{"report_id":"b1a5c16d-e867-4b43-a462-ee9bd020b063","version":6,"status":"done","tags":[],"date":"2025-09-26T23:41:41Z","url":{"schema":"http","addr":"dsvplay.com","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"172.67.68.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"title":"DoodStream"},"submit":{"url":{"schema":"http","addr":"dsvplay.com","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"172.67.68.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-31T23:41:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"dsvplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"client.crisp.chat","ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":168029,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2025-09-22T06:15:10.687965Z","alert_count":0,"request_count":8,"received_data":491861,"sent_data":3929,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.doodcdn.io","ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-05","domain_rank":200454,"first_seen":"2025-03-05T21:16:34.795928Z","last_seen":"2025-09-22T06:35:17.083576Z","alert_count":0,"request_count":5,"received_data":1211049,"sent_data":2162,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.doodcdn.io","ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-05","domain_rank":224488,"first_seen":"2025-03-05T21:16:34.803152Z","last_seen":"2025-09-22T06:35:16.246851Z","alert_count":0,"request_count":9,"received_data":709999,"sent_data":4728,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-09-21T22:11:34.484141Z","alert_count":0,"request_count":3,"received_data":2455452,"sent_data":1476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"doodstream.com","ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2020-01-27","domain_rank":110237,"first_seen":"2020-01-27T09:30:00Z","last_seen":"2025-09-25T18:24:17.073187Z","alert_count":8,"request_count":8,"received_data":141618,"sent_data":4475,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"client.relay.crisp.chat","ip":{"addr":"64.227.36.222","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-06-09","domain_rank":159579,"first_seen":"2017-07-02T12:24:26Z","last_seen":"2025-09-22T00:55:35.280217Z","alert_count":0,"request_count":1,"received_data":441,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dsvplay.com","ip":{"addr":"172.67.68.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-19","domain_rank":0,"first_seen":"2025-09-22T06:35:15.585281Z","last_seen":"2025-09-22T06:35:15.585281Z","alert_count":1,"request_count":1,"received_data":18351,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-21T22:11:30.527953Z","alert_count":0,"request_count":3,"received_data":5157,"sent_data":1302,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":1,"received_data":89164,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"image.crisp.chat","ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":456330,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2025-09-22T00:28:17.111709Z","alert_count":0,"request_count":4,"received_data":6598,"sent_data":2108,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95040c9aad11e653ebc7cdcc8734df04","sha1":"52f2d407b6ac13c7ad3ba61c0c30afd2df6a304c","sha256":"15f52aeee240c499fb0cbdcf165ac6c0a2c4a009be9f1f5ed5dc21b3591eac5e","sha512":"eae267e2ab0a5182cc9de5d077b73beddd935ab9e81d05492043bddd86b40bcfa98b9fd8fc0117fa4a394035e56df4abc59c24cbe1a267775f366d40fe42dc64","ssdeep":"","tlshash":"e21102b71604a0394b3219e1e2ffca71e492701cf16c85e8a519da841e6acc7cf15595","size":1019,"data":"","first_seen":"2025-09-25T04:32:34.814491Z","last_seen":"2025-10-02T04:58:03.089724Z","times_seen":299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/home_page.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3166b84236e9f39ed19cf578c39b6d25","sha1":"be4121a314ae601b8a7db70d92691e5ed933fc1c","sha256":"4733022d78c4c270b6f2d84f236c0dd9ce6c69cfcb6f6210b87c0fad2188dddc","sha512":"f44ca4fe3540bad4cbf389e1b38711c5a8e8e1010a529898705031d94318c64ed5d95d89864543afa8820a2df7df2db5666b18188a5e4592e5922d9f0474ef66","ssdeep":"6144:vf5c6kZwWgCz9+SmFoXp0sF62CrK1o+cCNvmskMrmzKU:G/gihF60camskMoKU","tlshash":"87d4e888ba95b07543a375b4002f510bf27bba2d744d44e8f265d8e5bcb898e513bf38","size":629900,"data":"","first_seen":"2025-02-23T23:30:19.089135Z","last_seen":"2026-05-05T10:28:17.938255Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/main.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3a42471153d54fbf4b183289b167756","sha1":"4640a875a7cb3243dc7d37837a2dd209573a1535","sha256":"c59ce1b4bc31922985373919061227a3de57354ae471b793ac1d9a3f442815bc","sha512":"12b361b999202904318d147e5eee95d215e89821ecb8b74574e328c6f52c8f1c7222d05cbf1310883f4702a8756f575902092d9e12536d374924324b4b44a271","ssdeep":"192:RFa1RNga83KfjwfRFajdEwEK1ASXoZkC2M+PYCnRW9GmI0D/VAgCjfy7:/ANAKfjwfnUdEnK1rY2ZRW9qHi","tlshash":"0122451524b75a910e6375ff45bf5a047626803b8a0bee007f5d23d85f9ce28e271a1f","size":10721,"data":"","first_seen":"2025-02-23T23:30:19.055145Z","last_seen":"2026-05-05T10:28:17.95538Z","times_seen":657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","size":817575,"data":"","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-05-02T10:21:31.259475Z","times_seen":6867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9ad5f07ac9b6631dc95e185158d1231","sha1":"cc07bb1b9eb5443f8c751abe5523e113694d43e8","sha256":"d205e7c10960112046f732f3d4ae68e8d28c0641dc14ba23b724aa884a3c016e","sha512":"33c77ca379b451d8792f8c22d859cfbb67d4d7ff04e934620402c35f1514ca8fe246168477eab7c1f004e95f4dadbb4553e85c2c41517103a3d744583e9e1358","ssdeep":"","tlshash":"ad014c3e5491f62442e060fc195a185891f48f8735b9b944eb75c73d2a72e4348ec8a3","size":690,"data":"","first_seen":"2023-03-09T17:40:07Z","last_seen":"2026-05-05T10:28:17.964666Z","times_seen":846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95040c9aad11e653ebc7cdcc8734df04","sha1":"52f2d407b6ac13c7ad3ba61c0c30afd2df6a304c","sha256":"15f52aeee240c499fb0cbdcf165ac6c0a2c4a009be9f1f5ed5dc21b3591eac5e","sha512":"eae267e2ab0a5182cc9de5d077b73beddd935ab9e81d05492043bddd86b40bcfa98b9fd8fc0117fa4a394035e56df4abc59c24cbe1a267775f366d40fe42dc64","ssdeep":"","tlshash":"e21102b71604a0394b3219e1e2ffca71e492701cf16c85e8a519da841e6acc7cf15595","size":1019,"data":"","first_seen":"2025-09-25T04:32:34.814491Z","last_seen":"2025-10-02T04:58:03.089724Z","times_seen":299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","size":817575,"data":"","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-05-02T10:21:31.259475Z","times_seen":6867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-05T20:11:34.888571Z","times_seen":125877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4363b0418550ad592dccbe0a97bb89b7","sha1":"07e200860f93275b0e1a659407404fe3fd0555c5","sha256":"be98493dc921c222190fed0c5127220baa665d634614997273167128763ba411","sha512":"8717bd94261b24f4b47a69801fec327ff711ad0e13182cabdebb2d8eb6dfab08802bdc9fd92bc6bdf1860cc6ab24cd7a04d331c700de3b8bae6c76e8d8456eb4","ssdeep":"","tlshash":"84d0a7193254153004d913bea073d7bd64a3215b1a5772018868cded2d50ea75951e98","size":234,"data":"","first_seen":"2023-03-09T17:40:07Z","last_seen":"2026-05-05T10:28:17.965729Z","times_seen":851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/theme_panel.