cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 242747
expires: Tue, 19 Nov 2024 03:11:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qh%2B2Vuznxtgelfav0Vyi7b8jDVrQL%2BhfDjuvu952gkZ5%2BVurMsopmg%2FnNR%2BTp%2Bd5LIzApGi5CljTHodqRR7Bxc54iBXdseh9nMbtegY%2Fgoq%2Bh774qElsrNsl6Nm1L10QGGL%2BQ%2BRD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82dfe72e3ce4b51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/img/no_video_3.svg
200 OK 2.8 kB URL GET HTTP/2 i.doodcdn.co/img/no_video_3.svg
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (2789)
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:26 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Tue, 26 Dec 2023 09:09:24 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 77753
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=59GDH6389HFm6ofQqxJ4HYtwk3VShtvuMD6O0spFtbk%2FYX09xizgSxbpvvK6TLuwOaM6iRRxbo3WXng93Brmylj902TcFg0%2Fo5BLJ61XcdiPrtIbyhU%2FUnTcpvwShQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe72e4a2bb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
papmeatidigbo.com/gHzOaAdOhbZ/71405
200 OK 26 B URL GET HTTP/1.1 papmeatidigbo.com/gHzOaAdOhbZ/71405
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectpapmeatidigbo.com
Fingerprint9F:26:AD:B7:6D:9C:CB:94:FC:07:D1:33:2D:1D:BA:1B:27:E9:4F:D1
ValiditySun, 22 Oct 2023 10:35:36 GMT - Sat, 20 Jan 2024 10:35:35 GMT
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
GET /gHzOaAdOhbZ/71405 HTTP/1.1
Host: papmeatidigbo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 03:11:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dood.ws
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Fri, 01-Dec-2023 03:11:26 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE8QtLULt3Wvi55AbCmBkBeS2J%2FbVxczMKOU4rIA24Cia0xXm%2FZsmmsLeoGHETx76EHiZ%2FqBIri%2BgKPHYUxOql4Wn9c%2FY7c1yOJ4c%2FZb3cUt2YpP4JV9LzFInPITFDSBs2xOj1KB3vr0B3LNHpc%3D; expires=Fri, 01-Dec-2023 03:11:26 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
worstideatum.com/reA3n475k3U/70849
200 OK 20 B URL GET HTTP/1.1 worstideatum.com/reA3n475k3U/70849
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectworstideatum.com
Fingerprint56:54:A5:6C:79:64:02:44:9A:17:E2:08:6E:8F:36:A8:14:F4:83:BE
ValidityWed, 27 Sep 2023 23:17:51 GMT - Tue, 26 Dec 2023 23:17:50 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /reA3n475k3U/70849 HTTP/1.1
Host: worstideatum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 03:11:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dood.ws
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Fri, 01-Dec-2023 03:11:26 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE8QtLULt3Wvi55AbCmBkBeS2J%2FbVxczMKOU4rIA24Cia0xXm%2FZsmmsLeoGHETx76EHiZ%2FqBIri%2BgKPHYUxOql4Wn9c%2FY7c1yOJ4c%2FZb3cUt2YpP4JV9LzFInPITFDSBs2xOj1KB3vr0B3LNHpc%3D; expires=Fri, 01-Dec-2023 03:11:26 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
200 OK 97 kB URL GET HTTP/2 d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash 014bf11cd35483bf46997560cc297bbc
e21558457c3d22ff85146c2454cf04db4b11951e
e73ac6b786e555cabd28738037f2d6764d17c6f5e49ff4a11ce084363143f757
GET /?srvfd=908056 HTTP/1.1
Host: d1f05vr3sjsuy7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 97252
date: Thu, 30 Nov 2023 03:11:26 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vDzUvLxtcqQpgFG0sTX05G35-ZFlrj16bpAh7F_G4A5CEgQkf6egFg==
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524\012- data
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:11:26 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Fri, 29 Dec 2023 03:48:43 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 68351
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OwYSTFAgm8aektAsPkSZFsUe1d7dQHUpTyj5ML8WpXzzSVFE1Gc%2BCaQ6j%2FiqH3Xh71rUdGLCCCC2wCiECmm2sV5oBYt%2FbtH72LvoW6g5%2BWUPe2VpyqgAgpEcEPugUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe7308da15689-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/theme_2/css/bootstrap.min.css
200 OK 48 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/bootstrap.min.css
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65324)
Hash 7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6
GET /theme_2/css/bootstrap.min.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:26 GMT
content-type: text/css
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Wed, 27 Nov 2024 04:05:13 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
cf-cache-status: HIT
age: 77636
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n55Z8KpMGoWFEG0GmSQonhQuNsSdPM2dfSnVRPd83LybBdveS1YBvAzP4O%2BuOs2OfJgva68Y1dau9aQSPIjmVmzaoHDEqXzLeCqYRfHkgekLVaS8Jy%2FNQOzEcKyMzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe72e4a28b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
forfeitsubscribe.com/06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js
200 OK 17 kB URL GET HTTP/1.1 forfeitsubscribe.com/06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectforfeitsubscribe.com
Fingerprint82:B2:D8:34:F6:E3:2B:C7:7B:42:8E:0F:C8:FB:E1:E9:FC:49:04:1B
ValidityTue, 28 Nov 2023 06:52:30 GMT - Mon, 26 Feb 2024 06:52:29 GMT
File type ASCII text, with very long lines (40887), with no line terminators
Hash 08dab7dcd05b622c58fb7643ef47acaa
7b0e78a88cb2a59c6c791c1aee563ce4d2422dd4
8ada2868b2dbef58dc877a7805ffeebd6960eb7961b826969ed189d71a6fbce7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js HTTP/1.1
Host: forfeitsubscribe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:11:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9620ee1464b9d6bdffbb6336a55090cf
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
forfeitsubscribe.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js
200 OK 14 kB URL GET HTTP/1.1 forfeitsubscribe.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectforfeitsubscribe.com
Fingerprint82:B2:D8:34:F6:E3:2B:C7:7B:42:8E:0F:C8:FB:E1:E9:FC:49:04:1B
ValidityTue, 28 Nov 2023 06:52:30 GMT - Mon, 26 Feb 2024 06:52:29 GMT
File type ASCII text, with very long lines (37793), with no line terminators
Hash c3e8a941bc0fa06ebe872d3d7a7ae185
55c92ed65ba049bfaeccf14e0dd9f741f71be072
3829ef61838eab770e5d067a9310eabc878dbd2827eb4f8ac3f3b137961cee0b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /2c/03/60/2c0360ed33b0b4736859081c701f9a91.js HTTP/1.1
Host: forfeitsubscribe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:11:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6bedc2430ec940995dea0a764567eebb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 11f1cefc6a977aff70dcee6e3053971b
fadcace67ec2986fd9ad0453fa87974b0d2399f4
c3b6ddae385f796f128e8510708877dd251b45a8b8ed0b12b5c3db9563dd0fa6
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dood.ws
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=7d053f0d-9578-4540-b9d5-2fa6e0546158:3:1; expires=Sun, 27 Nov 2033 03:11:27 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9b0b96b906903d3fb6eee9220eb841d3
535162eec725bfe724c0b35dcfbcf85184b99b15
ffc90717a40a30e2f517365fcb296bacd3dfe8f0721dd41fd95ca0e1a2ab1929
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dood.ws
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=7b564987-dc81-4044-9403-036dc4578511:2:1; expires=Sun, 27 Nov 2033 03:11:27 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
thethateronjus.com/YnZkazFNSQcYDDUYLV5+Nh4SOVYROSU8XSE1NV9/AyMtKXAzBUIfWAZLXVsJUkNSTUELEllaFxECBR9EEUtVTVgMEAtWFxRLVUUCVlhXXx9SUBFWAEQCFApWX0dCG0UWGllaBlJHV1oCWk9VXQhV
204 No Content 0 B URL GET HTTP/2 thethateronjus.com/YnZkazFNSQcYDDUYLV5+Nh4SOVYROSU8XSE1NV9/AyMtKXAzBUIfWAZLXVsJUkNSTUELEllaFxECBR9EEUtVTVgMEAtWFxRLVUUCVlhXXx9SUBFWAEQCFApWX0dCG0UWGllaBlJHV1oCWk9VXQhV
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectthethateronjus.com
Fingerprint82:8D:02:28:9C:46:8E:23:CC:97:0B:83:3E:AA:C0:6D:6A:0B:B1:5C
ValidityMon, 27 Nov 2023 16:41:03 GMT - Sun, 25 Feb 2024 16:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /YnZkazFNSQcYDDUYLV5+Nh4SOVYROSU8XSE1NV9/AyMtKXAzBUIfWAZLXVsJUkNSTUELEllaFxECBR9EEUtVTVgMEAtWFxRLVUUCVlhXXx9SUBFWAEQCFApWX0dCG0UWGllaBlJHV1oCWk9VXQhV HTTP/1.1
