| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash024341a123220bb7f476663e0c2f941d 20e2ab3bdab6d6f5241eb3c45d44a9b191f6cb44 94e9518d845bb5293c2f009a196b74a3859a5ae3b3a1438234f867017c167e1b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "94E9518D845BB5293C2F009A196B74A3859A5AE3B3A1438234F867017C167E1B"
Last-Modified: Tue, 13 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7865
Expires: Wed, 14 Aug 2024 01:58:11 GMT
Date: Tue, 13 Aug 2024 23:47:06 GMT
Connection: keep-alive
|
|
| pinaycartel.biz/assets/img/650x350.png | 172.67.145.206 | 200 OK | 1.0 kB |
URL GET HTTP/3pinaycartel.biz/assets/img/650x350.png IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typePNG image data, 650 x 350, 8-bit/color RGBA, non-interlaced Hash64605e73317629dd781f3b02334fb76c 917c0314c7bcd02657e449e278f071e56300387a 0f5dc054633258c466d5acf6203b47d34a4669aaa66f1e6486886c7e395032e3
GET /assets/img/650x350.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/png
content-length: 1001
cache-control: public, max-age=604800
expires: Sat, 17 Aug 2024 22:07:20 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 265187
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FjmQ1GRMzJrN68MWvYEKys02SGfYrDia0rQ%2FXFcqHctOqvsjBNOt%2BCe5uYhhnH0yGlIxFqMurBQa7PMlId5U8zOdxiaZ%2F7f1FYmk%2BoPPG8D63rBSuIYbNAWfbcKzUClLFmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a0cc117130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/assets/img/33.png | 172.67.145.206 | 200 OK | 236 kB |
URL GET HTTP/3pinaycartel.biz/assets/img/33.png IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typePNG image data, 1150 x 351, 8-bit/color RGBA, non-interlaced Size236 kB (235812 bytes) Hashbebb9af01364a03b30cd59776c993a1e 69e6310ee304db6721f2703840c60e82e739ac4e ea6f3013015bf72db496f641c484f6b202fda6060f608ac067d62bdc14092493
GET /assets/img/33.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/png
content-length: 235812
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 22:34:37 GMT
last-modified: Sat, 14 Oct 2023 16:27:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 90749
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oBRXyF%2BXuZw8ZZ8nhPog%2FTZipO2m3xBlu%2F8RE5JXGMx3Cvr8K2HUUXq8W0LnnAKRdFoik%2BSwiQesB9s7YdZXTCO651wAtoKdgKH905cEHN%2F8AHODGeuUpIoh1TCJol%2BcKoU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a0bc0d7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/PHPVIP-1.gif | 172.67.145.206 | 200 OK | 669 kB |
URL GET HTTP/3pinaycartel.biz/PHPVIP-1.gif IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeGIF image data, version 89a, 600 x 165 Size669 kB (669253 bytes) Hash52ce8901be0d44a13d40bf1813ea468c bd99d7f59f91fee861e0940a2f4141b9b690faa4 46ac2fc23007edd5c805e89e67072de1e8d41b88b8c34480ece42043247f796a
GET /PHPVIP-1.gif HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/gif
content-length: 669253
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 14:50:09 GMT
last-modified: Wed, 12 Jun 2024 17:29:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 205018
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GUSaHPV68%2BsUOJiSrY4uvE2JqCMLcZDE5DEZW08i%2BpV1tNBQpHpWcktMPHewwV4f8LzHq%2BuxUkjF3kYoIwM5b4nh3TrwuvOVG8x1KiZEdeWafvjdY0VqAAPsuBQhovUa5xQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a0cc0f7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/assets/js/script.min.js | 172.67.145.206 | 200 OK | 3.0 kB |
URL GET HTTP/3pinaycartel.biz/assets/js/script.min.js IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJavaScript source, ASCII text, with very long lines (813), with no line terminators Hashcb7989a353ff55caed9830584ca215e7 f35448417382431c297e85bf96e0432e2c6817aa 66a7d90571a79b8c39b1683dd22a9822342269fc5b9bf3aa3cdd71e39759ad35
GET /assets/js/script.min.js HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 14:50:09 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 205018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4dRqoY%2BBeTISvCgvgkHojgniLvQa9aH3PzDEAkCfIWL%2F2%2BA0j2acZpw2X37NV0qV0yLc5mPkwMm%2B%2FY4iUGlp0BkJ6D1h4oInwvjuMYJt2MltBT7P42TZ9SV1V0X0CgW6uM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0cc137130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg | 172.67.145.206 | 200 OK | 115 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1155x650, components 3 Size115 kB (115375 bytes) Hashfa862b3c312b80dc1e749a04743289ba 0e7166cf8ecdb3248a52b11442f0047eefbbaa7d c4c7a997bf9b013109bd61486d26931eda1f68f1107661dba1d6b30ed14e9b41
GET /00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 115375
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 02:18:45 GMT
last-modified: Tue, 26 Sep 2023 19:11:53 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 77302
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eoMZwfGfBYzLdJhmO7TqvEkfJEvZNVZZTTxxUZikua%2BBebkLF1TXxDClBfiptvlsAJZVhXQ05jHeXUxCelwVNNUsKh%2Bo0gqAD7rS3hrzo8HjFZ2XHfdDjp%2FEpbesPtQFRoA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc847130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg | 172.67.145.206 | 200 OK | 11 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x304, components 3 Hash72ada1b29b98085a9e752fc4706f4b60 760582a71395fdb298b8d2ea895da5d4a3bbcd3e 1748550a22c973c601130fd791618243a8761e66377979d81f7862f6ba54834b
GET /00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 11431
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 18:19:31 GMT
last-modified: Fri, 08 Sep 2023 11:39:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 106056
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNS5ZMAjiBqMFdnd1vqA3TwJLGc4zz%2FVT1zneejfUSb7DVBk0XlUvb6aquXpa9i6%2FP139BGZxbubuVzqdaDM%2FSgExrqYhVyB6AEVLpWmD2r%2F3F5KeVCXXZ1GECrJUnZNS24%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8a7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/assets/fonts/fa-regular-400.woff2 | 172.67.145.206 | 200 OK | 14 kB |
URL GET HTTP/3pinaycartel.biz/assets/fonts/fa-regular-400.woff2 IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13576, version 330.-16253 Hash9efb86976bd53e159166c12365f61e25 830f8653e5f4a5331ac0b47c5701f65fe9f1bb32 86e496b536b26ba60cdb68df9dd9143b19a63b65e30e373b0321833aab1295d6
GET /assets/fonts/fa-regular-400.woff2 HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/assets/fonts/fontawesome-all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: font/woff2
content-length: 13576
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 03:21:00 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 159967
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kpa5mCKgYZ9STQrSZnStCvzG%2BZWLBE2jBepy8jUuCh5od9cAhMlv3zkqI8PiT0hMvoEcGtEci8R0ZmgYmB%2Blctiw9%2BzSn5SGwV%2Fs3ZwtAsNen5Er0C1sRgAjQrkK4mLEcME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a2bd207130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/assets/fonts/fa-solid-900.woff2 | 172.67.145.206 | 200 OK | 76 kB |
URL GET HTTP/3pinaycartel.biz/assets/fonts/fa-solid-900.woff2 IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 76084, version 330.-16253 Hashf6121be597a72928f54e7ab5b95512a1 b2c74520c3f506efbfefca867918e5ae28bd5222 787d76ad6deab67ccf8bac1b584260205e114f508fc5542b612e3f75d49a34e4
GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/assets/fonts/fontawesome-all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: font/woff2
content-length: 76084
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 03:21:00 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 159967
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BM51PB7UxL8EgTxObC6NIaje6lkHsJ9lSWJS0s1xkdMSb48%2Bs5XVBRjBpCFkkuaTDTXPzNauCv8kpeUlXTRG3%2Fzwm%2FWvr5XV95GIISFT52cPuAHEdCzdIzG3Gn6fjCnwECc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a2ed347130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg | 172.67.145.206 | 200 OK | 22 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x304, components 3 Hash722521c6320f784b20de7fe2312f0d91 56570232038190503def461f5d7478ca1c4cd54b 55c4a3687aa40c184c4d8dbe91a7430f8fefbdb3045409e585a57b190590352b
