r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 024341a123220bb7f476663e0c2f941d
20e2ab3bdab6d6f5241eb3c45d44a9b191f6cb44
94e9518d845bb5293c2f009a196b74a3859a5ae3b3a1438234f867017c167e1b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "94E9518D845BB5293C2F009A196B74A3859A5AE3B3A1438234F867017C167E1B"
Last-Modified: Tue, 13 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7865
Expires: Wed, 14 Aug 2024 01:58:11 GMT
Date: Tue, 13 Aug 2024 23:47:06 GMT
Connection: keep-alive
GET pinaycartel.biz/assets/img/650x350.png
172.67.145.206200 OK 1.0 kB URL GET HTTP/3 pinaycartel.biz/assets/img/650x350.png
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type PNG image data, 650 x 350, 8-bit/color RGBA, non-interlaced
Hash 64605e73317629dd781f3b02334fb76c
917c0314c7bcd02657e449e278f071e56300387a
0f5dc054633258c466d5acf6203b47d34a4669aaa66f1e6486886c7e395032e3
GET /assets/img/650x350.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/png
content-length: 1001
cache-control: public, max-age=604800
expires: Sat, 17 Aug 2024 22:07:20 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 265187
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FjmQ1GRMzJrN68MWvYEKys02SGfYrDia0rQ%2FXFcqHctOqvsjBNOt%2BCe5uYhhnH0yGlIxFqMurBQa7PMlId5U8zOdxiaZ%2F7f1FYmk%2BoPPG8D63rBSuIYbNAWfbcKzUClLFmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a0cc117130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/assets/img/33.png
172.67.145.206200 OK 236 kB URL GET HTTP/3 pinaycartel.biz/assets/img/33.png
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type PNG image data, 1150 x 351, 8-bit/color RGBA, non-interlaced
Size 236 kB (235812 bytes)
Hash bebb9af01364a03b30cd59776c993a1e
69e6310ee304db6721f2703840c60e82e739ac4e
ea6f3013015bf72db496f641c484f6b202fda6060f608ac067d62bdc14092493
GET /assets/img/33.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/png
content-length: 235812
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 22:34:37 GMT
last-modified: Sat, 14 Oct 2023 16:27:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 90749
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oBRXyF%2BXuZw8ZZ8nhPog%2FTZipO2m3xBlu%2F8RE5JXGMx3Cvr8K2HUUXq8W0LnnAKRdFoik%2BSwiQesB9s7YdZXTCO651wAtoKdgKH905cEHN%2F8AHODGeuUpIoh1TCJol%2BcKoU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a0bc0d7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/PHPVIP-1.gif
172.67.145.206200 OK 669 kB URL GET HTTP/3 pinaycartel.biz/PHPVIP-1.gif
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type GIF image data, version 89a, 600 x 165
Size 669 kB (669253 bytes)
Hash 52ce8901be0d44a13d40bf1813ea468c
bd99d7f59f91fee861e0940a2f4141b9b690faa4
46ac2fc23007edd5c805e89e67072de1e8d41b88b8c34480ece42043247f796a
GET /PHPVIP-1.gif HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/gif
content-length: 669253
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 14:50:09 GMT
last-modified: Wed, 12 Jun 2024 17:29:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 205018
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GUSaHPV68%2BsUOJiSrY4uvE2JqCMLcZDE5DEZW08i%2BpV1tNBQpHpWcktMPHewwV4f8LzHq%2BuxUkjF3kYoIwM5b4nh3TrwuvOVG8x1KiZEdeWafvjdY0VqAAPsuBQhovUa5xQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a0cc0f7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/assets/js/script.min.js
172.67.145.206200 OK 3.0 kB URL GET HTTP/3 pinaycartel.biz/assets/js/script.min.js
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JavaScript source, ASCII text, with very long lines (813), with no line terminators
Hash cb7989a353ff55caed9830584ca215e7
f35448417382431c297e85bf96e0432e2c6817aa
66a7d90571a79b8c39b1683dd22a9822342269fc5b9bf3aa3cdd71e39759ad35
GET /assets/js/script.min.js HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 14:50:09 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 205018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4dRqoY%2BBeTISvCgvgkHojgniLvQa9aH3PzDEAkCfIWL%2F2%2BA0j2acZpw2X37NV0qV0yLc5mPkwMm%2B%2FY4iUGlp0BkJ6D1h4oInwvjuMYJt2MltBT7P42TZ9SV1V0X0CgW6uM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0cc137130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg
172.67.145.206200 OK 115 kB URL GET HTTP/3 pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1155x650, components 3
Size 115 kB (115375 bytes)
Hash fa862b3c312b80dc1e749a04743289ba
