmnICfEBSjxpgQov1QM0CD3%2BT6OvMxSEaC0OMjqPm1%2FaLpLjc%2BaXIvZCswbil7XcZQ3emwPXsI42Lx4SDgk%2FDToeTWvXyGai36VFxxa%2BqX0G3kS7DIotRCENeAfEMCee"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fcb6cc556c6-OSL
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashc883d2001221dcee35c7769d9d9e29c0 6aaae1a803ed29eddb18e4180280424765cfaf3e d42c886f4be7140eeb4a4bb102678f7db771f250e7e757838614690c44e0f542
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D42C886F4BE7140EEB4A4BB102678F7DB771F250E7E757838614690C44E0F542"
Last-Modified: Fri, 20 Sep 2024 20:12:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8167
Expires: Sat, 21 Sep 2024 15:40:19 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashc883d2001221dcee35c7769d9d9e29c0 6aaae1a803ed29eddb18e4180280424765cfaf3e d42c886f4be7140eeb4a4bb102678f7db771f250e7e757838614690c44e0f542
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D42C886F4BE7140EEB4A4BB102678F7DB771F250E7E757838614690C44E0F542"
Last-Modified: Fri, 20 Sep 2024 20:12:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8167
Expires: Sat, 21 Sep 2024 15:40:19 GMT
Date: Sat, 21 Sep 2024 13:24:12 GMT
Connection: keep-alive
|
|
| d18t35yyry2k49.cloudfront.net/?ryytd=919673 | 143.204.42.113 | 200 OK | 52 kB |
URL GET HTTP/2d18t35yyry2k49.cloudfront.net/?ryytd=919673 IP143.204.42.113:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15952) Hash59d827f0cb56ebe7666e95587f1cdb0e f89e338042a4cb108547887c0dd80cf5b1d04426 9ca055f090a6f6c82e417409289417ac71326d4ef7bcbb2ae6012a794e3df781
GET /?ryytd=919673 HTTP/1.1
Host: d18t35yyry2k49.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 51475
date: Sat, 21 Sep 2024 13:24:12 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qNSscKK4ZbvLOX2VJaCeINOlpwdD3UvADZd3pV9wZCV9EXfmJ-126Q==
X-Firefox-Spdy: h2
|
|
| du0pud0sdlmzf.cloudfront.net/?dupud=908057 | 143.204.42.89 | 200 OK | 97 kB |
URL GET HTTP/2du0pud0sdlmzf.cloudfront.net/?dupud=908057 IP143.204.42.89:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15945) Hasha639cb09a22ba1b9db6f2040846e9e6d 616475b96b3caf48a077142472359a6f12859dcd 6b0414e9d743aeefbc022c39780a9341f9aeebc3e0bf470fe3bd8a2eff1410ae
GET /?dupud=908057 HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 96815
date: Sat, 21 Sep 2024 13:24:12 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RpgVzwbRACnCx8RCjMprNno5VnmKXLb9_0fEx-nNotFDn-LylFCBPA==
X-Firefox-Spdy: h2
|
|
| bathingdelicatedemise.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js | 172.240.108.76 | 200 OK | 34 kB |
URL GET HTTP/1.1bathingdelicatedemise.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js IP172.240.108.76:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbathingdelicatedemise.com FingerprintDB:E4:B6:AC:95:06:71:94:41:CD:C6:53:EB:01:DD:38:C6:3F:45:75 ValidityMon, 12 Aug 2024 09:56:53 GMT - Sun, 10 Nov 2024 09:56:52 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashd09367cf0f1285100e5090e6b9ee9f6d f033e124078c3002331554d6a97141eb5ef7768b 457e90448bbbcb16f0675336d35167913bdb250fc3d10d1c86f18a933dc0962d
GET /7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js HTTP/1.1
Host: bathingdelicatedemise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: bathingdelicatedemise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7f23ed89ff856e6b1d86aae8d1cad7d7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| bathingdelicatedemise.com/watch.17066289442.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 172.240.108.76 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1bathingdelicatedemise.com/watch.17066289442.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP172.240.108.76:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbathingdelicatedemise.com FingerprintDB:E4:B6:AC:95:06:71:94:41:CD:C6:53:EB:01:DD:38:C6:3F:45:75 ValidityMon, 12 Aug 2024 09:56:53 GMT - Sun, 10 Nov 2024 09:56:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.17066289442.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bathingdelicatedemise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Location: https://bathingdelicatedemise.com/watch.17066289442.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=269dcdc114a35594c172189d7d21af0513d978ade17fa44671b45f6310dc102b896879c304ecf9b46c40c132bc21cc31e1328a0ec21020b58232ae99f5db843c46f883e040a52b44b906e4684f3bc7dec5db22c1f27ebc14de0afb&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1
Set-Cookie: u_pl=22526023; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ; expires=Sat, 21 Sep 2024 13:25:12 GMT; path=/; secure; SameSite=None
Host: bathingdelicatedemise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 19a7a25be4a68b8cc8a9933efe76c594
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| bereaveencodefestive.com/watch.1356035328674.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 172.240.253.132 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1bereaveencodefestive.com/watch.1356035328674.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbereaveencodefestive.com Fingerprint76:D0:4C:84:D4:59:5D:7E:2F:F7:8A:3B:01:21:44:C0:05:BC:99:23 ValidityMon, 12 Aug 2024 09:52:42 GMT - Sun, 10 Nov 2024 09:52:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1356035328674.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bereaveencodefestive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Location: https://bereaveencodefestive.com/watch.1356035328674.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=228dd2241fb12a2c23ffd5cc638f9eda0f2d846b6f2a1333126d7f390e5a4bf3f4d702a952e6130caddd91059df4575e4f0c5e2fe4559cc936b5cdafcf7a4bbb743393da9e19fc8f3b12e2812736f7118695b2f3ba5cc45d35373d&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1
Set-Cookie: u_pl=22526023; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ; expires=Sat, 21 Sep 2024 13:25:12 GMT; path=/; secure; SameSite=None
Host: bereaveencodefestive.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f3b07bb8e798046a14d4c276bcaf42d8
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| obtaintrout.com/watch.987551250288.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=0100ccd24d20753b74a37e9d8b083db77885fb6b2d74e2412c88368a9b4764e93972a527694eef1d310a2b800c11d672185fab41ea1385200c392fa5ef0b2a773e54c3b9183b7673ec42729ecf2119b2a638006439e9cfb60f8a4f3e4805&tz=0&uuid=c9f471db-0e17-46c2-a57c-bb217db04a67%3A2%3A1 | 192.243.61.225 | 200 OK | 2.4 kB |
URL GET HTTP/1.1obtaintrout.com/watch.987551250288.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=0100ccd24d20753b74a37e9d8b083db77885fb6b2d74e2412c88368a9b4764e93972a527694eef1d310a2b800c11d672185fab41ea1385200c392fa5ef0b2a773e54c3b9183b7673ec42729ecf2119b2a638006439e9cfb60f8a4f3e4805&tz=0&uuid=c9f471db-0e17-46c2-a57c-bb217db04a67%3A2%3A1 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectobtaintrout.com Fingerprint7F:96:95:14:A5:D4:8F:37:DD:C6:1F:C0:FF:7C:EE:6A:A6:93:DA:D4 ValidityMon, 12 Aug 2024 09:57:29 GMT - Sun, 10 Nov 2024 09:57:28 GMT
File typeJavaScript source, ASCII text, with very long lines (2964) Hasha3588029c83f3a2e32aababb8e0ac94a da0558b028bcb30f6f45938ba60c0ca0ed91011e b2a8b39fdcaf0218a1923ae6481bda8299e7cd5bb46ad8a6c27113379f945e6b
GET /watch.987551250288.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=0100ccd24d20753b74a37e9d8b083db77885fb6b2d74e2412c88368a9b4764e93972a527694eef1d310a2b800c11d672185fab41ea1385200c392fa5ef0b2a773e54c3b9183b7673ec42729ecf2119b2a638006439e9cfb60f8a4f3e4805&tz=0&uuid=c9f471db-0e17-46c2-a57c-bb217db04a67%3A2%3A1 HTTP/1.1
Host: obtaintrout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
Referer: https://funcrot.icu/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22526023; ain=eyJhbGciOiJIUzI1NiJ9.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_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=c9f471db-0e17-46c2-a57c-bb217db04a67:2:1; expires=Sat, 28 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
pdhtkv32=true; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
uncs32=1; expires=Sun, 22 Sep 2024 13:24:12 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8bc56c935bab34774a2fb68639310f46
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| bereaveencodefestive.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js | 172.240.253.132 | 200 OK | 34 kB |
URL GET HTTP/1.1bereaveencodefestive.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbereaveencodefestive.com Fingerprint76:D0:4C:84:D4:59:5D:7E:2F:F7:8A:3B:01:21:44:C0:05:BC:99:23 ValidityMon, 12 Aug 2024 09:52:42 GMT - Sun, 10 Nov 2024 09:52:41 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash04a0ef6d96cd262b718085bb6d6348cc 266712647d78ce31aa32933650f694dd42d32b18 ffbcbfe9c1dad256abbac254550ebc0d283dd0ea615b33f349cd6ec5d58169dd
GET /7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js HTTP/1.1
Host: bereaveencodefestive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: bereaveencodefestive.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c402455b6c8f0e34b91a671cea920970
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| bereaveencodefestive.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js | 172.240.253.132 | 200 OK | 34 kB |
URL GET HTTP/1.1bereaveencodefestive.com/7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbereaveencodefestive.com Fingerprint76:D0:4C:84:D4:59:5D:7E:2F:F7:8A:3B:01:21:44:C0:05:BC:99:23 ValidityMon, 12 Aug 2024 09:52:42 GMT - Sun, 10 Nov 2024 09:52:41 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash04a0ef6d96cd262b718085bb6d6348cc 266712647d78ce31aa32933650f694dd42d32b18 ffbcbfe9c1dad256abbac254550ebc0d283dd0ea615b33f349cd6ec5d58169dd
GET /7c/6c/3d/7c6c3d9baf2314603a65f0eab513b8ff.js HTTP/1.1
Host: bereaveencodefestive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: bereaveencodefestive.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d7f7be57ee79e8bb5024a27f04020d64
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 | 104.26.6.74 | 200 OK | 24 kB |
URL GET HTTP/2i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23812, version 1.524 Hasheb586e5a1b86dbf1c866e3ed80f9d18e 280ee78d19c017ab9335f769595e5157d3c4a343 714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Sun, 20 Oct 2024 16:10:38 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 22059
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OjCQsy9OPrGrlVsEyf2qObxUT%2BhDtZfTvrK85hdVemEs4Yae32w9LD6yQoFkF0e7hRXRWz7qaZXyoloG3ofVV%2BCVZFcynEHeMOjoPcFZlpp8J3i5%2FPVxq0Wr%2FZPa8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fcebaaf56c6-OSL
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.6.0/css/free-v5-font-face.min.css?token=1afb5534f7 | 172.67.139.119 | 200 OK | 800 B |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.6.0/css/free-v5-font-face.min.css?token=1afb5534f7 IP172.67.139.119:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectka-f.fontawesome.com FingerprintB8:0E:B4:BD:5D:51:E9:6A:20:8E:72:31:7F:AF:18:85:61:54:95:94 ValidityThu, 29 Aug 2024 15:54:38 GMT - Wed, 27 Nov 2024 15:54:37 GMT
File typeASCII text, with very long lines (608) Hash8972ae5004bc634ffa6641be3960e78a 235aecdfe4a45217d75fe7abfbb5b12e3b28cc6e 7f264c31cdb355f351235359240c30acae2bbe0a43c73fa6a035123e6d953a01
GET /releases/v6.6.0/css/free-v5-font-face.min.css?token=1afb5534f7 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://funcrot.icu/
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:39 GMT
etag: W/"8972ae5004bc634ffa6641be3960e78a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BWtuqGZsPrdg-yH-78sifaUMtmx0l3QqRdAYs5rwraEm6KZn_zZhAQ==
age: 85801
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6OWIV5issojXle9LXaoFXUIp6jXGwJgZl842vzAkP0K7K9R6Lgv4Vuvk5tNTeeeCElNqyXdtBW92eiPvJ0MLYL4B9CuIKDBrwNYVGhQsqfzJr9hbICsqRlY2H1JgH2KGp8vHZoSgJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fcd59fdb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.tsyndicate.com/sdk/v1/p.js | 45.133.44.70 | 200 OK | 386 kB |
URL GET HTTP/2cdn.tsyndicate.com/sdk/v1/p.js IP45.133.44.70:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerLet's Encrypt Subjectcdn.tsyndicate.com FingerprintB6:50:C8:E8:0C:BA:74:37:F9:B3:2D:B2:3D:DA:FE:D6:EF:A8:D7:67 ValidityWed, 07 Aug 2024 03:04:18 GMT - Tue, 05 Nov 2024 03:04:17 GMT
File typegzip compressed data, from Unix Size386 kB (385486 bytes) Hasha6f00c61d64c2aedd088e92e995063fc 7527668d65c230bb932500d0093dab69d94696a2 f9cb5743ecb84e21a0fef3654758856b776fe429f685e4c78798183d1952ac83
GET /sdk/v1/p.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Wed, 11 Sep 2024 08:35:18 GMT
etag: W/"66e15646-11a04"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Mon, 23 Sep 2024 13:24:12 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
x-cdn-host-id: ds8138,ds9893
X-Firefox-Spdy: h2
|
|
| cdn.cloudfrale.com/bn/681/72c/d48/68172cd48777e890d377b5fba39d218a84cfd02d.mp4 | 45.133.44.21 | 206 Partial Content | 328 kB |
URL GET HTTP/2cdn.cloudfrale.com/bn/681/72c/d48/68172cd48777e890d377b5fba39d218a84cfd02d.mp4 IP45.133.44.21:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerBuypass AS-983163327 Subject FingerprintC7:59:0C:CC:F5:3F:DC:64:5E:C5:23:EA:9B:E9:E2:05:E3:08:21:C4 ValiditySat, 22 Jun 2024 22:28:33 GMT - Wed, 18 Dec 2024 22:59:00 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size328 kB (328456 bytes) Hash27c5c28512a603c8d25a7ee3e0debe25 68172cd48777e890d377b5fba39d218a84cfd02d 9b82808c30e8b16094ff418069b9bbdfe0c5b0fb144b0914eed9ad26386e726b