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fa6b76c00dbf823e604ce777da79763","sha1":"21eb3a34c12f4bf7d7b2087157b39d1be96a69ab","sha256":"a6bb2b1a9d9727048a5a0927db6ee35d4f5c335e645715dd2e4dc693669951ad","sha512":"604f3719abd132aaac8c453788b20ca6eb6cd560ea1c9ae86323a3d4739d9b219902c40e1956708602a41205be1df028b539c3ff904ad7c0870f22216905e643","ssdeep":"3072:HuQmXnY6zIX8bYSHPX4w/5D3GCe9Q2gKqxxHuT65MBGO4lHPWbMZ7qp5OR:OQm97bYnw/5D9LKqx98BBGhHPWs7qpUR","tlshash":"b784d5cdb685b0b207eb60b5407f560bf237a959b44a8190f265e8d46d7c98e603bf3c","size":404365,"data":"","first_seen":"2023-11-22T17:53:16Z","last_seen":"2026-05-05T10:28:17.963714Z","times_seen":764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95040c9aad11e653ebc7cdcc8734df04","sha1":"52f2d407b6ac13c7ad3ba61c0c30afd2df6a304c","sha256":"15f52aeee240c499fb0cbdcf165ac6c0a2c4a009be9f1f5ed5dc21b3591eac5e","sha512":"eae267e2ab0a5182cc9de5d077b73beddd935ab9e81d05492043bddd86b40bcfa98b9fd8fc0117fa4a394035e56df4abc59c24cbe1a267775f366d40fe42dc64","ssdeep":"","tlshash":"e21102b71604a0394b3219e1e2ffca71e492701cf16c85e8a519da841e6acc7cf15595","size":1019,"data":"","first_seen":"2025-09-25T04:32:34.814491Z","last_seen":"2025-10-02T04:58:03.089724Z","times_seen":299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/js/dood_load.js","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3da62de56e20742d00f9bed95160562","sha1":"909b8918114646d0290e0e9ed3fd38e8954a5860","sha256":"d9e6077900d21940206069ce5b05bae5e2ef6f100187cfe49dda6c41a10863e7","sha512":"2a116aa39967b096a737581f7cfa13ba988f44366e330054c97b426669a8927a46da0b0b592ab010ca9573c64a1bae5c49c26cb50e7cf7b9b830f9ef9c46149b","ssdeep":"","tlshash":"955130e9b21221b601f65ab621ffa340b6752145301390216c7e8cd96e3ffea6253e5f","size":2959,"data":"","first_seen":"2024-05-02T22:14:39Z","last_seen":"2026-05-05T19:09:43.601141Z","times_seen":2390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"5783eab6fe4da9ee66d04d2cbbafdd7d","sha1":"acaf9a909a7ae0e0904d8364fed5afdc10571c1d","sha256":"d456bc6e2bd967ab3031ed6de08bbff1c9079de02e15b7655ed8c9a924deaf70","sha512":"4199c4b32a99b122051b80665f4b3e75cde91fd58991b506cfcc9a69c36217d5e6b0b8a7e1350d57556fece007b1fbcd580f54ede87a8915d7528250600552be","ssdeep":"","tlshash":"58c08cd620eee4250d8b7080603a16a1b80804a100442084fa98cc94996a83013296ac","size":152,"data":"","first_seen":"2023-04-17T14:55:52Z","last_seen":"2026-05-05T10:28:17.965247Z","times_seen":848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7cd1fa3f0afb147ccf576bd5bd63c71","sha1":"2162383bc0cf068ee06dc0cbf52cdda7c6d5d5bf","sha256":"e4bce25401e2bac0f0d40796fdd8adc49bcf7d777ae3ecb1d6ac176e20b611a5","sha512":"a9e5b31071850dd5d0a5456a9f8d57482779638b1c23b4f0575774989ec825f00aec72a38b38e2df6c05ecb06fe488e338b7f73422d2dc2cb45103a983df1fc2","ssdeep":"192:qMNSfZ0VsU+ZO09SJo+l5eK5Y+91Edlng99dgY3AjL/7Cb/+io:s+IHrAeK5Y6iu9uY3Abkk","tlshash":"2cf184173269613505a362ef123b2a45f03361295c85825cb169ecf1297ce4fa23bffe","size":7741,"data":"","first_seen":"2025-09-24T13:16:13.004393Z","last_seen":"2025-10-03T08:12:01.528398Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_b2b9053.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"176cd3de75800b36cd389699ebd2ff31","sha1":"382714e1f14d1ef757bab46402241be972a555cd","sha256":"4dbd68157803416ab36065ada54052bd288caff85125ed45ee6a679777bab509","sha512":"1b7169a0eac11fa1a46b85c21d6e7f2407d09f037fb5abdff3c825001d5791212ae9077a0f315a08246b9ef7a2126d0db44eadeca5f03dc0e327f4516cdb19ae","ssdeep":"6144:+TY8hbIwnw+47Cs65OGa2GJqV8PlLmBV1dW44:ghbJnw+4HKOKBDdW44","tlshash":"e454188a7266a83303f582d3a0360942f37a255d7486407cf36cadef665cdc631aaf75","size":286288,"data":"","first_seen":"2025-09-24T13:16:13.040975Z","last_seen":"2025-10-03T08:12:01.515967Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","size":817575,"data":"","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-05-02T10:21:31.259475Z","times_seen":6867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"client.crisp.chat/static/stylesheets/client_default_b2b9053.css","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /static/stylesheets/client_default_b2b9053.css HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"68d3da4d-25cc3\"\r\nexpires: Mon, 24 Sep 2035 23:41:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 11:47:25 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 65640\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 98569c89cb7e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154819,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65438)","md5":"28f575b7ec7370277aeda0240588425b","sha1":"e7af3e7bee36e13cd91012af7bf6e330dc0c84bb","sha256":"9de6b82d9c736ba991abda60e68df42299a5e1ab2023a97146a931540fa8b0bf","sha512":"0e38ac05d12909930bcc9f0bdb6d05ac8073cab8a8653b6d28845033706104743c1b6df3ff40111ad995280964619bac4dd3d9b2fc304488d04d976727d89884","ssdeep":"1536:OcmsocZAyCjk0Zl9UJz0xaWrMpy6X4nbA:LT4E","tlshash":"6ae3634fb26a506014d389a3bdc4b73d942ea8ffc211393de75566bc4e940ef53a8728","first_seen":"2025-09-24T13:16:13.057115Z","last_seen":"2025-10-03T08:12:01.533823Z","times_seen":121,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"172.67.68.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-26T23:41:19.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsvplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 14:02:53 GMT","end":"Thu, 18 Dec 2025 15:02:50 GMT"},"fingerprint":{"sha1":"49:70:4C:09:E1:E4:D6:68:0A:21:7A:96:53:6F:56:21:5F:88:7C:DC","sha256":"17:46:2B:0D:1B:6B:B9:79:84:3A:4D:09:82:FE:1F:FB:96:EC:CA:E2:54:B8:4A:66:04:5C:A9:02:51:A3:E5:D1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dsvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 26 Sep 2025 23:41:19 GMT\r\ncontent-length: 0\r\nlocation: https://doodstream.com/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToyiWkq4kuBMl%2FWQnAXOSm0nqjYsjrAN5PwwGOXP1PWii6qs8Ib72q%2FkPc8yzUUsL%2BM35CqQaT2Wnd8%2BygKJfAsCbDYkihf1suc%3D\"}]}\r\nset-cookie: lang=1; Path=/; Domain=dsvplay.com\r\ncf-ray: 98569c85fd531a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17803,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T20:09:54.588333Z","times_seen":14703811,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":132,"dns":0,"connect":1,"send":0,"wait":80,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"dsvplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/main.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/js/main.js?v=7.7 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 01 Jun 2023 17:39:53 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 08:38:16 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYGl2JLdRYq7VYSqYnqbrmnOi71tzFmX9rir5vYsVj4FciTmO7JuCme8eslnjnDkrxn9gcph1ylCfUdtwJ8jgzaFtOQscKMyBy%2BZ\"}]}\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 70594\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 98569c88582b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (525)","md5":"f3a42471153d54fbf4b183289b167756","sha1":"4640a875a7cb3243dc7d37837a2dd209573a1535","sha256":"c59ce1b4bc31922985373919061227a3de57354ae471b793ac1d9a3f442815bc","sha512":"12b361b999202904318d147e5eee95d215e89821ecb8b74574e328c6f52c8f1c7222d05cbf1310883f4702a8756f575902092d9e12536d374924324b4b44a271","ssdeep":"192:RFa1RNga83KfjwfRFajdEwEK1ASXoZkC2M+PYCnRW9GmI0D/VAgCjfy7:/ANAKfjwfnUdEnK1rY2ZRW9qHi","tlshash":"0122451524b75a910e6375ff45bf5a047626803b8a0bee007f5d23d85f9ce28e271a1f","first_seen":"2025-02-23T23:30:19.055145Z","last_seen":"2026-05-05T10:28:17.95538Z","times_seen":657,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":74,"dns":3,"connect":2,"send":0,"wait":6,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 26 Sep 2025 23:41:20 