Host: thethateronjus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 03:11:27 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qyUh4X1j0blJTXE66lceI3hDLA1y1s%2BvlaibonjEjA5OT95gDgy%2FuaMyONgz3qnm7VE7OeffCL33RuDrwo%2FkA3Lte4SM8VuvitYqbWJnnj1ypESvMYMxVymEzLBylbDEkB1jF%2Bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe7340bbbb51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
orgotitedu.info/dGFFeTMVAyYUDBVcJ19GBg14XAEyRHc/V0UHdUxFBlI2E0ABGHJXUBgOMB1VBg4rDR0aBDFcATIEES9bRjsTEkY6GSI9aR4KPTxfHAYjLnEzNAJAQTkGEDJ9DlApNAIyEQsAC1FTBzBJPTgjHnoSMR07XCEgLk16DlgJKEkDCwpJRyEHPA4LMictDVINFgI6WT4WCQ5QPzE/FlozMzIMehpVATt0JQYLDkQ5LxY8BiFQJh9WPDsCKHQAWCY4djkvPBIANTMfQVVGBhw8awxEdz9SMQUTHQBFWBcqV0wHdx5xMCUhTlEyLxI+ARwQFxECAgQdSHU+Uj1cATIABFRiIAcNTWkmUBMKakYJIyh0AFgVAX4zLCwzCiYiCwtVIw0CL2QcWCQvfSwAFgpLNiAEXAEyKCw7ZyIZfEFSMS8JGGQHFRZIYlILNhZdBFwATQMOFg0/WCE
200 OK 1.2 kB URL GET HTTP/2 orgotitedu.info/dGFFeTMVAyYUDBVcJ19GBg14XAEyRHc/V0UHdUxFBlI2E0ABGHJXUBgOMB1VBg4rDR0aBDFcATIEES9bRjsTEkY6GSI9aR4KPTxfHAYjLnEzNAJAQTkGEDJ9DlApNAIyEQsAC1FTBzBJPTgjHnoSMR07XCEgLk16DlgJKEkDCwpJRyEHPA4LMictDVINFgI6WT4WCQ5QPzE/FlozMzIMehpVATt0JQYLDkQ5LxY8BiFQJh9WPDsCKHQAWCY4djkvPBIANTMfQVVGBhw8awxEdz9SMQUTHQBFWBcqV0wHdx5xMCUhTlEyLxI+ARwQFxECAgQdSHU+Uj1cATIABFRiIAcNTWkmUBMKakYJIyh0AFgVAX4zLCwzCiYiCwtVIw0CL2QcWCQvfSwAFgpLNiAEXAEyKCw7ZyIZfEFSMS8JGGQHFRZIYlILNhZdBFwATQMOFg0/WCE
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectorgotitedu.info
Fingerprint79:CC:FF:0E:F4:F4:8A:D7:72:F6:75:7A:06:B2:F5:7A:84:55:95:F5
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3035), with no line terminators
Hash 00052d740abc8eb9a6e6688079cff439
aa92e20d3a070a43486679719d58a49848993aaa
fb48bf3912b71e0e15cbad4cec4b45b12a84e7733259501321f32dc858b80e03
GET /dGFFeTMVAyYUDBVcJ19GBg14XAEyRHc/V0UHdUxFBlI2E0ABGHJXUBgOMB1VBg4rDR0aBDFcATIEES9bRjsTEkY6GSI9aR4KPTxfHAYjLnEzNAJAQTkGEDJ9DlApNAIyEQsAC1FTBzBJPTgjHnoSMR07XCEgLk16DlgJKEkDCwpJRyEHPA4LMictDVINFgI6WT4WCQ5QPzE/FlozMzIMehpVATt0JQYLDkQ5LxY8BiFQJh9WPDsCKHQAWCY4djkvPBIANTMfQVVGBhw8awxEdz9SMQUTHQBFWBcqV0wHdx5xMCUhTlEyLxI+ARwQFxECAgQdSHU+Uj1cATIABFRiIAcNTWkmUBMKakYJIyh0AFgVAX4zLCwzCiYiCwtVIw0CL2QcWCQvfSwAFgpLNiAEXAEyKCw7ZyIZfEFSMS8JGGQHFRZIYlILNhZdBFwATQMOFg0/WCE HTTP/1.1
Host: orgotitedu.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1187
date: Thu, 30 Nov 2023 03:11:27 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UPo5wT0Y05kEKCtkfSLtmdp47TOcByijzTmzoRYB6mgg6AVnyW1guQ==
X-Firefox-Spdy: h2
thethateronjus.com/N1pJOEgYZSpLdVIxB2AtYCoDXB8OERxTPAY4eQksZAITXxxbbm9MIVNncA98BW56HjhePnQJcBEpPVk8Qil0CW5eNC9XdREsdAlmB3R7FnwRL3QJbkMqKF91Bnw5TDxbZ3gPeAZpeAtwDmt+CXA
204 No Content 0 B URL GET HTTP/2 thethateronjus.com/N1pJOEgYZSpLdVIxB2AtYCoDXB8OERxTPAY4eQksZAITXxxbbm9MIVNncA98BW56HjhePnQJcBEpPVk8Qil0CW5eNC9XdREsdAlmB3R7FnwRL3QJbkMqKF91Bnw5TDxbZ3gPeAZpeAtwDmt+CXA
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectthethateronjus.com
Fingerprint82:8D:02:28:9C:46:8E:23:CC:97:0B:83:3E:AA:C0:6D:6A:0B:B1:5C
ValidityMon, 27 Nov 2023 16:41:03 GMT - Sun, 25 Feb 2024 16:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /N1pJOEgYZSpLdVIxB2AtYCoDXB8OERxTPAY4eQksZAITXxxbbm9MIVNncA98BW56HjhePnQJcBEpPVk8Qil0CW5eNC9XdREsdAlmB3R7FnwRL3QJbkMqKF91Bnw5TDxbZ3gPeAZpeAtwDmt+CXA HTTP/1.1
Host: thethateronjus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 03:11:27 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UXQ9HL7zmz906M2VoKMvo67PQdDNjw%2FoPS%2FyImdiNv91l3paMjb0y3cTTC1BVI2TNj0loGzHKrt0y6Iou2FsA528YDrQQGiJpXYzYdJeKuZLPfEsTFTm8jbzDh1u57YtCROcWtg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe7342be3b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
thethateronjus.com/WmlIZ2V1VisUWABYIFUoDScbBQ4XLx9WLzI9PwM0DD44IiQ2IG4TDD5UcVdUaFxwQRUzDXVVXHwaPAYRLxp1VkMzBy4IWHwfdVZLakd+V0tpTz1aVHwdOAYCZ1huFxEuBXVWUmpYe1ZWYlB5UFZi
204 No Content 0 B URL GET HTTP/2 thethateronjus.com/WmlIZ2V1VisUWABYIFUoDScbBQ4XLx9WLzI9PwM0DD44IiQ2IG4TDD5UcVdUaFxwQRUzDXVVXHwaPAYRLxp1VkMzBy4IWHwfdVZLakd+V0tpTz1aVHwdOAYCZ1huFxEuBXVWUmpYe1ZWYlB5UFZi
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectthethateronjus.com
Fingerprint82:8D:02:28:9C:46:8E:23:CC:97:0B:83:3E:AA:C0:6D:6A:0B:B1:5C
ValidityMon, 27 Nov 2023 16:41:03 GMT - Sun, 25 Feb 2024 16:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WmlIZ2V1VisUWABYIFUoDScbBQ4XLx9WLzI9PwM0DD44IiQ2IG4TDD5UcVdUaFxwQRUzDXVVXHwaPAYRLxp1VkMzBy4IWHwfdVZLakd+V0tpTz1aVHwdOAYCZ1huFxEuBXVWUmpYe1ZWYlB5UFZi HTTP/1.1
Host: thethateronjus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 03:11:27 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FQA9D0f3n2o941wFEOQolFMKODdhonKcA3ZREslD7GQ12NGCkVYIKFMt3X1xR9MoUs2ZV2ElVrO3e6ZrTX8xwSIgogi9mLcblUA4N5niVsoeEi6B5Fup92UzAwuWEVQqQrdDdLg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe7344bf7b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
atherthishinhe.com/NjdCb3BXVSECT1cKIEkFRFt/SkJwEnApFAdRcloGRAQxBQNDTnVBE1pYNwsWRFgsG15YUjZKQnB6FiocB2EVOgZ8XzEVJ1xQJSonXlQkJxh+bgReAX9AG1kzTE9yLSRzXyQrHHB6EwAGVXIPBj1OZTQuIw51ITccYngTPhl6XCoVMXV+Mzw3ZHMOPEBuVgQpAWZmF1k0WHJnXTJ0cy0rP0x6IyMyf10gGDEGYAEqHXJNNSU5dV8TNQl4AhhfJkFhcRcYd101Izt1bgElG3QScC0VZEQqPjgDAhAoJnpRBRc3cAcASkJ0UhMmSHUEMlYlcW4sDihCcQ45PgJVB0IpbmYKWkV0TgwuFkFfBzUmdF4nOQhBYXEYBXNzGyA5BE8KKkFSDycqJlphChdEY3AmOTtfdgoiMXtdDzkyWH5xXkVnfzY5EVxPCzUxEF0xAB5GCjILNAZHcgsfVQ50GCZu
200 OK 1.2 kB URL GET HTTP/2 atherthishinhe.com/NjdCb3BXVSECT1cKIEkFRFt/SkJwEnApFAdRcloGRAQxBQNDTnVBE1pYNwsWRFgsG15YUjZKQnB6FiocB2EVOgZ8XzEVJ1xQJSonXlQkJxh+bgReAX9AG1kzTE9yLSRzXyQrHHB6EwAGVXIPBj1OZTQuIw51ITccYngTPhl6XCoVMXV+Mzw3ZHMOPEBuVgQpAWZmF1k0WHJnXTJ0cy0rP0x6IyMyf10gGDEGYAEqHXJNNSU5dV8TNQl4AhhfJkFhcRcYd101Izt1bgElG3QScC0VZEQqPjgDAhAoJnpRBRc3cAcASkJ0UhMmSHUEMlYlcW4sDihCcQ45PgJVB0IpbmYKWkV0TgwuFkFfBzUmdF4nOQhBYXEYBXNzGyA5BE8KKkFSDycqJlphChdEY3AmOTtfdgoiMXtdDzkyWH5xXkVnfzY5EVxPCzUxEF0xAB5GCjILNAZHcgsfVQ50GCZu
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectatherthishinhe.com
Fingerprint24:51:A0:C2:53:EA:9C:3F:AF:A6:4C:DC:B9:E3:2B:B2:B6:EE:3C:93
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3047), with no line terminators
Hash 7b5041e981cddf8f3c18588c138fe5a1
2583ecf5687fd80d8c7b0e9a98ea3acdf8f7c72b
3cf1fba852365ee472dc21d107431a6e18f3eef0bdbfae470de0b30e913b587c
GET /NjdCb3BXVSECT1cKIEkFRFt/SkJwEnApFAdRcloGRAQxBQNDTnVBE1pYNwsWRFgsG15YUjZKQnB6FiocB2EVOgZ8XzEVJ1xQJSonXlQkJxh+bgReAX9AG1kzTE9yLSRzXyQrHHB6EwAGVXIPBj1OZTQuIw51ITccYngTPhl6XCoVMXV+Mzw3ZHMOPEBuVgQpAWZmF1k0WHJnXTJ0cy0rP0x6IyMyf10gGDEGYAEqHXJNNSU5dV8TNQl4AhhfJkFhcRcYd101Izt1bgElG3QScC0VZEQqPjgDAhAoJnpRBRc3cAcASkJ0UhMmSHUEMlYlcW4sDihCcQ45PgJVB0IpbmYKWkV0TgwuFkFfBzUmdF4nOQhBYXEYBXNzGyA5BE8KKkFSDycqJlphChdEY3AmOTtfdgoiMXtdDzkyWH5xXkVnfzY5EVxPCzUxEF0xAB5GCjILNAZHcgsfVQ50GCZu HTTP/1.1
Host: atherthishinhe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1200
date: Thu, 30 Nov 2023 03:11:27 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wIeIvOwu6LgEnYhX1Waib9A4oaqNwEFFIveYV9eSYAXQcbFMeVHgNg==
X-Firefox-Spdy: h2
atherthishinhe.com/UktlRFMzKQYpbDN2B2ImICdYYWEUblcCN2MtVXElIHgWLiAnMlJqMD4kECA1ICQLMH08LhFhYRQGB3QWYBEhCR4eJwIHFxA4ChE/OQAyDAYXHiQGGRl7MAgLAHJdIRJjLiccP2oCCBEECHssIQVjAR0BEjoYJBcKHhoJHREbLBESFQN/CRIVOQM2EAEKHDNwEh16XQ0LJX4OBhAbDDQcFgYdAgobHCddDwUlClcWBhcJPT1qERo0AjUxCj8PEmI7HCAWFwk9Pgk0CAISMQgKMCkVPnodED8bAzYqGWIaNAI1H3snBhIRfhIGPxcvPXY0Bh0CCRoYDUgRAwoOFT4wFBIhHD0XDDMVHTcRJBYGBBo8PgYlAQYCYQMOLCMZNC8nLAYUGRV8ESVtDzc8PDtYCjo/IV0OFQQy
200 OK 1.2 kB URL GET HTTP/2 atherthishinhe.com/UktlRFMzKQYpbDN2B2ImICdYYWEUblcCN2MtVXElIHgWLiAnMlJqMD4kECA1ICQLMH08LhFhYRQGB3QWYBEhCR4eJwIHFxA4ChE/OQAyDAYXHiQGGRl7MAgLAHJdIRJjLiccP2oCCBEECHssIQVjAR0BEjoYJBcKHhoJHREbLBESFQN/CRIVOQM2EAEKHDNwEh16XQ0LJX4OBhAbDDQcFgYdAgobHCddDwUlClcWBhcJPT1qERo0AjUxCj8PEmI7HCAWFwk9Pgk0CAISMQgKMCkVPnodED8bAzYqGWIaNAI1H3snBhIRfhIGPxcvPXY0Bh0CCRoYDUgRAwoOFT4wFBIhHD0XDDMVHTcRJBYGBBo8PgYlAQYCYQMOLCMZNC8nLAYUGRV8ESVtDzc8PDtYCjo/IV0OFQQy
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectatherthishinhe.com
Fingerprint24:51:A0:C2:53:EA:9C:3F:AF:A6:4C:DC:B9:E3:2B:B2:B6:EE:3C:93