GET /bn/681/72c/d48/68172cd48777e890d377b5fba39d218a84cfd02d.mp4 HTTP/1.1
Host: cdn.cloudfrale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: video/mp4
content-length: 328456
server: nginx/1.26.0
etag: 27c5c28512a603c8d25a7ee3e0debe25
last-modified: Sun, 05 Nov 2023 16:31:28 GMT
x-timestamp: 1699201887.17116
x-trans-id: tx5d5cd8c18f3e4975a3ad4-0066e97791
x-openstack-request-id: tx5d5cd8c18f3e4975a3ad4-0066e97791
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 23 Sep 2024 13:24:13 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
access-control-allow-origin: *
content-range: bytes 0-328455/328456
X-Firefox-Spdy: h2
|
|
| bathingdelicatedemise.com/watch.730546270511.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=712e04421ff6d1edfed54d8b56aea9ce410239d6bb15b2474e8da8676b2f69988f85b61082e20651d7751704eb81e2a8d7a69e0e2c6c24b771d0640968ba54008685d83f135c8e050a248ac5a0db6580a62fa23ae04898078010f1&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 192.243.59.20 | 200 OK | 2.4 kB |
URL GET HTTP/1.1bathingdelicatedemise.com/watch.730546270511.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=712e04421ff6d1edfed54d8b56aea9ce410239d6bb15b2474e8da8676b2f69988f85b61082e20651d7751704eb81e2a8d7a69e0e2c6c24b771d0640968ba54008685d83f135c8e050a248ac5a0db6580a62fa23ae04898078010f1&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbathingdelicatedemise.com FingerprintDB:E4:B6:AC:95:06:71:94:41:CD:C6:53:EB:01:DD:38:C6:3F:45:75 ValidityMon, 12 Aug 2024 09:56:53 GMT - Sun, 10 Nov 2024 09:56:52 GMT
File typeJavaScript source, ASCII text, with very long lines (2952) Hash5e0ac56364ec11d8afe0bec328833b54 e0fa8fa16b3eeb692219fa6fe0b4a58fd5f15610 c35246173a6e7f7cf7e5df345d7871e8015a06f1b16c2461e66751f7a1f7d0eb
GET /watch.730546270511.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=712e04421ff6d1edfed54d8b56aea9ce410239d6bb15b2474e8da8676b2f69988f85b61082e20651d7751704eb81e2a8d7a69e0e2c6c24b771d0640968ba54008685d83f135c8e050a248ac5a0db6580a62fa23ae04898078010f1&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bathingdelicatedemise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
Referer: https://funcrot.icu/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22526023; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMjUyNjAyMywiayI6IjE4NGEzM2YwOGQzMjMyOWVlZmYwYmU0YWE1ZTU2OTM5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozNjA4MDI0LCJwaWQiOjE2OTMxNjUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6MzIsInB0Ijo0LCJwayI6ImQ1Y2o0ajFidyIsImNwa3MiOnsiMjgiOiI3YzZjM2Q5YmFmMjMxNDYwM2E2NWYwZWFiNTEzYjhmZiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93:3:1; expires=Sat, 28 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv32=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs32=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 24babbd6071b41d3f8eb5d2a3992f906
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| bereaveencodefestive.com/watch.1353243151334.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 192.243.59.12 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1bereaveencodefestive.com/watch.1353243151334.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbereaveencodefestive.com Fingerprint76:D0:4C:84:D4:59:5D:7E:2F:F7:8A:3B:01:21:44:C0:05:BC:99:23 ValidityMon, 12 Aug 2024 09:52:42 GMT - Sun, 10 Nov 2024 09:52:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1353243151334.js?key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&tz=0&dev=e&res=14.2071&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bereaveencodefestive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Location: https://bereaveencodefestive.com/watch.1353243151334.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925113&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=1539432ebd0378adc2d3876ff318e3b71789b1037ee77b2d259104cf385cea92cd704adada97584bafbb849549521a7d359eb44552dda8250499ff101d29d15da58b152e90450a25b9605e2e9d7f1a3672d0f3bdfb0b2c3120af0b825b239c&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1
Set-Cookie: u_pl=22526023; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMjUyNjAyMywiayI6IjE4NGEzM2YwOGQzMjMyOWVlZmYwYmU0YWE1ZTU2OTM5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozNjA4MDI0LCJwaWQiOjE2OTMxNjUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6MzIsInB0Ijo0LCJwayI6ImQ1Y2o0ajFidyIsImNwa3MiOnsiMjgiOiI3YzZjM2Q5YmFmMjMxNDYwM2E2NWYwZWFiNTEzYjhmZiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ; expires=Sat, 21 Sep 2024 13:25:13 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 6f775d08b220dc0546fd9b4344dfddc7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| capaciousdrewreligion.com/advertisers.js |  185.196.197.71 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP185.196.197.71:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com FingerprintE3:36:E7:35:50:1D:3D:F0:47:9F:E5:94:90:B5:48:C0:67:A2:2B:8A ValidityTue, 03 Sep 2024 21:28:57 GMT - Mon, 02 Dec 2024 21:28:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2919b0369c01ed93261b6d9ceca353cb
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| bathingdelicatedemise.com/watch.17066289442.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=269dcdc114a35594c172189d7d21af0513d978ade17fa44671b45f6310dc102b896879c304ecf9b46c40c132bc21cc31e1328a0ec21020b58232ae99f5db843c46f883e040a52b44b906e4684f3bc7dec5db22c1f27ebc14de0afb&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 172.240.108.76 | 200 OK | 2.4 kB |
URL GET HTTP/1.1bathingdelicatedemise.com/watch.17066289442.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=269dcdc114a35594c172189d7d21af0513d978ade17fa44671b45f6310dc102b896879c304ecf9b46c40c132bc21cc31e1328a0ec21020b58232ae99f5db843c46f883e040a52b44b906e4684f3bc7dec5db22c1f27ebc14de0afb&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP172.240.108.76:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbathingdelicatedemise.com FingerprintDB:E4:B6:AC:95:06:71:94:41:CD:C6:53:EB:01:DD:38:C6:3F:45:75 ValidityMon, 12 Aug 2024 09:56:53 GMT - Sun, 10 Nov 2024 09:56:52 GMT
File typeJavaScript source, ASCII text, with very long lines (2960) Hash843991380c1292e064e84f7ee28f82d9 6969756e023a8f17216856b53b5a7bbcd6b03cd8 5d8ff9420767623df87879e3ae18993e1e735bd15294bf4faa1b21ac652aacb7
GET /watch.17066289442.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=269dcdc114a35594c172189d7d21af0513d978ade17fa44671b45f6310dc102b896879c304ecf9b46c40c132bc21cc31e1328a0ec21020b58232ae99f5db843c46f883e040a52b44b906e4684f3bc7dec5db22c1f27ebc14de0afb&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bathingdelicatedemise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
Referer: https://funcrot.icu/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22526023; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMjUyNjAyMywiayI6IjE4NGEzM2YwOGQzMjMyOWVlZmYwYmU0YWE1ZTU2OTM5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozNjA4MDI0LCJwaWQiOjE2OTMxNjUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6MzIsInB0Ijo0LCJwayI6ImQ1Y2o0ajFidyIsImNwa3MiOnsiMjgiOiI3YzZjM2Q5YmFmMjMxNDYwM2E2NWYwZWFiNTEzYjhmZiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93:3:1; expires=Sat, 28 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv32=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs32=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
Host: bathingdelicatedemise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8807f0f7e3f7322ec1a4c9509475f510
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| bereaveencodefestive.com/watch.1356035328674.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=228dd2241fb12a2c23ffd5cc638f9eda0f2d846b6f2a1333126d7f390e5a4bf3f4d702a952e6130caddd91059df4575e4f0c5e2fe4559cc936b5cdafcf7a4bbb743393da9e19fc8f3b12e2812736f7118695b2f3ba5cc45d35373d&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 172.240.253.132 | 200 OK | 2.4 kB |
URL GET HTTP/1.1bereaveencodefestive.com/watch.1356035328674.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=228dd2241fb12a2c23ffd5cc638f9eda0f2d846b6f2a1333126d7f390e5a4bf3f4d702a952e6130caddd91059df4575e4f0c5e2fe4559cc936b5cdafcf7a4bbb743393da9e19fc8f3b12e2812736f7118695b2f3ba5cc45d35373d&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbereaveencodefestive.com Fingerprint76:D0:4C:84:D4:59:5D:7E:2F:F7:8A:3B:01:21:44:C0:05:BC:99:23 ValidityMon, 12 Aug 2024 09:52:42 GMT - Sun, 10 Nov 2024 09:52:41 GMT
File typeJavaScript source, ASCII text, with very long lines (2969) Hash09044915adb55f161a1a58643daf45e2 ee47b73db2c0ca3b081fb17c24caa82b230dc0fc c63090505903c69d0cf35ee9f83ec7a6ae750a020d905549aa6f00301e5d71ef
GET /watch.1356035328674.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925112&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=228dd2241fb12a2c23ffd5cc638f9eda0f2d846b6f2a1333126d7f390e5a4bf3f4d702a952e6130caddd91059df4575e4f0c5e2fe4559cc936b5cdafcf7a4bbb743393da9e19fc8f3b12e2812736f7118695b2f3ba5cc45d35373d&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bereaveencodefestive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
Referer: https://funcrot.icu/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22526023; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMjUyNjAyMywiayI6IjE4NGEzM2YwOGQzMjMyOWVlZmYwYmU0YWE1ZTU2OTM5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozNjA4MDI0LCJwaWQiOjE2OTMxNjUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6MzIsInB0Ijo0LCJwayI6ImQ1Y2o0ajFidyIsImNwa3MiOnsiMjgiOiI3YzZjM2Q5YmFmMjMxNDYwM2E2NWYwZWFiNTEzYjhmZiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93:3:1; expires=Sat, 28 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv32=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs32=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
Host: bereaveencodefestive.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bac152d82eedc8b0a51268922e499f88
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| img.doodcdn.co/splash/xy0vubz9rlpuugvc.jpg | 104.26.6.74 | 200 OK | 28 kB |
URL GET HTTP/2img.doodcdn.co/splash/xy0vubz9rlpuugvc.jpg IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 333x715, components 3 Hashae8603b3111a2bf84e5d693bcca0d622 504459e253396e87903170abd5cf8d1cd269b427 eb7dbe9aae57e5aef7672870da1eb0b8a0ca8d5b95e8124f4015e82eadef2c24
GET /splash/xy0vubz9rlpuugvc.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: image/jpeg
content-length: 28255
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=28777
etag: "66e2b055-7069"
expires: Fri, 04 Oct 2024 23:28:09 GMT
last-modified: Thu, 12 Sep 2024 09:11:49 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QIeEsnEK9iNEslxW0ug6Yr3eBpGEH%2Bz3RQG7KAkij9Bt8HuGBp0MZeKtHripuGRJDQrZ%2FioyT1Kzv6gtDhgVo30heXqFrJPHW5fiDVKWZGtWLw03VAnHpCjtVlv1VGLg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fcf6bcf56c6-OSL
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-regular-400.woff2 | 172.67.139.119 | 200 OK | 26 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-regular-400.woff2 IP172.67.139.119:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectka-f.fontawesome.com FingerprintB8:0E:B4:BD:5D:51:E9:6A:20:8E:72:31:7F:AF:18:85:61:54:95:94 ValidityThu, 29 Aug 2024 15:54:38 GMT - Wed, 27 Nov 2024 15:54:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 25464, version 774.256 Hashf5e38eecd547d3ef0dd9e2666140c0c1 75b072611d8b8c93ca061aa0147d6f909b95c1b2 b6032fd81027dc0aff1a894802261e493ed3b041f625a27630e6bcfba0ea4ec6
GET /releases/v6.6.0/webfonts/free-fa-regular-400.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: font/woff2
content-length: 25464
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:44:07 GMT
etag: "f5e38eecd547d3ef0dd9e2666140c0c1"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Lr7tEVkP_waiEYPx4SzkoQYt6yKFzfm1l5LxPlT_UipdtTPHqQrjIA==
age: 366220
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xbb1eP7T5VEb51iZ5lzl7XkJ%2BrKR9VbXmLh5g3p2HN9BJSzW%2BKpT%2Fbxv3CPEBptoO%2BfqmE%2BMsi4Yq%2B5MK2J6ya7pez4bwG4svRfhBVWoUEsOALKx%2BV%2BnL%2FxcWvqR47Rv7QXUr8h8RA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fd00e97b527-OSL
X-Firefox-Spdy: h2
|
|
| i.doodcdn.com/theme_2/img/loader.svg | 104.21.34.210 | 301 Moved Permanently | 167 B |
URL GET HTTP/2i.doodcdn.com/theme_2/img/loader.svg IP104.21.34.210:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.com FingerprintC4:B2:FF:D7:AC:99:CA:06:A1:DB:D7:A2:C2:ED:27:F4:2C:E7:FB:3F ValidityTue, 06 Aug 2024 09:13:15 GMT - Mon, 04 Nov 2024 09:13:14 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/html
content-length: 167
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Sat, 21 Sep 2024 14:24:13 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SqrFIU4M%2Fc4OY2ANYaAI3515nfn0DL9V3YIUmB64dXP8NFJKsfNU2hE8D%2F3bU80ntd36KljQ%2BCvA4s31tcWak5ytWx%2Babujc%2BtJ6TNhQreKffeTk0utTZSvaS98svMxj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c6a5fd0b8860b59-OSL
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP23.36.76.249:0 ASN#20940 Akamai International B.V.