GMT\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"95040c9aad11e653ebc7cdcc8734df04","sha1":"52f2d407b6ac13c7ad3ba61c0c30afd2df6a304c","sha256":"15f52aeee240c499fb0cbdcf165ac6c0a2c4a009be9f1f5ed5dc21b3591eac5e","sha512":"eae267e2ab0a5182cc9de5d077b73beddd935ab9e81d05492043bddd86b40bcfa98b9fd8fc0117fa4a394035e56df4abc59c24cbe1a267775f366d40fe42dc64","ssdeep":"","tlshash":"e21102b71604a0394b3219e1e2ffca71e492701cf16c85e8a519da841e6acc7cf15595","first_seen":"2025-09-25T04:32:34.814491Z","last_seen":"2025-10-02T04:58:03.089724Z","times_seen":299,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":47,"dns":0,"connect":15,"send":0,"wait":117,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-light-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-light-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23196\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 04:04:47 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 70593\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cthM2clDVkD3W2mEaAF7kRn5RSQUqvhn%2BZOZFcuxAHTV%2B5NLt9w3D41RBnLxondIry0dh1Ia%2Ftw%2BmvoNRbYeDcu%2B3iY4j5TBc6ZxJ%2BJmhUM%3D\"}]}\r\ncf-ray: 98569c8898813181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23196, version 1.0","md5":"c2e8bf5edd3e7f39ca8ad4a0a5e16f22","sha1":"7be4e8b2fffeaf2473d82fa5f1cac3c22c0d49c2","sha256":"57e039ecd887b28646f516242edfb903c1ec86f4ca7d6f6a8126969da31a21fa","sha512":"bc4ad78dd05a11cda2ed09d1c7ac454da869df8019c69ceec13117977f9d2a1ef5cae52ede22212b71a3242a365bd03cfaf99ca6f04c19c87048eb9f24618188","ssdeep":"384:1Nwlvq7TmO5LHtC/TlK1sY5a77r5yauOA3HUDaOC5dhYlkjaEUy1Tm+irkx8I1:1NVTtDN1d5aZuLHbOiSlkejATNirwt","tlshash":"00a2f15d64c5adef448033f24947ef21a85a347c3f6fa544d39a8c1b26b13048b7f5a1","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.962245Z","times_seen":803,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 16:35:48 GMT\r\nexpires: Tue, 22 Sep 2026 16:35:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 02:03:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 371132\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":817575,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (765)","md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-05-02T10:21:31.259475Z","times_seen":6867,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":75,"dns":6,"connect":14,"send":0,"wait":15,"receive":66,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/fonts/noto_sans/0020-007F/noto_sans_bold.woff2?b2b9053","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:22.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /static/fonts/noto_sans/0020-007F/noto_sans_bold.woff2?b2b9053 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://client.crisp.chat/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:22 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 10252\r\ncf-ray: 98569c9a3b06b4f4-OSL\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: \"68d3da65-280c\"\r\nexpires: Mon, 24 Sep 2035 23:41:22 GMT\r\nlast-modified: Wed, 24 Sep 2025 11:47:49 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10252,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10252, version 1.3932","md5":"6d74a49bf6645c1c8a7940ff7f94ce6f","sha1":"433ea3334227f42a15b8853faa6ec93c371af4ba","sha256":"73d7d4ea3f62303b780f0225e5346e5047cfb41fcae7ac19e99af8a3e1950973","sha512":"6f08896b2d4c534fb8c2b15643c79ab14333afd428bd595c3597e7270d56673ba7bc6cb3b179a53cd375dc0b41025ed5bf005558697bbca121b8b2d08f723f12","ssdeep":"192:rKdkxVGer/0UYUyIX8kG46z66+VXw5jsSZ5pDKFb07vm0lIcuNteqPY:2kx80nYsz9XQoSFub06JcuNPg","tlshash":"0c22d0f71940dd6c86a1c9f23adc83f843a18891715eaea8535e6f4ca80716e8d051ba","first_seen":"2023-04-11T10:28:32Z","last_seen":"2026-05-05T18:58:40.723468Z","times_seen":2698,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-ray: 98569c87ec24c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1525471\r\nexpires: Wed, 16 Sep 2026 23:41:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TSqak1skyrk4gC0kJK9JqH9AvJlwNJanBm7G9s9Fb3RGBD%2F3UP8GQjWFCs2KfYW%2FOEEvkPgplper0PXZPZM022T76KDWCFKe2e4KKz6be7A9jpJbsQm9kYmtGqERHI%2FQXcKUNOm4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-05T20:11:34.888571Z","times_seen":125877,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":7,"dns":0,"connect":2,"send":0,"wait":10,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-semibold-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-semibold-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23800\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 07:42:15 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 28229\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9B5jZ5PfDlHQOdJZmWQgOUqiOJXWPrZpCuLeLr77km5NdPTWS0daI3Vf7stsOcNMaO5b3xXtOhNMCiCJimP8TFOPn2klDzniC9pv4Po5IU%3D\"}]}\r\ncf-ray: 98569c8878523181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23800, version 1.524","md5":"3ec2d18c5a3d480b0161ce3c9a69aa5c","sha1":"a12a5815c1ec2eb7c04dab567ba99c82d7b3d2e0","sha256":"eca03a9512b9c95df8bc4589fc70bd8ca33319245b95d67e84b5cb584a9fc5fe","sha512":"c910040d60f1bbd047f2f640b4ad41c280c16e25d53bdedaeb0a47611e271dcc4035e0b9e478ea419f2e6cc604b11b54c0e8f7127d302bfab05565cbff0836d4","ssdeep":"384:EfVHZ9RQK7HDG1S+yiKKOLG5R8gvL0TQdELFthfVA5GH1WLPlfz7bNkz8HM:EdHZlnZLipv70jfV9VWLPlJk4s","tlshash":"82b2d1eff314a101b9d7bbb499bfd7994f7ce52f582a8f82224b3a89414839531404a7","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.964189Z","times_seen":1069,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F1%2Fb%2Fe%2F8%2F1be8bf4185fa3d00%2Fleilani-angel-k84vnnzxmtq-unsp_g3rsqj.jpg\u0026width=60\u0026height=60\u00261757039704023","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:22.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /process/thumbnail/?url=https%3A%2F%2Fstorage.crisp.chat%2Fusers%2Favatar%2Foperator%2F-%2F1%2Fb%2Fe%2F8%2F1be8bf4185fa3d00%2Fleilani-angel-k84vnnzxmtq-unsp_g3rsqj.jpg\u0026width=60\u0026height=60\u00261757039704023 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1488\r\ncf-ray: 98569c9a3f7c2efa-OSL\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"5d0-199858e3790\"\r\nexpires: Mon, 24 Sep 2035 23:41:22 GMT\r\nlast-modified: Fri, 26 Sep 2025 10:25:14 GMT\r\nage: 27942\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 60x60, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d3414a581c85e4b7a3cfec8956bc7950","sha1":"213d5bb0b87c2340e4db361f5de6f890e6a1e949","sha256":"c278139d14fc5986b5be80db606623add98ce13a3f1843aa2be26cc4fdfd95b5","sha512":"6e28972769675113473582e8da35201303d302130e44e2110c07cd1a3ba5fe453ef8d25739066ee322c963b604be356b8b9e0b20d1a158064bb3d9067329ace5","ssdeep":"","tlshash":"e3311cd68e0d0517d589d455cd6479b76f6087071491ca004afc8120551f67f7c0b5cd","first_seen":"2025-03-21T06:22:04.865583Z","last_seen":"2026-05-05T10:28:17.928917Z","times_seen":535,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-26T23:41:19.