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3014), with no line terminators
Hash 1de4059f93fa88b0f75435bcf5d63f3a
483d45ad8f5b1933977acfe190b225379913227e
2515140a700262b14bb993bf8c56a76540a8711e29c05cb0947161d6bfb9a033
GET /UktlRFMzKQYpbDN2B2ImICdYYWEUblcCN2MtVXElIHgWLiAnMlJqMD4kECA1ICQLMH08LhFhYRQGB3QWYBEhCR4eJwIHFxA4ChE/OQAyDAYXHiQGGRl7MAgLAHJdIRJjLiccP2oCCBEECHssIQVjAR0BEjoYJBcKHhoJHREbLBESFQN/CRIVOQM2EAEKHDNwEh16XQ0LJX4OBhAbDDQcFgYdAgobHCddDwUlClcWBhcJPT1qERo0AjUxCj8PEmI7HCAWFwk9Pgk0CAISMQgKMCkVPnodED8bAzYqGWIaNAI1H3snBhIRfhIGPxcvPXY0Bh0CCRoYDUgRAwoOFT4wFBIhHD0XDDMVHTcRJBYGBBo8PgYlAQYCYQMOLCMZNC8nLAYUGRV8ESVtDzc8PDtYCjo/IV0OFQQy HTTP/1.1
Host: atherthishinhe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1171
date: Thu, 30 Nov 2023 03:11:27 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vteFVLK2l3ooT6Lheh4OIIoLi4tZa5Lz8_-F7U-V3vBDhxRcwrIZAw==
X-Firefox-Spdy: h2
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: bc3f52d893d4440d1877738d1be8bc27
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 03:11:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WAoLLnU7Cidb4V47Fo8FDVpbpXDJhNMmfUvcEJzdk%2BmlAANKrVdTvTcihA35gvlsOJcOBcW9xmtUbC2DSzT%2F7UpgZJnK5i%2BLFNAmfynZg9rRgaZt%2FNK7q4u7GSFMtTbmU6TXz7DTrY9PdSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe7363e0a568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dood.ws/favicon.ico
200 OK 15 kB IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint8A:CC:11:77:D4:E8:BA:E2:38:BE:E4:86:5D:9A:0C:E4:61:B7:A7:15
ValiditySat, 08 Apr 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico HTTP/1.1
Host: dood.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Cookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=7b564987-dc81-4044-9403-036dc4578511%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: image/x-icon
content-length: 15406
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Wed, 27 Dec 2023 10:15:21 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 233765
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=odOVK4beIRRJJiSTInHVGOukhizbwb0HmYL7z0p6KswR2PdnkcW2GJrZ5zAeDqDplkWyKTd2GODN0J35nG%2F3L04uXgq9yRnEKEkg7WiOO5CawxW%2BKfguwN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73738561c02-OSL
alt-svc: h3=":443"; ma=86400
dood.ws/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 3.4 kB URL GET HTTP/3 dood.ws/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint8A:CC:11:77:D4:E8:BA:E2:38:BE:E4:86:5D:9A:0C:E4:61:B7:A7:15
ValiditySat, 08 Apr 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
Hash 7ecb391fe69c2add5580b7cd634eab17
6f7899072d7e8e165c517c16abd4fbca7e4af07b
b1ed884bcbd324b7dcf5278d41628019e115e64474e7b36849d188d033e74275
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dood.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 30 Nov 2023 03:11:27 GMT
access-control-allow-origin: *
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E8Xsj0ZrrB2MQehalUzBvNjoO5qlcg7rVHtjSddH7UHi5YL0ZAVgz1MIkKVcZ8c5fcBA%2FOZ3XwqYWtcQisZP6ONMUmy43%2BDxw9YESItK3kR0CHTenJCTfrA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe734e8091c02-OSL
alt-svc: h3=":443"; ma=86400
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:DSzXMbeFMtslwEJd8wc67ddAQGTTJw:dSDmkMXm6sCDQBsB; Expires=Sat, 29-Nov-2025 03:11:27 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 03:11:27 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3Wf6XxOWEHmYJN2u2fqfHBcKV9AN8SFZNHnJCPvh6sBu4uYm6hdAY7720cEjRd-SO8gcOAKA
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-Olbt_jRJG5K5ai3O4YErHQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d1f05vr3sjsuy7.cloudfront.net/eTVh2ZVkuNxgDZjkxElhgfWBGUG9rMgUKNz1lM1FpNy8+IzIYfgIfPXBoUAk4Iz9LQzwjO0tUfyw8FFhtaywGCjJwLwcKPzoiGRwuIn4DBGQgNwwMNSE5U1cfeHZGQGt9cAEMNyk3ARZ8f2gYEXx/aEdVd319RSd8f2gBDDd7bFNWG2hqRh1veX1FJ3x/aA-QTfH4ZR1VsY2hfQGt9PxMGMiJ9RCNrfWlGVWh9aVNXaSsxBAA/IiBTVx98aENLaWstS1Q
620 B URL d1f05vr3sjsuy7.cloudfront.net/eTVh2ZVkuNxgDZjkxElhgfWBGUG9rMgUKNz1lM1FpNy8+IzIYfgIfPXBoUAk4Iz9LQzwjO0tUfyw8FFhtaywGCjJwLwcKPzoiGRwuIn4DBGQgNwwMNSE5U1cfeHZGQGt9cAEMNyk3ARZ8f2gYEXx/aEdVd319RSd8f2gBDDd7bFNWG2hqRh1veX1FJ3x/aA-QTfH4ZR1VsY2hfQGt9PxMGMiJ9RCNrfWlGVWh9aVNXaSsxBAA/IiBTVx98aENLaWstS1Q
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (853), with no line terminators
Hash b98ee28c22fe5c7e002428dae19abed7
7b85c986129df897aeed7b51be92e517ccf80915
4828da11dac5c5ffdadfdac94bc02d8db2ce4091f1b472c392eb3bbe5a39f172
GET /eTVh2ZVkuNxgDZjkxElhgfWBGUG9rMgUKNz1lM1FpNy8+IzIYfgIfPXBoUAk4Iz9LQzwjO0tUfyw8FFhtaywGCjJwLwcKPzoiGRwuIn4DBGQgNwwMNSE5U1cfeHZGQGt9cAEMNyk3ARZ8f2gYEXx/aEdVd319RSd8f2gBDDd7bFNWG2hqRh1veX1FJ3x/aA-QTfH4ZR1VsY2hfQGt9PxMGMiJ9RCNrfWlGVWh9aVNXaSsxBAA/IiBTVx98aENLaWstS1Q HTTP/1.1
Host: d1f05vr3sjsuy7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://orgotitedu.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 620
date: Thu, 30 Nov 2023 03:11:27 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nA38NLaq1uKIXR1wVyytALkWgnlMzS57DcEiw4vhKept5IQqiKOtOg==
X-Firefox-Spdy: h2
d1f05vr3sjsuy7.cloudfront.net/MTEl1VWUvJhszWjggEWhcfHhHYF1qIwY6Czx0BTEhfDlFMQovcEMiMxRvAS8BcXlTOQQiLkhzACIqSGRDLS0XaFFqPQU6DnE+BDoDOzMaLBIjbwA0WCEmDzwJIChQZyN5Z0VwV3xhAjwLKCYCJkB+eRshQH55RGVLfGxGF0B+eQI8C3p9UGYnaXtFLVN4bE-YXQH55ByNAfwhEZVBieVxwV3wuEDYOI2xHE1d8eEVlVHx4UGdVKiAHMAMjMVBnI315QHtVajxIZA
442 B URL d1f05vr3sjsuy7.cloudfront.net/MTEl1VWUvJhszWjggEWhcfHhHYF1qIwY6Czx0BTEhfDlFMQovcEMiMxRvAS8BcXlTOQQiLkhzACIqSGRDLS0XaFFqPQU6DnE+BDoDOzMaLBIjbwA0WCEmDzwJIChQZyN5Z0VwV3xhAjwLKCYCJkB+eRshQH55RGVLfGxGF0B+eQI8C3p9UGYnaXtFLVN4bE-YXQH55ByNAfwhEZVBieVxwV3wuEDYOI2xHE1d8eEVlVHx4UGdVKiAHMAMjMVBnI315QHtVajxIZA
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (598), with no line terminators
Hash c7f53e5ca2f44ea57bf286ca0c48aa4e
e58c25737d41a92d4c628b3ab140d9328682b302
dc20bd21f1066ec22b7ce0832979aa583cc7acf63ec3e75f1d2eb79b9e088188
GET /MTEl1VWUvJhszWjggEWhcfHhHYF1qIwY6Czx0BTEhfDlFMQovcEMiMxRvAS8BcXlTOQQiLkhzACIqSGRDLS0XaFFqPQU6DnE+BDoDOzMaLBIjbwA0WCEmDzwJIChQZyN5Z0VwV3xhAjwLKCYCJkB+eRshQH55RGVLfGxGF0B+eQI8C3p9UGYnaXtFLVN4bE-YXQH55ByNAfwhEZVBieVxwV3wuEDYOI2xHE1d8eEVlVHx4UGdVKiAHMAMjMVBnI315QHtVajxIZA HTTP/1.1
Host: d1f05vr3sjsuy7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://atherthishinhe.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 442
date: Thu, 30 Nov 2023 03:11:27 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XPKzDB4ntLd9HS6Vsb4kFekLCdTgdSu2fZyjdfGUpnFnUOGLjNI_7g==
X-Firefox-Spdy: h2
atherthishinhe.com/utx?cb=el0G2oDzvyzN&top=dood.ws&tid=901258
204 No Content 0 B URL GET HTTP/2 atherthishinhe.com/utx?cb=el0G2oDzvyzN&top=dood.ws&tid=901258
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectatherthishinhe.com
Fingerprint24:51:A0:C2:53:EA:9C:3F:AF:A6:4C:DC:B9:E3:2B:B2:B6:EE:3C:93
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=el0G2oDzvyzN&top=dood.ws&tid=901258 HTTP/1.1
Host: atherthishinhe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 03:11:27 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://dood.ws
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Thu, 30 Nov 2023 03:12:27 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kZUD1wwWKRR9cLWd6XkNDj5qgOba2B1kB7PS6aJbeB4aocjwUjclGQ==
X-Firefox-Spdy: h2
d1f05vr3sjsuy7.cloudfront.net/Mb0E2ZDMMLlgCDBsoUlkKWHUEUABJK0ULXR98eA1eBXl8ImUWZ0IeV1JxEAhSASYLQlYBIgtVFQ4lVFkHSTRXWV4AO18IXw5kBCIGQXETVgNHNl8KVwA2RUEBXy9CQQFfcAZKA0pydEEBXzZfCgVbZAUmFl1xTlIHSnJ0QQFfM0BBAC5wBlEdX2gTVgMIJF-UPXEpzcFYDXnEGVQNeZARUVQYzUwJcF2QEIgJfdBhUFRp8Bw
258 B URL d1f05vr3sjsuy7.cloudfront.net/Mb0E2ZDMMLlgCDBsoUlkKWHUEUABJK0ULXR98eA1eBXl8ImUWZ0IeV1JxEAhSASYLQlYBIgtVFQ4lVFkHSTRXWV4AO18IXw5kBCIGQXETVgNHNl8KVwA2RUEBXy9CQQFfcAZKA0pydEEBXzZfCgVbZAUmFl1xTlIHSnJ0QQFfM0BBAC5wBlEdX2gTVgMIJF-UPXEpzcFYDXnEGVQNeZARUVQYzUwJcF2QEIgJfdBhUFRp8Bw
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5c08ae976e8aff9acdcdb4a60decabbc
95c6b75881058c1beb26b05d40696927ed76efdb
13a1f98a2135109d23bbf7ae3aab8d82a104a384ec174bf79d0de99b95f1f09d