Hash936f1c6fe955b4b6b6386a5fcf2b8ca7 4fb2d883e48e47c0463749bf1d52a7ef2b012197 9cbc96f757bfcd69b9a88b8b9da71005472b55c9136b1c20519f0c82fec81ee9
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9CBC96F757BFCD69B9A88B8B9DA71005472B55C9136B1C20519F0C82FEC81EE9"
Last-Modified: Fri, 20 Sep 2024 01:03:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4331
Expires: Sat, 21 Sep 2024 14:36:24 GMT
Date: Sat, 21 Sep 2024 13:24:13 GMT
Connection: keep-alive
|
|
| cdn.storageimagedisplay.com/cti/9e/59/67/9e5967347c3912d5de8b10386462c1ea/1708341630.png | 45.133.44.2 | 200 OK | 34 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/cti/9e/59/67/9e5967347c3912d5de8b10386462c1ea/1708341630.png IP45.133.44.2:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 320 x 50, 8-bit/color RGBA, non-interlaced Hash2d1a248de177e7bb793bfd3887f1fe76 85b344c35e85c40407306dcf49572f9173901296 93e0dc679602d9dd2be7a8a4f80bd24bce1f0f52003599d3b13dc50effb3b012
GET /cti/9e/59/67/9e5967347c3912d5de8b10386462c1ea/1708341630.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: image/png
content-length: 34174
server: nginx/1.21.6
last-modified: Mon, 19 Feb 2024 11:20:38 GMT
etag: "65d33986-857e"
expires: Mon, 23 Sep 2024 13:24:13 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mopiwhoisqui.com/alZwaTULNBMECgtrEk9AGDpNTAcsc0IvUR9mABxRWiUUBVgQMF4KWQUjFA9HBTgER1sPIlVbcw0AOAEEPTw1WnMSJUgtXCsENT5WIww1K3MIISoQdis1VVtzPGQbCnIAACYMXTs1Fi9GBBAIGkQuFCkBei5jHC10GhI2Ll4dHRwkQDksMi9nMi4UJ2czBSoRVhIQGDNbKx45M3A+MT0wc14UOwUBT2Q2O2QJPCgQZDgeNDtxOgcyPXlbFAAvZwUxJy1SPxA4UXEvPUELVAIEHTpzWj8xLmMOBBgOYDA9FzN4W24YKHMoOTE6TSsHBzx9MxBBLnIoBB06dEc1Ay9yCWMkLkIMDDYvZAsXNRN9OA8IMVssHT1bUigMJQFzCyE2BW0/MgE/T1odNS1NDxo2WH0iFxgAYwEASDtyBhxWA0YFOABUdzMbFD1tGGA+MVE4 | 18.165.122.25 | 200 OK | 1.2 kB |
URL GET HTTP/2mopiwhoisqui.com/alZwaTULNBMECgtrEk9AGDpNTAcsc0IvUR9mABxRWiUUBVgQMF4KWQUjFA9HBTgER1sPIlVbcw0AOAEEPTw1WnMSJUgtXCsENT5WIww1K3MIISoQdis1VVtzPGQbCnIAACYMXTs1Fi9GBBAIGkQuFCkBei5jHC10GhI2Ll4dHRwkQDksMi9nMi4UJ2czBSoRVhIQGDNbKx45M3A+MT0wc14UOwUBT2Q2O2QJPCgQZDgeNDtxOgcyPXlbFAAvZwUxJy1SPxA4UXEvPUELVAIEHTpzWj8xLmMOBBgOYDA9FzN4W24YKHMoOTE6TSsHBzx9MxBBLnIoBB06dEc1Ay9yCWMkLkIMDDYvZAsXNRN9OA8IMVssHT1bUigMJQFzCyE2BW0/MgE/T1odNS1NDxo2WH0iFxgAYwEASDtyBhxWA0YFOABUdzMbFD1tGGA+MVE4 IP18.165.122.25:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerAmazon Subjectmopiwhoisqui.com FingerprintB4:34:FC:E2:75:9D:0D:5C:7D:55:5F:F9:28:C5:8E:4B:4A:24:FC:57 ValidityMon, 19 Aug 2024 00:00:00 GMT - Wed, 17 Sep 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3034), with no line terminators Hash062716d4c2db2d4625b5609543d3cea5 073530c0e4c45d43623d622f9130e42e15ff6d95 de80958d4bc5cb344c91b6e608ca19b56b4cbdda7ec414f5eb07954f97aa5616
GET /alZwaTULNBMECgtrEk9AGDpNTAcsc0IvUR9mABxRWiUUBVgQMF4KWQUjFA9HBTgER1sPIlVbcw0AOAEEPTw1WnMSJUgtXCsENT5WIww1K3MIISoQdis1VVtzPGQbCnIAACYMXTs1Fi9GBBAIGkQuFCkBei5jHC10GhI2Ll4dHRwkQDksMi9nMi4UJ2czBSoRVhIQGDNbKx45M3A+MT0wc14UOwUBT2Q2O2QJPCgQZDgeNDtxOgcyPXlbFAAvZwUxJy1SPxA4UXEvPUELVAIEHTpzWj8xLmMOBBgOYDA9FzN4W24YKHMoOTE6TSsHBzx9MxBBLnIoBB06dEc1Ay9yCWMkLkIMDDYvZAsXNRN9OA8IMVssHT1bUigMJQFzCyE2BW0/MgE/T1odNS1NDxo2WH0iFxgAYwEASDtyBhxWA0YFOABUdzMbFD1tGGA+MVE4 HTTP/1.1
Host: mopiwhoisqui.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1186
date: Sat, 21 Sep 2024 13:24:13 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 cba87929a659f0e0a8a2cdc0b7cb22ae.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: FGANLh9t0-dDG6AHvQTwj4TbQvL8iZ0Y3F2TOffr-PV_e4rdaRSb8w==
X-Firefox-Spdy: h2
|
|
| cdn.storageimagedisplay.com/cti/af/63/c2/af63c27e69e40bcd48afbec9fb0a6a61/1716370473.jpg | 45.133.44.2 | 200 OK | 18 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/cti/af/63/c2/af63c27e69e40bcd48afbec9fb0a6a61/1716370473.jpg IP45.133.44.2:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typeJPEG image data, baseline, precision 8, 320x50, components 3 Hashc2a8b013cf3b827b7b05d8a59519776e 5ab7d723580293ff4931955e6f5763b10391a705 a846f204734fe39212d115a2a159b596b552f957a770a2a955e0785782d0fa99
GET /cti/af/63/c2/af63c27e69e40bcd48afbec9fb0a6a61/1716370473.jpg HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: image/jpeg
content-length: 18318
server: nginx/1.21.6
last-modified: Wed, 22 May 2024 09:34:42 GMT
etag: "664dbc32-478e"
expires: Mon, 23 Sep 2024 13:24:13 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/cjVDcDRdCiADCRBwFThnHwwiFFo0DBQcDQVWCxxjJX0NQlE0VmUEXRYIekAFQAB7VkQbUX5CDVRGNxFAB0Z+QRIbWyUfCVRDfkEaQht1QBpGEzZNBVRBMxFTTwRlAEAGWX5BA0ADekIBQgBwQgdH | 104.21.82.170 | 204 No Content | 0 B |
URL GET HTTP/2eatmenttogeth.com/cjVDcDRdCiADCRBwFThnHwwiFFo0DBQcDQVWCxxjJX0NQlE0VmUEXRYIekAFQAB7VkQbUX5CDVRGNxFAB0Z+QRIbWyUfCVRDfkEaQht1QBpGEzZNBVRBMxFTTwRlAEAGWX5BA0ADekIBQgBwQgdH IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cjVDcDRdCiADCRBwFThnHwwiFFo0DBQcDQVWCxxjJX0NQlE0VmUEXRYIekAFQAB7VkQbUX5CDVRGNxFAB0Z+QRIbWyUfCVRDfkEaQht1QBpGEzZNBVRBMxFTTwRlAEAGWX5BA0ADekIBQgBwQgdH HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pcLv%2FVoGn%2FrzKzArSHGpJq%2FMB8%2BaajPg%2B5LNB209Ua3UxSJ8mNSEZPIGfYqJu3UBwcgagbFd116khnpwzR7LF0dNwWW7jJ8KLHzjY5CHcMdov7hCS81RgXFr8mAVXpYrxl9g9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd0bc8d56b4-OSL
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/bDdjUDRDCAAjCTpdBzluKnUOFAUiZDkHVythJTReDlAhMWIBdkUkXQgKWmcAXgNWdkQFU15hDEpEFzFAGUReYRIFWQU/CUpBXmEaXBlRfgFKQl5hEhhHAjcJXRETJEAAClJnBloOUWUEWQRRYQw | 104.21.82.170 | 204 No Content | 0 B |
URL GET HTTP/2eatmenttogeth.com/bDdjUDRDCAAjCTpdBzluKnUOFAUiZDkHVythJTReDlAhMWIBdkUkXQgKWmcAXgNWdkQFU15hDEpEFzFAGUReYRIFWQU/CUpBXmEaXBlRfgFKQl5hEhhHAjcJXRETJEAAClJnBloOUWUEWQRRYQw IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bDdjUDRDCAAjCTpdBzluKnUOFAUiZDkHVythJTReDlAhMWIBdkUkXQgKWmcAXgNWdkQFU15hDEpEFzFAGUReYRIFWQU/CUpBXmEaXBlRfgFKQl5hEhhHAjcJXRETJEAAClJnBloOUWUEWQRRYQw HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FbdgRW0O9naVPyW39Pgc3PB2QbURIRKwfJusJ6LMPDAKMIYkYcv8G582VDmGrMFuNgzgD9YAWoCVu2eDBWX7SYAxhK5n%2FU9FSa0iU6QVrNEQaJldmFhHYXhAXIGY17EJU2tlVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd0bc9656b4-OSL
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/SlRXbFJlazQfbxw6FQ0FEgY6PmAAIgYBNgg1AAQaKD8zHzB6AXEYOy5pblxqemFgSiIjMGpddDkgNhgnOWlmSjskMjhRdDxpZkJhfnpkWnx+ciJRY2wgJw01d2VxHCY+OGpdZXhibl5nemFkXmJ4 | 104.21.82.170 | 204 No Content | 0 B |
URL GET HTTP/2eatmenttogeth.com/SlRXbFJlazQfbxw6FQ0FEgY6PmAAIgYBNgg1AAQaKD8zHzB6AXEYOy5pblxqemFgSiIjMGpddDkgNhgnOWlmSjskMjhRdDxpZkJhfnpkWnx+ciJRY2wgJw01d2VxHCY+OGpdZXhibl5nemFkXmJ4 IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SlRXbFJlazQfbxw6FQ0FEgY6PmAAIgYBNgg1AAQaKD8zHzB6AXEYOy5pblxqemFgSiIjMGpddDkgNhgnOWlmSjskMjhRdDxpZkJhfnpkWnx+ciJRY2wgJw01d2VxHCY+OGpdZXhibl5nemFkXmJ4 HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FvL8%2FHU34xoDRa2lx19jO5Y61lDOKRXGzoUNb6OYP%2FkZu65pdXSQfMC99cKs4vrV28SIQAmqN7Tbe2%2BR8OcMfNVTY42%2BH%2FlSQaER%2FSIUtYwKOvWoOfAiOCae5EeWOIJkUMNkYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd0ccc156b4-OSL
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/b2lDem5AViAJUzUTDRcjNyMbOAI+KBIsNy4/EjwsNw43HC06OGUOBwtUektXWV5wXB4GDX5JXEkaNxsaGhp+S0gGByUVU0kffkpAVkdxVFhJHH5LSBsZIh1TXk8zDhoDVHJNXFlQcU9eWlpwTV8 | 104.21.82.170 | 204 No Content | 0 B |
URL GET HTTP/2eatmenttogeth.com/b2lDem5AViAJUzUTDRcjNyMbOAI+KBIsNy4/EjwsNw43HC06OGUOBwtUektXWV5wXB4GDX5JXEkaNxsaGhp+S0gGByUVU0kffkpAVkdxVFhJHH5LSBsZIh1TXk8zDhoDVHJNXFlQcU9eWlpwTV8 IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b2lDem5AViAJUzUTDRcjNyMbOAI+KBIsNy4/EjwsNw43HC06OGUOBwtUektXWV5wXB4GDX5JXEkaNxsaGhp+S0gGByUVU0kffkpAVkdxVFhJHH5LSBsZIh1TXk8zDhoDVHJNXFlQcU9eWlpwTV8 HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=19uSvAZ2c5ZYDsBBq2Ei%2Fw5%2FC1wc0QsC7%2BQS8Eq%2B5bxwCAN2HrRMaB3gq9ZS97%2FxntFbW6fBRz59SlfP47WAvKVT0X4cNwoEyzJixHaKI12JRDOqN7LnWV%2Fpxv03YPMepslHUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd0ed1556b4-OSL
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/ckE0TnNdflc9TiUFejw8NxdbDB8ZC1AjGDMWdSZBKxBAHTI6DBI6GhZ8DX9KRHYHaAMbJQl9QVQyQC8HBzIJfENCdhInHRQuCXxVBHwEYEpccxp4VQd8BWgHAiBTc0JUMUA6H09wA3xFS3MBfkZBcgN9 | 104.21.82.170 | 204 No Content | 0 B |
URL GET HTTP/2eatmenttogeth.com/ckE0TnNdflc9TiUFejw8NxdbDB8ZC1AjGDMWdSZBKxBAHTI6DBI6GhZ8DX9KRHYHaAMbJQl9QVQyQC8HBzIJfENCdhInHRQuCXxVBHwEYEpccxp4VQd8BWgHAiBTc0JUMUA6H09wA3xFS3MBfkZBcgN9 IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ckE0TnNdflc9TiUFejw8NxdbDB8ZC1AjGDMWdSZBKxBAHTI6DBI6GhZ8DX9KRHYHaAMbJQl9QVQyQC8HBzIJfENCdhInHRQuCXxVBHwEYEpccxp4VQd8BWgHAiBTc0JUMUA6H09wA3xFS3MBfkZBcgN9 HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=glf0TgKNvC%2FLinWMVT8MJUvxsatA5iEJGgvo3ItaGzZWn%2Fgx%2Fo%2Fk7Fe7yhhqv7ZIGxVbte9eXYSnU8GRQlAej82Qsm3fWqhOP0zYNz8OQOKRDC3Q%2FXvCY%2BNmjpXIDsx7CHQ0gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd0fd1b56b4-OSL
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP23.36.76.249:0 ASN#20940 Akamai International B.V.
Hashf7070c495bccdc3f75a919b18926a4c2 c9989d8450ff33ad5f4fe60043063df5caa926e1 cf50b7e6167e34b441b0a7e599028acbe0696ebc177bb2e3d97944e11ba5c4c0
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CF50B7E6167E34B441B0A7E599028ACBE0696EBC177BB2E3D97944E11BA5C4C0"
Last-Modified: Thu, 19 Sep 2024 21:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4479
Expires: Sat, 21 Sep 2024 14:38:52 GMT
Date: Sat, 21 Sep 2024 13:24:13 GMT
Connection: keep-alive
|
|
| bereaveencodefestive.com/watch.1353243151334.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925113&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=1539432ebd0378adc2d3876ff318e3b71789b1037ee77b2d259104cf385cea92cd704adada97584bafbb849549521a7d359eb44552dda8250499ff101d29d15da58b152e90450a25b9605e2e9d7f1a3672d0f3bdfb0b2c3120af0b825b239c&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 | 172.240.253.132 | 200 OK | 2.1 kB |
URL GET HTTP/1.1bereaveencodefestive.com/watch.1353243151334.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925113&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=1539432ebd0378adc2d3876ff318e3b71789b1037ee77b2d259104cf385cea92cd704adada97584bafbb849549521a7d359eb44552dda8250499ff101d29d15da58b152e90450a25b9605e2e9d7f1a3672d0f3bdfb0b2c3120af0b825b239c&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 IP172.240.253.132:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectbereaveencodefestive.com Fingerprint76:D0:4C:84:D4:59:5D:7E:2F:F7:8A:3B:01:21:44:C0:05:BC:99:23 ValidityMon, 12 Aug 2024 09:52:42 GMT - Sun, 10 Nov 2024 09:52:41 GMT
File typeJavaScript source, ASCII text, with very long lines (2545) Hash6488a288685da65c1f25201b4f9b6c28 078d3b55b2cb904a9e17259b3184921f8892ec0b b6cc11201a6ee97065d832ea16dc2596d1ea0803aa763b2a244974945e66b9cd
GET /watch.1353243151334.js?dev=e&key=184a33f08d32329eeff0be4aa5e56939&kw=%5B%22vcs%22%2C%22zp81%22%2C%22-%22%2C%22funcrot%22%5D&pst=1726925113&refer=https%3A%2F%2Ffuncrot.icu%2Fvideo%2F%3Fid%3D1326%26part%3Dometv&res=14.2071&rmtc=t&shu=1539432ebd0378adc2d3876ff318e3b71789b1037ee77b2d259104cf385cea92cd704adada97584bafbb849549521a7d359eb44552dda8250499ff101d29d15da58b152e90450a25b9605e2e9d7f1a3672d0f3bdfb0b2c3120af0b825b239c&tz=0&uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1 HTTP/1.1
Host: bereaveencodefestive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
Referer: https://funcrot.icu/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22526023; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMjUyNjAyMywiayI6IjE4NGEzM2YwOGQzMjMyOWVlZmYwYmU0YWE1ZTU2OTM5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozNjA4MDI0LCJwaWQiOjE2OTMxNjUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6MzIsInB0Ijo0LCJwayI6ImQ1Y2o0ajFidyIsImNwa3MiOnsiMjgiOiI3YzZjM2Q5YmFmMjMxNDYwM2E2NWYwZWFiNTEzYjhmZiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8_aWQ9MTMyNlx1MDAyNnBhcnQ9b21ldHYiLCJhciI6W119fQ.qSgwW2sTeBsgV_ElM4Lejd0oESmFbpgVoq3Wf_4NADQ; uid_id2=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93:3:1; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 21 Sep 2024 13:24:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://funcrot.icu
Access-Control-Allow-Origin: https://funcrot.icu
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93:3:1; expires=Sat, 28 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
pdhtkv32=true; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
uncs32=1; expires=Sun, 22 Sep 2024 13:24:13 GMT; path=/; secure; SameSite=None
Host: bereaveencodefestive.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: ecbe85809664a1b9cd22e671396a18da
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| jcdn.tsyndicate.com/ed85951b219e49ffa74b7b74a3c8089c.js | 45.133.44.70 | 200 OK | 2 B |
URL GET HTTP/2jcdn.tsyndicate.com/ed85951b219e49ffa74b7b74a3c8089c.js IP45.133.44.70:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerLet's Encrypt Subjectjcdn.tsyndicate.com Fingerprint39:E9:84:E3:8A:DA:AA:12:04:99:B2:6B:C1:9F:EE:B7:FF:B5:D9:F2 ValidityThu, 05 Sep 2024 13:48:10 GMT - Wed, 04 Dec 2024 13:48:09 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /ed85951b219e49ffa74b7b74a3c8089c.js HTTP/1.1
Host: jcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 2
server: nginx
x-request-id: 991f5269-9edd-464c-acd5-28407290acbd
strict-transport-security: max-age=31536000 always
expires: Sat, 21 Sep 2024 13:29:13 GMT
cache-control: max-age=300