GET /00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 21770
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Thu, 31 Aug 2023 05:33:59 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ehhvDe8NhxYMo9491kXfgJJ792EAGEWmYQDRXKtOKTDsEDDQs1AcFcWooje3%2Bn9SfNV3TNPkrIdD6zjOKbAtUDDw7wbgaOCnyAZVuJHR2jGpXIjv7cYCYYdNTAlrr1RYXzQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8d7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg | 172.67.145.206 | 200 OK | 36 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x759, components 3 Hashff49a5025ef245da8f0d1d20b67284d2 09ffe1cee73179d29e093157bd8eaf43524866a7 049b912543e58b80208768cc09284b322744d96143a85212b8c2f92740786f23
GET /00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 36244
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XQUTVHruzWgShCRJXgwch%2FpgQUPfRioZcRCY69Z9QMDOIftuSyfdX%2FEmsnvzgTYHjpOZ8PFpPDdJCt2is98VSIs8zUV%2F8VOEwo%2FQp9mlrKZozo7GS19PmQbUMqL5xtR4Dl0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21cae7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg | 172.67.145.206 | 200 OK | 72 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x763, components 3 Hashb26d3d8f341f021961f41ce554104e5c cc0c0bbe060320ffc0d7552dc3c2d0a67f185142 75ee37900452ce9d48c2ee9a20b8d5ccd35f4095bd7f68cad5ac8fa419a61f39
GET /00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 71685
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOzxwnqIqkfnhB6ZttyLSLvvbXV9V3JBMK1rIyvEOy0Tc%2FT5AFi5Awh%2BjGp4AZ7lAEBWWJUegTC04v5G9rklMaFfpzz2%2BmUyJ0wYcmqtwscdXuV8GmciAHTmuWZrs0jk9V4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8e7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Naligo-si-anne-may-camera-pang-kasama.jpg | 172.67.145.206 | 200 OK | 74 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Naligo-si-anne-may-camera-pang-kasama.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x812, components 3 Hash5cd144601dd5de1b243b1d90e7b3d159 844d68538b1a12c18f13f24722b30ab1986fc5d8 7bb23f99bf86892bd61abd68338c01b2dd14bca5ce8b1831f118a67e5b1396a0
GET /00_img/Naligo-si-anne-may-camera-pang-kasama.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 73814
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:20 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r5ebsnQHeaV5erZHo1ospQCc42E1iCc2PZHxpBG%2B%2F%2FZkIRRpDliQiO0uol0Sil3eZShYt%2BWnK4zFcdYAOY%2FFHFs4evmDtO670VEJaxLTaljfzxVsfRLeJQTkKU3d9YJxZ2g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc867130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg | 172.67.145.206 | 200 OK | 57 kB |
URL GET HTTP/3pinaycartel.biz/00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.96.100", baseline, precision 8, 1000x1000, components 3 Hasha46b5503ea5c15cb2d24e30ca3ff728a 412ad029130a0fec7703821b6579dc12ea85e260 b9842282542a7a92f662e82e0d864cbdcf2a3a691a71649d023235fe90f8172c
GET /00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 57397
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Tue, 09 Jan 2024 01:10:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EWERRbQdMLG%2BoVPcjawqTYG0Yx1sVbSwt7cgquC%2Fw23VbRAjnMTLmzkfl3dKEPns9jaXKz9JjYslRBQvE4umxiZtR16BOr9VxsJWj9TJMG0sf6nRfNInA3fOJkVF5V%2FCzNo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc907130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg | 172.67.145.206 | 200 OK | 42 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x780, components 3 Hash35c82c0025c0a42b8f0a64f0f11f2bcc 71e9dac45275c46c7ddd4d2c24c4c6c0165711e0 cf64f23618ffbd4835299a4d064c7a8c48fa37c1fabc2d53892e7741f30f5a76
GET /00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 42384
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H8H9rUOmekTncvkdcCekJ0W6C1F1pz8dsF2Syqd8fiCPdw9nkGQbnnkWvLag59zUhQzrcVJu7maNlHRKYB5GwydZeSnUi6mXUC4WeJky%2FywzqYyGMRsagCVFJnDLZq%2FKk1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8c7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Yugyugan-sa-barong-barong.jpg | 172.67.145.206 | 200 OK | 55 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Yugyugan-sa-barong-barong.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3 Hash7f1c36b8f5db96c85a04109ace180717 aabf3a4a6e491ec7fb6dabe93a32fdd6a98367e9 d446697772b42cbf41d8ff690f187c267e3c6fc843244a72f577ec043a1f81b6
GET /00_img/Yugyugan-sa-barong-barong.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 55098
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:34 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4B6S1fZOtdFqpX0tS%2BvOODo2RMdr0eEUH0VZKGGk7RMuVtXj3sj4GrSgVd%2FNktDEkuQJwso40g1rWmD1KMyMA8vhwpXZwffc723mWsF5L5Ld5jzvZWqipE3miAxcSIX5%2BxA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8b7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Oh-My-God-Kuya-Rhodel.jpg | 172.67.145.206 | 200 OK | 78 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Oh-My-God-Kuya-Rhodel.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x721, components 3 Hash8065271244ca717153c29933d7f44e09 071a0105120b85ad545b9793fe5e95fa29765c3d 9077ea37e608545286dcdd55bba21fb7ded4e7270040a1021dcf4067f3398971
GET /00_img/Oh-My-God-Kuya-Rhodel.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 77758
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LM1gU8ojZwU6bn%2FuFuH1%2FD4ngjtRFdCXN9WN2rhcYc7%2BDW2KOzS8A0L6RFdqHh6tIwSILi23WGcYJ9FTT5KRUEvGVLI0aljLOJ%2B7KUAYtLsAlyctiGC7OTiZbgMKvwUgKLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21ca67130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Sabik-sa-sex-si-traxex.jpg | 172.67.145.206 | 200 OK | 116 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Sabik-sa-sex-si-traxex.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x695, components 3 Size116 kB (115527 bytes) Hash222751ab7811f830ad80897c41247a04 0d6cdcb90d1f965b149e1443da6a7bd5c89bb88b 645beda42a1f6614b1fd7572eabd4768e24767aceb0a616e691359987802311a
GET /00_img/Sabik-sa-sex-si-traxex.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 115527
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcY4xMe9fYUknjsbjYgrhEiN4XS89S34p6NFobrSFlbOuKcjqzO9cCVv4eUs0TuJH4sPN1bQGZudgEbvw8AsHzgUSlcKVk69ti4VofWv1BgYuSIlBHxskqkeIHaaUrObgd4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc887130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg | 172.67.145.206 | 200 OK | 60 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x746, components 3 Hash078b2c270fe3d8fc80322696fe8b10a2 cb24d92e46b9a1c91247dd00774eeb6faef979d9 37d38905fd0a812f3b11866669005e170b963e62d6792c879e3e69ab0b926111
GET /00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 59905
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J72mscKkGLbLJQgaHBJygpxWdl7Trqd4qvqgddA8%2F%2FR%2B3NifXR5DdDUk8NseBkiEkjLq%2FkwJDbuPXAk%2B6qj%2FYNSWsEA8bzCLBQMfMlTPsz5BTGU0K7CDoRIJtcovS6I7wFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21ca97130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg | 172.67.145.206 | 200 OK | 93 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1155x650, components 3 Hashf48b1e1c6763fc9bfa2c284ae709bb3d 1edd0e2d1068ece276c42ba1c82ccd84619d0404 937e51412fc2822c889da3a0811d7d12ccf971a15d5f70ea5c6486d5f75e7d7e
GET /00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 92785
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Fri, 15 Sep 2023 01:59:45 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c4vxq7zjJW%2BZy8BfclIX6i0uecf3A1TuucTcAlR3X7ORmsqslnPspcIdIivgjq%2FhJyofr3aEweSyGtWZ3X%2FRJW3giAH1CY8T%2F6B%2BBvhhWrC1WwQipGOFDPAIuzX2RSF49g0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21caa7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg | 172.67.145.206 | 200 OK | 88 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x720, components 3 Hashb64e8e554e25103137cf5b617a478b74 8c7fea4c73bf37c57eddc8b8e70ed7d4da02f77b 875e1b2716e8654f0a1104c413c5db505210abdf99892e00c4fc069271ec9ed2
GET /00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 88009