GET /Mb0E2ZDMMLlgCDBsoUlkKWHUEUABJK0ULXR98eA1eBXl8ImUWZ0IeV1JxEAhSASYLQlYBIgtVFQ4lVFkHSTRXWV4AO18IXw5kBCIGQXETVgNHNl8KVwA2RUEBXy9CQQFfcAZKA0pydEEBXzZfCgVbZAUmFl1xTlIHSnJ0QQFfM0BBAC5wBlEdX2gTVgMIJF-UPXEpzcFYDXnEGVQNeZARUVQYzUwJcF2QEIgJfdBhUFRp8Bw HTTP/1.1
Host: d1f05vr3sjsuy7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://atherthishinhe.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 258
date: Thu, 30 Nov 2023 03:11:27 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KNqqyN_5qOgUxIrtOJjdKgxAD-ThJSKo01YsuQlT_HxKTxTqWl_M3Q==
X-Firefox-Spdy: h2
orgotitedu.info/utx?cb=NZRqzk3TUGo2&top=dood.ws&tid=908056
204 No Content 0 B URL GET HTTP/2 orgotitedu.info/utx?cb=NZRqzk3TUGo2&top=dood.ws&tid=908056
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectorgotitedu.info
Fingerprint79:CC:FF:0E:F4:F4:8A:D7:72:F6:75:7A:06:B2:F5:7A:84:55:95:F5
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=NZRqzk3TUGo2&top=dood.ws&tid=908056 HTTP/1.1
Host: orgotitedu.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 03:11:27 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://dood.ws
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Thu, 30 Nov 2023 03:12:27 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ab6e0yZhxqqanEZYigEb0hC0YpbGMUt1vcnehWGoZV32YCLIJN0wyw==
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3Wf6XxOWEHmYJN2u2fqfHBcKV9AN8SFZNHnJCPvh6sBu4uYm6hdAY7720cEjRd-SO8gcOAKA
302 Found 408 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3Wf6XxOWEHmYJN2u2fqfHBcKV9AN8SFZNHnJCPvh6sBu4uYm6hdAY7720cEjRd-SO8gcOAKA
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (397)
Hash 80fb3b13003061a8d32859950f16422c
ec64d978b9c504385038925b1e1ce3e12eea3e9c
29f625aaece2a1134cc54b6c2028615f2a22ef449d9ad4daf2c183f75256ffb4
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3Wf6XxOWEHmYJN2u2fqfHBcKV9AN8SFZNHnJCPvh6sBu4uYm6hdAY7720cEjRd-SO8gcOAKA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:aDDxORmbMLWnncwuUing9N98_bmN7w:6dU5ETdZ8QWr_QUu;Path=/;Expires=Sat, 29-Nov-2025 03:11:28 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 03:11:28 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0EZQ_CJ5o-DJ5chFYRoMHj2eTZ8vFMMPSLm5oz4b536KKjnlCYaxY9SJjEGVkVBPd-jBhs&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1192145913%3A1701313888134539&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-AQQa983i0WSFIHj8LyQj0Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 408
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp04-u6V09N7Y15aHEJ1BXDhk67KhUWovcTMTJBhdd61VgI4XwJf1djhsjDCwlCRQlDBVJKuTw
302 Found 399 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp04-u6V09N7Y15aHEJ1BXDhk67KhUWovcTMTJBhdd61VgI4XwJf1djhsjDCwlCRQlDBVJKuTw
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (393)
Hash 60fafa91c2e3a4c7144307392c5b39e4
a9ae3cef80e98d71915987c73de58aff6d91f472
fb1b6063e38f5a5cb5336b537d919622dfacd0600366f6b21a573c7d78fabc28
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp04-u6V09N7Y15aHEJ1BXDhk67KhUWovcTMTJBhdd61VgI4XwJf1djhsjDCwlCRQlDBVJKuTw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:YI5fJxiIu9J0pMSNjsP7OS-Lax4dWg:WYsgItwsh6-a4-1F;Path=/;Expires=Sat, 29-Nov-2025 03:11:28 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 03:11:28 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp22yAPaXMmgV51ll8tEL8u3t-nXdy1zrGrDyVO57FT7G-HlQhQq67xoL81Y6l-HqqsiXmlf&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-134125010%3A1701313888137273&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-vZ4qTob-SyJiznvzvhQqkA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 399
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
atherthishinhe.com/multi?cs=VjBYZXBjBm1RSGMJYVNDZAJqVkE&abt=0&red=1&sm=76&k=&v=1.0.60.3&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&fs=1&mbkb=124.53300124533&ref=https%3A%2F%2Fdood.ws%2Fe%2Fco6xhkyifwpbgn4666jasejeadw4oerg%27%2C%27https%3A%2Fdood.ws%2Fe%2F34psics9ya41kju9c0qdjb5bj62m8n0e%27%2C%27https%3A%2Fdood.ws%2Fe%2Frvjj4mjdm3x9qgu610rt5texgxfdddcw%27%2C%27https%3A%2Fdood.ws%2Fe%2Fwrmbcoid9zh0y5ry8t7fc4ubgftevsza%27%2C%27https%3A%2Fdood.ws%2Fe%2Fclgrynmy92d7akgwkeqbl14nwtku80ud%27%2C%27https%3A%2Fdood.ws%2Fe%2Fiktspanwksaq7gmtno0nxfge4d036nbz%27%2C%27https%3A%2Fdood.ws%2Fe%2F52efa1dusg177a0p4sdg9d74hw69hywa%27%2C%27https%3A%2Fdood.ws%2Fe%2Fkwndzg1pefrebqb51e4q7yv51qbs8a7n%27%2C%27https%3A%2Fdood.ws%2Fe%2Fl7xom59m6qqqqn2u4vzpdo1y9cdwk7h7%27%2C%27https%3A%2Fdood.ws%2Fe%2Faobf7q0nrnisoaa4k1mxxvmmmxbftpci%27%2C%27https%3A%2Fdood.ws%2Fe%2Fhrbxblkw128scdt8e7fkaru0oun9yr7m%27%2C%27https%3A%2Fdood.ws%2Fe%2F96bamza0zshmq8z3ghpwhncb9w8fjslp%27%2C%27https%3A%2Fdood.ws%2Fe%2Ffu3td9rsq1sqx6a470o2g3h0x58bo6gn%27%2C%27https%3A%2Fdood.ws%2Fe%2Fwr47i3qygv7sisc3gek4jxmsyks7ryr8%27%2C%27https%3A%2Fdood.ws%2Fe%2Fdrmia3p4hu2rjvy7jdr80hkmsxzr1yy2%27%2C%27https%3A%2Fdood.ws%2Fe%2F3amlu49tr9f4dir6wwvjw5dd8mwbb2sz%27%2C%27https%3A%2Fdood.ws%2Fe%2Fdaid5jjzq0ouydmz8gamldtycz95c190%27%2C%27https%3A%2Fdood.ws%2Fe%2Fbdk44ayaxact8zf7mhqjgvgs1cc2ja0j%27%2C%27https%3A%2Fdood.ws%2Fe%2Fw4p4xz3t5of7qutm0xe5etxgtrgrm6uu%27%2C%27https%3A%2Fdood.ws%2Fe%2Ftiujz89s3ro2the5som65oaf2jjzbem2&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_J1HK=1701313892504&crc=1
200 OK 1.6 kB URL GET HTTP/2 atherthishinhe.com/multi?cs=VjBYZXBjBm1RSGMJYVNDZAJqVkE&abt=0&red=1&sm=76&k=&v=1.0.60.3&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&fs=1&mbkb=124.53300124533&ref=https%3A%2F%2Fdood.ws%2Fe%2Fco6xhkyifwpbgn4666jasejeadw4oerg%27%2C%27https%3A%2Fdood.ws%2Fe%2F34psics9ya41kju9c0qdjb5bj62m8n0e%27%2C%27https%3A%2Fdood.ws%2Fe%2Frvjj4mjdm3x9qgu610rt5texgxfdddcw%27%2C%27https%3A%2Fdood.ws%2Fe%2Fwrmbcoid9zh0y5ry8t7fc4ubgftevsza%27%2C%27https%3A%2Fdood.ws%2Fe%2Fclgrynmy92d7akgwkeqbl14nwtku80ud%27%2C%27https%3A%2Fdood.ws%2Fe%2Fiktspanwksaq7gmtno0nxfge4d036nbz%27%2C%27https%3A%2Fdood.ws%2Fe%2F52efa1dusg177a0p4sdg9d74hw69hywa%27%2C%27https%3A%2Fdood.ws%2Fe%2Fkwndzg1pefrebqb51e4q7yv51qbs8a7n%27%2C%27https%3A%2Fdood.ws%2Fe%2Fl7xom59m6qqqqn2u4vzpdo1y9cdwk7h7%27%2C%27https%3A%2Fdood.ws%2Fe%2Faobf7q0nrnisoaa4k1mxxvmmmxbftpci%27%2C%27https%3A%2Fdood.ws%2Fe%2Fhrbxblkw128scdt8e7fkaru0oun9yr7m%27%2C%27https%3A%2Fdood.ws%2Fe%2F96bamza0zshmq8z3ghpwhncb9w8fjslp%27%2C%27https%3A%2Fdood.ws%2Fe%2Ffu3td9rsq1sqx6a470o2g3h0x58bo6gn%27%2C%27https%3A%2Fdood.ws%2Fe%2Fwr47i3qygv7sisc3gek4jxmsyks7ryr8%27%2C%27https%3A%2Fdood.ws%2Fe%2Fdrmia3p4hu2rjvy7jdr80hkmsxzr1yy2%27%2C%27https%3A%2Fdood.ws%2Fe%2F3amlu49tr9f4dir6wwvjw5dd8mwbb2sz%27%2C%27https%3A%2Fdood.ws%2Fe%2Fdaid5jjzq0ouydmz8gamldtycz95c190%27%2C%27https%3A%2Fdood.ws%2Fe%2Fbdk44ayaxact8zf7mhqjgvgs1cc2ja0j%27%2C%27https%3A%2Fdood.ws%2Fe%2Fw4p4xz3t5of7qutm0xe5etxgtrgrm6uu%27%2C%27https%3A%2Fdood.ws%2Fe%2Ftiujz89s3ro2the5som65oaf2jjzbem2&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_J1HK=1701313892504&crc=1
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerAmazon
Subjectatherthishinhe.com
Fingerprint24:51:A0:C2:53:EA:9C:3F:AF:A6:4C:DC:B9:E3:2B:B2:B6:EE:3C:93
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3337), with no line terminators
Hash 94340eb6524fab307a6053434081dfe9
99af4bbca16470c0f56e8743cefdc1a6a8303431
0ad2622279cfda97b9c448a4ccf59db1e37ff697c780849ca17c84c6213eda32
GET /multi?cs=VjBYZXBjBm1RSGMJYVNDZAJqVkE&abt=0&red=1&sm=76&k=&v=1.0.60.3&sts=0&prn=0&emb=0&tid=901258&rxy=1280_1024&fs=1&mbkb=124.53300124533&ref=https%3A%2F%2Fdood.ws%2Fe%2Fco6xhkyifwpbgn4666jasejeadw4oerg%27%2C%27https%3A%2Fdood.ws%2Fe%2F34psics9ya41kju9c0qdjb5bj62m8n0e%27%2C%27https%3A%2Fdood.ws%2Fe%2Frvjj4mjdm3x9qgu610rt5texgxfdddcw%27%2C%27https%3A%2Fdood.ws%2Fe%2Fwrmbcoid9zh0y5ry8t7fc4ubgftevsza%27%2C%27https%3A%2Fdood.ws%2Fe%2Fclgrynmy92d7akgwkeqbl14nwtku80ud%27%2C%27https%3A%2Fdood.ws%2Fe%2Fiktspanwksaq7gmtno0nxfge4d036nbz%27%2C%27https%3A%2Fdood.ws%2Fe%2F52efa1dusg177a0p4sdg9d74hw69hywa%27%2C%27https%3A%2Fdood.ws%2Fe%2Fkwndzg1pefrebqb51e4q7yv51qbs8a7n%27%2C%27https%3A%2Fdood.ws%2Fe%2Fl7xom59m6qqqqn2u4vzpdo1y9cdwk7h7%27%2C%27https%3A%2Fdood.ws%2Fe%2Faobf7q0nrnisoaa4k1mxxvmmmxbftpci%27%2C%27https%3A%2Fdood.ws%2Fe%2Fhrbxblkw128scdt8e7fkaru0oun9yr7m%27%2C%27https%3A%2Fdood.ws%2Fe%2F96bamza0zshmq8z3ghpwhncb9w8fjslp%27%2C%27https%3A%2Fdood.ws%2Fe%2Ffu3td9rsq1sqx6a470o2g3h0x58bo6gn%27%2C%27https%3A%2Fdood.ws%2Fe%2Fwr47i3qygv7sisc3gek4jxmsyks7ryr8%27%2C%27https%3A%2Fdood.ws%2Fe%2Fdrmia3p4hu2rjvy7jdr80hkmsxzr1yy2%27%2C%27https%3A%2Fdood.ws%2Fe%2F3amlu49tr9f4dir6wwvjw5dd8mwbb2sz%27%2C%27https%3A%2Fdood.ws%2Fe%2Fdaid5jjzq0ouydmz8gamldtycz95c190%27%2C%27https%3A%2Fdood.ws%2Fe%2Fbdk44ayaxact8zf7mhqjgvgs1cc2ja0j%27%2C%27https%3A%2Fdood.ws%2Fe%2Fw4p4xz3t5of7qutm0xe5etxgtrgrm6uu%27%2C%27https%3A%2Fdood.ws%2Fe%2Ftiujz89s3ro2the5som65oaf2jjzbem2&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_J1HK=1701313892504&crc=1 HTTP/1.1