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=moIVawIlhtVIvfQK; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg10_=1758930079; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg1_=btPBXXWyIeZpLsv6O0FT; Domain=.doodstream.com; HttpOnly; Path=/; Expires=Sat, 26-Sep-2026 23:41:19 GMT\nlang=1; domain=.doodstream.com; path=/; HttpOnly\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Fri, 26 Sep 2025 23:41:24 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":17803,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17803), with no line terminators","md5":"45636eede8697f9bef1b10826291f7e4","sha1":"4e510fe4c8f0687cba3e12ded3cecd006869b199","sha256":"ee7185cdc7e495681b217ed60b89dcb9821c6bc41d64b6aed739fac3f36b8d44","sha512":"536af19dc4eb78d14bce14d2c79563dd1aadc4f55bce53a2b701d8ebb65c28bd99ee568ea4a4be5a468e3c8e298f9002968ae0cecfcaab23c2954eebdec5d0a6","ssdeep":"192:LqMi5wZCvHgArswgCDwvHgAneM1BFbvHgAPmvzsIlQxOulnLumIaG+:W1bH1IHhFjHRmvzsIlQxdnLufx+","tlshash":"a78264313408ae3741c3c1d8b7749b0ab2d6d346da1b1649a2fec3ad4febc95dc252a5","first_seen":"2025-06-07T08:38:21.350418Z","last_seen":"2025-11-20T17:23:09.681691Z","times_seen":174,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":72,"dns":12,"connect":18,"send":0,"wait":81,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/css/style.min.css","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/css/style.min.css HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 26 Sep 2026 03:12:49 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxNeQ%2ButHLdNDCEqZWgmtK3j%2FSMUTSqIdQ1AMTO4tqM3jjq%2FtfGGVGbuppeAJ8mL4JPOybvhRZkWTxjP3q5i1ZrKEHhqav7oGc6aKsQ%2BpfU%3D\"}]}\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 70594\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 98569c8828023181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207153,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"92602cdd110f15f792895d791130963b","sha1":"07a2c634321ab59d0510b6ad6f540f32373c84ef","sha256":"996fc10d188bec3e26c7798df7d4717dc91a71b79e55c1095775adf8a3b78ded","sha512":"3597f95f7bedc8e8beca2f5d9662ef7e4d501aada8650126c8be1b3acf2e4eee633c3b32ba3db8a4f1dc77ba4471c28eae8abcbb00e81e4012ae247c67d6af63","ssdeep":"1536:iL41aqIk+QY4H50DOUbt3I/vtX2dWGFIib2Qu8IEiy6BfAXnwo1OvMFO3kAmFZab:31bIkbYeCOUJ3i5PUIAXTU","tlshash":"fe14f1b4d41e01da7726c60fab41b27a98f6f338d5410e4af08b5c5e5de2b9801c9bed","first_seen":"2025-06-07T08:38:21.369173Z","last_seen":"2026-05-05T10:28:17.955977Z","times_seen":598,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":49,"dns":3,"connect":2,"send":0,"wait":9,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /l.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=10800\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"68d3da36-1e3d\"\r\nexpires: Sat, 27 Sep 2025 02:41:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 11:47:02 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 42724\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 98569c896ee60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7646)","md5":"d7cd1fa3f0afb147ccf576bd5bd63c71","sha1":"2162383bc0cf068ee06dc0cbf52cdda7c6d5d5bf","sha256":"e4bce25401e2bac0f0d40796fdd8adc49bcf7d777ae3ecb1d6ac176e20b611a5","sha512":"a9e5b31071850dd5d0a5456a9f8d57482779638b1c23b4f0575774989ec825f00aec72a38b38e2df6c05ecb06fe488e338b7f73422d2dc2cb45103a983df1fc2","ssdeep":"192:qMNSfZ0VsU+ZO09SJo+l5eK5Y+91Edlng99dgY3AjL/7Cb/+io:s+IHrAeK5Y6iu9uY3Abkk","tlshash":"2cf184173269613505a362ef123b2a45f03361295c85825cb169ecf1297ce4fa23bffe","first_seen":"2025-09-24T13:16:13.004393Z","last_seen":"2025-10-03T08:12:01.528398Z","times_seen":122,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":10,"dns":1,"connect":2,"send":0,"wait":44,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/prelude/?2025-8-26-23-41","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/prelude/?2025-8-26-23-41 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://doodstream.com/\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Sat, 27 Sep 2025 03:41:20 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 Sep 2025 20:41:04 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 98569c8a89d8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb9cda84483d72f17ec70ff6db6e4a2e","sha1":"eb468eca74be16243d5778f8e34e436993a3b1ff","sha256":"30bde03c517ec9609ac15a0faa72e39ebc7217bc6460ad4a1968a33722128050","sha512":"393331633ac5a6f130137a2b196bb3ca3754a670098dd4b57e353e52bd20ac911124a8efa7d4d57fdce701bda87df1d8288bfe1fd7a36680cfca4d27dd05c9d3","ssdeep":"","tlshash":"f0c08c5e06f000201aacc35d610cee7e2477006f86aa30bd55989c2c48323ea0b2a221","first_seen":"2025-09-07T02:12:45.993564Z","last_seen":"2025-09-28T09:02:59.16171Z","times_seen":22,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 16:35:48 GMT\r\nexpires: Tue, 22 Sep 2026 16:35:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 02:03:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 371132\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":817575,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (765)","md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-05-02T10:21:31.259475Z","times_seen":6867,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":76,"dns":1,"connect":15,"send":0,"wait":60,"receive":33,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/locales/en.json?b2b9053","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /static/locales/en.json?b2b9053 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://doodstream.com/\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"68d3da5d-3362\"\r\nexpires: Mon, 24 Sep 2035 23:41:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 11:47:41 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 28228\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 98569c8d7b7bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13154,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e36c668a5f58fdc0b09629e18a6ea83","sha1":"55de322a784cf58eafbe3927f69e233e05d655f8","sha256":"1b499dc34d504cb5ef16172307462f20eca971e08d69880f2e6d3061a54b3dff","sha512":"8e29d5256570dfb21ca4e74f6df79d82423ad64e69d37e54d632f0e97669257861cf3d0d23d187d4beed46656c1c4f19002612feb5209472014df1e9b179c608","ssdeep":"192:/6bs0p5mTbM/0cGoHvIigQ2zMQXWG/JfyeFMAe3p0jFfdmzt4NJVxtn4+:/+s0p5mTbQ0cZqAx0jIKnj","tlshash":"3642fc19df768e6700aa5a42b49562235d2461430fc4383eb71dc5bc0f9d8af72fba4e","first_seen":"2025-09-18T20:52:59.249491Z","last_seen":"2026-01-26T12:38:17.091924Z","times_seen":2039,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/avatar/operator/a89bb524-21dd-4c27-9e0b-a549de7b4509/60/?1757039704023","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:22.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /avatar/operator/a89bb524-21dd-4c27-9e0b-a549de7b4509/60/?1757039704023 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 844\r\ncf-ray: 98569c9a3f7e2efa-OSL\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"34c-199802ca13c\"\r\nexpires: Mon, 24 Sep 2035 23:41:22 GMT\r\nlast-modified: Thu, 25 Sep 2025 09:20:32 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 60x60, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43374c44e6bd2a71c5a7696bd280d66d","sha1":"fd7b47d5a23417d405cad5404665aafd39b19b17","sha256":"a7d099be383cc85ee0e7d4c558ca0d65d29febf1fd7c780f10425e9aa7535650","sha512":"aeebf551792b7eed1b1f4b9c0bcb3bfca373b97972429a6217be5cbce2fc7e64b9eb8b2afa9e63b8b7ff17968937326e893e9cb01d30ea21bd7f1017989bdb0b","ssdeep":"","tlshash":"850152404850de6b94885b540872270a61948ee2e7e9d39f2d64e277dc93d6cd106f3a","first_seen":"2025-06-16T22:58:48.246142Z","last_seen":"2026-05-05T10:28:17.92944Z","times_seen":452,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/theme_2/img/login.svg?v=1","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET /theme_2/img/login.svg?v=1 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=moIVawIlhtVIvfQK; __ddg10_=1758930079; __ddg9_=81.95.81.194; __ddg1_=btPBXXWyIeZpLsv6O0FT; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FS5fS79mI1UQQlHP; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg10_=1758930079; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 