vary: Accept-Encoding
x-proxy-cache: HIT
x-cdn-host-id: ds9201
X-Firefox-Spdy: h2
|
|
| cdn.storageimagedisplay.com/cti/f1/f2/88/f1f28877ba9122ab4b5463fa43ec46dd/1708342121.png | 45.133.44.2 | 200 OK | 28 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/cti/f1/f2/88/f1f28877ba9122ab4b5463fa43ec46dd/1708342121.png IP45.133.44.2:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 320 x 50, 8-bit/color RGBA, non-interlaced Hash7e89f12d8adf6d76e966624470686d31 c8e384ba3c95b57d37432aed312058a908c8b693 f3bc44d567fc7c6968d7a0ae63e55d328d117f496b7f5e6cc83b06539d4354b4
GET /cti/f1/f2/88/f1f28877ba9122ab4b5463fa43ec46dd/1708342121.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: image/png
content-length: 27675
server: nginx/1.21.6
last-modified: Mon, 19 Feb 2024 11:28:49 GMT
etag: "65d33b71-6c1b"
expires: Mon, 23 Sep 2024 13:24:13 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.storageimagedisplay.com/cti/7c/2a/07/7c2a072d031566f2d29f3fa641019d18/1708341570.png | 45.133.44.2 | 200 OK | 32 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/cti/7c/2a/07/7c2a072d031566f2d29f3fa641019d18/1708341570.png IP45.133.44.2:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 320 x 50, 8-bit/color RGBA, non-interlaced Hash73ca45160d0cffb6768adf7f0b06d4a2 934f350117d4fc0976d8c79ba52dc1544f2f0552 886fe4ab456a6c1f66b8255bb14f93718cc96296d9201440307f9c79fa87571a
GET /cti/7c/2a/07/7c2a072d031566f2d29f3fa641019d18/1708341570.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: image/png
content-length: 32485
server: nginx/1.21.6
last-modified: Mon, 19 Feb 2024 11:19:38 GMT
etag: "65d3394a-7ee5"
expires: Mon, 23 Sep 2024 13:24:13 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/img/logo-s.png | 104.26.6.74 | 200 OK | 1.9 kB |
URL GET HTTP/2i.doodcdn.co/img/logo-s.png IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash8211fb3cc137d3e1c1e399b86476f951 136d8ef228959aa0cee12e5ed463b6e6a4fcf720 2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Sun, 20 Oct 2024 16:56:55 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 22258
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYSrufU23BksPzAdkQrtbkyOip%2BmVgX3xiWCYeqy4Ag9UEud5MdtpPzrWcCKRnncKVVATFypDTEhwYP3%2FRe3X0uky%2B8luWa7T%2Bx6CVPCpj8fgYaOi%2FtOf8Hn%2BB%2FQ%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd32ab256c6-OSL
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/get_slides/148/xy0vubz9rlpuugvc.jpg | 104.26.6.74 | 200 OK | 34 kB |
URL GET HTTP/2i.doodcdn.co/get_slides/148/xy0vubz9rlpuugvc.jpg IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
Hash845a793fe11985698d3c4c17b478263a 22abda59e7770e3dd8da9366fde36531616ae942 e058f3c951d0a10ecfac255b9325bec68914d0cd13a0e77c4ded3bd5ea3c135d
GET /get_slides/148/xy0vubz9rlpuugvc.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Fri, 20 Sep 2024 22:08:26 GMT
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XURh98gz1rtv6NA3WN7J7EgkhrpC4JUBfnW2s9a1FqaBKcStXmUZevEMJoIgbmtA8ghH1qZkKIQ9E6wGf%2FRLjYH8%2B1WC0fFKaTzaTfbfaQjsTpxEJOKfxuxjrroQzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fd32ab356c6-OSL
X-Firefox-Spdy: h2
|
|
| cdn.tsyndicate.com/sdk/v1/puengine.js | 45.133.44.70 | 200 OK | 90 kB |
URL GET HTTP/2cdn.tsyndicate.com/sdk/v1/puengine.js IP45.133.44.70:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerLet's Encrypt Subjectcdn.tsyndicate.com FingerprintB6:50:C8:E8:0C:BA:74:37:F9:B3:2D:B2:3D:DA:FE:D6:EF:A8:D7:67 ValidityWed, 07 Aug 2024 03:04:18 GMT - Tue, 05 Nov 2024 03:04:17 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators Hashdd5e3d608cc7831780050c847b3b249e ae5df44b84829faa0cbf2614c5b3c23d1901063b 9f8cc0fa666cd6911977e73e8ea15747da46c0e2fed880b774d974aeec94fa50
GET /sdk/v1/puengine.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 89731
server: nginx
last-modified: Mon, 15 Jan 2024 13:51:12 GMT
etag: "65a53850-15e83"
x-robots-tag: noindex, nofollow
cache-control: max-age=172800
expires: Mon, 23 Sep 2024 13:24:14 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
x-cdn-host-id: ds9893
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashfa3b0e9260d87a0d0fe29de97b06c8e9 ceb603cff07ad691c6b5df6559fd7dbbbb081e52 a1cc083482b50e147fcd7e0cc01a033d844f9aab48e0f8c4de6f770d7bd301a1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Sep 2024 13:24:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| funcrot.icu/favicon.ico | 45.13.133.245 | 200 OK | 1.2 kB |
IP45.13.133.245:443 ASN#47583 Hostinger International Limited
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectfuncrot.icu Fingerprint42:DB:B2:D0:7A:B0:6B:B2:13:0D:9F:67:BD:F6:1D:51:0A:29:BD:5A ValidityThu, 08 Aug 2024 09:49:33 GMT - Wed, 06 Nov 2024 09:49:32 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashc9a06f003b312fd1d3b466091fb6e2aa 3742471e7d51b3a62754dedc0dab785533ad3f3a db6e625f6cb3547a7c1285a1654486729bb4665646dcf5148f7c6e040a0cacca
GET /favicon.ico HTTP/1.1
Host: funcrot.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/video/?id=1326&part=ometv
Cookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ACzeQwAAAAAAAAAC%22%2C%22CAIFRT%22%3A%22ACzeQwAAAABm76RQ%22%2C%22MTIFRQ%22%3A%22AD4XLgAAAAAAAAABAD4XLQAAAAAAAAAB%22%2C%22MTIFRT%22%3A%22AD4XLgAAAABm76RQAD4XLQAAAABm76RQ%22%7D; dom3ic8zudi28v8lr6fgphwffqoz0j6c=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93%3A3%3A1; bnState_2008332={"impressions":2,"delayStarted":0}; pp_idelay_7c6c3d9baf2314603a65f0eab513b8ff=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 28 Sep 2024 13:24:14 GMT
content-type: image/x-icon
last-modified: Sun, 11 Aug 2024 04:07:51 GMT
accept-ranges: bytes
content-length: 1150
date: Sat, 21 Sep 2024 13:24:13 GMT
server: LiteSpeed
platform: hostinger
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP64.233.162.84:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:XIB2xgtD3vzMUgIgodb7vrOroo3Hrw:SGgdvoUVF4_-AKXe; Expires=Mon, 21-Sep-2026 13:24:14 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 21 Sep 2024 13:24:14 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqczDU4at3WG5KKz0W77ATMNf4RWEdFb-vtD0LoDnIXT85urjY7AR_lEdbk-f7ldcD68yl3u
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-VFVpOE6qdUl3RQtHIUTzxw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-solid-900.woff2 | 172.67.139.119 | 200 OK | 0 B |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-solid-900.woff2 IP172.67.139.119:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectka-f.fontawesome.com FingerprintB8:0E:B4:BD:5D:51:E9:6A:20:8E:72:31:7F:AF:18:85:61:54:95:94 ValidityThu, 29 Aug 2024 15:54:38 GMT - Wed, 27 Nov 2024 15:54:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /releases/v6.6.0/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: font/woff2
content-length: 157192
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:44:08 GMT
etag: "76cf3ff0dbd23dd4504e2089f0df4acb"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LA5tTuLf520BlFzbVZJqIuCBAbKEXCHTwI-jJofb-7_SvUke8hJ5FQ==
age: 577298
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1FFxHTSrKmozsoPvEgyhD1sAHG8y%2FQk8iUp2n92QlOo%2Bpsx%2FCqIeOLzGfCnmauWIxihAui2VjQlKrfft0Xr8%2F0jdXaRX5W2E1i0Qw3v%2FcRIHOI2s%2F4LakRyFoS1G7e6SGNHkqYQuxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fcffe8bb527-OSL
X-Firefox-Spdy: h2
|
|
| du0pud0sdlmzf.cloudfront.net/gVHh1WjE3Fxs8DiAREWcIZEBFbwZyCAc/V2kcGjVVehQcfFsnFxsqDBYhOD5lDApDFGkwKlMuSzBFRXxdNRYSZxcxFhZnAHIZETgMYF4BKl4/RQcjXyQRHDRDPQBTL1BpFRogWDgUFH8DEk1bahRmSF0iAGVdRhgUZkgZM18hAFBoASxAQwUHYF1GGBRmSA-csFGc5TGwfZFFQaAEzHRYxXnFKM2gBZUhFawFlXUdqVz0KEDxeLF1HHAhiVkV8RGlJ | 143.204.42.89 | 200 OK | 605 B |
URL GET HTTP/2du0pud0sdlmzf.cloudfront.net/gVHh1WjE3Fxs8DiAREWcIZEBFbwZyCAc/V2kcGjVVehQcfFsnFxsqDBYhOD5lDApDFGkwKlMuSzBFRXxdNRYSZxcxFhZnAHIZETgMYF4BKl4/RQcjXyQRHDRDPQBTL1BpFRogWDgUFH8DEk1bahRmSF0iAGVdRhgUZkgZM18hAFBoASxAQwUHYF1GGBRmSA-csFGc5TGwfZFFQaAEzHRYxXnFKM2gBZUhFawFlXUdqVz0KEDxeLF1HHAhiVkV8RGlJ IP143.204.42.89:443
Requested byhttps://mopiwhoisqui.com/alZwaTULNBMECgtrEk9AGDpNTAcsc0IvUR9mABxRWiUUBVgQMF4KWQUjFA9HBTgER1sPIlVbcw0AOAEEPTw1WnMSJUgtXCsENT5WIww1K3MIISoQdis1VVtzPGQbCnIAACYMXTs1Fi9GBBAIGkQuFCkBei5jHC10GhI2Ll4dHRwkQDksMi9nMi4UJ2czBSoRVhIQGDNbKx45M3A+MT0wc14UOwUBT2Q2O2QJPCgQZDgeNDtxOgcyPXlbFAAvZwUxJy1SPxA4UXEvPUELVAIEHTpzWj8xLmMOBBgOYDA9FzN4W24YKHMoOTE6TSsHBzx9MxBBLnIoBB06dEc1Ay9yCWMkLkIMDDYvZAsXNRN9OA8IMVssHT1bUigMJQFzCyE2BW0/MgE/T1odNS1NDxo2WH0iFxgAYwEASDtyBhxWA0YFOABUdzMbFD1tGGA+MVE4 CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (872), with no line terminators Hash3e7fa64e15ef6bfc290523a57a2d91d0 6e43c7d70c56faf268cdd3ecea96e8d210524c7a d2b03c35ae1d56bae4eb171466a3f46fdcaa1aa503d81f1f17152d10df479fbe
GET /gVHh1WjE3Fxs8DiAREWcIZEBFbwZyCAc/V2kcGjVVehQcfFsnFxsqDBYhOD5lDApDFGkwKlMuSzBFRXxdNRYSZxcxFhZnAHIZETgMYF4BKl4/RQcjXyQRHDRDPQBTL1BpFRogWDgUFH8DEk1bahRmSF0iAGVdRhgUZkgZM18hAFBoASxAQwUHYF1GGBRmSA-csFGc5TGwfZFFQaAEzHRYxXnFKM2gBZUhFawFlXUdqVz0KEDxeLF1HHAhiVkV8RGlJ HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mopiwhoisqui.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 605
date: Sat, 21 Sep 2024 13:24:14 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EnKJLIvo7Ft2i_5QbitI4jctNCSE7fhQTW6Gb5ZszDuLeVmZrFflbg==
X-Firefox-Spdy: h2
|
|
| blurbreimbursetrombone.com/solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=glL741ZVmNzJTIwWlA4MSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=07MD1EQaHR0cHM6Ly9mdW5jcm90LmljdS8&ix=0&x=801&y=801&md=0&psu=PRCkQpKaHR0cHM6Ly9kb29kLmxpL2UvY3BjMGIydDM3MTBm&afid=6868575201358336&eclog=0&seu=gort2HBaHR0cHM6Ly9mdW5jcm90LmljdS8&snc=0&ssc=0&vp=1&im=1&cs=5 | 94.242.247.30 | 200 OK | 43 B |
URL POST HTTP/2blurbreimbursetrombone.com/solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=glL741ZVmNzJTIwWlA4MSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=07MD1EQaHR0cHM6Ly9mdW5jcm90LmljdS8&ix=0&x=801&y=801&md=0&psu=PRCkQpKaHR0cHM6Ly9kb29kLmxpL2UvY3BjMGIydDM3MTBm&afid=6868575201358336&eclog=0&seu=gort2HBaHR0cHM6Ly9mdW5jcm90LmljdS8&snc=0&ssc=0&vp=1&im=1&cs=5 IP94.242.247.30:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerBuypass AS-983163327 Subject Fingerprint5E:17:C2:AF:84:5F:53:B8:A0:BC:63:78:32:E2:71:A2:73:3F:EE:06 ValidityFri, 20 Sep 2024 14:28:16 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=glL741ZVmNzJTIwWlA4MSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=07MD1EQaHR0cHM6Ly9mdW5jcm90LmljdS8&ix=0&x=801&y=801&md=0&psu=PRCkQpKaHR0cHM6Ly9kb29kLmxpL2UvY3BjMGIydDM3MTBm&afid=6868575201358336&eclog=0&seu=gort2HBaHR0cHM6Ly9mdW5jcm90LmljdS8&snc=0&ssc=0&vp=1&im=1&cs=5 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: UID=240921082446a286ee461b4c708fcb8f2b9e; Path=/; Expires=Sat, 25 Oct 2025 13:24:14 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Sat, 25 Oct 2025 13:24:14 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| dood.li/pass_md5/172008913-91-90-1726925052-39cb017bd6434226bf903cde431f381e/1meyxk1dab2oeo5cdtnecji7 | 104.26.8.173 | 200 OK | 16 kB |
URL GET HTTP/2dood.li/pass_md5/172008913-91-90-1726925052-39cb017bd6434226bf903cde431f381e/1meyxk1dab2oeo5cdtnecji7 IP104.26.8.173:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdood.li Fingerprint64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C ValidityFri, 26 Jul 2024 23:34:22 GMT - Thu, 24 Oct 2024 23:34:21 GMT
File typeASCII text, with no line terminators Hash21c0a1c08f6937b9a6d27b2f4eadc4f9 bb35778c5b10f773c7c0b295dcaae0abbda3daea 074ca052d7381f51c848714fe79ee1966558c1542e268fae63fbd9334242b180
GET /pass_md5/172008913-91-90-1726925052-39cb017bd6434226bf903cde431f381e/1meyxk1dab2oeo5cdtnecji7 HTTP/1.1
Host: dood.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://dood.li/e/cpc0b2t3710f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4os5xESNKNyxR78n%2FcI9vYm%2BCQM%2FE11epqa3%2Fp20rjOl4cKT4X9vIkPuus%2BEIyskL3hMamNJDajW%2BUiwpprva6%2BXJ7oEY7janJO%2FGefsGiSAt4dUS%2F4tQWw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fcf6ec20b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/popunder.gif | 104.21.82.170 | | 58 B |
URL GET eatmenttogeth.com/popunder.gif IP104.21.82.170:0
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 343930
last-modified: Tue, 17 Sep 2024 13:52:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B5mTAyHrFwMI4X5lvS6OgtXpHIQ5SaF7gOWy2G%2FGIepZtBDeBJAV3Zu%2Fs8AELd97q7ZbXQuUZkYh129eDNTCOMYiZot17yPUxa5LxpJTkQAJbqcpFX65N%2B5oYXeXbWHYgPo7dQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fd54c3356b4-OSL
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash3617c34ac4e7cfa2e31de43585bdfb61 b2311cc14bd680f50401f88e26bdda81c405c28b 78eddf1382477f2b443b290cba66590c90cc0fb9bf6ee8f457128924a4d47578
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Sep 2024 13:24:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| blurbreimbursetrombone.com/get/1941940?zoneid=1941940&jp=_clltnres4lmi5baudk57ne&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=glL741ZVmNzJTIwWlA4MSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=07MD1EQaHR0cHM6Ly9mdW5jcm90LmljdS8&ix=0&x=801&y=801&md=0&psu=PRCkQpKaHR0cHM6Ly9kb29kLmxpL2UvY3BjMGIydDM3MTBm&afid=6868575201358336&eclog=0&seu=gort2HBaHR0cHM6Ly9mdW5jcm90LmljdS8&snc=0&ssc=0&vp=1&im=1&cs=5&uf=0 | 94.242.247.30 | 200 OK | 2.1 kB |