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Tue, 24 Oct 2023 02:50:32 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WMDDh91ZoYTk6iDyuV5NODFPHuZp9%2FFjIH1RS%2Fud76kL%2BfSZcLvR9luwEujSF7BeYkPu6L01HZ2aAPEA1A2wFbNckVjdjq2yQqjEhg8S%2FOGPsSE0U%2BtWHgMP26LuryLW89k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21cab7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_img/Si-kito-kung-umiyot-parang-kuneho.jpg | 172.67.145.206 | 200 OK | 81 kB |
URL GET HTTP/3pinaycartel.biz/00_img/Si-kito-kung-umiyot-parang-kuneho.jpg IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x718, components 3 Hash1175cf010c0b7c8ae84e713a9b9bb3da 695649da671d78b72d971deb66554712ad7a402c 9f44a4ba6de9be779e63ceed8e4b3c6466c0839d6aa8a640a5ab4ac40e09da93
GET /00_img/Si-kito-kung-umiyot-parang-kuneho.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 81186
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:32 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4sLWeYwRC9VCQuv%2FEHl4h9U5eEhwDv%2Bv9HRpBHXN8Q5Scb5vMXJCZfSSxlZM5OyndYM2Hz%2FPXYIPYZkOoBXpXqEzZLwnoCap8bN3hWFjC%2B57uIshdHQNFmU%2BEa3xmU8y3pw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21ca87130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| impracticalsmell.com/YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W | 88.85.68.219 | 200 OK | 0 B |
URL POST HTTP/2impracticalsmell.com/YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W IP 88.85.68.219:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectimpracticalsmell.com FingerprintBA:D6:B8:6D:57:6A:08:FC:86:57:E5:A1:74:38:00:D4:0C:99:FE:DC ValidityFri, 19 Jul 2024 03:48:49 GMT - Thu, 17 Oct 2024 03:48:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W HTTP/1.1
Host: impracticalsmell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 75
Origin: https://pinaycartel.biz
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:07 GMT
content-length: 0
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js | 104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 104.17.25.14:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 94544
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=roQkGVV4oODfpDEMZU70eIiiBVA51pzPMSHTw7Sl63wibWrfZOtDgrRUH1x7rpN%2BwARvKHbfR5j0fTvGxHPB596X1OeFY53tPpG1zCf%2F6xGkzIkOeMpDtRaDNsjlomQ51tmfeX3c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a5baac5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js | 104.17.25.14 | 200 OK | 137 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js IP 104.17.25.14:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (48459) Size137 kB (137405 bytes) Hashd7fdaaab43bc993b85290c713fd2d289 46bf3d27b2cf38b0e999d3b0a7613011181c87f9 c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 527253
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8x8NPUyKlG9V0xk%2F1uq8DSDYA5nL1uSfvXcOo8R9aGhrXvWxV6OocUSZcprmBS%2FHhRuI%2BMoEPMphKsYMw8KbViOUbqkW%2FhD8LXyYe8vHCeLyssXMPcIXRiMQNTUsE1nMA%2FKb%2BUYt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a5cab35695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js | 104.17.25.14 | 200 OK | 591 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js IP 104.17.25.14:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (1266) Hash4412bf8023109ee9eb1f1f226d391329 c273960aa874a87dd022b5e597887142f1b8e34f d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1032572
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XgSe1haJTs0Nzv2LAc0lpLpGtgcWMQew%2BLt3VmNjrXxvg6uSJfHqyyx%2FmS7sds4iXQDEeWh6WjCUaq%2BpaCOJB5bjmAjU5I26qG2VwWAkBNf1XSOvz9z%2F%2BtQyXsbB5V%2BbkxiRsBA6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a61af75695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js | 104.17.25.14 | 200 OK | 1.6 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js IP 104.17.25.14:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (4505) Hashf2ecb2bd8a424c8e8cf507ce8bd933c2 3cbc08ca052ea25c3b0834b9291a3ca1e9122e26 4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099
GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 1571
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630ad3e5-623"
last-modified: Sun, 28 Aug 2022 02:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 521557
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bFXA1d8iEOpVGW9TfBIvKSifUd3H5pQa8q6OPRstHh4Ow9y48E5e2nWy6%2BlM3RM6lemIzEcT6R1eQrFnHfS%2Ft%2BOfq8j9UJPxyeLZ0WUHJZf5xx7V1x6hlGPsHzzXD%2FPMhXRLMo%2Bu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a62b095695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/img/no_video_3.svg | 104.26.6.74 | 200 OK | 2.8 kB |
URL GET HTTP/2i.doodcdn.co/img/no_video_3.svg IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeSVG Scalable Vector Graphics image Hash077bfdaa49ae4877a42611b739ec4752 a2f9e1222b7af9abc05122411ab8902efcc08ead 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Wed, 11 Sep 2024 18:37:36 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 63288
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2LqvfCFcWXmlW81IRRcJOxBjVexBtNmZdgxiDLC%2FOws1f92WYHHEk7J7%2F6JfNKyWgM0bGW4IHb9nNrVSbKubfLq2NqereSqFpKnhek9vhKwMJYoSdt3bv3v21nU4Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a64ef2712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/ads/ad.js | 104.26.6.74 | 200 OK | 18 B |
IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeASCII text, with no line terminators Hash071c641b229d2bfadd243b8fa2a9c88d 4048ed3ad506f9bb9052c23283912d0cfea8bcc6 3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Tue, 12 Aug 2025 23:30:26 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 63287
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0mQqJpnB%2F7zsSVmwTqiQZELVWrnkWKmAP29mJPmTE8GKjpk7Tp9wmAZA9ucqYKZqgO4Z16eUoWheS6BGt%2BohP0FtmY7Os2fcCsgD6ArZ9p7nxe7OJW%2FTdFdV0hYzgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a65f01712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash3b9655dc1d84f6d40730654968058777 b9843885ab69f7788181090b55050a7ea79c078e 3947d4ef03cdda1c274c3b37e8aeecec986ea1eea8e5a88d02cfeadb0261da64
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3947D4EF03CDDA1C274C3B37E8AEECEC986EA1EEA8E5A88D02CFEADB0261DA64"
Last-Modified: Tue, 13 Aug 2024 02:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6609
Expires: Wed, 14 Aug 2024 01:37:16 GMT
Date: Tue, 13 Aug 2024 23:47:07 GMT
Connection: keep-alive
|
|
| static.doodcdn.co/js/embed3.js | 104.26.6.74 | 200 OK | 113 kB |
URL GET HTTP/2static.doodcdn.co/js/embed3.js IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators Size113 kB (112790 bytes) Hash59698656a40921f7585e25a5bb347955 75de624e80155463ff8bb09090b712098eb74dd6 69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
content-length: 112790
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=112944
etag: "65bf48c8-1b930"
expires: Wed, 11 Sep 2024 18:37:36 GMT
last-modified: Sun, 04 Feb 2024 08:20:24 GMT
cf-cache-status: HIT
age: 63282
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IsSZi4elWKHcQicRlHm0i%2Fvf%2B%2BQDHKZym%2FVKOGqcxaRuVb2lYk4DPW71rPKdsafFO1sKaINhoqJ5%2BuP6I5BK%2BMKHsuVEPP0YZ3v%2Fe7XU61Ty8mhBCqmSh3xE7dzOlo5Ssx9g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a66f06712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash3b9655dc1d84f6d40730654968058777 b9843885ab69f7788181090b55050a7ea79c078e 3947d4ef03cdda1c274c3b37e8aeecec986ea1eea8e5a88d02cfeadb0261da64
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3947D4EF03CDDA1C274C3B37E8AEECEC986EA1EEA8E5A88D02CFEADB0261DA64"
Last-Modified: Tue, 13 Aug 2024 02:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6609
Expires: Wed, 14 Aug 2024 01:37:16 GMT
Date: Tue, 13 Aug 2024 23:47:07 GMT
Connection: keep-alive
|
|
| img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg | 104.26.6.74 | 200 OK | 30 kB |
URL GET HTTP/3img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 402x715, components 3 Hashab616705ae0ddedc63c27a70a9071627 759bd4223a0482f59f08339e1c143627fa9a04f8 ec4577c275b2d1deaef01399337349d65613d6e71ade62ee42d0c0b6125f67fe
GET /splash/1ng7gbzaumfpmp95.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/jpeg
content-length: 30225
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=30417
etag: "64d7f56a-76d1"
expires: Tue, 27 Aug 2024 16:28:37 GMT