26911\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 23:41:20 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26911,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9419e5e36b1fe20bd45c610ee8249ee7","sha1":"aab6a7732db01e520821c28a44a56f6da53e381d","sha256":"85d3500e93d6263e1e95d58d8862b5671209877c34fd010e23f1a316527800f7","sha512":"ceb2228a7731aa2c9a7264a7dd118c638fa31f78368d669659744f64ee274c5061a99f40299925f0b1aa989799f3ffbcc2c4ca79dcc2386614a2922621e1deae","ssdeep":"384:CdvrF7I455ZDGFGgD1cvfEZWD9Hr1kVMmCqCjarGhjKtXKgkpMnad/nadUqO+X0B:CB5TGFGgDWDbkV3GKtXKggHsvX0UhM","tlshash":"dac2d8b52368b2b996828b19c6e918d6359c90cbb1b291ecd77787076c205f740bcd3e","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.956497Z","times_seen":851,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-bold-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-bold-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23604\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 25 Oct 2025 19:39:08 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 28229\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FT6%2FxPCCtWk74KBf56v4dz0l8uMgJqZiMpHe7UfXEjQPQ5N43bEzPzvIfzb2gzyYVMQKuzZxrvBJZNPKyoaO7UlIr8AJoNiXEHEPze%2FDRO4%3D\"}]}\r\ncf-ray: 98569c88a8973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23604, version 1.0","md5":"e9133fd11f14c09a2e4556c395a0ef7d","sha1":"00fad09605f3342df5c9aeba130156fe19ade8b0","sha256":"06244cc9cd0c998581b1bf93f5222deee7d2d0b09299190e163961afa973ba91","sha512":"d5308125b08c886657d3093adea3f425f3d641983464e76fed107722dac947691ae18f2434bc186311e855e64603451a7dd3c6b2766d4011de015bf4426fded2","ssdeep":"384:l3TfNjWicLkpy2Ll25J7RwOh8VMb+WR32Cv+rfGSw4WLYu7FqC4ltA:lrN6iccc51MMb+WR32Z6SXyHL4DA","tlshash":"57b2e072b73e170ed587507260ab6dff65f40a68029b283422079116786bdcf75b4afc","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.958677Z","times_seen":1664,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 184476\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 06:13:22 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 28229\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWL0GWz154FbYJtjbAfqpM1jy8XyMQuAKOLeX9RfoNUWdBGN8FcpdNnaB8QMJxSndZ5V4e9h86O8W%2Bedcu2AJkbWY180EKJIzHSOSwNgWCU%3D\"}]}\r\ncf-ray: 98569c88987a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 184476, version 330.-16253","md5":"2a6dec1227f9970376f578270a642d06","sha1":"150a6a7ffdec6e2e2ff4c712d7cee8bd9b930284","sha256":"e228b909313044a18dec1a674cfd4935071c36eb3eb6a0cd38a45afac6ae3996","sha512":"47bd75a477eb7174248c25c18f73fd9d9b61f6626f2153fe9f564bd3e59fff48b557349d2e6c7c0d0f54f1e6d7b339bd190a4353af3518548f36f18bd10fb9a6","ssdeep":"3072:8tamB2NjJw1UqNxymy/a/No8qP5ObEgDcSQpBJ0/tU+l6owzIvAS4GKVJvt6kt/0:aaRhJiUwsmy/oNY7G/u2icoAkt/t/+6E","tlshash":"8b04127b2ad7b6bcc6d2f853776580631489413cb9f6459e70eb73d22638d8c32c81a6","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.959388Z","times_seen":1681,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-extrabold-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-extrabold-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24364\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 25 Oct 2025 17:57:59 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 28229\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLAcvv6IXXqHUiTLp97Lu6BmrItMf9KVlV65knrLJ1SpW6xPgOUeVbnN6AF08erwvKtc0sNimlAUIUhME80bkVLnYl2rpDMyemZjHMZqnxU%3D\"}]}\r\ncf-ray: 98569c88a8963181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24364,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24364, version 1.524","md5":"5ea3b4ccd4ed6a7262f654e017025345","sha1":"a5d5d0ed221b9a30f4eec356a4d51bb1da52e7ff","sha256":"2b8fd40fb88ea6f4b81fde243bbe103aa1d12cd2f2ced9bd456f41b0b7cd3b71","sha512":"390d14f9370a9dfb144516bc1509a8c1982879abe4b6e80ea350a5f02693a8e975a37da278ac06179a00e0d9c885f1543f1142d979c461a7b763a36720fc4eb8","ssdeep":"384:x6an+iEQuwx7Zoatz9TJIW5gvQPJzEQXYt4oNmGFjvHCvGDu5VOFvinxYuAn:x6aHoa/TOWuGzZYFAGFG+kVKKnVAn","tlshash":"69b2f15f84d01126e082c720fa8a8f9f186c905b35bc1ba4d6d71dc5615a9ebbbcb0b7","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.937052Z","times_seen":807,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/js/dood_load.js","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET /js/dood_load.js HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=moIVawIlhtVIvfQK; __ddg10_=1758930079; __ddg9_=81.95.81.194; __ddg1_=btPBXXWyIeZpLsv6O0FT; lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yzvjHxtfDoIFlYIF; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg10_=1758930079; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2959\r\nlast-modified: Wed, 23 Apr 2025 23:27:28 GMT\r\netag: \"68097760-b8f\"\r\nexpires: Sun, 26 Oct 2025 23:41:20 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2959), with no line terminators","md5":"e3da62de56e20742d00f9bed95160562","sha1":"909b8918114646d0290e0e9ed3fd38e8954a5860","sha256":"d9e6077900d21940206069ce5b05bae5e2ef6f100187cfe49dda6c41a10863e7","sha512":"2a116aa39967b096a737581f7cfa13ba988f44366e330054c97b426669a8927a46da0b0b592ab010ca9573c64a1bae5c49c26cb50e7cf7b9b830f9ef9c46149b","ssdeep":"","tlshash":"955130e9b21221b601f65ab621ffa340b6752145301390216c7e8cd96e3ffea6253e5f","first_seen":"2024-05-02T22:14:39Z","last_seen":"2026-05-05T19:09:43.601141Z","times_seen":2390,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/?op=notifications\u0026open=\u0026_=1758930080167","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET /?op=notifications\u0026open=\u0026_=1758930080167 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=v9A1iFYiB1S2WM69; __ddg10_=1758930079; __ddg9_=81.95.81.194; __ddg1_=btPBXXWyIeZpLsv6O0FT; lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ycrASLeAV3lqFIXM; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\n__ddg10_=1758930080; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-length: 0\r\nlocation: /\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17803,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T20:09:54.588333Z","times_seen":14703811,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/favicon.ico","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=Lasi03iBRb1zfovX; __ddg10_=1758930080; __ddg9_=81.95.81.194; __ddg1_=btPBXXWyIeZpLsv6O0FT; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Y1uAJ0sKRgrXwKL4; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\n__ddg10_=1758930080; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-3c2e\"\r\nexpires: Sun, 26 Oct 2025 23:41:20 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-05-05T17:19:10.245631Z","times_seen":3634,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/avatar/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/60/?1757039704023","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:22.