URL GET HTTP/2blurbreimbursetrombone.com/get/1941940?zoneid=1941940&jp=_clltnres4lmi5baudk57ne&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=glL741ZVmNzJTIwWlA4MSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=07MD1EQaHR0cHM6Ly9mdW5jcm90LmljdS8&ix=0&x=801&y=801&md=0&psu=PRCkQpKaHR0cHM6Ly9kb29kLmxpL2UvY3BjMGIydDM3MTBm&afid=6868575201358336&eclog=0&seu=gort2HBaHR0cHM6Ly9mdW5jcm90LmljdS8&snc=0&ssc=0&vp=1&im=1&cs=5&uf=0 IP94.242.247.30:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerBuypass AS-983163327 Subject Fingerprint5E:17:C2:AF:84:5F:53:B8:A0:BC:63:78:32:E2:71:A2:73:3F:EE:06 ValidityFri, 20 Sep 2024 14:28:16 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typeHTML document, ASCII text, with very long lines (3064) Hash619dbef6e7e8bf13b001543b180e3066 357731fc28df13f9de0bb2236cce123ed3165355 c9dc482163fe6b36b97a6f8de83b67030599168a54c85d53d4f607450d890153
GET /get/1941940?zoneid=1941940&jp=_clltnres4lmi5baudk57ne&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=glL741ZVmNzJTIwWlA4MSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=07MD1EQaHR0cHM6Ly9mdW5jcm90LmljdS8&ix=0&x=801&y=801&md=0&psu=PRCkQpKaHR0cHM6Ly9kb29kLmxpL2UvY3BjMGIydDM3MTBm&afid=6868575201358336&eclog=0&seu=gort2HBaHR0cHM6Ly9mdW5jcm90LmljdS8&snc=0&ssc=0&vp=1&im=1&cs=5&uf=0 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=24092108246db8b4f8d6c44ec9930006c0b9; Path=/; Expires=Sat, 25 Oct 2025 13:24:14 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Sat, 25 Oct 2025 13:24:14 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqeCwL9nDjlXPf32XvsBVhgPCCbVn8vi6dZP-fmS5UNHyN5eoRvtSyHp7E2xBVOyj6XWxlEh | 64.233.162.84 | 302 Found | 421 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqeCwL9nDjlXPf32XvsBVhgPCCbVn8vi6dZP-fmS5UNHyN5eoRvtSyHp7E2xBVOyj6XWxlEh IP64.233.162.84:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
File typeHTML document, ASCII text, with very long lines (395) Hash90afd79015472f12371cea7feb3824f7 6f11a02731f717c87c68934252d45eb287a14dd6 614ac5351b020479624fbdbb1ef17dabe0bfaae24629965287df9dbf44e06fad
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqeCwL9nDjlXPf32XvsBVhgPCCbVn8vi6dZP-fmS5UNHyN5eoRvtSyHp7E2xBVOyj6XWxlEh HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:y8_i9n_jqgmwHzrrZFzRuuA-cLSD5A:r_2bonEzL5EKgsjB;Path=/;Expires=Mon, 21-Sep-2026 13:24:14 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 21 Sep 2024 13:24:14 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqcu5N8AGKCaGA7grAI1a22pbiSRWHK03GZAFAhAdQmnfvMl2l2cVBZJDoQklI8-GrguZeCuYg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2077191848%3A1726925054441949&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-m0kFtrwbL2AOOy6x4ITh9A' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 421
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/NG1zcTkbUhACBHk6PkRaYAYxJ15ALDAWe2UuGDRydysAMGplVVUFUFBQSkAAAlpAV0ldCU5CCxIeBxBNQR5OQwkEWlUYV1ICTkMfQlBDXwAaX11HH0FQQldNRAwUTAgSHQcFVQlcREMPDV9GQQwAXkZJ | 104.21.82.170 | 204 No Content | 0 B |
URL POST HTTP/2eatmenttogeth.com/NG1zcTkbUhACBHk6PkRaYAYxJ15ALDAWe2UuGDRydysAMGplVVUFUFBQSkAAAlpAV0ldCU5CCxIeBxBNQR5OQwkEWlUYV1ICTkMfQlBDXwAaX11HH0FQQldNRAwUTAgSHQcFVQlcREMPDV9GQQwAXkZJ IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /NG1zcTkbUhACBHk6PkRaYAYxJ15ALDAWe2UuGDRydysAMGplVVUFUFBQSkAAAlpAV0ldCU5CCxIeBxBNQR5OQwkEWlUYV1ICTkMfQlBDXwAaX11HH0FQQldNRAwUTAgSHQcFVQlcREMPDV9GQQwAXkZJ HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:14 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5qtHTCz83r3Cs%2B8wAJs23EGqK%2F7eSDuN0vBjeKPSa%2B1lxK9tlftyLbkQqu95NGPiqTSeezlbmGUeYZ0IPfUv%2FdIPMnk%2BkFkqAvIGI%2FwrwIMJLHANQ0R10N85EiDjMQ3fgRQC4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd64e0e56b4-OSL
X-Firefox-Spdy: h2
|
|
| getrunkhomuto.info/multi?cs=NkRzeEIAd0VPdwVxREt7AnJCSno&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=1&tid=901258&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fdood.li%2Fe%2Fcpc0b2t3710f&osr=funcrot.icu&jst=8&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_Gsbj=1726925054355&crc=1 | 3.164.230.5 | 200 OK | 2.0 kB |
URL GET HTTP/2getrunkhomuto.info/multi?cs=NkRzeEIAd0VPdwVxREt7AnJCSno&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=1&tid=901258&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fdood.li%2Fe%2Fcpc0b2t3710f&osr=funcrot.icu&jst=8&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_Gsbj=1726925054355&crc=1 IP3.164.230.5:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerAmazon Subjectgetrunkhomuto.info Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (3899), with no line terminators Hashc167d37ab715c493e6000c5901393745 fbac3291671f9ff434d9f06d70cb528263f4c716 cd6e033d1c7d47db1f21c35ad8f06c0f1f71f2d9e24ef3eb10a619dd7d97551d
GET /multi?cs=NkRzeEIAd0VPdwVxREt7AnJCSno&abt=0&red=1&sm=76&k=&v=1.0.60.4&sts=0&prn=0&emb=1&tid=901258&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fdood.li%2Fe%2Fcpc0b2t3710f&osr=funcrot.icu&jst=8&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_Gsbj=1726925054355&crc=1 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1959
date: Sat, 21 Sep 2024 13:24:14 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://dood.li
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=c5424aab-4504-47c5-85c2-b255a3d9cfc1
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 0369688214835f42c0769e35bb5bc592.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: EJzTHkzb6QufM1Hy_d3zxKIvcfX5eSifHeyObZSSEYNYRHPJFlCbKw==
X-Firefox-Spdy: h2
|
|
| hologydenoughta.info/floater?cs=R2ZGUWJ3U3RgUXZVdWFRfl5%2FaVQ&abt=0&red=1&sm=83&k=&v=0.9.2.6&sts=0&prn=0&emb=1&tid=919673&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fdood.li%2Fe%2Fcpc0b2t3710f&osr=funcrot.icu&jst=8&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_e7aG=1726925054361&crc=1 | 18.165.122.103 | 200 OK | 2.2 kB |
URL GET HTTP/2hologydenoughta.info/floater?cs=R2ZGUWJ3U3RgUXZVdWFRfl5%2FaVQ&abt=0&red=1&sm=83&k=&v=0.9.2.6&sts=0&prn=0&emb=1&tid=919673&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fdood.li%2Fe%2Fcpc0b2t3710f&osr=funcrot.icu&jst=8&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_e7aG=1726925054361&crc=1 IP18.165.122.103:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerAmazon Subjecthologydenoughta.info Fingerprint0D:80:D6:B1:9E:48:8F:53:62:F6:0F:7C:D1:1A:1B:E7:D1:CA:44:21 ValidityWed, 05 Jun 2024 00:00:00 GMT - Fri, 04 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (4066), with no line terminators Hasha034868f8228541f1d5188b02255ffbf 1e50fe3ada976759aff4b5e8a878bec85d5ce9fd 6d818a3d4c2ee98f34d5e4e51a00b6178322ac86fa49469de686a0ed5b7e0de6
GET /floater?cs=R2ZGUWJ3U3RgUXZVdWFRfl5%2FaVQ&abt=0&red=1&sm=83&k=&v=0.9.2.6&sts=0&prn=0&emb=1&tid=919673&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fdood.li%2Fe%2Fcpc0b2t3710f&osr=funcrot.icu&jst=8&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_e7aG=1726925054361&crc=1 HTTP/1.1
Host: hologydenoughta.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2220
date: Sat, 21 Sep 2024 13:24:14 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://dood.li
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=9425e24d-923f-40f1-b463-d41657cf0eb7
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a3e8473f1ae4b9f43e92c95af9370bbc.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: mgx02WsvafqPcZPmMjIBPr7XY5ikVRTG34ONwFZzPisDBDF6VNYNqQ==
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.76.249 | | 504 B |
IP23.36.76.249:0 ASN#20940 Akamai International B.V.
Hashbb307d7c0c57a407717baa7184fb45a0 ac7a21fd76605a41cce2d01026adbd2367d795f5 16795dcee5f37670c992f10da565dadd378b9980a8308fd11212b187e3457bd5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "16795DCEE5F37670C992F10DA565DADD378B9980A8308FD11212B187E3457BD5"
Last-Modified: Fri, 20 Sep 2024 18:01:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15373
Expires: Sat, 21 Sep 2024 17:40:28 GMT
Date: Sat, 21 Sep 2024 13:24:15 GMT
Connection: keep-alive
|
|
| ukankingwithea.com/ | 172.67.192.190 | 200 OK | 840 B |
IP172.67.192.190:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
File typeASCII text, with no line terminators Hash6971e8b0fa84017dd8a358a385c01904 818cd60988699f1b7ca5b364be350cf2e1ce5e83 af41965f9e3cb3e62fac99b189b1f114838006ceeccebb6a738c3eae715f9d05
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: text/plain
set-cookie: csu=2168568311703450@1@1726925054; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Kt%2BWbdAQDhlbNOkHSpZe4zwrVAEj6Mo5RvgAhG1V4KjqOxQK7GvH%2FWJ77gxn5dCj4%2BAa6FWzZG%2B5yzBEGRFaNXGmPxAL9WTk%2BmPz%2FHh%2FM0IAHQ%2B8A84kEGK1NCP8MVyG28A%2B9Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd578f956b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/M3dnbjYcSAQdC2JELQN4AQcdPAdiMDA2fHEhNgpsVhwXCHICAEEaX1dKXl8PBUBUSEZaE1pdBBUEEw9CRgRaXAYDQkEHWFUYWlwGA0FXXgcARUJZdVsDEx5FFkQmSwR1UlUoTl4bSQ9SQBIVGEJXFh5AVVwaQlxwRx8SA1RdFg4CEwAxDksFdzoXHmJdOzAJR2IyOF4TAUEXSwV3RlBcAApFUl4DB1lVXAYLRlJLBAUeCglCFkQjB1VcGUJZdQVDXlkEAihSXgYLRlNYEwQ0VV4BBUFTWQcKQ1VdAwJAXlcHAVERUwYdTklcGAVRElMEAkFfWwALRFZfAQNEU1sGFQMXD1EORkEeQkcbWl8BAUFeXAMDQlFeBAo | 104.21.82.170 | 204 No Content | 0 B |
URL POST HTTP/2eatmenttogeth.com/M3dnbjYcSAQdC2JELQN4AQcdPAdiMDA2fHEhNgpsVhwXCHICAEEaX1dKXl8PBUBUSEZaE1pdBBUEEw9CRgRaXAYDQkEHWFUYWlwGA0FXXgcARUJZdVsDEx5FFkQmSwR1UlUoTl4bSQ9SQBIVGEJXFh5AVVwaQlxwRx8SA1RdFg4CEwAxDksFdzoXHmJdOzAJR2IyOF4TAUEXSwV3RlBcAApFUl4DB1lVXAYLRlJLBAUeCglCFkQjB1VcGUJZdQVDXlkEAihSXgYLRlNYEwQ0VV4BBUFTWQcKQ1VdAwJAXlcHAVERUwYdTklcGAVRElMEAkFfWwALRFZfAQNEU1sGFQMXD1EORkEeQkcbWl8BAUFeXAMDQlFeBAo IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /M3dnbjYcSAQdC2JELQN4AQcdPAdiMDA2fHEhNgpsVhwXCHICAEEaX1dKXl8PBUBUSEZaE1pdBBUEEw9CRgRaXAYDQkEHWFUYWlwGA0FXXgcARUJZdVsDEx5FFkQmSwR1UlUoTl4bSQ9SQBIVGEJXFh5AVVwaQlxwRx8SA1RdFg4CEwAxDksFdzoXHmJdOzAJR2IyOF4TAUEXSwV3RlBcAApFUl4DB1lVXAYLRlJLBAUeCglCFkQjB1VcGUJZdQVDXlkEAihSXgYLRlNYEwQ0VV4BBUFTWQcKQ1VdAwJAXlcHAVERUwYdTklcGAVRElMEAkFfWwALRFZfAQNEU1sGFQMXD1EORkEeQkcbWl8BAUFeXAMDQlFeBAo HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:16 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gMpLh4y4y%2Fo8WopT0%2BT1sCGuGPNvxH3yi54yDuHgS9bjFWf%2F2pp1M620HPk3C2mQ9so1eZNRD5P1HuSMvqx00Qz%2BdmLBDSK4fwgyUU19AezX%2FHKN4i2EJCvmmW%2BdP6pwGPv76A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fe03f6556b4-OSL
X-Firefox-Spdy: h2
|
|
| eatmenttogeth.com/SGt2a0lnVBUYdCw/PDocJDkwKXsCASxbGAoyRCEnHCoGGyglIlAfICxWT1pwflxFTTkhD0tYe24YAgo9PRhLWXl4XlACJy4ES1l5eF1GW3B+XFNcCiAfAhs6bVg3TnsOTkQtMSUHWAYsLAIXEyogChgMLGYIGU57Dh8eHiQqBRcCJW1YMAJsey8BDw0uBC4OK3gMFTR5bVlAAiQvH1NYDSEIGQVsfygYHiUkTkEoe3hcQF19f1pPX3t7XkdccHFaRE0/dVtYUmd6RUBNPHVZR11xfV1OWHh5XEZYfX1bUB85KQxLWm84HwIHdHlcRF1wel5GXn94X0I | 104.21.82.170 | 204 No Content | 0 B |
URL POST HTTP/2eatmenttogeth.com/SGt2a0lnVBUYdCw/PDocJDkwKXsCASxbGAoyRCEnHCoGGyglIlAfICxWT1pwflxFTTkhD0tYe24YAgo9PRhLWXl4XlACJy4ES1l5eF1GW3B+XFNcCiAfAhs6bVg3TnsOTkQtMSUHWAYsLAIXEyogChgMLGYIGU57Dh8eHiQqBRcCJW1YMAJsey8BDw0uBC4OK3gMFTR5bVlAAiQvH1NYDSEIGQVsfygYHiUkTkEoe3hcQF19f1pPX3t7XkdccHFaRE0/dVtYUmd6RUBNPHVZR11xfV1OWHh5XEZYfX1bUB85KQxLWm84HwIHdHlcRF1wel5GXn94X0I IP104.21.82.170:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjecteatmenttogeth.com Fingerprint27:16:25:D1:F2:85:76:5F:43:0D:4F:AD:DE:48:BA:F1:EC:73:93:FE ValidityFri, 06 Sep 2024 09:33:31 GMT - Thu, 05 Dec 2024 09:33:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /SGt2a0lnVBUYdCw/PDocJDkwKXsCASxbGAoyRCEnHCoGGyglIlAfICxWT1pwflxFTTkhD0tYe24YAgo9PRhLWXl4XlACJy4ES1l5eF1GW3B+XFNcCiAfAhs6bVg3TnsOTkQtMSUHWAYsLAIXEyogChgMLGYIGU57Dh8eHiQqBRcCJW1YMAJsey8BDw0uBC4OK3gMFTR5bVlAAiQvH1NYDSEIGQVsfygYHiUkTkEoe3hcQF19f1pPX3t7XkdccHFaRE0/dVtYUmd6RUBNPHVZR11xfV1OWHh5XEZYfX1bUB85KQxLWm84HwIHdHlcRF1wel5GXn94X0I HTTP/1.1
Host: eatmenttogeth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Sat, 21 Sep 2024 13:24:16 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HY1%2BqZ0ffhR0YuVYDPXleaKUGCYep%2F3otd6mstGgjSK6wuaSDgxkvgFVd88759RxtQhwnkWIfR3Jrg0MbGJ0ieOp8TUF8NaV1bpjbdFwHtJQ3wuQHHI34pkDvn9v7lLiqA%2F%2BBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fe06fb856b4-OSL
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash9eef4c3350cd6d2f77156fb537761f8e 45f9270e9477a1f7a4068b57329e18e2b40ebeaf d5713d203fa5e2ad005d09d9e2324afc6f9c4d61ead8f19f9a0708a7e3a2fbde
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D5713D203FA5E2AD005D09D9E2324AFC6F9C4D61EAD8F19F9A0708A7E3A2FBDE"
Last-Modified: Thu, 19 Sep 2024 04:09:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3144
Expires: Sat, 21 Sep 2024 14:16:40 GMT
Date: Sat, 21 Sep 2024 13:24:16 GMT
Connection: keep-alive
|
|
| xml.adservtday.com/thumbnail?i=MppTnLWgqQE_0&p=1726925054.220815&imgt=icon | 198.134.116.29 | | 0 B |
URL GET xml.adservtday.com/thumbnail?i=MppTnLWgqQE_0&p=1726925054.220815&imgt=icon IP198.134.116.29:0 ASN#27257 WEBAIR-INTERNET
Requested byhttps://dood.li/e/cpc0b2t3710f
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=MppTnLWgqQE_0&p=1726925054.220815&imgt=icon HTTP/1.1
Host: xml.adservtday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 21 Sep 2024 13:24:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.servingserved.com/n337/ad/250x250_hqCCg8Cm.png
|
|
| static.servingserved.com/n337/ad/250x250_hqCCg8Cm.png | 95.101.11.33 | 200 OK | 30 kB |
URL GET HTTP/1.1static.servingserved.com/n337/ad/250x250_hqCCg8Cm.png IP95.101.11.33:443 ASN#20940 Akamai International B.V.