0e7166cf8ecdb3248a52b11442f0047eefbbaa7d
c4c7a997bf9b013109bd61486d26931eda1f68f1107661dba1d6b30ed14e9b41
GET /00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 115375
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 02:18:45 GMT
last-modified: Tue, 26 Sep 2023 19:11:53 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 77302
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eoMZwfGfBYzLdJhmO7TqvEkfJEvZNVZZTTxxUZikua%2BBebkLF1TXxDClBfiptvlsAJZVhXQ05jHeXUxCelwVNNUsKh%2Bo0gqAD7rS3hrzo8HjFZ2XHfdDjp%2FEpbesPtQFRoA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc847130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg
172.67.145.206200 OK 11 kB URL GET HTTP/3 pinaycartel.biz/00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x304, components 3
Hash 72ada1b29b98085a9e752fc4706f4b60
760582a71395fdb298b8d2ea895da5d4a3bbcd3e
1748550a22c973c601130fd791618243a8761e66377979d81f7862f6ba54834b
GET /00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 11431
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 18:19:31 GMT
last-modified: Fri, 08 Sep 2023 11:39:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 106056
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNS5ZMAjiBqMFdnd1vqA3TwJLGc4zz%2FVT1zneejfUSb7DVBk0XlUvb6aquXpa9i6%2FP139BGZxbubuVzqdaDM%2FSgExrqYhVyB6AEVLpWmD2r%2F3F5KeVCXXZ1GECrJUnZNS24%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8a7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/assets/fonts/fa-regular-400.woff2
172.67.145.206200 OK 14 kB URL GET HTTP/3 pinaycartel.biz/assets/fonts/fa-regular-400.woff2
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 13576, version 330.-16253
Hash 9efb86976bd53e159166c12365f61e25
830f8653e5f4a5331ac0b47c5701f65fe9f1bb32
86e496b536b26ba60cdb68df9dd9143b19a63b65e30e373b0321833aab1295d6
GET /assets/fonts/fa-regular-400.woff2 HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/assets/fonts/fontawesome-all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: font/woff2
content-length: 13576
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 03:21:00 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 159967
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kpa5mCKgYZ9STQrSZnStCvzG%2BZWLBE2jBepy8jUuCh5od9cAhMlv3zkqI8PiT0hMvoEcGtEci8R0ZmgYmB%2Blctiw9%2BzSn5SGwV%2Fs3ZwtAsNen5Er0C1sRgAjQrkK4mLEcME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a2bd207130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/assets/fonts/fa-solid-900.woff2
172.67.145.206200 OK 76 kB URL GET HTTP/3 pinaycartel.biz/assets/fonts/fa-solid-900.woff2
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 76084, version 330.-16253
Hash f6121be597a72928f54e7ab5b95512a1
b2c74520c3f506efbfefca867918e5ae28bd5222
787d76ad6deab67ccf8bac1b584260205e114f508fc5542b612e3f75d49a34e4
GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/assets/fonts/fontawesome-all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: font/woff2
content-length: 76084
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 03:21:00 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 159967
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BM51PB7UxL8EgTxObC6NIaje6lkHsJ9lSWJS0s1xkdMSb48%2Bs5XVBRjBpCFkkuaTDTXPzNauCv8kpeUlXTRG3%2Fzwm%2FWvr5XV95GIISFT52cPuAHEdCzdIzG3Gn6fjCnwECc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a2ed347130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg
172.67.145.206200 OK 22 kB URL GET HTTP/3 pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x304, components 3
Hash 722521c6320f784b20de7fe2312f0d91
56570232038190503def461f5d7478ca1c4cd54b
55c4a3687aa40c184c4d8dbe91a7430f8fefbdb3045409e585a57b190590352b
GET /00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 21770
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Thu, 31 Aug 2023 05:33:59 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ehhvDe8NhxYMo9491kXfgJJ792EAGEWmYQDRXKtOKTDsEDDQs1AcFcWooje3%2Bn9SfNV3TNPkrIdD6zjOKbAtUDDw7wbgaOCnyAZVuJHR2jGpXIjv7cYCYYdNTAlrr1RYXzQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8d7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg
172.67.145.206200 OK 36 kB URL GET HTTP/3 pinaycartel.biz/00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x759, components 3
Hash ff49a5025ef245da8f0d1d20b67284d2
09ffe1cee73179d29e093157bd8eaf43524866a7
049b912543e58b80208768cc09284b322744d96143a85212b8c2f92740786f23