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /avatar/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/60/?1757039704023 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 698\r\ncf-ray: 98569c9a3f802efa-OSL\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"2ba-1998147ac89\"\r\nexpires: Mon, 24 Sep 2035 23:41:22 GMT\r\nlast-modified: Thu, 25 Sep 2025 14:29:42 GMT\r\ncf-cache-status: HIT\r\nage: 27941\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55afeddaa09092df2069c9389fcc8fbe","sha1":"270cddf6d583d4fbdc01776654f04354e1eea00a","sha256":"48e0c086bcf157de5ece61a2edc72a4f90a146c735a3183a1b130aa1307069ae","sha512":"0d896a73833dd14a6ad2aeb5a145b03dad90b4918bbc2753de61e118930861d9f3a891510a0a15f21e832c2d543bd04ebfe6051b2d4a48dfbb8fe92a6ad31e74","ssdeep":"","tlshash":"8201942e6619131cc6972a0c82701332b1d6442b14bf5ba0e80ed2e75600d8809c8fb9","first_seen":"2024-06-22T00:10:11Z","last_seen":"2026-05-05T10:28:17.957691Z","times_seen":665,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/theme_2/img/reg.svg?v=1","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET /theme_2/img/reg.svg?v=1 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=moIVawIlhtVIvfQK; __ddg10_=1758930079; __ddg9_=81.95.81.194; __ddg1_=btPBXXWyIeZpLsv6O0FT; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cwzg4Gm5CqtNyM8O; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg10_=1758930079; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 26040\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 23:41:20 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bba2eb72b60ee533d5741e119b9e0761","sha1":"76922f11d6f5c791ef36c7c734e7ec2e67b38c49","sha256":"24229ab2ce7d1b6c82854f67ee3044fdd761d04dad58345e74abc3ff149d4a7c","sha512":"0d34793605c51c48c2928cb690421d0c81ca0fa6a68cff75a23c5402ea232d6de35db376d156ebda8904849ae06367789c2a024a505f0bfaaed2961f88eee2e3","ssdeep":"384:hyHCP/8WT6rQXA484GHTn4BsEw5TJsk07VZLoOxap0uAU6MPW373Vcc9248XYq:hi1WTPXA1JvEwwoxkMPWL3VccTq","tlshash":"67c2c4b2635472bd88824b58c2e568b6317e51cbb0f6a1dcdb6b438e6c245fb41bcd34","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.929997Z","times_seen":844,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-black-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-black-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22820\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 05:52:44 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 28229\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O1muXkiukX8oduc9LD%2Bn2TGyoqRItqYhbdPjOLov7Qsc%2B1r9SzC1dOGiJDpKcmaAdv8sph7k8NDnXVgKKLAY0nkppxuJ30bhcYIGius9vpk%3D\"}]}\r\ncf-ray: 98569c8878593181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22820, version 1.0","md5":"1e976387cb594982692bdbdffde86f91","sha1":"9546836a7d80c17d85cdd37a9553852f00af031b","sha256":"4dc982a61a00481f4c9545f9f2da64098428b4aec96838de3c194fa82373ce1d","sha512":"f63f58e1dfe0c08f3c262ef14bd4567c8604873486b50ce31d4d1db8976926f0bb65ffd792181144da049f74a362d52114277bedd5fd75f5b067aa2269c95155","ssdeep":"384:Dmtr9L0ILBYhzpVK87bfeTGzgdLN0vdCmyfA+IUF9/LgLnq/g4J6:DO9L/BYhdQSDea0/Dm9NUTMbqIm6","tlshash":"dfa2d0eef042f863db1207a4857f222187b7a8ec41021d13fe2f6259d4a1d456db2db7","first_seen":"2023-04-08T19:13:00Z","last_seen":"2026-05-05T10:28:17.936516Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 26 Sep 2025 23:41:20 GMT\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"95040c9aad11e653ebc7cdcc8734df04","sha1":"52f2d407b6ac13c7ad3ba61c0c30afd2df6a304c","sha256":"15f52aeee240c499fb0cbdcf165ac6c0a2c4a009be9f1f5ed5dc21b3591eac5e","sha512":"eae267e2ab0a5182cc9de5d077b73beddd935ab9e81d05492043bddd86b40bcfa98b9fd8fc0117fa4a394035e56df4abc59c24cbe1a267775f366d40fe42dc64","ssdeep":"","tlshash":"e21102b71604a0394b3219e1e2ffca71e492701cf16c85e8a519da841e6acc7cf15595","first_seen":"2025-09-25T04:32:34.814491Z","last_seen":"2025-10-02T04:58:03.089724Z","times_seen":299,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":83,"dns":0,"connect":16,"send":0,"wait":147,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_b2b9053.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /static/javascripts/client_default_b2b9053.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"68d3da4d-45e50\"\r\nexpires: Mon, 24 Sep 2035 23:41:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 11:47:25 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 28229\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 98569c89d985b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286288,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"176cd3de75800b36cd389699ebd2ff31","sha1":"382714e1f14d1ef757bab46402241be972a555cd","sha256":"4dbd68157803416ab36065ada54052bd288caff85125ed45ee6a679777bab509","sha512":"1b7169a0eac11fa1a46b85c21d6e7f2407d09f037fb5abdff3c825001d5791212ae9077a0f315a08246b9ef7a2126d0db44eadeca5f03dc0e327f4516cdb19ae","ssdeep":"6144:+TY8hbIwnw+47Cs65OGa2GJqV8PlLmBV1dW44:ghbJnw+4HKOKBDdW44","tlshash":"e454188a7266a83303f582d3a0360942f37a255d7486407cf36cadef665cdc631aaf75","first_seen":"2025-09-24T13:16:13.040975Z","last_seen":"2025-10-03T08:12:01.515967Z","times_seen":121,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":8,"dns":1,"connect":0,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 16:35:48 GMT\r\nexpires: Tue, 22 Sep 2026 16:35:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 02:03:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 371132\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":817575,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (765)","md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-05-02T10:21:31.259475Z","times_seen":6867,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":75,"dns":0,"connect":15,"send":0,"wait":58,"receive":34,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/theme_2/img/f-pass.svg?v=1","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET /theme_2/img/f-pass.svg?v=1 HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nCookie: __ddg8_=moIVawIlhtVIvfQK; __ddg10_=1758930079; __ddg9_=81.95.81.194; __ddg1_=btPBXXWyIeZpLsv6O0FT; lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=v9A1iFYiB1S2WM69; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg10_=1758930079; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:19 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11717\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 23:41:20 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50ebd9e535d150a08e140eb31c00e7f7","sha1":"e1cd70ad437f97e2677e606c32038c8ee9781e6d","sha256":"78802a815085f2809c523105bc27ffb015f2ba163d093dfef8ec0985cdfe153b","sha512":"40462240f3b5aad4d8da00972bf351969dc474eac8ba517f0966d521efbf2e0032cb1352011c1f1c010381e9be81c0a95e7cfa93fcac7809674d8fe024bf2107","ssdeep":"192:WycyzdJviyTyetpCytyAvkM8SCGssY3wpfyiWJWZ:FzmyTy+Cy8AvxKG99lyiww","tlshash":"713284b5a31a963d598a0b58c7d504e9207c60cb3079d2dca72b03ab5d21eff81fc975","first_seen":"2023-04-30T19:07:30Z","last_seen":"2026-05-05T10:28:17.925994Z","times_seen":852,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/home_page.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"172.67.75.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/js/home_page.js?v=7.7 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/javascript\r\nage: 38266\r\ncontent-encoding: br\r\nlast-modified: Thu, 15 Sep 2022 07:36:42 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 26 Sep 2026 06:33:36 GMT\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84kSrL5HMoKR4r%2Bfzq5EUYowGe4xQLwqmFANRd2BsAzXTyhPYlXVmNcQ0sq2TPJNy8NkVW9hY%2FHcAPkZgdpYjTRECmvxF9WyOQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\ncf-ray: 98569c88cf570afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"3166b84236e9f39ed19cf578c39b6d25","sha1":"be4121a314ae601b8a7db70d92691e5ed933fc1c","sha256":"4733022d78c4c270b6f2d84f236c0dd9ce6c69cfcb6f6210b87c0fad2188dddc","sha512":"f44ca4fe3540bad4cbf389e1b38711c5a8e8e1010a529898705031d94318c64ed5d95d89864543afa8820a2df7df2db5666b18188a5e4592e5922d9f0474ef66","ssdeep":"6144:vf5c6kZwWgCz9+SmFoXp0sF62CrK1o+cCNvmskMrmzKU:G/gihF60camskMoKU","tlshash":"87d4e888ba95b07543a375b4002f510bf27bba2d744d44e8f265d8e5bcb898e513bf38","first_seen":"2025-02-23T23:30:19.089135Z","last_seen":"2026-05-05T10:28:17.938255Z","times_seen":655,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":12,"receive":26,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/fonts/avertastd-regular-webfont.