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerLet's Encrypt Subjectstatic.servingserved.com Fingerprint2F:48:90:8D:E8:9A:AC:5E:8B:3E:BE:CB:2C:F6:6C:83:64:F5:BA:7C ValidityFri, 02 Aug 2024 17:32:20 GMT - Thu, 31 Oct 2024 17:32:19 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash1133d3aaa0866ea57a5b44ecccd3283b 96417ace0d02687e054a2fba6c9cb197162eb0ea 62aee0fd8036247bfc2fca571d6e6328621f8639e4d939807cb555111f6bd039
GET /n337/ad/250x250_hqCCg8Cm.png HTTP/1.1
Host: static.servingserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 29780
Last-Modified: Tue, 11 Apr 2023 13:58:09 GMT
ETag: "64356771-7454"
Accept-Ranges: bytes
Cache-Control: max-age=51611
Expires: Sun, 22 Sep 2024 03:44:27 GMT
Date: Sat, 21 Sep 2024 13:24:16 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
|
|
| xml.mediaxchange.co/thumbnail?i=wdDfoXeb0gc_0&imgt=icon | 174.137.133.17 | | 0 B |
URL GET xml.mediaxchange.co/thumbnail?i=wdDfoXeb0gc_0&imgt=icon IP174.137.133.17:0 ASN#27257 WEBAIR-INTERNET
Requested byhttps://dood.li/e/cpc0b2t3710f
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=wdDfoXeb0gc_0&imgt=icon HTTP/1.1
Host: xml.mediaxchange.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 21 Sep 2024 13:24:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://c.mgid.com/c?pv=2&v=0|0|0|eZIpE1psn0hYyOkn8xerZEzuvyQV6ABa5uo3-NfaE4z89T_4onzPikXKFaqBxiazN2KXrO6AUduMBoDwDKOAWvCcyHrlWl0DqchweoVcLhE*&cid=1338724&f=1&h2=Kxv1TDFIxGw6dUR5fBAkrL8zpS-0ytcjxPp7axUW4uH68a--74qwnrlmJ8y6vmnn&rid=cbe03581-781c-11ef-9ba7-c84bd6836428&psid=707649&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE0OTM2ODYwLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1URXZNVEF4T1RJMEwyVmlNRGxpWldFek5HSTJNamcyTjJVMk1UbGxPVEZoTXpObE1qRXlPVGM1TG1wd1p3LndlYnA_dj0xNzI2OTI1MDU0LUZ5aVRaYUpxTXpSTXNQalhYOWJOWk1wS3hZeUVRWDdPYWk5SDREeXBRVHc=
|
|
| c.mgid.com/c?pv=2&v=0|0|0|eZIpE1psn0hYyOkn8xerZEzuvyQV6ABa5uo3-NfaE4z89T_4onzPikXKFaqBxiazN2KXrO6AUduMBoDwDKOAWvCcyHrlWl0DqchweoVcLhE*&cid=1338724&f=1&h2=Kxv1TDFIxGw6dUR5fBAkrL8zpS-0ytcjxPp7axUW4uH68a--74qwnrlmJ8y6vmnn&rid=cbe03581-781c-11ef-9ba7-c84bd6836428&psid=707649&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE0OTM2ODYwLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1URXZNVEF4T1RJMEwyVmlNRGxpWldFek5HSTJNamcyTjJVMk1UbGxPVEZoTXpObE1qRXlPVGM1TG1wd1p3LndlYnA_dj0xNzI2OTI1MDU0LUZ5aVRaYUpxTXpSTXNQalhYOWJOWk1wS3hZeUVRWDdPYWk5SDREeXBRVHc= | 104.19.129.76 | 301 Moved Permanently | 0 B |
URL GET HTTP/2c.mgid.com/c?pv=2&v=0|0|0|eZIpE1psn0hYyOkn8xerZEzuvyQV6ABa5uo3-NfaE4z89T_4onzPikXKFaqBxiazN2KXrO6AUduMBoDwDKOAWvCcyHrlWl0DqchweoVcLhE*&cid=1338724&f=1&h2=Kxv1TDFIxGw6dUR5fBAkrL8zpS-0ytcjxPp7axUW4uH68a--74qwnrlmJ8y6vmnn&rid=cbe03581-781c-11ef-9ba7-c84bd6836428&psid=707649&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE0OTM2ODYwLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1URXZNVEF4T1RJMEwyVmlNRGxpWldFek5HSTJNamcyTjJVMk1UbGxPVEZoTXpObE1qRXlPVGM1TG1wd1p3LndlYnA_dj0xNzI2OTI1MDU0LUZ5aVRaYUpxTXpSTXNQalhYOWJOWk1wS3hZeUVRWDdPYWk5SDREeXBRVHc= IP104.19.129.76:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectmgid.com Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05 ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c?pv=2&v=0|0|0|eZIpE1psn0hYyOkn8xerZEzuvyQV6ABa5uo3-NfaE4z89T_4onzPikXKFaqBxiazN2KXrO6AUduMBoDwDKOAWvCcyHrlWl0DqchweoVcLhE*&cid=1338724&f=1&h2=Kxv1TDFIxGw6dUR5fBAkrL8zpS-0ytcjxPp7axUW4uH68a--74qwnrlmJ8y6vmnn&rid=cbe03581-781c-11ef-9ba7-c84bd6836428&psid=707649&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE0OTM2ODYwLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1URXZNVEF4T1RJMEwyVmlNRGxpWldFek5HSTJNamcyTjJVMk1UbGxPVEZoTXpObE1qRXlPVGM1TG1wd1p3LndlYnA_dj0xNzI2OTI1MDU0LUZ5aVRaYUpxTXpSTXNQalhYOWJOWk1wS3hZeUVRWDdPYWk5SDREeXBRVHc= HTTP/1.1
Host: c.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 21 Sep 2024 13:24:16 GMT
content-length: 0
location: https://s-img.mgid.com/g/14936860/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMTEvMTAxOTI0L2ViMDliZWEzNGI2Mjg2N2U2MTllOTFhMzNlMjEyOTc5LmpwZw.webp?v=1726925054-FyiTZaJqMzRMsPjXX9bNZMpKxYyEQX7Oai9H4DypQTw
x-mg-request-uuid: dc02ed49-e113-4d91-aff7-3a85b7e96ef8
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=w80KE0XqIqWhYqdjxfEiFTywywh.X8aaU0HtjqJp0vg-1726925056-1.0.1.1-TMYyD0RScwDv3cBu7M_krERa39pT.ZdNt_VCdStqYCpYbGp2YyciluA2O0v8iQx3rPMCytURRT4j6mdXNLmJBA; path=/; expires=Sat, 21-Sep-24 13:54:16 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
x-robots-tag: noindex
server: cloudflare
cf-ray: 8c6a5fe5ee2b0b69-OSL
X-Firefox-Spdy: h2
|
|
| s-img.mgid.com/g/14936860/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMTEvMTAxOTI0L2ViMDliZWEzNGI2Mjg2N2U2MTllOTFhMzNlMjEyOTc5LmpwZw.webp?v=1726925054-FyiTZaJqMzRMsPjXX9bNZMpKxYyEQX7Oai9H4DypQTw | 104.19.129.76 | 200 OK | 13 kB |
URL GET HTTP/2s-img.mgid.com/g/14936860/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMTEvMTAxOTI0L2ViMDliZWEzNGI2Mjg2N2U2MTllOTFhMzNlMjEyOTc5LmpwZw.webp?v=1726925054-FyiTZaJqMzRMsPjXX9bNZMpKxYyEQX7Oai9H4DypQTw IP104.19.129.76:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectmgid.com Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05 ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 328x328, Scaling: [none]x[none], YUV color, decoders should clamp Hash23e3d593157d52657e91d039a1e99cca ea3a8cfb5d70fcf9ed5a33a78099d835f309afc2 f6890449149f8b6bc8b0b51a1bc333d61e6ece44b7f473f630a4ccca7880c02d
GET /g/14936860/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMTEvMTAxOTI0L2ViMDliZWEzNGI2Mjg2N2U2MTllOTFhMzNlMjEyOTc5LmpwZw.webp?v=1726925054-FyiTZaJqMzRMsPjXX9bNZMpKxYyEQX7Oai9H4DypQTw HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=w80KE0XqIqWhYqdjxfEiFTywywh.X8aaU0HtjqJp0vg-1726925056-1.0.1.1-TMYyD0RScwDv3cBu7M_krERa39pT.ZdNt_VCdStqYCpYbGp2YyciluA2O0v8iQx3rPMCytURRT4j6mdXNLmJBA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:17 GMT
content-type: image/webp
content-length: 13088
x-mg-request-uuid: 2f756d3d-cec0-4a3b-afe6-4dd4dd4e3137
access-control-allow-origin: *
last-modified: Fri, 16 Dec 2022 13:54:02 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 8629372
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
server: cloudflare
cf-ray: 8c6a5fe66f260b69-OSL
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 172.67.192.190 | 200 OK | 7.8 kB |
IP172.67.192.190:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
File typeASCII text, with no line terminators Hash8e7ca5dc75ecc18320784bd3375d254d 04cae16b1613aab9359e160aea0abada9ad2e36f a1ffb06eec6861a537e4e33700ef0531a825e18851f09a9d995143eeeba52c4e
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: text/plain
set-cookie: csu=1856354263829570@1@1726925054; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9YoaOBc7OsFyhBRH2MHzu%2FO60Q3XP4ZVrZeEyoW1TUpWazN90SYKF741yi6lqcalJJQ7nr5lcwmGFx1fyZHUPJFGfR0v4c6Y%2Fyur2RVynNo3YX5l4ZRDLs2LFTdMxiUdwIZCyFc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fd568df56b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cloudfrale.com/bn/db1/fc8/a8d/db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807.mp4 | 45.133.44.21 | 206 Partial Content | 357 kB |
URL GET HTTP/2cdn.cloudfrale.com/bn/db1/fc8/a8d/db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807.mp4 IP45.133.44.21:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerBuypass AS-983163327 Subject FingerprintC7:59:0C:CC:F5:3F:DC:64:5E:C5:23:EA:9B:E9:E2:05:E3:08:21:C4 ValiditySat, 22 Jun 2024 22:28:33 GMT - Wed, 18 Dec 2024 22:59:00 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size357 kB (357139 bytes) Hashd4938e1a3b06ac9ac6dd49f43af75fc2 db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807 6bfb40cb5c5f9367a399aa9804488db58012b397688884903eb7da571f53f5bb
GET /bn/db1/fc8/a8d/db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807.mp4 HTTP/1.1
Host: cdn.cloudfrale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: video/mp4
content-length: 357139
server: nginx/1.26.0
etag: d4938e1a3b06ac9ac6dd49f43af75fc2
last-modified: Sun, 05 Nov 2023 16:31:37 GMT
x-timestamp: 1699201896.46460
x-trans-id: txa4dbf15a346344208dffa-0066e97794
x-openstack-request-id: txa4dbf15a346344208dffa-0066e97794
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 23 Sep 2024 13:24:13 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
access-control-allow-origin: *
content-range: bytes 0-357138/357139
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 172.67.192.190 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP172.67.192.190:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 764
last-modified: Sat, 21 Sep 2024 13:11:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wSlYaQA91ALVOIED82ml32P1Y1gd%2BjLZj573dxvlZE5mjfTE%2FmIqEGUz2WKi7ELpKG8r3btrEC0%2FSuspakAalmj3rXdQoCW6dd7zCagbMzIz8xa0UEn6o588p5Bj69hGYYJDGc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fd558d856b5-OSL
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP64.233.162.84:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:KXbelT7URqhe3Kr_tfgJxeVGJznObQ:N3aUl66j7WxWsk2g; Expires=Mon, 21-Sep-2026 13:24:14 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 21 Sep 2024 13:24:14 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqeCwL9nDjlXPf32XvsBVhgPCCbVn8vi6dZP-fmS5UNHyN5eoRvtSyHp7E2xBVOyj6XWxlEh
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-jGpxH1CstysoEanoQ3ZXNQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| endowmentoverhangutmost.com/get/2008332?zoneid=2008332&jp=_cly2fms53baweej31enzn6&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=CE1pJZNVmNzJTIwWlA4MSUyMC0lMjBGdW5jcm90OjpWY3MlMjBaUDgx&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=tt9sWhDaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8%2FaWQ9MTMyNiZwYXJ0PW9tZXR2&afid=4335300410911744&eclog=0&snc=0&ssc=0&vp=0&im=1&cs=5&freq=0&uf=0 | 94.242.247.20 | 200 OK | 4.7 kB |
URL GET HTTP/2endowmentoverhangutmost.com/get/2008332?zoneid=2008332&jp=_cly2fms53baweej31enzn6&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=CE1pJZNVmNzJTIwWlA4MSUyMC0lMjBGdW5jcm90OjpWY3MlMjBaUDgx&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=tt9sWhDaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8%2FaWQ9MTMyNiZwYXJ0PW9tZXR2&afid=4335300410911744&eclog=0&snc=0&ssc=0&vp=0&im=1&cs=5&freq=0&uf=0 IP94.242.247.20:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerBuypass AS-983163327 Subject FingerprintA6:69:1C:17:89:EB:E3:18:A2:AB:44:48:75:FC:12:8C:1A:BF:B7:97 ValidityFri, 20 Sep 2024 14:26:10 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typeASCII text, with very long lines (4833), with no line terminators Hash777d9c77f534d2da8656fec2294ef26a 66313a8dc99d308108e02fc9c91e4f7391c9d6a1 98e0f3a50c5ce9fce906e7995d684f32e1fd0e9c13f1f4d17ffce29a32b280ce
GET /get/2008332?zoneid=2008332&jp=_cly2fms53baweej31enzn6&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=CE1pJZNVmNzJTIwWlA4MSUyMC0lMjBGdW5jcm90OjpWY3MlMjBaUDgx&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=tt9sWhDaHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8%2FaWQ9MTMyNiZwYXJ0PW9tZXR2&afid=4335300410911744&eclog=0&snc=0&ssc=0&vp=0&im=1&cs=5&freq=0&uf=0 HTTP/1.1
Host: endowmentoverhangutmost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sat, 25 Oct 2025 13:24:12 GMT; Secure; SameSite=None