Host: atherthishinhe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1607
date: Thu, 30 Nov 2023 03:11:28 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://dood.ws
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=0c05de91-d0d9-43ec-b98d-57585d918f6c
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5oEMDJNh9lncCESkWgpIyzZs0xaaEhMz9H0MC9bF7N8SOf9s3x66Uw==
X-Firefox-Spdy: h2
awaydefinitecreature.com/sbar.json?key=2c0360ed33b0b4736859081c701f9a91&uuid=7b564987-dc81-4044-9403-036dc4578511%3A2%3A1
200 OK 3.5 kB URL GET HTTP/1.1 awaydefinitecreature.com/sbar.json?key=2c0360ed33b0b4736859081c701f9a91&uuid=7b564987-dc81-4044-9403-036dc4578511%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectawaydefinitecreature.com
FingerprintC6:95:70:F7:D6:25:46:2B:9F:7D:35:31:B3:A2:59:37:9A:7C:A5:4D
ValidityTue, 28 Nov 2023 10:43:09 GMT - Mon, 26 Feb 2024 10:43:08 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6075), with no line terminators
Hash f130054f19d3d6a8d046dfe7afa3f494
2389e428aef8cb4a0b5228251bb66831f2039692
bfd7a886991575e6b2d006c92c21f098bc2731102162177fea65ea81c4b2057c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=2c0360ed33b0b4736859081c701f9a91&uuid=7b564987-dc81-4044-9403-036dc4578511%3A2%3A1 HTTP/1.1
Host: awaydefinitecreature.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:11:28 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dood.ws
Access-Control-Allow-Origin: https://dood.ws
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=19079684; expires=Fri, 01 Dec 2023 03:11:28 GMT; secure; SameSite=None
uid_id2=7b564987-dc81-4044-9403-036dc4578511:2:1; expires=Thu, 07 Dec 2023 03:11:28 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 01 Dec 2023 03:11:28 GMT; secure; SameSite=None
uncs=1; expires=Fri, 01 Dec 2023 03:11:28 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 01 Dec 2023 03:11:28 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 01 Dec 2023 03:11:28 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e7c41f091cb25e8f4906fe408aa28bb1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
awaydefinitecreature.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidTUwFTRANBdIJEgkkfJ693b27JUWECUERIYnyQ2mZnZk9D57dWWZ2by%2BuIiKhFBRHB1Trd44tIALyByChM42xhJSjQC7wP4GUDgmdfdLBV%2Bz3vX1f8d775vPt6phQVOzo5kdmS2nN1qI2bb15T%2BXC1K51%2FU7Lp216sXVP5d3wYms0%2F9jhOz6N2vSt1geSb5q1DvUp9anfuqKsTM1o7YSFKp7Efjum7bDT9qMQI%2Ft%2F7CoPjnkQw2PyMpSYvbBx8BSKT5FnP12WbrM0xdvvZ5VmpbEYir27%2BWZu6hzZckythzTfW2zDuBkhX52ByfcWDmCGO3MHSNSMeH%2F6SPK9hUwkw8enShMNmSMRL6IeTiH1FIpNwc1DKPGMAFzg%2Bg3k2e51Y2t2%2F5Rlc3ZGVp7%2FDVXPyMpfryDPfljXatS6bXRVKpM7jNIGajSFGkxRVPsotzyoeh%2B8%2FAxK%2FE7Wnl9Dnu3ccNpAiaPzvSTqhnG%2Ftyp4318NaRiuxiENVmnQFTyMev3I908iUmoKlU6h5RjMnUHlPFTKQ5V6qAoPmThqsShOKe2lSRoE%2FZBzHgScR%2F2uiEQQ9lOKis89jFEWY3A9BrcPUNgH2FRj2OoXuI0GTnhwJcFQNKglQe0IakZQK4K6JKiHzWOhXcc1u0K7KvEXvbPoQTMx5WCbPTblQOZkuzgm5%2BbBeW%2B8voJNedTqcBp0qRRBkNAk7AXdfhTTvs971E9jFvtwqoFyZ8Cchy01Ixc%2BvYRCzchLB%2BeQsH04vQ%2BuLoBVr4HVk16Hgm1Mwj7FVv6jL4wRrrSSZW1uMgjToChXUN73tvUxefXkhutrGSQ%2FvHTw9by%2BAbcNCtvgE%2FUrwUA%2FmtwyNdm5ZWpHnt4oSpWpLTa%2F7%2B2SlfLsdx%2FK%2B7Wx4uplN%2F72XT4n5uOTO9KV11guVD5w5Pt1JYS0V4zlkvx81d2Tyc3KbaxXNq%2BKazffu3I1K6x0Tpl8CqaeuS%2FA5x7v%2Fnbycs9nu1B2Cls1yKpDsigoMwUvHsAVS%2FXOEFi93EkKD3XVTGwnWf7UikDLJWZJA%2FcfnCznbfcIA%2BuBlQ%2BRZw2GtsFQN2B6DFednZSFPbz0R3BSSLQ3SbT1dhJt9Zen0Tp11JJRSlNJOzJJ4yTtMSriNIwTFvuyl0TMR%2BlmcvDPx%2F8CAAD%2F%2FwEAAP%2F%2FaJ9pWpEEAAA%3D
200 OK 7 B URL GET HTTP/1.1 awaydefinitecreature.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidTUwFTRANBdIJEgkkfJ693b27JUWECUERIYnyQ2mZnZk9D57dWWZ2by%2BuIiKhFBRHB1Trd44tIALyByChM42xhJSjQC7wP4GUDgmdfdLBV%2Bz3vX1f8d775vPt6phQVOzo5kdmS2nN1qI2bb15T%2BXC1K51%2FU7Lp216sXVP5d3wYms0%2F9jhOz6N2vSt1geSb5q1DvUp9anfuqKsTM1o7YSFKp7Efjum7bDT9qMQI%2Ft%2F7CoPjnkQw2PyMpSYvbBx8BSKT5FnP12WbrM0xdvvZ5VmpbEYir27%2BWZu6hzZckythzTfW2zDuBkhX52ByfcWDmCGO3MHSNSMeH%2F6SPK9hUwkw8enShMNmSMRL6IeTiH1FIpNwc1DKPGMAFzg%2Bg3k2e51Y2t2%2F5Rlc3ZGVp7%2FDVXPyMpfryDPfljXatS6bXRVKpM7jNIGajSFGkxRVPsotzyoeh%2B8%2FAxK%2FE7Wnl9Dnu3ccNpAiaPzvSTqhnG%2Ftyp4318NaRiuxiENVmnQFTyMev3I908iUmoKlU6h5RjMnUHlPFTKQ5V6qAoPmThqsShOKe2lSRoE%2FZBzHgScR%2F2uiEQQ9lOKis89jFEWY3A9BrcPUNgH2FRj2OoXuI0GTnhwJcFQNKglQe0IakZQK4K6JKiHzWOhXcc1u0K7KvEXvbPoQTMx5WCbPTblQOZkuzgm5%2BbBeW%2B8voJNedTqcBp0qRRBkNAk7AXdfhTTvs971E9jFvtwqoFyZ8Cchy01Ixc%2BvYRCzchLB%2BeQsH04vQ%2BuLoBVr4HVk16Hgm1Mwj7FVv6jL4wRrrSSZW1uMgjToChXUN73tvUxefXkhutrGSQ%2FvHTw9by%2BAbcNCtvgE%2FUrwUA%2FmtwyNdm5ZWpHnt4oSpWpLTa%2F7%2B2SlfLsdx%2FK%2B7Wx4uplN%2F72XT4n5uOTO9KV11guVD5w5Pt1JYS0V4zlkvx81d2Tyc3KbaxXNq%2BKazffu3I1K6x0Tpl8CqaeuS%2FA5x7v%2Fnbycs9nu1B2Cls1yKpDsigoMwUvHsAVS%2FXOEFi93EkKD3XVTGwnWf7UikDLJWZJA%2FcfnCznbfcIA%2BuBlQ%2BRZw2GtsFQN2B6DFednZSFPbz0R3BSSLQ3SbT1dhJt9Zen0Tp11JJRSlNJOzJJ4yTtMSriNIwTFvuyl0TMR%2BlmcvDPx%2F8CAAD%2F%2FwEAAP%2F%2FaJ9pWpEEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectawaydefinitecreature.com
FingerprintC6:95:70:F7:D6:25:46:2B:9F:7D:35:31:B3:A2:59:37:9A:7C:A5:4D
ValidityTue, 28 Nov 2023 10:43:09 GMT - Mon, 26 Feb 2024 10:43:08 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidTUwFTRANBdIJEgkkfJ693b27JUWECUERIYnyQ2mZnZk9D57dWWZ2by%2BuIiKhFBRHB1Trd44tIALyByChM42xhJSjQC7wP4GUDgmdfdLBV%2Bz3vX1f8d775vPt6phQVOzo5kdmS2nN1qI2bb15T%2BXC1K51%2FU7Lp216sXVP5d3wYms0%2F9jhOz6N2vSt1geSb5q1DvUp9anfuqKsTM1o7YSFKp7Efjum7bDT9qMQI%2Ft%2F7CoPjnkQw2PyMpSYvbBx8BSKT5FnP12WbrM0xdvvZ5VmpbEYir27%2BWZu6hzZckythzTfW2zDuBkhX52ByfcWDmCGO3MHSNSMeH%2F6SPK9hUwkw8enShMNmSMRL6IeTiH1FIpNwc1DKPGMAFzg%2Bg3k2e51Y2t2%2F5Rlc3ZGVp7%2FDVXPyMpfryDPfljXatS6bXRVKpM7jNIGajSFGkxRVPsotzyoeh%2B8%2FAxK%2FE7Wnl9Dnu3ccNpAiaPzvSTqhnG%2Ftyp4318NaRiuxiENVmnQFTyMev3I908iUmoKlU6h5RjMnUHlPFTKQ5V6qAoPmThqsShOKe2lSRoE%2FZBzHgScR%2F2uiEQQ9lOKis89jFEWY3A9BrcPUNgH2FRj2OoXuI0GTnhwJcFQNKglQe0IakZQK4K6JKiHzWOhXcc1u0K7KvEXvbPoQTMx5WCbPTblQOZkuzgm5%2BbBeW%2B8voJNedTqcBp0qRRBkNAk7AXdfhTTvs971E9jFvtwqoFyZ8Cchy01Ixc%2BvYRCzchLB%2BeQsH04vQ%2BuLoBVr4HVk16Hgm1Mwj7FVv6jL4wRrrSSZW1uMgjToChXUN73tvUxefXkhutrGSQ%2FvHTw9by%2BAbcNCtvgE%2FUrwUA%2FmtwyNdm5ZWpHnt4oSpWpLTa%2F7%2B2SlfLsdx%2FK%2B7Wx4uplN%2F72XT4n5uOTO9KV11guVD5w5Pt1JYS0V4zlkvx81d2Tyc3KbaxXNq%2BKazffu3I1K6x0Tpl8CqaeuS%2FA5x7v%2Fnbycs9nu1B2Cls1yKpDsigoMwUvHsAVS%2FXOEFi93EkKD3XVTGwnWf7UikDLJWZJA%2FcfnCznbfcIA%2BuBlQ%2BRZw2GtsFQN2B6DFednZSFPbz0R3BSSLQ3SbT1dhJt9Zen0Tp11JJRSlNJOzJJ4yTtMSriNIwTFvuyl0TMR%2BlmcvDPx%2F8CAAD%2F%2FwEAAP%2F%2FaJ9pWpEEAAA%3D HTTP/1.1
Host: awaydefinitecreature.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Cookie: u_pl=19079684; uid_id2=7b564987-dc81-4044-9403-036dc4578511:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:11:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ddf1fe1edd15ac1f009a49e4e568cce3
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/3c/66/7d/3c667d813a42fa758fc4bf7a0efaf494/1686219226.png
200 OK 79 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/3c/66/7d/3c667d813a42fa758fc4bf7a0efaf494/1686219226.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 17406123bee2dbadacb3ec1cc1cf9416
110f5eb9fbc4178b3a5eb21863d2f4215bf637b3
18defce371b91ade824ab08dc96b1e7b95c8b804f898a694dffb4047bdd2df8b
GET /si/3c/66/7d/3c667d813a42fa758fc4bf7a0efaf494/1686219226.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:29 GMT
content-type: image/png
content-length: 79040
server: nginx/1.21.6
last-modified: Thu, 08 Jun 2023 10:13:54 GMT
etag: "6481a9e2-134c0"
expires: Sat, 02 Dec 2023 03:11:29 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 21453