last-modified: Sat, 12 Aug 2023 21:11:06 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AzOC3M5YPwAA11qdXaERIWqWK9SjS%2B5mGZMG42CV5S7%2FRzjwgj0ql98WgHQfFzVsSc%2BXuwCqq5loxAEazkrLGPSIfLz2inDeyN6Z5kV9pyX0tu2X56xonqD0e%2FBxxkq7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a66f0a712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pinaycartel.biz/00_settings/site_icon.png | 172.67.145.206 | 200 OK | 7.7 kB |
URL GET HTTP/3pinaycartel.biz/00_settings/site_icon.png IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 156x156, components 3 Hasha5b7f601a86c02677a6cdb6b31b2c830 53afaa1b004c2ca958f043b94c5d0cd762aa2e3a 12a429a9cfcbb031d13b3f64107392154b7f955b91e6d57800515e67d943b0af
GET /00_settings/site_icon.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/png
content-length: 7697
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 01:40:38 GMT
last-modified: Wed, 16 Aug 2023 14:01:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 79590
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ucQ9l9W7EwQ67OgMiKea3RkYp9RqmB0wYYWstEplmioabFhVl%2FBzGCt5vC0dKRY6Oo8W0x6KE6oP0JSxfh7oG8%2FJfVvWX%2FD8ZEtIXtmwpzqlCo2WgNIIvtavO%2FfhWbwXlW8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a74f297130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/00_settings/site_icon.png | 172.67.145.206 | 200 OK | 7.7 kB |
URL GET HTTP/3pinaycartel.biz/00_settings/site_icon.png IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 156x156, components 3 Hasha5b7f601a86c02677a6cdb6b31b2c830 53afaa1b004c2ca958f043b94c5d0cd762aa2e3a 12a429a9cfcbb031d13b3f64107392154b7f955b91e6d57800515e67d943b0af
GET /00_settings/site_icon.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/png
content-length: 7697
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 01:40:38 GMT
last-modified: Wed, 16 Aug 2023 14:01:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 79590
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yc9epoK3vc797O21KJ1ysJnzT8IzYsWUmU6k58xi3RR7IiD%2FEoF6t9EZsdWHcZ1brSAlR3azG%2BJbibidmhnJcFO%2FnNMrnEFVvI%2F3JYxFm8SUoNX8UbYnIEmlEPOG6cmCwrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a74f2a7130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG | 23.109.170.72 | 200 OK | 20 B |
URL GET HTTP/1.1ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG IP 23.109.170.72:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectey.dramshaplite.com Fingerprint8E:78:37:5C:4A:84:BE:85:4B:73:C4:DD:71:FC:D8:D9:20:15:3F:4C ValidityWed, 31 Jul 2024 06:15:51 GMT - Tue, 29 Oct 2024 06:15:50 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /rBoMTOsebwJmPbn9/MQmjG HTTP/1.1
Host: ey.dramshaplite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Aug 2024 23:47:08 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dood.sh
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Wed, 14-Aug-2024 23:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Wed, 14-Aug-2024 23:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| d3eub2e21dc6h0.cloudfront.net/?ebued=1004075 | 54.230.241.107 | 200 OK | 69 kB |
URL GET HTTP/2d3eub2e21dc6h0.cloudfront.net/?ebued=1004075 IP 54.230.241.107:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15945) Hash40686440ea5d3a4dd9d0cd8419cb6c11 2226b47f1479c0ab389afabbf9b96f7a680a1461 53e447ceb1bf314a322a9344c92239c37e58648fb09eef7de929d8083a756d6c
GET /?ebued=1004075 HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 69406
date: Tue, 13 Aug 2024 23:47:08 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DJzI67m-UXclrzqv9TKctxWvjfMxnJ6LSViHVpq20Reyhz566zVZTQ==
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 | 104.26.6.74 | 200 OK | 24 kB |
URL GET HTTP/3i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23812, version 1.524 Hasheb586e5a1b86dbf1c866e3ed80f9d18e 280ee78d19c017ab9335f769595e5157d3c4a343 714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Wed, 11 Sep 2024 17:33:45 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 61488
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w3Cy61%2FsGBoYcuFmZAAeW9BSSj6HPKKw6m8pKWK38mL%2B1glUzkGzK8j%2FQKI2qn70SopzfFg2f3%2FLOfpX01PjK2Hs8L59is%2FJwQlQhDqktUMvX0Ckl7vDNZYpR0KWbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ab6e125696-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.com/theme_2/img/loader.svg | 172.67.208.102 | 301 Moved Permanently | 167 B |
URL GET HTTP/2i.doodcdn.com/theme_2/img/loader.svg IP 172.67.208.102:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.com FingerprintC4:B2:FF:D7:AC:99:CA:06:A1:DB:D7:A2:C2:ED:27:F4:2C:E7:FB:3F ValidityTue, 06 Aug 2024 09:13:15 GMT - Mon, 04 Nov 2024 09:13:14 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/html
content-length: 167
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Wed, 14 Aug 2024 00:47:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lZKofwBOUKWutk5TtpkVnHdD4VUz8GHzb69U5z22Tb6uqUh6hCX97wAo8kEZ6c0TEHpusfsHJ7N8p%2Bumw2Qxh9Mtr5U%2BVJ6Gs9lYVxyy4BAuTyVVleB0LLOOA5oFHgei"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96ab988db4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dood.sh/e/oj3tl9itav1x | 172.67.75.197 | 200 OK | 0 B |
IP 172.67.75.197:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdood.sh Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Anti-debugging code |
HEAD /e/oj3tl9itav1x HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/e/oj3tl9itav1x
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Mon, 12 Aug 2024 23:47:08 GMT
set-cookie: lang=1; domain=.dood.sh; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BJU1XardqwQ22qp3kK9BWoVMvuBl3z7N0Vjumw%2BE3HY2S9hOZRGlw%2BzZmtc5QfTmN0OcjM9pMZrGefL1iX08C8KP%2FPHYwXTSjSkYwSmNWoyf%2F7f%2BnQiLGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96abbfe6b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg | 104.26.6.74 | 200 OK | 30 kB |
URL GET HTTP/3img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 402x715, components 3 Hashab616705ae0ddedc63c27a70a9071627 759bd4223a0482f59f08339e1c143627fa9a04f8 ec4577c275b2d1deaef01399337349d65613d6e71ade62ee42d0c0b6125f67fe
GET /splash/1ng7gbzaumfpmp95.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/jpeg
content-length: 30225
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=30417
etag: "64d7f56a-76d1"
expires: Tue, 27 Aug 2024 17:09:56 GMT
last-modified: Sat, 12 Aug 2023 21:11:06 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s%2Fa0fssHdCJR5bLPzPFmMrvfcJ368QlNHlwbhDKaLb178CLnLukqywCZLX1QqsNvs5NXw9x053LFIeRJpFUWaULZcIfTnTjYP7PTAhGw%2F3pLbO%2BhLmbjHTzDXoSkV76w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96ab6e115696-OSL
alt-svc: h3=":443"; ma=86400
|
|
| waisheph.com/tag.min.js | 139.45.197.245 | 200 OK | 26 kB |
IP 139.45.197.245:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectwaisheph.com FingerprintA9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81 ValidityTue, 18 Jun 2024 23:53:23 GMT - Mon, 16 Sep 2024 23:53:22 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash5cea47c4ab2963d3d93d9f1931e0de91 c71cb86da149cee1cab013723b08487aafc219ca a74fa0f1f017157f11ca71db86567c7625c8f66fdb180020229f4fdd88cad42c
GET /tag.min.js HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/javascript; charset=utf-8
content-length: 26352
content-encoding: br
x-trace-id: df7a5a68f45ba7ff626497c083bb4dd9
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Tue, 13 Aug 2024 18:34:10 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| pinaycartel.biz/assets/bootstrap/js/bootstrap.min.js | 172.67.145.206 | 200 OK | 94 kB |
URL GET HTTP/3pinaycartel.biz/assets/bootstrap/js/bootstrap.min.js IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hash7d3cf48f5bba5db5258a2ff0f65ef00f 52abb563b246cbce1edf317417c6ff631059a2d6 0ff3cadb509482ccb23bb600c5c01eb721877a5cd7187d96c8b0af2135c29ca7
GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 14:50:09 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 205018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IK8DgFMH9MkN9a0jb62aQmQWEfNzzWvxOe8P15Pcdw8sWiEcPfCQWlUqNlqZnoeu9wNuXyRYTf9N9NQe5fW%2BEeu8rfEtxZB13VbvPD0V3xwu%2FV0ZT3pbuuGiq7Zx%2BaDuicQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0cc127130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vrgvugostlyhewo.info/NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw | 172.67.136.138 | 204 No Content | 0 B |
URL GET HTTP/2vrgvugostlyhewo.info/NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw IP 172.67.136.138:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectvrgvugostlyhewo.info FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8 ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 13 Aug 2024 23:47:08 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OKL1J8XdfevZWaGXmjoSa86irsp2jQSenYDkRxs6tjDaEh2RtFUuHJAvcfm5uBKlObg9DF7%2B%2Fpj630or13Qsuwv784nIxJ4lAxtKeewzB7YAcl4tRtcoJjar2jZsUl8QY2tdc%2FKbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ac18b0712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg | 108.157.214.55 | 200 OK | 1.2 kB |
URL GET HTTP/2kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg IP 108.157.214.55:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerAmazon Subjectkologyrtyndwean.info Fingerprint5E:8B:19:67:7F:06:13:2B:24:F1:D0:7F:4C:E4:AC:77:EA:7C:3D:99 ValiditySun, 28 Jul 2024 00:00:00 GMT - Tue, 26 Aug 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3034), with no line terminators Hash8c692c8944872129f48567305fcea54a 55a32a9b37ce36df780b00cd43d6675ce983c3a1 27a5565499f0da77cda061ab66cf5fd35c2feeba827294dbf093193e3991b5a8
GET /aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg HTTP/1.1
Host: kologyrtyndwean.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1189
date: Tue, 13 Aug 2024 23:47:08 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 009f08cce389af684f28c36891875534.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: E48j2JZzd-OR3qeqmYZYKWD7WyjAD2xr-QN1PK0cXu9FWP1yxJohlQ==
X-Firefox-Spdy: h2
|
|
| getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q | 52.85.243.99 | 200 OK | 1.2 kB |
URL GET HTTP/2getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q IP 52.85.243.99:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerAmazon Subjectgetrunkhomuto.info Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3025), with no line terminators Hash1ead4d2bc4e597a26f9cc0e96bf2d819 cfb4940b6a1e1ec79a48a43baab691fea77af783 d1717761a77e41d1f77ed68d6fabbdb2ea618cd52ca9b1c9ce5d54da93a3d959
GET /WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1177
date: Tue, 13 Aug 2024 23:47:08 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 8mIRo4QXZTTH7OEHldsoAU4H3UutPSIktLeBokGQthskypaAkYyKzg==
X-Firefox-Spdy: h2
|
|
| dood.sh/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.75.197 | 302 Found | 0 B |
URL GET HTTP/3dood.sh/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 172.67.75.197:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdood.sh Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Tue, 13 Aug 2024 23:47:09 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZlJdj7fji7B095DV0uzz9CPm1q%2Fd9hBUc9yFRjoqueg7Y5iNEZICOcg6MVJ%2B1%2FYCr2FBeErBuJX%2F84ntfoRSIi0sSODNhKSP3GWaRRFvP23HgqlBL1KYXZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96ae694cb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 108.177.14.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP 108.177.14.84:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintCF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD ValidityTue, 30 Jul 2024 12:50:16 GMT - Tue, 22 Oct 2024 12:50:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:RmoXqr71Y4M07M-BXSX0sucuLx-ufw:D4MlYtKBbyMH5sT7; Expires=Thu, 13-Aug-2026 23:47:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-9ukQD11B13fpdIc0aTCz4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 108.177.14.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP 108.177.14.84:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintCF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD ValidityTue, 30 Jul 2024 12:50:16 GMT - Tue, 22 Oct 2024 12:50:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:XEuMGdFVgFpA_6Fln4Vb9IPDu4UsQg:NhtpeRWryZoq-LRR; Expires=Thu, 13-Aug-2026 23:47:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-M8eRj84q27rZ0wXfE7rMkA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/theme_2/img/loader.svg | 104.26.6.74 | 200 OK | 2.3 kB |
URL GET HTTP/3i.doodcdn.co/theme_2/img/loader.svg IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeexported SGML document, ASCII text Hashbe00fc4a29d03016e78b28c9943e3f51 10f2025f5aa96706cc81e050eadfcaa9bcc55af5 eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Wed, 11 Sep 2024 17:29:06 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 63298
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t70a0h6MQEsHeMATdnTPCRPQy4cGMdsYDXZAka6G%2FgHi8unxdCpprV0BVRXbvXbSQqdU9aDC%2FgSH3xoXGcWVIziSFNx2WIp9O7EVPC6ildXLkseAmbyvvZUfNKsofQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96aea839b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js?userId=0080b71cad5d4a3ee02fc798abd75474 | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=0080b71cad5d4a3ee02fc798abd75474 IP 139.45.195.8:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
Hashadbc3690dd0db1ac5174c8693dd548cb 4d433aef000fe9deb5af869ecf0a684c5ae63cb7 8d2e1378df73327d4fdb24601eccb78d045065da0ec4097f468b4621db249427
GET /gid.js?userId=0080b71cad5d4a3ee02fc798abd75474 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dood.sh
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| w346ob.cloudatacdn.com/favicon.ico?i | 141.94.143.82 | 200 OK | 15 kB |
URL GET HTTP/1.1w346ob.cloudatacdn.com/favicon.ico?i IP 141.94.143.82:443
Requested bymoz-nullprincipal:{425d8264-c6d1-4943-96b2-37cabac0b47d}?https://dood.sh CertificateIssuerSectigo Limited Subject*.cloudatacdn.com FingerprintD9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash30d3656f43c817e38c3e7d70b2bfbdad 1aa43b43755e7cba5e145d0978517f7bedad7da6 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: w346ob.cloudatacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Aug 2024 23:47:09 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
|
|
| blurbreimbursetrombone.com/solid.gif?z=1999414&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5 | 94.242.247.30 | 200 OK | 43 B |
URL POST HTTP/2blurbreimbursetrombone.com/solid.gif?z=1999414&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5 IP 94.242.247.30:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1999414&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
UID=240813184798ecc249600b422382abb8b440; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| d3eub2e21dc6h0.cloudfront.net/WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA | 54.230.241.107 | 200 OK | 265 B |
URL GET HTTP/2d3eub2e21dc6h0.cloudfront.net/WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA IP 54.230.241.107:443
Requested byhttps://getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with very long lines (308), with no line terminators Hash3626868a03c72c37ead34627d6f1ea74 662cacb88b7f12749577de7c4cbd8eb958b84357 76c2139b95bb6ea2482214173de02efd7155ce7c7efc543cae10ee77f0280388
GET /WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://getrunkhomuto.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 265
date: Tue, 13 Aug 2024 23:47:09 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hMkjf7WQ3FOSZth5XAr2V85xRCRB6FAj_xQiCc5_8ZXfyNvQPp5DQA==
X-Firefox-Spdy: h2
|
|
| d3eub2e21dc6h0.cloudfront.net/RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/ | 54.230.241.107 | 200 OK | 592 B |
URL GET HTTP/2d3eub2e21dc6h0.cloudfront.net/RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/ IP 54.230.241.107:443
Requested byhttps://kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with very long lines (859), with no line terminators Hashb9c9646d94a5c611da699cc85559b16a f39c9ab70e5f845dc3dcd5c64f6d49ab15e5dcf4 5684f700a873bc557b39d8c7bb349a3a9037c908b15f899f9cc2c98c4cd1d91f