UID=24092108245b087a3c8740406b928dd942e6; Path=/; Expires=Sat, 25 Oct 2025 13:24:12 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-shims.min.css?token=1afb5534f7 | 172.67.139.119 | 200 OK | 28 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-shims.min.css?token=1afb5534f7 IP172.67.139.119:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectka-f.fontawesome.com FingerprintB8:0E:B4:BD:5D:51:E9:6A:20:8E:72:31:7F:AF:18:85:61:54:95:94 ValidityThu, 29 Aug 2024 15:54:38 GMT - Wed, 27 Nov 2024 15:54:37 GMT
File typeASCII text, with very long lines (27377) Hash5e5b0d8c7be5919570a305b6bc229a36 e4ab3a85d3ab0a8654a278d954fb310906526db3 1ae3c19265723696f50e3226dcd43fbc7ea617697e0d7169a8e52c854ae3826c
GET /releases/v6.6.0/css/free-v4-shims.min.css?token=1afb5534f7 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://funcrot.icu/
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:39 GMT
etag: W/"5e5b0d8c7be5919570a305b6bc229a36"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OcmM75esRYKWiSn21My70FBtq9Hu6HLHIAj4Ds_fXgB-_49kZhJbwQ==
age: 492041
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dsgbU9No%2FTVawklF9kggOEqwn9nPMnSpeDvPsZUub41DVvaTV1idY52697QULTTHbbh3z0x0ePkq116%2FZCKQgS3uiYOOh5GoukBhZwU7XYQy1u%2Bd2wQCkU6m%2FjuUY4EcRF4SBBNsbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fcd49d3b527-OSL
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/theme_2/img/loader.svg | 104.26.6.74 | 200 OK | 694 B |
URL GET HTTP/2i.doodcdn.co/theme_2/img/loader.svg IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeexported SGML document, ASCII text, with very long lines (750), with no line terminators Hashe0c38124a46835a055de826afbf33d9b 255567da0faa3de6c4bcef1780e9990ba7c9c0ff e186e235e7552b286f217c94c747abdd5a8df8279c2334a61202817f937ea960
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sun, 20 Oct 2024 17:32:21 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 22247
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stfh2l0qdr5f%2BbbOrulmPVU3FnG3yCYIazYNAg8E0C1CD1eS1v9%2F9EDL5i5TGjIqg4zN6aDq1noEjFaYTLtERkLGHS4cdgL4uY2SlQWRF1UJYySuePWjDsKvO3H%2FDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fd32aa556c6-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqczDU4at3WG5KKz0W77ATMNf4RWEdFb-vtD0LoDnIXT85urjY7AR_lEdbk-f7ldcD68yl3u | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqczDU4at3WG5KKz0W77ATMNf4RWEdFb-vtD0LoDnIXT85urjY7AR_lEdbk-f7ldcD68yl3u IP64.233.162.84:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqczDU4at3WG5KKz0W77ATMNf4RWEdFb-vtD0LoDnIXT85urjY7AR_lEdbk-f7ldcD68yl3u HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:xhzy7-olMYGOSmV056frsOY4KLk5fA:q_D3qLc_7xz_lJBz;Path=/;Expires=Mon, 21-Sep-2026 13:24:14 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 21 Sep 2024 13:24:14 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdIje4CRNWrnisrBL_edADakZxSpCPwOL1YLpIOeipOLRMbkNOXp5u4ijqxDUUAOSAo1PKx_g&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-247698997%3A1726925054401565&ddm=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-NDXtIVnmr__qEVn0eDUT0A' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 421
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=7c6c3d9baf2314603a65f0eab513b8ff&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=7c6c3d9baf2314603a65f0eab513b8ff&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subject*.unseenreport.com FingerprintF0:98:AC:22:06:CC:50:D7:62:08:A2:F7:67:3A:D3:8D:DA:4B:FE:E6 ValidityThu, 19 Sep 2024 04:18:43 GMT - Wed, 18 Dec 2024 04:18:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=1da68f13-a4be-4b9b-8ee9-81b2ddd6fe93&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=7c6c3d9baf2314603a65f0eab513b8ff&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 21 Sep 2024 13:24:15 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: dcea0a6d5df99ddc6072421f5b5b4b70
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.storageimagedisplay.com/cti/1a/ba/60/1aba60ed15ec9a757d923658796c771d/1707923285.png | 45.133.44.2 | 200 OK | 30 kB |
URL GET HTTP/2cdn.storageimagedisplay.com/cti/1a/ba/60/1aba60ed15ec9a757d923658796c771d/1707923285.png IP45.133.44.2:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint35:34:7E:96:D3:74:A9:D9:1F:BE:9D:7C:A7:EF:B0:88:78:CB:82:36 ValidityFri, 13 Sep 2024 11:57:48 GMT - Thu, 12 Dec 2024 11:57:47 GMT
File typePNG image data, 320 x 50, 8-bit/color RGBA, non-interlaced Hash2471c88a76fc28f99949311ee0826a7f da73b2288a199fe009115576711a2b5869b6dfe4 913697d38c42449701edbc9076e47f75adba56e709af47e76c5b71dfa52f95d2
GET /cti/1a/ba/60/1aba60ed15ec9a757d923658796c771d/1707923285.png HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: image/png
content-length: 30384
server: nginx/1.21.6
last-modified: Wed, 14 Feb 2024 15:08:14 GMT
etag: "65ccd75e-76b0"
expires: Mon, 23 Sep 2024 13:24:14 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ah0543
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| undefined/ckNHeDYTISQVCRN+JV5DAC96XQQ0ZnU+UgdzNw1SQjAjFFsIJWkbWh02Ix5EHS0zVlgXN2JKcCQNLD5PEwUBLnoaNAgaXTssARRgHQIfLncqBBYpeyMCCTZBAS8PKVVDBARIVCYpMz56GjQeGnAFNQ0URh8HPz0HOhQVNXEhCQgyYwUvE0leQRQuOVU2cTApfDA0Cxp3Fi0CD0EIAHQuYzoXBjR6MHMUN3AdNwJIBxggDypVJQsWPVUkLBYhdxYoFitGQgEPPVMzF348eSQnJiFjR3YVPFIcAioqdDktFj1VIwIiHHcnAhRJA1dxATpbGhsQFXAgCQVVczYTLzZMPAU3EHRBBQQvYTcLHT10Kw12QEw0NHNdBDAXKip3Pi4gOVRCCQgydwY0YRJFHS03RVwcF3VPDyIEMk1MKhM | 0.0.0.0 | | 0 B |
URL GET undefined/ckNHeDYTISQVCRN+JV5DAC96XQQ0ZnU+UgdzNw1SQjAjFFsIJWkbWh02Ix5EHS0zVlgXN2JKcCQNLD5PEwUBLnoaNAgaXTssARRgHQIfLncqBBYpeyMCCTZBAS8PKVVDBARIVCYpMz56GjQeGnAFNQ0URh8HPz0HOhQVNXEhCQgyYwUvE0leQRQuOVU2cTApfDA0Cxp3Fi0CD0EIAHQuYzoXBjR6MHMUN3AdNwJIBxggDypVJQsWPVUkLBYhdxYoFitGQgEPPVMzF348eSQnJiFjR3YVPFIcAioqdDktFj1VIwIiHHcnAhRJA1dxATpbGhsQFXAgCQVVczYTLzZMPAU3EHRBBQQvYTcLHT10Kw12QEw0NHNdBDAXKip3Pi4gOVRCCQgydwY0YRJFHS03RVwcF3VPDyIEMk1MKhM IP0.0.0.0:0
Requested byhttps://dood.li/e/cpc0b2t3710f
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ckNHeDYTISQVCRN+JV5DAC96XQQ0ZnU+UgdzNw1SQjAjFFsIJWkbWh02Ix5EHS0zVlgXN2JKcCQNLD5PEwUBLnoaNAgaXTssARRgHQIfLncqBBYpeyMCCTZBAS8PKVVDBARIVCYpMz56GjQeGnAFNQ0URh8HPz0HOhQVNXEhCQgyYwUvE0leQRQuOVU2cTApfDA0Cxp3Fi0CD0EIAHQuYzoXBjR6MHMUN3AdNwJIBxggDypVJQsWPVUkLBYhdxYoFitGQgEPPVMzF348eSQnJiFjR3YVPFIcAioqdDktFj1VIwIiHHcnAhRJA1dxATpbGhsQFXAgCQVVczYTLzZMPAU3EHRBBQQvYTcLHT10Kw12QEw0NHNdBDAXKip3Pi4gOVRCCQgydwY0YRJFHS03RVwcF3VPDyIEMk1MKhM HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| ukankingwithea.com/asd100.bin | 172.67.192.190 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP172.67.192.190:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 764
last-modified: Sat, 21 Sep 2024 13:11:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R3YDUo19CfuZAxkemAzz7WzJsa9PXjPAlnZEX2GrMUqzOMbENsuxT13HrR8Bbxl1Co078NwV8Oe08lSznfLT2Tb%2FX4FnN1QqWn67TYPBqxZIeofRSJ%2BkBxB%2BFpsc6np7TNH08fM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fd558c856b5-OSL
X-Firefox-Spdy: h2
|
|
| undefined/WlN2eXQ7MRUUSztuFF8BKD9LXEYcdkQ/EGtrAkpBIyoEAEYxZ09XFzY8Ax0SKDwYDVo0NgJcRhwdFy8iKwlFLD8VNCc7JzJjTj0YKh4hPgw5BjMjJBABEToxawIOOyU9ASQDHx4CJEEVFTQnIScePBozJzUbOS0YOx4MHRIDYwEtMC1iGS4fHwk1PQcUBBo0ORUkGhgmH2tGPRMMGi4hOT8VDhY3OxFOMzELJAw4AzECMiE5PBEdHjEVOzc2MwsGRi1FDykuMQA7Ah0dLjwBPC4mHysbMjEQGyEtHx4QJzgmORUeITAMFRw3IhwRIj4tNQIdHS4QK1sBNwg6HgosHz8wKDwYCiABPRcdETw9DxUFLSMcNzMuIwwxIEkmFwlHFjYSEQUOMBs0OC0zOSAuEjoSCSMOJwkVEV8eKTwYCUkJIzk0Bgo/Ri02bGU | 0.0.0.0 | | 0 B |
URL GET undefined/WlN2eXQ7MRUUSztuFF8BKD9LXEYcdkQ/EGtrAkpBIyoEAEYxZ09XFzY8Ax0SKDwYDVo0NgJcRhwdFy8iKwlFLD8VNCc7JzJjTj0YKh4hPgw5BjMjJBABEToxawIOOyU9ASQDHx4CJEEVFTQnIScePBozJzUbOS0YOx4MHRIDYwEtMC1iGS4fHwk1PQcUBBo0ORUkGhgmH2tGPRMMGi4hOT8VDhY3OxFOMzELJAw4AzECMiE5PBEdHjEVOzc2MwsGRi1FDykuMQA7Ah0dLjwBPC4mHysbMjEQGyEtHx4QJzgmORUeITAMFRw3IhwRIj4tNQIdHS4QK1sBNwg6HgosHz8wKDwYCiABPRcdETw9DxUFLSMcNzMuIwwxIEkmFwlHFjYSEQUOMBs0OC0zOSAuEjoSCSMOJwkVEV8eKTwYCUkJIzk0Bgo/Ri02bGU IP0.0.0.0:0
Requested byhttps://dood.li/e/cpc0b2t3710f
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /WlN2eXQ7MRUUSztuFF8BKD9LXEYcdkQ/EGtrAkpBIyoEAEYxZ09XFzY8Ax0SKDwYDVo0NgJcRhwdFy8iKwlFLD8VNCc7JzJjTj0YKh4hPgw5BjMjJBABEToxawIOOyU9ASQDHx4CJEEVFTQnIScePBozJzUbOS0YOx4MHRIDYwEtMC1iGS4fHwk1PQcUBBo0ORUkGhgmH2tGPRMMGi4hOT8VDhY3OxFOMzELJAw4AzECMiE5PBEdHjEVOzc2MwsGRi1FDykuMQA7Ah0dLjwBPC4mHysbMjEQGyEtHx4QJzgmORUeITAMFRw3IhwRIj4tNQIdHS4QK1sBNwg6HgosHz8wKDwYCiABPRcdETw9DxUFLSMcNzMuIwwxIEkmFwlHFjYSEQUOMBs0OC0zOSAuEjoSCSMOJwkVEV8eKTwYCUkJIzk0Bgo/Ri02bGU HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqcu5N8AGKCaGA7grAI1a22pbiSRWHK03GZAFAhAdQmnfvMl2l2cVBZJDoQklI8-GrguZeCuYg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2077191848%3A1726925054441949&ddm=0 | 64.233.162.84 | 403 Forbidden | 0 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqcu5N8AGKCaGA7grAI1a22pbiSRWHK03GZAFAhAdQmnfvMl2l2cVBZJDoQklI8-GrguZeCuYg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2077191848%3A1726925054441949&ddm=0 IP64.233.162.84:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint99:1A:E6:C6:9B:04:87:74:E3:DA:97:C8:29:09:15:16:CF:1F:6A:78 ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqcu5N8AGKCaGA7grAI1a22pbiSRWHK03GZAFAhAdQmnfvMl2l2cVBZJDoQklI8-GrguZeCuYg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2077191848%3A1726925054441949&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 21 Sep 2024 13:24:14 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-TGvYKW5JE4eoBeYHGqssCA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.UZjPIXDvCpg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| kit.fontawesome.com/1afb5534f7.js | 104.18.40.68 | 200 OK | 13 kB |
URL GET HTTP/2kit.fontawesome.com/1afb5534f7.js IP104.18.40.68:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerDigiCert Inc Subject*.fontawesome.com FingerprintB1:69:23:88:5E:EA:EA:76:BC:90:A2:CE:D9:3B:3F:5D:FE:5F:13:09 ValidityTue, 30 Jul 2024 00:00:00 GMT - Mon, 27 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (12736) Hash5579f045d2b548728c93f5692cb61304 7f6a0d0c59644872147e8c7fca56f175949b3728 167ff1b401869326887ab1d381de6f4b3957924f719827bcdbbc9f2d3b7ce9c1
GET /1afb5534f7.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:11 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F_dFLzzmYBhOg79AaOSh
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8c6a5fc02af07130-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| dood.li/e/cpc0b2t3710f | 104.26.8.173 | 200 OK | 149 kB |
IP104.26.8.173:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectdood.li Fingerprint64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C ValidityFri, 26 Jul 2024 23:34:22 GMT - Thu, 24 Oct 2024 23:34:21 GMT
Size149 kB (149017 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Anti-debugging code |
GET /e/cpc0b2t3710f HTTP/1.1
Host: dood.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Fri, 20 Sep 2024 13:24:12 GMT
set-cookie: lang=1; domain=.dood.li; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fB6%2BhbZRqWsGJBZazIbINOd2psQxoAkIN5yL8NqlV9qe%2BYDSbPN5K0skx7QBbYKEMXrRG38%2B%2B0G1OFjeg8xP026GGu88v2WV%2FzuHZdLRmQk06BPsbFvVscI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fc88ae60b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| g215ok.cloudatacdn.com/favicon.ico?i |  54.36.104.166 | 200 OK | 15 kB |
URL GET HTTP/1.1g215ok.cloudatacdn.com/favicon.ico?i IP54.36.104.166:443
Requested bymoz-nullprincipal:{9601d3c4-9c96-4702-9818-e9287b70b897}?https://dood.li CertificateIssuerSectigo Limited Subject*.cloudatacdn.com FingerprintD9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash30d3656f43c817e38c3e7d70b2bfbdad 1aa43b43755e7cba5e145d0978517f7bedad7da6 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: g215ok.cloudatacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Sep 2024 13:24:14 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