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:57:34 GMT
expires: Fri, 22 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 598435
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0EZQ_CJ5o-DJ5chFYRoMHj2eTZ8vFMMPSLm5oz4b536KKjnlCYaxY9SJjEGVkVBPd-jBhs&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1192145913%3A1701313888134539&theme=glif
403 Forbidden 815 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0EZQ_CJ5o-DJ5chFYRoMHj2eTZ8vFMMPSLm5oz4b536KKjnlCYaxY9SJjEGVkVBPd-jBhs&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1192145913%3A1701313888134539&theme=glif
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type gzip compressed data, max compression\012- data
Hash 5e1e16fd953fb3a3ef291f76325607c5
b16ed3aa10d87c3a0ea2f627fd150c83c52cd8b5
4b9b10e965ff9b75b277efd56b1c0c1e0a93298b262863537f4c1a3111a3845d
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0EZQ_CJ5o-DJ5chFYRoMHj2eTZ8vFMMPSLm5oz4b536KKjnlCYaxY9SJjEGVkVBPd-jBhs&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1192145913%3A1701313888134539&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 03:11:28 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-morQCl7krAMCMt7Vdmhk2w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dood.ws/cdn-cgi/challenge-platform/h/g/jsd/r/82dfe72a9a14b4f7
200 OK 2 B URL POST HTTP/3 dood.ws/cdn-cgi/challenge-platform/h/g/jsd/r/82dfe72a9a14b4f7
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint8A:CC:11:77:D4:E8:BA:E2:38:BE:E4:86:5D:9A:0C:E4:61:B7:A7:15
ValiditySat, 08 Apr 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
Hash 309fc7d3bc53bb63ac42e359260ac740
2064f80f811db79a33c4e51c10221454e30c74ae
ac11339ffa8f270c4f781e0a3922bb1c80d9dee6e4b6911ca34538ed9ae03caa
POST /cdn-cgi/challenge-platform/h/g/jsd/r/82dfe72a9a14b4f7 HTTP/1.1
Host: dood.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 13348
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Cookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=7b564987-dc81-4044-9403-036dc4578511%3A2%3A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=m6wLN.8w2fqlgM0twFNIXOrlZKcYvnZt8FUJ6W95Ay0-1701313887-0-1-730ca2d2.73a07051.5b213570-0.2.1701313887; path=/; expires=Fri, 29-Nov-24 03:11:27 GMT; domain=.dood.ws; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VdPfDJW0PYP17KEvzK27fa7pVMJZ8cZDIVfNOEE8u6Hcna3H53vAzwltSa5blfLy7yM%2B6F4peSJ4QtLDsquu6fF1jzevj5%2Fkn7xbrzrsxbS10CrGNIvBW4I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe737785d1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/js/script.js
200 OK 211 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/js/script.js
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash 02eef03d816f45efe77308aba07b0e94
67ed5890e847d96a9cae9870e1adc821f551be35
45cf2559fcb1af6347e9de4e1d2fad22896f10066e72bce39b0d1f19cda13824
GET /sb/ssp/utility/social-media/facebook/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:29 GMT
content-type: application/javascript
last-modified: Sat, 20 Feb 2021 08:47:14 GMT
etag: W/"6030cc92-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 48104
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MKSh8j4n8Rht3rbtyLR9CQMtOU818gZUNkIuAifKeM8xFvX6zRP98Xxc2ZiM460XjtEmJS%2FYgweL%2BqtlVTjrk%2BZuK8n3asq%2FEsPo3jR%2BxTMjy%2Ba15mPTPmbMXegSeZkZLyTcwD325Boo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73eee0b06cc-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
awaydefinitecreature.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 awaydefinitecreature.com/pixel/sbs?c=1
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectawaydefinitecreature.com
FingerprintC6:95:70:F7:D6:25:46:2B:9F:7D:35:31:B3:A2:59:37:9A:7C:A5:4D
ValidityTue, 28 Nov 2023 10:43:09 GMT - Mon, 26 Feb 2024 10:43:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: awaydefinitecreature.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Cookie: u_pl=19079684; uid_id2=7b564987-dc81-4044-9403-036dc4578511:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:11:29 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
i.doodcdn.co/theme_2/fonts/avertastd-black-webfont.woff2
200 OK 23 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-black-webfont.woff2
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 22820, version 1.0\012- data
Hash 1e976387cb594982692bdbdffde86f91
9546836a7d80c17d85cdd37a9553852f00af031b
4dc982a61a00481f4c9545f9f2da64098428b4aec96838de3c194fa82373ce1d
GET /theme_2/fonts/avertastd-black-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:11:26 GMT
content-type: font/woff2
content-length: 22820
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Thu, 28 Dec 2023 05:52:04 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 50375
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s00mn5jUBEccn6mImHucCJUcM03t5A0kWpM9qM1dnz%2FXlMKnXGhPbnxNa9E5RJlgj9Pz60ioDAoPPpEYJn0yg0OOm1jxaS82IWpQ1TVMT34bJFoiQwuojZ%2BfWOneWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe7308da25689-OSL
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/style.css
200 OK 6.3 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/style.css
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (6723), with no line terminators
Hash f5356b1b5522e37c141a7752df61a33c
e01f3181c55ead4d17eb984d033468262f42b378
d95e30fd6e1228d4b91f34784b2a4120e9ad647ce0e841068949fc353f01b3f2
GET /sb/ssp/utility/social-media/facebook/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:29 GMT
content-type: text/css
last-modified: Fri, 27 Aug 2021 12:19:14 GMT
etag: W/"6128d842-18be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1878817
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BaoPxgHAtaj8lMq39LjBnUEyNZoOLPj4PJ1B3VsKdceI5UsZwxlAJtHpm4dhUEes%2BvqFcIOhMBNH8g4fF5qojVJ3PAyrLPRr4c34aM9ZInqXwz5Ys9A7PNpaXypfo%2B5y9EbS220F1CJx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73efe1106cc-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:28 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.ws
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4053
last-modified: Thu, 30 Nov 2023 02:03:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xUCc8Y5DBYrwyhC2tCcxOWT0XV02DCXR5es%2F%2B6aIyBgKIujtj7Yyn5NRUPOn%2BJ2QBUw80Og5H8Tt1bE7KVpHn%2FqVc1MkLZwRq0hmVtBqz0YoW0ni%2Fqzba8IrNYPZ9%2ByT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73818d37786-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:IzVJvK7Sz2NkvUbVyZ_G8f9lTn8a5A:EsxO4T0ldxqqoABm; Expires=Sat, 29-Nov-2025 03:11:27 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 03:11:27 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp04-u6V09N7Y15aHEJ1BXDhk67KhUWovcTMTJBhdd61VgI4XwJf1djhsjDCwlCRQlDBVJKuTw
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-bnW-9jAbqv9NR5ZiZru78g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=7b564987-dc81-4044-9403-036dc4578511&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=06e2eefbde702208a7324b7b8f526df8&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3
200 OK 0 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=7b564987-dc81-4044-9403-036dc4578511&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=06e2eefbde702208a7324b7b8f526df8&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=7b564987-dc81-4044-9403-036dc4578511&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=06e2eefbde702208a7324b7b8f526df8&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 03:11:29 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba7849393fa8604d2a843330f67747e5
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 76ac514e28916d2133137bf8d31f63b3
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 03:11:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7iA9Nxor2jlX0fiN4yH8HkrZpTYGOTdnNXGR%2BbUW99dditBPz3HRu%2F2SCJIXYv3KP1T4uPstcLJpsztuW6z4fzuXDKQOEouTNV4Guq0FkpsDE9Pw6Q0UrUSrkyIth0V6KVbsmJU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73438a652d0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/animate.css
200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/animate.css