GET /RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/ HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kologyrtyndwean.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 592
date: Tue, 13 Aug 2024 23:47:09 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WqyNXPLjOeJdb0W5636BDjU03XdFUrsxpPVVM2J56eS94YDM7fVa8g==
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD | 108.177.14.84 | 302 Found | 424 B |
URL GET HTTP/3accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD IP 108.177.14.84:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeHTML document, ASCII text, with very long lines (391) Hash11c495c77042643273c27c02e192b2e2 0f17e1a6de3ecdd7f87fc7ca7713f07f672d9392 b0aeda8c8431a3cb7a87510f4427bc7b0018c71b40b414a18464e05993fe84c8
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:Xdv500pN4w2TOm03MECaUgIjw28gVw:M79sX1SqROa2MzFf;Path=/;Expires=Thu, 13-Aug-2026 23:47:09 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-DTZ2OYKAlnyKqmyugOhVRg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 424
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dood.sh/cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js? | 172.67.75.197 | 200 OK | 106 kB |
URL GET HTTP/3dood.sh/cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js? IP 172.67.75.197:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdood.sh Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
File typeJavaScript source, ASCII text, with very long lines (7793), with no line terminators Size106 kB (106442 bytes) Hash7452252b153c44dfd97458874a1de9f8 daf04e24dbfe9dd3d79775c39a9cddc2cfbcae69 fcc74055cfe894d1f0243be84cd995ba8658b845892c8ec01f55807560beb409
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js? HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bSm9g7ikw2TJnl58jZn3OcB9%2FnfJvr7q5PCsWrMW4IOUieChLEa0NRX9xitByvWWUTNYavU1ZBC1yYA19YPOUqLKKj9cCPGlwyIxEQwi1pZfB12xREvJ6gM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96af99dab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pogothere.xyz/ | 188.114.97.1 | 200 OK | 29 B |
IP 188.114.97.1:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpogothere.xyz Fingerprint07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A ValidityTue, 23 Jul 2024 05:27:01 GMT - Mon, 21 Oct 2024 05:27:00 GMT
File typeASCII text, with no line terminators Hash2e4d500d5eeef786f42e40e66a53ffd3 765eb5c0aa2fb7eafedb3d176233fc504993486b f17ec71f37e7a21b3978f424f6a9ec904fd8cf5a2d169b3cdf2e8f4f6a15c134
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/plain
set-cookie: csu=2038897297894246@1@1723592829; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1yOjmf36Yqhm1fGu9wFwtfv2R443Nx%2FhPLPQTT5wnxZ%2BJxC%2F3X%2Fcr9nbyTWyOqDEUxz9vqq3ohBy4cXrt78XhIlvO10TInwwEswwkr89WR2L961HKY1Ad%2FFvNHjiq1h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96b06b947130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vrgvugostlyhewo.info/popunder.gif | 172.67.136.138 | | 58 B |
URL GET vrgvugostlyhewo.info/popunder.gif IP 172.67.136.138:0
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectvrgvugostlyhewo.info FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8 ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:10 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 79078
last-modified: Tue, 13 Aug 2024 01:49:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5QoMFnJ2A0sjT2RYHSx1s%2BDMfPPOqbldmzXDApXHOCmWTIkoH5r1z3J2fiAAdDIBcMm%2FUJ0Xc3USpwtikfaGbA9UC%2BIJnmhd4jtuRDjNaORVelp5xK8hVOffjaGNHuM0%2BhtpXeJSLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96b50be35687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash77619f0113a62e8c4c44f195901b385c 1e1a5e3768ca683e66667aa14efa7042df57ee2f 520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3965
Expires: Wed, 14 Aug 2024 00:53:15 GMT
Date: Tue, 13 Aug 2024 23:47:10 GMT
Connection: keep-alive
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0 | 108.177.14.84 | 403 Forbidden | 1.3 kB |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0 IP 108.177.14.84:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typegzip compressed data, max compression Hash4a033d865af949346e8dfce339281436 57e472f1420039da71b7996a22ad28edbf157bdf 6fbb7cb4183c018f00db27cee3637e6630461074a142f7558dd5d63457516913
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-1GySiR7aoGTjrePe29HP1w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.zDlak_ZpRIU.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash77619f0113a62e8c4c44f195901b385c 1e1a5e3768ca683e66667aa14efa7042df57ee2f 520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3965
Expires: Wed, 14 Aug 2024 00:53:15 GMT
Date: Tue, 13 Aug 2024 23:47:10 GMT
Connection: keep-alive
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0 | 108.177.14.84 | 403 Forbidden | 9.0 kB |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0 IP 108.177.14.84:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typegzip compressed data, max compression Hash567e79afd4b1e550503567bf8646eb2d 4f4b64eb2d540e54676d897760df082a771d6c12 39904d26e65ee9ebea9023b0ade5530d4cdaa7dcfa631f7f54225e5a40f6755c
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-cyCMtW_QzHJieDzHqpFXQQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.zDlak_ZpRIU.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| vrgvugostlyhewo.info/N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo | 172.67.136.138 | 204 No Content | 0 B |
URL GET HTTP/3vrgvugostlyhewo.info/N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo IP 172.67.136.138:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectvrgvugostlyhewo.info FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8 ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 13 Aug 2024 23:47:10 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wip6ooWwOna2OxYqGwKoiIrueTFEme1mgH2h2XUtKq8QhYwo1RS0NJFbaZ%2BZ4fsaNaKztLr5gdWqD5ifT0nXuv3vibDeFPG6qVu7fUtmmM6aL0z1IUTi64v9CXbH3IgfB7z24wlKsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96b53bf25687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| waisheph.com/?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.887.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=480&wiw=736&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=736&wfc=1&pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x&drf=https%3A%2F%2Fpinaycartel.biz%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.887.0&navlng=en-US&pnt=0&pnrc=0&bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b&wasm=1&userId=0080b71cad5d4a3ee02fc798abd75474&m=link | 139.45.197.245 | 200 OK | 10 kB |
URL GET HTTP/2waisheph.com/?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.887.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=480&wiw=736&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=736&wfc=1&pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x&drf=https%3A%2F%2Fpinaycartel.biz%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.887.0&navlng=en-US&pnt=0&pnrc=0&bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b&wasm=1&userId=0080b71cad5d4a3ee02fc798abd75474&m=link IP 139.45.197.245:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectwaisheph.com FingerprintA9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81 ValidityTue, 18 Jun 2024 23:53:23 GMT - Mon, 16 Sep 2024 23:53:22 GMT
File typegzip compressed data, max speed, from Unix Hashea0cc916a2a5cf686b1226838ad3b09f 7542cd77b3d8968acfc15a2ab93c24879e2d9902 72a63bfacdfc2bb2d9d2917636e5c8e995f9497952c097ca9c0d82248f5a3426
GET /?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.887.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=480&wiw=736&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=736&wfc=1&pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x&drf=https%3A%2F%2Fpinaycartel.biz%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.887.0&navlng=en-US&pnt=0&pnrc=0&bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b&wasm=1&userId=0080b71cad5d4a3ee02fc798abd75474&m=link HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; oaidts=1723592828
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: application/json