|
|
| ukankingwithea.com/asd100.bin | 172.67.192.190 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP172.67.192.190:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:14 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 764
last-modified: Sat, 21 Sep 2024 13:11:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BKYgtWVZlOVr3q9pVx8PfkMtgBzxkdv8tdBfWynBeZFWI37M9kSPBK05DJpV6qoKO5PELHMxfLYOz4ZhldUcNJt4n%2BXNQWMyY3m8MaT08kulC2t1xhMR%2BraZCphlnAu0YntYtCg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fd568ec56b5-OSL
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js | 104.17.25.14 | 200 OK | 589 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
Size589 kB (589278 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 130645
expires: Thu, 11 Sep 2025 13:24:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xyoul2i3Ovjf5XgdXx1xoui9Kh6B6pQ0jgqmY3RqYgMa%2FFcp3U5C7211bFqnFBLWuHLooQXZLD1YBUGdHobRnKtgTG2H90WGVzF6nnQrVNCUyxwUBMKbYI0dIqTSY8KXos61jF7I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8c6a5fcadd085693-OSL
X-Firefox-Spdy: h2
|
|
| endowmentoverhangutmost.com/get/2008332?zoneid=2008332&jp=_cls12andbrqfplo1x30qcv&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=PHHeqRwVmNzJTIwWlA4MSUyMC0lMjBGdW5jcm90OjpWY3MlMjBaUDgx&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=hIz6TQ4aHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8%2FaWQ9MTMyNiZwYXJ0PW9tZXR2&afid=957600690373632&eclog=0&snc=0&ssc=0&vp=0&im=1&cs=5&freq=0&uf=0 | 94.242.247.20 | 200 OK | 4.7 kB |
URL GET HTTP/2endowmentoverhangutmost.com/get/2008332?zoneid=2008332&jp=_cls12andbrqfplo1x30qcv&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=PHHeqRwVmNzJTIwWlA4MSUyMC0lMjBGdW5jcm90OjpWY3MlMjBaUDgx&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=hIz6TQ4aHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8%2FaWQ9MTMyNiZwYXJ0PW9tZXR2&afid=957600690373632&eclog=0&snc=0&ssc=0&vp=0&im=1&cs=5&freq=0&uf=0 IP94.242.247.20:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerBuypass AS-983163327 Subject FingerprintA6:69:1C:17:89:EB:E3:18:A2:AB:44:48:75:FC:12:8C:1A:BF:B7:97 ValidityFri, 20 Sep 2024 14:26:10 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typeASCII text, with very long lines (4833), with no line terminators Hash3931efd7b9a858d3a5d50c5c814fd9e8 3ad6ed42e10ebc12ea98c35a7dd709aa67e05e83 8901b5af051f79de738fc59b39ab72d1e1b0bd31a785ded1b3254d9440dce83a
GET /get/2008332?zoneid=2008332&jp=_cls12andbrqfplo1x30qcv&nojs=0&abvar=0&febuild=1.0.336&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=PHHeqRwVmNzJTIwWlA4MSUyMC0lMjBGdW5jcm90OjpWY3MlMjBaUDgx&es=13&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=hIz6TQ4aHR0cHM6Ly9mdW5jcm90LmljdS92aWRlby8%2FaWQ9MTMyNiZwYXJ0PW9tZXR2&afid=957600690373632&eclog=0&snc=0&ssc=0&vp=0&im=1&cs=5&freq=0&uf=0 HTTP/1.1
Host: endowmentoverhangutmost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sat, 25 Oct 2025 13:24:12 GMT; Secure; SameSite=None
UID=2409210824841a43321a0143d3a1e3fbc561; Path=/; Expires=Sat, 25 Oct 2025 13:24:12 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-font-face.min.css?token=1afb5534f7 | 172.67.139.119 | 200 OK | 1.8 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-font-face.min.css?token=1afb5534f7 IP172.67.139.119:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectka-f.fontawesome.com FingerprintB8:0E:B4:BD:5D:51:E9:6A:20:8E:72:31:7F:AF:18:85:61:54:95:94 ValidityThu, 29 Aug 2024 15:54:38 GMT - Wed, 27 Nov 2024 15:54:37 GMT
File typeASCII text, with very long lines (1803), with no line terminators Hasheaa8c3d22110c5fd5c0fcb4c8e666150 efb1608309a4a0bcc45012c9739ec62475d8e35a 2345537cc70a40cb1129bcb5db1c0ca9136dc7dd7c1ce0557c8df7afa7d068a5
GET /releases/v6.6.0/css/free-v4-font-face.min.css?token=1afb5534f7 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://funcrot.icu/
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:39 GMT
etag: W/"a5a0c9048efb7cb5df90023064d09ba4"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xy36g6JdKA5asqyNj1LxDS5IVq3_NEnubtVn5PGhKBSYIJrY3ls1YA==
age: 85801
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8cNrQmzucradOz3TvIFdAa6VkHxp4WxlrN0Pm5oMujibToZSNSI7ypMpnuR38uLvDSnt4Dt1TesA0UKmWUE11NJ8uV4BcD2B2haNfk0Kzp4uqUYXNJPIU0p1Kt%2F1SW5S%2Ffs%2FuGmMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fcd39c4b527-OSL
X-Firefox-Spdy: h2
|
|
| blurbreimbursetrombone.com/aas/r45d/vki/1941940/a8dfedf9.js | 94.242.247.30 | 200 OK | 134 kB |
URL GET HTTP/2blurbreimbursetrombone.com/aas/r45d/vki/1941940/a8dfedf9.js IP94.242.247.30:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerBuypass AS-983163327 Subject Fingerprint5E:17:C2:AF:84:5F:53:B8:A0:BC:63:78:32:E2:71:A2:73:3F:EE:06 ValidityFri, 20 Sep 2024 14:28:16 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65045) Size134 kB (133487 bytes) Hash03f3b20642f2a6faf9340913029358a5 a2bb02c216f76f131a8559c9fb18603b27676edf ad8ae8909643747fd047c35b981684a73453ae5015adb32f96678e707f5fdd58
GET /aas/r45d/vki/1941940/a8dfedf9.js HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 17 Sep 2024 13:00:05 GMT
vary: Accept-Encoding
etag: W/"66e97d55-20a15"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdIje4CRNWrnisrBL_edADakZxSpCPwOL1YLpIOeipOLRMbkNOXp5u4ijqxDUUAOSAo1PKx_g&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-247698997%3A1726925054401565&ddm=1 | 64.233.162.84 | 403 Forbidden | 0 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdIje4CRNWrnisrBL_edADakZxSpCPwOL1YLpIOeipOLRMbkNOXp5u4ijqxDUUAOSAo1PKx_g&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-247698997%3A1726925054401565&ddm=1 IP64.233.162.84:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint99:1A:E6:C6:9B:04:87:74:E3:DA:97:C8:29:09:15:16:CF:1F:6A:78 ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdIje4CRNWrnisrBL_edADakZxSpCPwOL1YLpIOeipOLRMbkNOXp5u4ijqxDUUAOSAo1PKx_g&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-247698997%3A1726925054401565&ddm=1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 21 Sep 2024 13:24:14 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-PxaD4opTua7D8Kc4cXScPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.UZjPIXDvCpg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blurbreimbursetrombone.com/check.html | 94.242.247.30 | 200 OK | 916 B |
URL GET HTTP/2blurbreimbursetrombone.com/check.html IP94.242.247.30:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerBuypass AS-983163327 Subject Fingerprint5E:17:C2:AF:84:5F:53:B8:A0:BC:63:78:32:E2:71:A2:73:3F:EE:06 ValidityFri, 20 Sep 2024 14:28:16 GMT - Tue, 18 Mar 2025 22:59:00 GMT
File typeHTML document, ASCII text, with very long lines (956), with no line terminators Hash95b931540a96c4d45344472f87f81036 7f1c2eae3c09448aa6f8d85f66484439623c520a 2ecb5d3152a38f9abb6f14dac557682756b243462770f69a14c4c2b8cf0726d1
GET /check.html HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 29 Aug 2024 09:36:44 GMT
vary: Accept-Encoding
etag: W/"66d0412c-394"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| recordedthereby.com/sfp.js | 104.21.91.24 | 200 OK | 85 kB |
URL GET HTTP/2recordedthereby.com/sfp.js IP104.21.91.24:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectrecordedthereby.com Fingerprint76:BA:7B:D2:DF:8D:D1:44:66:52:F9:0D:A1:78:12:89:6C:3F:0F:03 ValidityTue, 03 Sep 2024 16:10:32 GMT - Mon, 02 Dec 2024 16:10:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funcrot.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: ecb08244f083363b9111123348bd85f9
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9NLTBr5rmVgMzZzpgSP2otXCPRcRc%2FucDk9k1OxfEwzzrZpy7Da%2FOrHDwn2BTN57Pq4SUs5eLXchRrFyXIrRRz2NxB%2Fqw4CLc0LExtGqQTGRhush3HNyny8uNSdB%2F0cGA5TcEnwo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c6a5fcba8bab524-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/css/embed.css | 104.26.6.74 | 200 OK | 80 kB |
URL GET HTTP/2i.doodcdn.co/css/embed.css IP104.26.6.74:443
Requested byhttps://dood.li/e/cpc0b2t3710f CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:12 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: W/"61d3187c-13812"
expires: Mon, 21 Oct 2024 03:28:06 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 22250
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2Fa2c6x%2FJDha0NvnFln%2F3kh%2FUVmZfOo%2BVBzT7VoKlI13sIxTx2Mkkk5oKyctqsMSKQfmeTNkacoQ9l8Wab0NDrS3f6U%2BbLIe7U%2FQWExCGt5QAofvkOzLC2CEgIf96Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fcb4c9756c6-OSL
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.6.0/css/free.min.css?token=1afb5534f7 | 172.67.139.119 | 200 OK | 97 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.6.0/css/free.min.css?token=1afb5534f7 IP172.67.139.119:443
Requested byhttps://funcrot.icu/video/?id=1326&part=ometv CertificateIssuerGoogle Trust Services Subjectka-f.fontawesome.com FingerprintB8:0E:B4:BD:5D:51:E9:6A:20:8E:72:31:7F:AF:18:85:61:54:95:94 ValidityThu, 29 Aug 2024 15:54:38 GMT - Wed, 27 Nov 2024 15:54:37 GMT
File typeASCII text, with very long lines (65321) Hash4ca760f49cd8a14911c81e6c14328874 81687e7a5dbba470120798cf05dc31e8d57f0b11 f99c17690330c805c47da3d7592864d6acf0f73817d432447e1b0c66ad28f221
GET /releases/v6.6.0/css/free.min.css?token=1afb5534f7 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://funcrot.icu/
Origin: https://funcrot.icu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Sep 2024 13:24:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:40 GMT
etag: W/"4ca760f49cd8a14911c81e6c14328874"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5Rxy7C0B9_zv4il2YNCUubM16du6XmiU0GfZvguXdvu-rpY8rao9Qw==
age: 492041
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r7FN1TNyZhOQhVdcr9RZcbBreglEq6sqG7SWm64PyoHbUWjYG10GvkV8OpYS5YVc01vL%2Fnp9Dn3PserocxKU2ybzheCu6rNYZW0GB3%2FhRHGrZ1%2Fl64phHLIaNDoGGhblrJmLru01hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c6a5fcddacbb527-OSL
X-Firefox-Spdy: h2
|
|
| undefined/S0hxZXQqKhIISyp1E0MBOSRMQEYNbUMjED54ARAQezsVCRkxLl8GGCQ9FQMGJCYFSxouPFRXMh8RQg4DH3sSJDInfAE2NigZJy0+BB1BAjcuI0gjNx4BACAifywpHDUfHCMzLioaQTQyJ3xUVzIYLzAULiIJRSAeHSM/DSIcEEE0RQ55RC8yIgUmISZ/BhA3PQUPFlRReQokND0vHR8vMBkZQCQ9CTAUJkQgIDMSGxoQG1URDHlIIzggJz4jHyQlNhJMEg4pVQwdJBIkFSAeJTAhI21DJyYgEjoGGTsOJB0iEQEgLBYTCTtARg0MQBEkKXsdISYgOAgEHx0cMlVZETkjJj4KChwjPBgkBiYSMwk2Ihg4LyQJMW56NyQacg8kVR8JLkE/Mxg/MBU8Iw0SMx0KGCMOAHksGiM6GBooUycnAVcPByQmAVgXGB4eKgUHHAgHQQ | 0.0.0.0 | | 0 B |
URL GET undefined/S0hxZXQqKhIISyp1E0MBOSRMQEYNbUMjED54ARAQezsVCRkxLl8GGCQ9FQMGJCYFSxouPFRXMh8RQg4DH3sSJDInfAE2NigZJy0+BB1BAjcuI0gjNx4BACAifywpHDUfHCMzLioaQTQyJ3xUVzIYLzAULiIJRSAeHSM/DSIcEEE0RQ55RC8yIgUmISZ/BhA3PQUPFlRReQokND0vHR8vMBkZQCQ9CTAUJkQgIDMSGxoQG1URDHlIIzggJz4jHyQlNhJMEg4pVQwdJBIkFSAeJTAhI21DJyYgEjoGGTsOJB0iEQEgLBYTCTtARg0MQBEkKXsdISYgOAgEHx0cMlVZETkjJj4KChwjPBgkBiYSMwk2Ihg4LyQJMW56NyQacg8kVR8JLkE/Mxg/MBU8Iw0SMx0KGCMOAHksGiM6GBooUycnAVcPByQmAVgXGB4eKgUHHAgHQQ IP0.0.0.0:0
Requested byhttps://dood.li/e/cpc0b2t3710f
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /S0hxZXQqKhIISyp1E0MBOSRMQEYNbUMjED54ARAQezsVCRkxLl8GGCQ9FQMGJCYFSxouPFRXMh8RQg4DH3sSJDInfAE2NigZJy0+BB1BAjcuI0gjNx4BACAifywpHDUfHCMzLioaQTQyJ3xUVzIYLzAULiIJRSAeHSM/DSIcEEE0RQ55RC8yIgUmISZ/BhA3PQUPFlRReQokND0vHR8vMBkZQCQ9CTAUJkQgIDMSGxoQG1URDHlIIzggJz4jHyQlNhJMEg4pVQwdJBIkFSAeJTAhI21DJyYgEjoGGTsOJB0iEQEgLBYTCTtARg0MQBEkKXsdISYgOAgEHx0cMlVZETkjJj4KChwjPBgkBiYSMwk2Ihg4LyQJMW56NyQacg8kVR8JLkE/Mxg/MBU8Iw0SMx0KGCMOAHksGiM6GBooUycnAVcPByQmAVgXGB4eKgUHHAgHQQ HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|