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash 80047eaa13ebd50c50e8a9753621e430
9c503e07d130572a0eaf51f7c02cbd4cf6213fe3
3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET /sb/ssp/utility/social-media/facebook/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:29 GMT
content-type: text/css
last-modified: Sat, 20 Feb 2021 08:44:40 GMT
etag: W/"6030cbf8-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 3977
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FiCPN9fOBF%2Bu2rPWnqdo7IRcFk7Z2nLijNHeS1WXX5W%2BF5Y27%2FryANFdFsXYY8i9y1AC4%2FxFvWeXgOUv%2FAo3qXvGVjkZDylJF1sJQgD2gSwhFNY3ki3sl7QJJV32MCcYEvGvI1Vb%2FadN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73efe0f06cc-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/css/style.css
200 OK 209 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/style.css
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65465)
Size 209 kB (208903 bytes)
Hash 6ff549c82309fe93cb6f38f8fcf60e49
c5621629b2a258c7fb572ab9d03517c7d60896fd
668326f298c9701a6422f5b7f229966fd87ae68940381a9c0c898197667a8c4c
GET /theme_2/css/style.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:26 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=249272
expires: Thu, 28 Nov 2024 04:57:39 GMT
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 73727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WLYWVFPglCVSs5isgObonMlAItS2i7G2rOKoqcXXPYg4q9ewBdx0Z%2F6Nk%2Faefva0WKewEb9yqV4LIMuY%2Fd%2F2LTvSsM6olNZ%2B2jBzSxYGvNPFYqQrnCBMeH8Xz5R7UQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe72e4a2cb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp22yAPaXMmgV51ll8tEL8u3t-nXdy1zrGrDyVO57FT7G-HlQhQq67xoL81Y6l-HqqsiXmlf&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-134125010%3A1701313888137273&theme=glif
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp22yAPaXMmgV51ll8tEL8u3t-nXdy1zrGrDyVO57FT7G-HlQhQq67xoL81Y6l-HqqsiXmlf&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-134125010%3A1701313888137273&theme=glif
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp22yAPaXMmgV51ll8tEL8u3t-nXdy1zrGrDyVO57FT7G-HlQhQq67xoL81Y6l-HqqsiXmlf&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-134125010%3A1701313888137273&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 03:11:28 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-Wri5vOqfcsr9MFIR01HFHw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html
200 OK 1.3 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
Fingerprint55:06:B7:F1:EF:E9:55:FB:7C:8C:4F:5D:DB:05:C9:15:19:90:9B:2F
ValiditySat, 11 Nov 2023 03:00:51 GMT - Fri, 09 Feb 2024 03:00:50 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1365), with no line terminators
Hash 36778a7f37ab18ce089392f8f865e8b5
55dc41a6c7fd267229941f56181545927c901be0
6b3ec93e836db8922282cfa30e0ae89d45fd866d9e2bf538c9723e3ce0044e6f
GET /sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:28 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Fri, 19 Feb 2021 09:27:09 GMT
etag: W/"602f846d-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 30 Nov 2023 04:11:28 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=7b564987-dc81-4044-9403-036dc4578511&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=2c0360ed33b0b4736859081c701f9a91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3
200 OK 0 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=7b564987-dc81-4044-9403-036dc4578511&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=2c0360ed33b0b4736859081c701f9a91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=7b564987-dc81-4044-9403-036dc4578511&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=2c0360ed33b0b4736859081c701f9a91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 03:11:29 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 729d9551d897eda2de7edcb06b4aad7d
Strict-Transport-Security: max-age=0; includeSubdomains
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 6.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 03:11:29 GMT
date: Thu, 30 Nov 2023 03:11:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
thethateronjus.com/popunder.gif
200 OK 35 B URL GET HTTP/3 thethateronjus.com/popunder.gif
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectthethateronjus.com
Fingerprint82:8D:02:28:9C:46:8E:23:CC:97:0B:83:3E:AA:C0:6D:6A:0B:B1:5C
ValidityMon, 27 Nov 2023 16:41:03 GMT - Sun, 25 Feb 2024 16:41:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: thethateronjus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:11:28 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 6433
last-modified: Thu, 30 Nov 2023 01:24:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MiCLflcx0mib4nnblzNHgnicp5GsO3K2BLqf7NdSeue4xWxIDSpT8IXQeuZnyU6YCNriVtMuP7551sdPKXEcxWSYN3tDrSYwB%2Fh8Je2y4IdPUzVnH77v2ap6IgjdL3N8%2BvQ8m4U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe738ae827131-OSL
alt-svc: h3=":443"; ma=86400
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: b3451da5d0c4e88fb28be845fc68f322
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 03:11:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ebsI13rYop5dBiF%2FlR%2F%2BkmRLNzjLCk0RllYiLuLM1OjYTzGd94XNM1r6OE2rneW2Xd1jGkoChMArk8K%2F%2BtxK3jGDbYlmbyJnr%2BrZmcmNwiiu7rVCA20VNvGop7ClHXHqt%2BAfpx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe734189852d0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
200 OK 2.8 kB URL User Request GET HTTP/2 dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint8A:CC:11:77:D4:E8:BA:E2:38:BE:E4:86:5D:9A:0C:E4:61:B7:A7:15
ValiditySat, 08 Apr 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2909), with no line terminators
Hash 6600c88c26fff16fe5913948ebd92fa7
8c6acaaf379c129d4f6141ca6f06c6d431984b33
06e2d7a1066a3ad464f494fd31374bf77b72acc2a0aeea40f997029d2613c5a8
GET /e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2 HTTP/1.1
Host: dood.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:25 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 29 Nov 2023 03:11:25 GMT
set-cookie: lang=1; domain=.dood.ws; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rTNLRHMP5cOsIC4zVJ3jHA7OgrkOKUWWOgkBscNa9gICAzdHUzqGCo%2FYIf42SV1tC88pNLM%2FDdlHiPgaaH95P6X%2BNKt5lJEYPF35LrV1nX8bhh6FDXrtv7s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe72a9a14b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:28 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.ws
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4053
last-modified: Thu, 30 Nov 2023 02:03:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kclKjWIVgl0HkWKYZ59cOJ%2FXbzt%2BoL%2BNXOJCKPHHZtypfT27xRXyM8p8DpDnKnDM5gTJKm9xClI2XewmZtbcUJ6jRUNk1tYFguJzHq8VWKAlf2DWryoyB0x7wYasvHKM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73818d97786-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dood.ws/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
200 OK 7.4 kB URL GET HTTP/3 dood.ws/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint8A:CC:11:77:D4:E8:BA:E2:38:BE:E4:86:5D:9A:0C:E4:61:B7:A7:15
ValiditySat, 08 Apr 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (7362), with no line terminators
Hash c659074037d0fc3b39eb63b85f9c2e11
ac7319e011851d0a26ff79f95c2e56fa1fda4a15
3ea61246bcb2496efb1da1a6272a2fdfa2e826771993a0f8bc64997e6d7b41aa
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js HTTP/1.1
Host: dood.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=7b564987-dc81-4044-9403-036dc4578511%3A2%3A1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:11:27 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iiFR9zbhX%2FhevVv3obontr1Do93DhoHMQkvNMYJF5mCl6FTfBlbASHISD2ZZaQdSTaba4%2B%2B%2FZ7T%2FpptvjS9ZaRMMvplIHpJYFKOGMRERSxaVyZkidEtIRIk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe73628391c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pogothere.xyz/
200 OK 27 B IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9924bbf98712691715111edd996fb976
1d1b9e4034ea152b4652a58a9eb751a87738fbaf
2405efe54dc09637fb7b23dfa130b55ee1b54c0b3ca20a834e69995f6403084c