x-trace-id: feecee50b9417c9b7202ad21dc54818e
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:09 GMT; path=/; secure; SameSite=None
oaidts=1723592829; expires=Wed, 13 Aug 2025 23:47:09 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 20 Aug 2024 23:47:09 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pinaycartel.biz/assets/fonts/fontawesome-all.min.css | 172.67.145.206 | 200 OK | 57 kB |
URL GET HTTP/3pinaycartel.biz/assets/fonts/fontawesome-all.min.css IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeASCII text, with very long lines (56940) Hashe0076d9b1984448e1b530d5b1a419c7a 95fb81d6859b2c4693e334769f87afe76709e5ac 19bc4712bca32db280000f294e2d0c1dc178063a9dd4278fc22d30a39c068846
GET /assets/fonts/fontawesome-all.min.css HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 22:34:37 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 90749
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xO1m5gpTw9Ado0Mxx3pLgOd8HMceyHShVMsiTVAukDgbZz1rBgQfyNLCLLG4ZJqYHYs4VAwPdvJRw%2FEvNCDvG0a2ZV6rGCv%2BkC9YqwwbMKjScuUDR8OIRqYirlv9HbBmwjg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0bc0b7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| impracticalsmell.com/cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl | 88.85.68.219 | 200 OK | 42 kB |
URL GET HTTP/2impracticalsmell.com/cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl IP 88.85.68.219:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectimpracticalsmell.com FingerprintBA:D6:B8:6D:57:6A:08:FC:86:57:E5:A1:74:38:00:D4:0C:99:FE:DC ValidityFri, 19 Jul 2024 03:48:49 GMT - Thu, 17 Oct 2024 03:48:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl HTTP/1.1
Host: impracticalsmell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 13 Aug 2024 23:47:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE3MjM1NzE3MzQsInpvbmVzIjp7IjQ0ODA3ODIiOls0NDgwNzgyLDEsMTcyMzU4Mjc2MV0sIjQ4MDA0MjUiOls0ODAwNDI1LDEsMTcyMzUyOTEyN10sIjQ4NTgzMjMiOls0ODU4MzIzLDEsMTcyMzU4MTEyN10sIjQ4NjU3NjkiOls0ODY1NzY5LDEsMTcyMzU5MTg0MV0sIjUxOTk0NTYiOls1MTk5NDU2LDEsMTcyMzU3Nzc4OF0sIjUzNjU1MzAiOls1MzY1NTMwLDEsMTcyMzU5MjgyN10sIjU0ODY1MzIiOls1NDg2NTMyLDIsMTcyMzU4MzY1OF0sIjc0NzQ4OSI6Wzc0NzQ4OSwxLDE3MjM1MjM3MDFdfX0=; max-age=1755128827; path=/
uniqCookie=573b30f66ba8cb312cf0b75da52cfc0c; max-age=1726184827; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vrgvugostlyhewo.info/TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0 | 172.67.136.138 | 204 No Content | 0 B |
URL GET HTTP/2vrgvugostlyhewo.info/TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0 IP 172.67.136.138:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectvrgvugostlyhewo.info FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8 ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0 HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 13 Aug 2024 23:47:08 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kMnZik3rTxgS3cEoWF2QGxSR%2FDsy75sIt%2BxY0zWhbIuZaD7n0OMGHuvPZA3gL7zlg09N7PSS4sk362s0LSWrA9yBJBCtnpp0AP979iinmI3lTvLPTN3gOmwqN%2B58EOu9THUKrG94uQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ac18b1712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.famous-mall.pro/ecc874/877b0c85adf8.js | 45.133.44.1 | 200 OK | 70 kB |
URL GET HTTP/2www.famous-mall.pro/ecc874/877b0c85adf8.js IP 45.133.44.1:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectwww.famous-mall.pro Fingerprint2B:D4:C2:E5:FF:7A:8F:EC:AF:5B:DB:F9:A6:5F:65:5D:4A:09:01:9B ValidityMon, 12 Aug 2024 08:07:18 GMT - Sun, 10 Nov 2024 08:07:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash32ed3efcd6f57ee9c34e01527ce683c9 c26b86888ed140a6afb26db710a20a3db668a5ef 0c7ef00938be5d846c17cc2551fed8a7616f5695c71f555b27d2db30b0fc22d3
GET /ecc874/877b0c85adf8.js HTTP/1.1
Host: www.famous-mall.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://pinaycartel.biz
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 15 Aug 2024 23:47:08 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
|
|
| pinaycartel.biz/assets/css/styles.min.css | 172.67.145.206 | 200 OK | 31 kB |
URL GET HTTP/3pinaycartel.biz/assets/css/styles.min.css IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typeASCII text, with very long lines (31075), with no line terminators Hash49d6b1af2ac2f6e6a4baddf4e9c8471d 15567131b492beea86861e302099c4e3fff22455 8215ab542b9d13edff071c3414cd244bb3b76f6cd7b9d55b3427fe01643325eb
GET /assets/css/styles.min.css HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 22:34:37 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 90749
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RtU1wZkaI5BZoVUZ%2BVTCA8NrbzI10d3MIK4S06GrSBYnjU7UrjegY93Jy1TVBkBUgelli%2FXQVDUNGjPF3PNJXnAOKNwwCutjGbNfRKfTP%2BSHwdYkP8CPVfO%2FCsU56dEC4U4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0bc0c7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ | 108.177.14.84 | 302 Found | 0 B |
URL GET HTTP/3accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ IP 108.177.14.84:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:-zm2h0-GmWlko54utCyXS7h-smPWhQ:AumpGKs5-b0VVJKM;Path=/;Expires=Thu, 13-Aug-2026 23:47:09 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-uLq06S8dxCKIhJw5pgFW7g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 422
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| blurbreimbursetrombone.com/check.html | 94.242.247.30 | 200 OK | 916 B |
URL GET HTTP/2blurbreimbursetrombone.com/check.html IP 94.242.247.30:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typeHTML document, ASCII text, with very long lines (956), with no line terminators Hash95b931540a96c4d45344472f87f81036 7f1c2eae3c09448aa6f8d85f66484439623c520a 2ecb5d3152a38f9abb6f14dac557682756b243462770f69a14c4c2b8cf0726d1
GET /check.html HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/html; charset=utf-8
last-modified: Tue, 30 Jul 2024 10:01:33 GMT
vary: Accept-Encoding
etag: W/"66a8b9fd-394"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| blurbreimbursetrombone.com/get/1999414?zoneid=1999414&jp=_cl1pw4dlzhokn1y848holt&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5&uf=0 | 94.242.247.30 | 200 OK | 3.2 kB |
URL GET HTTP/2blurbreimbursetrombone.com/get/1999414?zoneid=1999414&jp=_cl1pw4dlzhokn1y848holt&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5&uf=0 IP 94.242.247.30:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typeASCII text, with very long lines (3598), with no line terminators Hash9936cf23b7d174cf86e7346af7b6ccf9 d0d016a4788d99ba54f3ee78f86f3e196636048b 4778c0066e3154ea87a807680e8d725bd67ad7ccdf923f92651b1f5991ecf2a9
GET /get/1999414?zoneid=1999414&jp=_cl1pw4dlzhokn1y848holt&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5&uf=0 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
UID=240813184709cf6a2c8cdf43479dda4e558e; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| dood.sh/cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d | 172.67.75.197 | 200 OK | 0 B |
URL POST HTTP/3dood.sh/cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d IP 172.67.75.197:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdood.sh Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12154
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/e/oj3tl9itav1x
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.dood.sh; HttpOnly; Secure; SameSite=None
cf_clearance=FqdrNgungyVXqQ22GMEbcCoYShjj7FcHBjUv21NoSgc-1723592829-1.0.1.1-ge09TEvrbQT.B1dHY0FGlz5P7OiG15_ymSu17qty49sFX5jC6n9xWWWc.vs8DpSd_WM8NYHlHPu3MVe0GfB23g; Path=/; Expires=Wed, 13-Aug-25 23:47:09 GMT; Domain=.dood.sh; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l1WE3rmDw5EYxnTNgBOc%2BSIhtLy0lQWvgCocK%2BzZ0pJhOoyIhHwRzVqCAxzkM01irJKjLDo4ftsGbr4dqn1FGe2zdK0tFcSStmFnXZKi%2FaqZixYVuwSa%2FBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96b17ac3b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famous-mall.pro/ecc874/877b0c85adf8.js | 45.133.44.1 | 200 OK | 70 kB |