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23812\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 25 Oct 2025 19:39:06 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 28229\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Frx2RbTT8EIsj9kEzMfPBPxMvl4lditJu8HoRKdAt45gRligBSIpyjezJPWPeY1BIQM04OCj4hwUbJbGE9au90RfJAY0TdVb0tTkGWbIxMY%3D\"}]}\r\ncf-ray: 98569c8878573181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23812, version 1.524","md5":"eb586e5a1b86dbf1c866e3ed80f9d18e","sha1":"280ee78d19c017ab9335f769595e5157d3c4a343","sha256":"714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf","sha512":"18b5a9996a6d0fd263f778b1ce4b7a84c42febf2dfcd5187bdc74192c156571823e973d6720f45536ef1048a355313169a4f1de1ebc30bdb0989065a1ff9ffea","ssdeep":"384:bdPI9PvaAAoKG+zf3bAVYGlg96u6Z+tUF7ZrzSkorNYlVFLhfkZv9wPXcqEbJtuE:bdPIdCA7+jVhvUFtrzSkMNOp9k99h7dr","tlshash":"c2b2e17ad02cde72f5b6f3a59b2486e2d136d235232333e2151b89ba826170e1d16bd0","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-05-05T17:19:10.207497Z","times_seen":4170,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/theme_2/css/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/css/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 169732\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sun, 26 Oct 2025 02:50:57 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 70593\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2B7GijOo%2Fgct7Hn6TDK1SXUzHED3VKnAFZno2lw3Az8yiVTzILAPz%2B%2Fy7P%2BnaIyAaC5sdb6qOc7tbs2V%2FzKb9P3y2rBQPzEhyUur%2Frr7uG0%3D\"}]}\r\ncf-ray: 98569c88b8a63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 169732, version 330.-16253","md5":"983a20d28fbf8fbc27cfeb096f0ebd85","sha1":"c203f41e912f98d28decd9ebaf5aa287f4094c5a","sha256":"ec686d1012de783a5024affc9215692642a7b25af322ecc177062632902e6cd5","sha512":"3a3d4e8d382aafb3b8d538335945d1a34fd779474fe1a0689aaaa8af71d87ed0c2bfe5b1ffea58b436ff6981216388be3adb0fc1300e8cd1f278c8528778fd7f","ssdeep":"3072:S5Y7tL1t5dgUvwH4JOZYNC26XQR7klrt3RNL8Lgsx1gZ9/IuxIG:mY7J5iUYlXmIvBNLkx1gv/IHG","tlshash":"31f312e7a23af5d6fae36cd3a2797c36154c308112a1e5f166d578ddcf119f48a0ac08","first_seen":"2023-04-09T17:26:00Z","last_seen":"2026-05-05T12:42:55.08822Z","times_seen":1906,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/fonts/noto_sans/0020-007F/noto_sans_regular.woff2?b2b9053","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:22.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /static/fonts/noto_sans/0020-007F/noto_sans_regular.woff2?b2b9053 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://client.crisp.chat/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:22 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 10340\r\ncf-ray: 98569c9a3b08b4f4-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: \"68d3da65-2864\"\r\nexpires: Mon, 24 Sep 2035 23:41:22 GMT\r\nlast-modified: Wed, 24 Sep 2025 11:47:49 GMT\r\nage: 27942\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10340, version 1.3932","md5":"78fa8c47eac0b8da9cca3a18bf86c011","sha1":"b90a9205a440c4a45271a4f325e32d1b05189206","sha256":"6a3dd77dcb09b4dd4f21dc57d0babf83c04d10eedd13037572384179d30106e5","sha512":"fc3f1c0af848540ba24f63bc837d1a7af28784ce0e33e3ff1ed62d7257dffa24fcd8de91106de6828328f088db362a87e6ab852a27ec682bf03e2934dd01b332","ssdeep":"192:tWsBBhOAaNbZh7Ykr9LY9qbEVExuidBU3t5akR+6bx+uhF7xKr8uaxwk:t5QMCY9q2Exu2a95OutPKYua/","tlshash":"9222bff11dc72c9ed05484706039de4ac9a7d69686ed06fc5ba314c31810f9ee1e3ae9","first_seen":"2023-04-11T10:28:32Z","last_seen":"2026-05-05T18:58:40.708479Z","times_seen":2717,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 26 Sep 2025 23:41:20 GMT\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"95040c9aad11e653ebc7cdcc8734df04","sha1":"52f2d407b6ac13c7ad3ba61c0c30afd2df6a304c","sha256":"15f52aeee240c499fb0cbdcf165ac6c0a2c4a009be9f1f5ed5dc21b3591eac5e","sha512":"eae267e2ab0a5182cc9de5d077b73beddd935ab9e81d05492043bddd86b40bcfa98b9fd8fc0117fa4a394035e56df4abc59c24cbe1a267775f366d40fe42dc64","ssdeep":"","tlshash":"e21102b71604a0394b3219e1e2ffca71e492701cf16c85e8a519da841e6acc7cf15595","first_seen":"2025-09-25T04:32:34.814491Z","last_seen":"2025-10-02T04:58:03.089724Z","times_seen":299,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":118,"dns":0,"connect":15,"send":0,"wait":38,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/js/theme_panel.js?v=7.7","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/js/theme_panel.js?v=7.7 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 15 Sep 2022 07:36:42 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 08:39:10 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dAArlyPOT8G%2BVd1lNL6tT1%2BMQPvo5RgcsXIKNEwR9UU03OpPA0Y2pu1mBZZVLQM6yZl1%2BdkAYhomez0APeNpD3XexO7671T0V82s\"}]}\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 62306\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 98569c88a8a33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34233), with NEL line terminators","md5":"4fa6b76c00dbf823e604ce777da79763","sha1":"21eb3a34c12f4bf7d7b2087157b39d1be96a69ab","sha256":"a6bb2b1a9d9727048a5a0927db6ee35d4f5c335e645715dd2e4dc693669951ad","sha512":"604f3719abd132aaac8c453788b20ca6eb6cd560ea1c9ae86323a3d4739d9b219902c40e1956708602a41205be1df028b539c3ff904ad7c0870f22216905e643","ssdeep":"3072:HuQmXnY6zIX8bYSHPX4w/5D3GCe9Q2gKqxxHuT65MBGO4lHPWbMZ7qp5OR:OQm97bYnw/5D9LKqx98BBGhHPWs7qpUR","tlshash":"b784d5cdb685b0b207eb60b5407f560bf237a959b44a8190f265e8d46d7c98e603bf3c","first_seen":"2023-11-22T17:53:16Z","last_seen":"2026-05-05T10:28:17.963714Z","times_seen":764,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":131,"dns":1,"connect":2,"send":0,"wait":6,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doodstream.com/","fqdn":"doodstream.com","domain":"doodstream.com","tld":"com"},"ip":{"addr":"185.178.208.163","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.doodstream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 08:09:10 GMT","end":"Sat, 20 Dec 2025 08:09:09 GMT"},"fingerprint":{"sha1":"6B:59:72:E2:50:9B:32:E2:8C:48:8F:29:99:7B:91:A5:51:33:A1:93","sha256":"49:29:67:42:B9:7B:9F:52:D4:FF:4D:48:FC:DD:42:C6:A8:AA:CB:AC:AE:04:79:EE:16:F1:A7:50:C9:DE:37:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: doodstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nReferer: https://doodstream.