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:28 GMT
content-type: text/plain
set-cookie: csu=1720515016375233@1@1701313888; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://dood.ws
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d40cQISfByfmfIX9U9rAD9VaALTqiibDRfwtbJdNdbujY8%2Fd7f9t%2BRloKlfid0q8OwxrjC3wNb%2BxwN9Moj%2BwKkbXEZGZ0o0RLslBRZ48t4mEFJ5cyQR1U%2F%2Bvb1rWzPQo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe73818cf7786-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/img/close.svg
200 OK 1.3 kB URL GET HTTP/3 cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/img/close.svg
IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- exported SGML document, ASCII text, with very long lines (1463), with no line terminators
Hash b3d72b126431ae65b52f638e0463b990
4d7f28fa1f4f3648e2b984e48ccbb867443f4e8b
3db9410e0e7ac21f5148fd7133ea30d18ea78eba02669f593ebab19d7e40a2da
GET /sb/ssp/utility/social-media/facebook/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:11:29 GMT
content-type: image/svg+xml
last-modified: Thu, 11 Feb 2021 15:13:59 GMT
etag: W/"602549b7-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1637439
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dozvbo6ttfzbJAQyNbESeEEIq7%2FSBKIzQP9ANOxHUKixefMuEf2TVNZh7FoiubnlhIaDiznSknetvSqqDYXas%2FbB%2Fjg%2B2OCrAQ9RfpWLWlynQCrAugLQe3WqYOdN8fPqo1Dsylrn9yNn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfe73fb91503bb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
pogothere.xyz/
200 OK 26 B IP
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 7449e9af8fa783293178e8f2d2fad7a1
d3f71ecaf0f6aed1bfcef1a87c22512bf3020cc3
b9933d07dba453f3d910ddeb8e3bb4713b94df8cbb5479f2244783e37f38677b
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.ws/
Origin: https://dood.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:11:28 GMT
content-type: text/plain
set-cookie: csu=756788874296936@1@1701313888; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://dood.ws
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BBAdTdzRsQ7rdFfNoCTV4WFMBHvGFgQJfznN2CfLDFr2Tei%2BL7efzDfv4sJ2GGfRNifiBL1hYFL2ZpvIGuRzXlqxRFmiR8nvbuAwy3kRk0XpOXVrACTTCCZKLRwz9snh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfe73818d67786-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
awaydefinitecreature.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28jRRidvQsVNIdoKJAsuJNAIs6sd22vueJEOA6dCEl0P5SW2ZmxM2R2Z5nZ9TqpIk5CV1CYDqg2z%2Fkh4ATcH4CEHJoQCelMgVKQfwLpOiTkxJLhK%2Fb73r6veO998%2FlecU4oCna2%2FpHZUVqzpWad1t7cUKkwpautPqj5tE5v1jZU2gpv1gbTj%2B2%2F49Nmnb5V%2B0DyLbPUoD6lPvVrd5SVXTNYumChsicdv96h9bBR95shBvb%2F2BUeHPMg%2BufkZSgxeWHz5CkUHyNNfrot3VZusrffTwrNcmPRF0cP063UlCmS%2Bdi1Hrrp0Wwbxk0I%2BeoKTHo0cwDT3586QKwmxPvTR5wezWQi7h9cKo01ZIpYvIiyP4bUYyg2BjePoMQzAnCB1TWkyeGqsSXbvmTZlJ2Qhed%2FQ5UTsvDXK0iTH5a1GtTuG13kyqQOg24FNRhD9cbIimPkOx5UeQyefwYlfidLz1eQJvtrThsocXa9HTdbYSdqLwoe%2BYshDcPFTkiDRRq0BA%2Bb7ajp%2BxcRKTWG6o6h5RDMXUHhPBTKQ9H1UGQeEnFWY81Ol9J2N%2B4GQRRyzoOA82bUEk0RhFGXouBTD0Pk2RBcD8HtLjK7iy01hC1%2Bgdus4IQHlxP0RYVSEpSOoGQEpSIoc4KyXx0I7RquOhTaFbE%2F641ZD6qRyXt77MDkPZmSveycXJsG573x%2BgK25FmtwWnQolIEQUzjsB20omaHRj5vU7%2FbYR0fTlVQ7gqY87CjJuTGp7eQqQl56eQaYnYMp4%2FB1Q2w4jWwctRuULDNURhR7KQ%2F%2BsIY4XIrWVLnJoEwFbJ8Afm2t6fPyasXN1xeSiD56a2Tr6f1DbitkNkKn6hfCXr68eieKcn%2BPVM68nQty1Widtj0vvdzlsur330ot0tjxd3bbvjtu3xKTMcnD6TLV1gqVNpz5PtlJYS0d4zlkvx8123IeL1wm8uFTYtsZf29O3eTzErnlEnHYOqZ%2BwJ86vHhbxcv93pyCGXHsEWFpDgls4IyY%2FBsFy6bq3eGwOr5Tpx5KItqZBvx%2FKdWBFrOMYsruP%2FgeD7vucfoWQ8sf4Q0qdC3Ffq6AtNDuOLqKM%2Fs6a0%2FgotCrL1RrK23H2urv7yM1qmzWtMPZRRHbS5ELLnw240gCihtCBG2O9LvIHcT2fvn438BAAD%2F%2FwEAAP%2F%2FfJfnvJEEAAA%3D
200 OK 0 B URL GET HTTP/1.1 awaydefinitecreature.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28jRRidvQsVNIdoKJAsuJNAIs6sd22vueJEOA6dCEl0P5SW2ZmxM2R2Z5nZ9TqpIk5CV1CYDqg2z%2Fkh4ATcH4CEHJoQCelMgVKQfwLpOiTkxJLhK%2Fb73r6veO998%2FlecU4oCna2%2FpHZUVqzpWad1t7cUKkwpautPqj5tE5v1jZU2gpv1gbTj%2B2%2F49Nmnb5V%2B0DyLbPUoD6lPvVrd5SVXTNYumChsicdv96h9bBR95shBvb%2F2BUeHPMg%2BufkZSgxeWHz5CkUHyNNfrot3VZusrffTwrNcmPRF0cP063UlCmS%2Bdi1Hrrp0Wwbxk0I%2BeoKTHo0cwDT3586QKwmxPvTR5wezWQi7h9cKo01ZIpYvIiyP4bUYyg2BjePoMQzAnCB1TWkyeGqsSXbvmTZlJ2Qhed%2FQ5UTsvDXK0iTH5a1GtTuG13kyqQOg24FNRhD9cbIimPkOx5UeQyefwYlfidLz1eQJvtrThsocXa9HTdbYSdqLwoe%2BYshDcPFTkiDRRq0BA%2Bb7ajp%2BxcRKTWG6o6h5RDMXUHhPBTKQ9H1UGQeEnFWY81Ol9J2N%2B4GQRRyzoOA82bUEk0RhFGXouBTD0Pk2RBcD8HtLjK7iy01hC1%2Bgdus4IQHlxP0RYVSEpSOoGQEpSIoc4KyXx0I7RquOhTaFbE%2F641ZD6qRyXt77MDkPZmSveycXJsG573x%2BgK25FmtwWnQolIEQUzjsB20omaHRj5vU7%2FbYR0fTlVQ7gqY87CjJuTGp7eQqQl56eQaYnYMp4%2FB1Q2w4jWwctRuULDNURhR7KQ%2F%2BsIY4XIrWVLnJoEwFbJ8Afm2t6fPyasXN1xeSiD56a2Tr6f1DbitkNkKn6hfCXr68eieKcn%2BPVM68nQty1Widtj0vvdzlsur330ot0tjxd3bbvjtu3xKTMcnD6TLV1gqVNpz5PtlJYS0d4zlkvx8123IeL1wm8uFTYtsZf29O3eTzErnlEnHYOqZ%2BwJ86vHhbxcv93pyCGXHsEWFpDgls4IyY%2FBsFy6bq3eGwOr5Tpx5KItqZBvx%2FKdWBFrOMYsruP%2FgeD7vucfoWQ8sf4Q0qdC3Ffq6AtNDuOLqKM%2Fs6a0%2FgotCrL1RrK23H2urv7yM1qmzWtMPZRRHbS5ELLnw240gCihtCBG2O9LvIHcT2fvn438BAAD%2F%2FwEAAP%2F%2FfJfnvJEEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.ws/e/co6xhkyifwpbgn4666jasejeadw4oerg','https:/dood.ws/e/34psics9ya41kju9c0qdjb5bj62m8n0e','https:/dood.ws/e/rvjj4mjdm3x9qgu610rt5texgxfdddcw','https:/dood.ws/e/wrmbcoid9zh0y5ry8t7fc4ubgftevsza','https:/dood.ws/e/clgrynmy92d7akgwkeqbl14nwtku80ud','https:/dood.ws/e/iktspanwksaq7gmtno0nxfge4d036nbz','https:/dood.ws/e/52efa1dusg177a0p4sdg9d74hw69hywa','https:/dood.ws/e/kwndzg1pefrebqb51e4q7yv51qbs8a7n','https:/dood.ws/e/l7xom59m6qqqqn2u4vzpdo1y9cdwk7h7','https:/dood.ws/e/aobf7q0nrnisoaa4k1mxxvmmmxbftpci','https:/dood.ws/e/hrbxblkw128scdt8e7fkaru0oun9yr7m','https:/dood.ws/e/96bamza0zshmq8z3ghpwhncb9w8fjslp','https:/dood.ws/e/fu3td9rsq1sqx6a470o2g3h0x58bo6gn','https:/dood.ws/e/wr47i3qygv7sisc3gek4jxmsyks7ryr8','https:/dood.ws/e/drmia3p4hu2rjvy7jdr80hkmsxzr1yy2','https:/dood.ws/e/3amlu49tr9f4dir6wwvjw5dd8mwbb2sz','https:/dood.ws/e/daid5jjzq0ouydmz8gamldtycz95c190','https:/dood.ws/e/bdk44ayaxact8zf7mhqjgvgs1cc2ja0j','https:/dood.ws/e/w4p4xz3t5of7qutm0xe5etxgtrgrm6uu','https:/dood.ws/e/tiujz89s3ro2the5som65oaf2jjzbem2
Certificate IssuerLet's Encrypt
Subjectawaydefinitecreature.com
FingerprintC6:95:70:F7:D6:25:46:2B:9F:7D:35:31:B3:A2:59:37:9A:7C:A5:4D
ValidityTue, 28 Nov 2023 10:43:09 GMT - Mon, 26 Feb 2024 10:43:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSv28jRRidvQsVNIdoKJAsuJNAIs6sd22vueJEOA6dCEl0P5SW2ZmxM2R2Z5nZ9TqpIk5CV1CYDqg2z%2Fkh4ATcH4CEHJoQCelMgVKQfwLpOiTkxJLhK%2Fb73r6veO998%2FlecU4oCna2%2FpHZUVqzpWad1t7cUKkwpautPqj5tE5v1jZU2gpv1gbTj%2B2%2F49Nmnb5V%2B0DyLbPUoD6lPvVrd5SVXTNYumChsicdv96h9bBR95shBvb%2F2BUeHPMg%2BufkZSgxeWHz5CkUHyNNfrot3VZusrffTwrNcmPRF0cP063UlCmS%2Bdi1Hrrp0Wwbxk0I%2BeoKTHo0cwDT3586QKwmxPvTR5wezWQi7h9cKo01ZIpYvIiyP4bUYyg2BjePoMQzAnCB1TWkyeGqsSXbvmTZlJ2Qhed%2FQ5UTsvDXK0iTH5a1GtTuG13kyqQOg24FNRhD9cbIimPkOx5UeQyefwYlfidLz1eQJvtrThsocXa9HTdbYSdqLwoe%2BYshDcPFTkiDRRq0BA%2Bb7ajp%2BxcRKTWG6o6h5RDMXUHhPBTKQ9H1UGQeEnFWY81Ol9J2N%2B4GQRRyzoOA82bUEk0RhFGXouBTD0Pk2RBcD8HtLjK7iy01hC1%2Bgdus4IQHlxP0RYVSEpSOoGQEpSIoc4KyXx0I7RquOhTaFbE%2F641ZD6qRyXt77MDkPZmSveycXJsG573x%2BgK25FmtwWnQolIEQUzjsB20omaHRj5vU7%2FbYR0fTlVQ7gqY87CjJuTGp7eQqQl56eQaYnYMp4%2FB1Q2w4jWwctRuULDNURhR7KQ%2F%2BsIY4XIrWVLnJoEwFbJ8Afm2t6fPyasXN1xeSiD56a2Tr6f1DbitkNkKn6hfCXr68eieKcn%2BPVM68nQty1Widtj0vvdzlsur330ot0tjxd3bbvjtu3xKTMcnD6TLV1gqVNpz5PtlJYS0d4zlkvx8123IeL1wm8uFTYtsZf29O3eTzErnlEnHYOqZ%2BwJ86vHhbxcv93pyCGXHsEWFpDgls4IyY%2FBsFy6bq3eGwOr5Tpx5KItqZBvx%2FKdWBFrOMYsruP%2FgeD7vucfoWQ8sf4Q0qdC3Ffq6AtNDuOLqKM%2Fs6a0%2FgotCrL1RrK23H2urv7yM1qmzWtMPZRRHbS5ELLnw240gCihtCBG2O9LvIHcT2fvn438BAAD%2F%2FwEAAP%2F%2FfJfnvJEEAAA%3D HTTP/1.1
Host: awaydefinitecreature.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.ws/
Cookie: u_pl=19079684; uid_id2=7b564987-dc81-4044-9403-036dc4578511:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:11:29 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 23352387aa277680cb4c4390de05d246
Strict-Transport-Security: max-age=0; includeSubdomains
104.26.15.19
23.109.61.139
104.17.24.14
35.157.159.40