URL GET HTTP/2www.famous-mall.pro/ecc874/877b0c85adf8.js IP 45.133.44.1:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectwww.famous-mall.pro Fingerprint2B:D4:C2:E5:FF:7A:8F:EC:AF:5B:DB:F9:A6:5F:65:5D:4A:09:01:9B ValidityMon, 12 Aug 2024 08:07:18 GMT - Sun, 10 Nov 2024 08:07:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash32ed3efcd6f57ee9c34e01527ce683c9 c26b86888ed140a6afb26db710a20a3db668a5ef 0c7ef00938be5d846c17cc2551fed8a7616f5695c71f555b27d2db30b0fc22d3
GET /ecc874/877b0c85adf8.js HTTP/1.1
Host: www.famous-mall.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 15 Aug 2024 23:47:08 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/img/logo-s.png | 104.26.6.74 | 200 OK | 1.9 kB |
URL GET HTTP/3i.doodcdn.co/img/logo-s.png IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash8211fb3cc137d3e1c1e399b86476f951 136d8ef228959aa0cee12e5ed463b6e6a4fcf720 2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Wed, 11 Sep 2024 16:52:22 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 63282
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dEDyNq1dfgiJ51UyUfM7f3KQNhmKLVrGqLlGg7NPXkCsxd0HN4qIpG3QnqYNBBj1xPz9dagG5t4MF8o6IsbNZviMIDkPVaaa%2FOw5xurWXSAXvX2AhgY%2BSXW7q3i%2FHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96af5891b50b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/assets/bootstrap/css/bootstrap.min.css | 172.67.145.206 | 200 OK | 195 kB |
URL GET HTTP/3pinaycartel.biz/assets/bootstrap/css/bootstrap.min.css IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
Size195 kB (194856 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Sat, 17 Aug 2024 22:07:20 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 265187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJV84skX7Ylty7%2BOcfK1tnWZY4fPawi4x7FoGxCDe9eWihc2cKJADal2yNpIC%2B7MTew6zSiV%2FIe6icRrOSuOaqO9i5lf33%2Fcnl3wEH8U1TAlvPuVcEenEislIXlDkIldR6E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0bc0a7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dood.sh/pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2 | 172.67.75.197 | 200 OK | 103 B |
URL GET HTTP/3dood.sh/pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2 IP 172.67.75.197:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdood.sh Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
File typeASCII text, with no line terminators Hash3a1bd5b06263fb791afaf53e88b35383 c79ad1b9ff631eb77a8b82ba192a896862ba83cc 9260c6627e549e88bc88398ce76ccc7134422f7f97fbbc986e3b1ad42556e951
GET /pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2 HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/e/oj3tl9itav1x
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BD5Kqr%2B6pqBRNft3oV2GYDDWLYiR%2FbGgBNyXe%2BtiJP5BPIPHB9uwiYMfxLLQInBthb596%2Bftk%2FCFPnsnA764lHr38OVPqoP1ljxM1%2Fr1hnlyCpqu7jX3eQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ab1f95b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pinaycartel.biz/watch.php?vid=oj3tl9itav1x | 172.67.145.206 | 200 OK | 26 kB |
URL User Request GET HTTP/2pinaycartel.biz/watch.php?vid=oj3tl9itav1x IP 172.67.145.206:443
CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.php?vid=oj3tl9itav1x HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pex9Gygy8LR93xk8NpevuWFo36BfTzZJppkDnB31YJ1nU2GHueGlMY%2FGpX4d1iu3ZbYu82M8xlur2MfnePK8OCCXZCa2mibHpJh%2FdIsjNjKM9oVde897NwKQ9DJiTTKjWvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c969d49d956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pinaycartel.biz/3px-tile.png | 172.67.145.206 | 200 OK | 2.7 kB |
URL GET HTTP/3pinaycartel.biz/3px-tile.png IP 172.67.145.206:443
Requested byhttps://pinaycartel.biz/watch.php?vid=oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpinaycartel.biz Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash19eebdb2d63fbe199c75bfdd5b17ce5b 9e0edb051b8944b0d1cf2e53f4e0a27b08f23570 db0a16ab6426de5cddeae4a4ee1fd3581482497fb94a658e5fdd5e443e570879
GET /3px-tile.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/png
content-length: 2650
cache-control: public, max-age=604800
expires: Sat, 17 Aug 2024 22:07:21 GMT
last-modified: Wed, 16 Aug 2023 14:00:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 265186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VWdQUPcXiQwB9AnSxtLhvJ8mqGvzORRX9HS51s5oGli5vVe8abfmo%2FGPBvY834Pd49yhHTig8rJHvkRgv1ccOmiT73ttLbDydzOjtPVKVE2Ks%2Ffsri036ugvxSCUdPaQJ0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc837130-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.co/get_slides/420/1ng7gbzaumfpmp95.jpg | 104.26.6.74 | 200 OK | 3.2 kB |
URL GET HTTP/3i.doodcdn.co/get_slides/420/1ng7gbzaumfpmp95.jpg IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeASCII text, with very long lines (3268), with no line terminators Hash9eeb425e67b1ddc0d96c403d1e3ff92e 13d9b5bd349fe7d48a6cc6e7e90622a0505f8ded f7753c421d497163a7f719b401d4b0a79ae41ed40c94315943a1255757991f46
GET /get_slides/420/1ng7gbzaumfpmp95.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Tue, 13 Aug 2024 16:08:47 GMT
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a5Y0wNp7WyxRLQisBY2ocxCRRZJSbweQAiQ2iT%2FopOSNV9Sb%2F1MYPIyRDrgu1D4wSXCeBCZA6fwuWbA99lB7tp%2BgEJG1d2OcTkJOGjVHwiY2%2FmGyhGUpe0hiVC%2F0ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96af58055696-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.co/css/embed.css | 104.26.6.74 | 200 OK | 80 kB |
URL GET HTTP/2i.doodcdn.co/css/embed.css IP 104.26.6.74:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: W/"61d3187c-13812"
expires: Thu, 12 Sep 2024 03:26:41 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 63286
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oz%2FYP66UkxMsGBl270HqXSpKIVkouuv9UcdgaHRCOAK%2BGknBUT%2F6PSFcSrbb84SxFOZOW9RLWIw8yw1REf9%2FK5tnBn%2FlJJXL8gTpiXWiOjorEgiD%2FgojzzRuxHfrgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a64ef1712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js | 94.242.247.30 | 200 OK | 131 kB |
URL GET HTTP/2blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js IP 94.242.247.30:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65045) Size131 kB (131422 bytes) Hashf0da46a2e3d755aa201ea05b6109468e 3e29ce6764ad77f577c9b1c56e173d3fa627785e d4b724d774c6bb0fc5d48d55115107a66c6b2ed11b9c8cdd797de37b99a29e79
GET /aas/r45d/vki/1999414/126a6d05.js HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 13 Aug 2024 12:57:50 GMT
vary: Accept-Encoding
etag: W/"66bb584e-20204"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| waisheph.com/5/6936539/?oo=1&aab=1 | 139.45.197.245 | 200 OK | 4.2 kB |
URL GET HTTP/2waisheph.com/5/6936539/?oo=1&aab=1 IP 139.45.197.245:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerLet's Encrypt Subjectwaisheph.com FingerprintA9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81 ValidityTue, 18 Jun 2024 23:53:23 GMT - Mon, 16 Sep 2024 23:53:22 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4178), with no line terminators Hashf2e94c883cf186e77409ff3cf192096b 0584786ffe9811364a69fbe99e641593adb9ab62 88f6271253bd72122a15032e7455857d501e36ba47068fedba0b4aea61bbf76c
GET /5/6936539/?oo=1&aab=1 HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: application/json
x-trace-id: 77cd8860d56b1a0e1909ad6e9b548e9f
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:08 GMT; path=/; secure; SameSite=None
oaidts=1723592828; expires=Wed, 13 Aug 2025 23:47:08 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pogothere.xyz/asd100.bin | 188.114.97.1 | 200 OK | 102 kB |
IP 188.114.97.1:443
Requested byhttps://dood.sh/e/oj3tl9itav1x CertificateIssuerGoogle Trust Services Subjectpogothere.xyz Fingerprint07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A ValidityTue, 23 Jul 2024 05:27:01 GMT - Mon, 21 Oct 2024 05:27:00 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 6804
last-modified: Tue, 13 Aug 2024 21:53:45 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b2E1yeWazjQ%2Ftz4EbGwiOOUdwItX0TI4AJJKb4pgvKns5JHj6Cq7zO2AMSicE3dQpa1uYd2UE5Au7LuQLVgrxHqHDDeVJunI0AkUw%2FiC8p0ugEdHFQkVbg%2BsDyydwxRy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96b06b9b7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|