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=ycrASLeAV3lqFIXM; __ddg10_=1758930080; __ddg9_=81.95.81.194; __ddg1_=btPBXXWyIeZpLsv6O0FT; lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Lasi03iBRb1zfovX; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\n__ddg10_=1758930080; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\n__ddg9_=81.95.81.194; Domain=.doodstream.com; Path=/; Expires=Sat, 27-Sep-2025 00:01:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Fri, 26 Sep 2025 23:41:25 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17803,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17803), with no line terminators","md5":"45636eede8697f9bef1b10826291f7e4","sha1":"4e510fe4c8f0687cba3e12ded3cecd006869b199","sha256":"ee7185cdc7e495681b217ed60b89dcb9821c6bc41d64b6aed739fac3f36b8d44","sha512":"536af19dc4eb78d14bce14d2c79563dd1aadc4f55bce53a2b701d8ebb65c28bd99ee568ea4a4be5a468e3c8e298f9002968ae0cecfcaab23c2954eebdec5d0a6","ssdeep":"192:LqMi5wZCvHgArswgCDwvHgAneM1BFbvHgAPmvzsIlQxOulnLumIaG+:W1bH1IHhFjHRmvzsIlQxdnLufx+","tlshash":"a78264313408ae3741c3c1d8b7749b0ab2d6d346da1b1649a2fec3ad4febc95dc252a5","first_seen":"2025-06-07T08:38:21.350418Z","last_seen":"2025-11-20T17:23:09.681691Z","times_seen":174,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"doodstream.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"client.relay.crisp.chat/w/f07/?EIO=4\u0026transport=websocket","fqdn":"client.relay.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"64.227.36.222","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client.relay.crisp.chat","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Jul 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:90:EE:6D:D5:63:F5:A1:37:0F:51:0C:32:82:59:67:AE:D0:33:E7","sha256":"B4:16:9C:53:C5:9E:50:98:26:14:D8:A8:13:14:9F:B0:2D:AF:A3:3A:52:8C:70:C7:1D:23:EB:2B:39:D0:CC:71"}}},"request":{"raw":"GET /w/f07/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: client.relay.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://doodstream.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dhcaNPOg078LMEvFQMis7g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Fri, 26 Sep 2025 23:41:20 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: b4f8IvjpAfas3oCnOe/IvBiLDOo=\r\nX-Crisp-Ray: website w:f07 10.133.31.103:3000\r\nAccess-Control-Allow-Headers: Content-Type, Origin, Upgrade\r\nAccess-Control-Allow-Methods: HEAD, GET, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 300\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T20:09:54.588333Z","times_seen":14703811,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":119,"connect":151,"send":0,"wait":53,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/?1757039704023","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:20.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /settings/website/a048e736-b92c-49a8-b2b2-970b429ff6d3/?1757039704023 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://doodstream.com/\r\nOrigin: https://doodstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Sat, 27 Sep 2025 03:41:20 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 Sep 2025 18:21:39 GMT\r\ncf-cache-status: HIT\r\nage: 10748\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 98569c8d5b5db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2749,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f37ba376e9b4f8216311201764a0e0b3","sha1":"21ee5bd8127f38e3e93404155102c8056c900f4e","sha256":"b9eb4b9f6c9543003702c6ad8a8bec8fb68e8f740ab2ba0915b0b11f3c841e03","sha512":"f532881d1695bd18ddf5e198e6d1773f94f9614ef4a6b359617de3dea8844de3bb701b1b02fa07f50fdeac53631580d25870e5b8147e102c6fa5ef401a5e0e58","ssdeep":"","tlshash":"a451ed0a8c9418fad5e8c255e9193f03067d5c37a2577468e59c4d2c22ffadd6322a73","first_seen":"2025-09-26T23:41:47.688697Z","last_seen":"2025-09-26T23:41:47.688697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/avatar/operator/cfb63804-4e8d-4152-a059-36f26468a0ba/60/?1757039704023","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:22.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 01:56:44 GMT","end":"Sun, 30 Nov 2025 02:56:23 GMT"},"fingerprint":{"sha1":"22:F5:73:BE:62:A7:D2:3A:84:8F:C8:7B:90:77:E0:FB:E4:0D:E5:4D","sha256":"99:50:43:8D:99:10:F8:C4:F6:C2:57:44:9D:82:3F:AC:71:33:28:8D:C3:63:76:CA:0F:0A:93:E5:8E:34:3C:D2"}}},"request":{"raw":"GET /avatar/operator/cfb63804-4e8d-4152-a059-36f26468a0ba/60/?1757039704023 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1138\r\ncf-ray: 98569c9a3f7f2efa-OSL\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"472-19967f5e62a\"\r\nexpires: Mon, 24 Sep 2035 23:41:22 GMT\r\nlast-modified: Sat, 20 Sep 2025 16:29:52 GMT\r\nage: 27941\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1138,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 60x60, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d7307e1cba4ecc6feb9df444242e4a7","sha1":"bcf1a2f16559d0b5bd6eade3c65b43c4e74e59e7","sha256":"f4e0ed1d7bb69e85b6dc150edcabd126380a71c960507937a9db3b203edbb442","sha512":"ce4d61fcc9b4fe1d67470cc84bb8bae1652698aa23bcf84a2874fe03256afd04438094c75ed422bc327a4fa3baa354e91980984d65fef8d80a6484e187820b01","ssdeep":"","tlshash":"8a21f91e92b16cabd402fc47a2392543a55e864157b2feb28bce0cc59883f8c08509e3","first_seen":"2025-03-21T06:22:04.883618Z","last_seen":"2026-05-05T10:28:17.954095Z","times_seen":482,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/img/logo-s.png","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /img/logo-s.png HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 2611\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=6212\r\netag: \"61d3187c-1844\"\r\nexpires: Sat, 25 Oct 2025 17:44:16 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\ncf-cache-status: HIT\r\nage: 46641\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RcKOSVII3m0ex71ncqdRDoZpnPl4Zya5m431pB%2FSmU7t6KZXVgDXB8735v5wew0AOwfKHNv0376OWhwWWwjteo2zXQFzcieXWTK\"}]}\r\ncf-ray: 98569c8828053181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 64, 8-bit/color RGBA, non-interlaced","md5":"9896254cb617ab536613c1173f8970d2","sha1":"058722b3ee5d1dd9a039a5718346373c02596070","sha256":"1511864c796fade0b4af04ac8e087ec47b14e97ca785d889775e1b81d63da220","sha512":"ed7c8b1b2c40a663185e3b7e3f47d7b67b7f37107b661ab7a6dbc5163780fac193ff658b1e69efe7e20413a0b4f043fb5c7170e49a90f11cd9be7e97a9f32ab9","ssdeep":"","tlshash":"87514d53e7bf061cdb2e116c60b7ec11167d11150b875680bb8260b80570bcda5be569","first_seen":"2025-07-01T21:16:56.952437Z","last_seen":"2025-11-21T14:44:02.924129Z","times_seen":547,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/css/bootstrap.min.css","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://doodstream.com/","date":"2025-09-26T23:41:19.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/css/bootstrap.min.css HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doodstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 23:41:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 04:52:19 GMT\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVL%2B9b2gAMERCkQFVi7FXdf%2F8dIIeaoKFmgtP2EvHWGiuegciwbJn3GDyvuciYfox%2Fo%2F1zIUl%2Fg5itp8287MLuxKNPhbfPwTltfq\"}]}\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 70384\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 98569c88582e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"7cc40c199d128af6b01e74a28c5900b0","sha1":"d305110fb79113a961394b433d851a3410342b8c","sha256":"2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6","sha512":"ce79937f81cda05f54ea67c1e8a96101285b46f6ede02bc2687a0d574832b2c7d3a0d43ff40d1e35d51bbec4b038852825d323146da7752bebd0ba37669b13a9","ssdeep":"1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26F:a7Za4GMq3SYiLENM6HN26F","tlshash":"9ef352a6f5a0312de467c61964d0bafe152f8245d7224bfaf827376487892c70a73e4c","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-05-05T20:02:03.222338Z","times_seen":18205,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":79,"dns":0,"connect":2,"send":0,"wait":7,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}