GET /00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 36244
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XQUTVHruzWgShCRJXgwch%2FpgQUPfRioZcRCY69Z9QMDOIftuSyfdX%2FEmsnvzgTYHjpOZ8PFpPDdJCt2is98VSIs8zUV%2F8VOEwo%2FQp9mlrKZozo7GS19PmQbUMqL5xtR4Dl0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21cae7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg
172.67.145.206200 OK 72 kB URL GET HTTP/3 pinaycartel.biz/00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x763, components 3
Hash b26d3d8f341f021961f41ce554104e5c
cc0c0bbe060320ffc0d7552dc3c2d0a67f185142
75ee37900452ce9d48c2ee9a20b8d5ccd35f4095bd7f68cad5ac8fa419a61f39
GET /00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 71685
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOzxwnqIqkfnhB6ZttyLSLvvbXV9V3JBMK1rIyvEOy0Tc%2FT5AFi5Awh%2BjGp4AZ7lAEBWWJUegTC04v5G9rklMaFfpzz2%2BmUyJ0wYcmqtwscdXuV8GmciAHTmuWZrs0jk9V4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8e7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Naligo-si-anne-may-camera-pang-kasama.jpg
172.67.145.206200 OK 74 kB URL GET HTTP/3 pinaycartel.biz/00_img/Naligo-si-anne-may-camera-pang-kasama.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x812, components 3
Hash 5cd144601dd5de1b243b1d90e7b3d159
844d68538b1a12c18f13f24722b30ab1986fc5d8
7bb23f99bf86892bd61abd68338c01b2dd14bca5ce8b1831f118a67e5b1396a0
GET /00_img/Naligo-si-anne-may-camera-pang-kasama.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 73814
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:20 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r5ebsnQHeaV5erZHo1ospQCc42E1iCc2PZHxpBG%2B%2F%2FZkIRRpDliQiO0uol0Sil3eZShYt%2BWnK4zFcdYAOY%2FFHFs4evmDtO670VEJaxLTaljfzxVsfRLeJQTkKU3d9YJxZ2g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc867130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg
172.67.145.206200 OK 57 kB URL GET HTTP/3 pinaycartel.biz/00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.96.100", baseline, precision 8, 1000x1000, components 3
Hash a46b5503ea5c15cb2d24e30ca3ff728a
412ad029130a0fec7703821b6579dc12ea85e260
b9842282542a7a92f662e82e0d864cbdcf2a3a691a71649d023235fe90f8172c
GET /00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 57397
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Tue, 09 Jan 2024 01:10:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EWERRbQdMLG%2BoVPcjawqTYG0Yx1sVbSwt7cgquC%2Fw23VbRAjnMTLmzkfl3dKEPns9jaXKz9JjYslRBQvE4umxiZtR16BOr9VxsJWj9TJMG0sf6nRfNInA3fOJkVF5V%2FCzNo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc907130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg
172.67.145.206200 OK 42 kB URL GET HTTP/3 pinaycartel.biz/00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x780, components 3
Hash 35c82c0025c0a42b8f0a64f0f11f2bcc
71e9dac45275c46c7ddd4d2c24c4c6c0165711e0
cf64f23618ffbd4835299a4d064c7a8c48fa37c1fabc2d53892e7741f30f5a76
GET /00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 42384
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H8H9rUOmekTncvkdcCekJ0W6C1F1pz8dsF2Syqd8fiCPdw9nkGQbnnkWvLag59zUhQzrcVJu7maNlHRKYB5GwydZeSnUi6mXUC4WeJky%2FywzqYyGMRsagCVFJnDLZq%2FKk1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8c7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Yugyugan-sa-barong-barong.jpg
172.67.145.206200 OK 55 kB URL GET HTTP/3 pinaycartel.biz/00_img/Yugyugan-sa-barong-barong.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3
Hash 7f1c36b8f5db96c85a04109ace180717
aabf3a4a6e491ec7fb6dabe93a32fdd6a98367e9
d446697772b42cbf41d8ff690f187c267e3c6fc843244a72f577ec043a1f81b6
GET /00_img/Yugyugan-sa-barong-barong.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 55098
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:34 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4B6S1fZOtdFqpX0tS%2BvOODo2RMdr0eEUH0VZKGGk7RMuVtXj3sj4GrSgVd%2FNktDEkuQJwso40g1rWmD1KMyMA8vhwpXZwffc723mWsF5L5Ld5jzvZWqipE3miAxcSIX5%2BxA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc8b7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Oh-My-God-Kuya-Rhodel.jpg
172.67.145.206200 OK 78 kB URL GET HTTP/3 pinaycartel.biz/00_img/Oh-My-God-Kuya-Rhodel.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x721, components 3
Hash 8065271244ca717153c29933d7f44e09
071a0105120b85ad545b9793fe5e95fa29765c3d
9077ea37e608545286dcdd55bba21fb7ded4e7270040a1021dcf4067f3398971
GET /00_img/Oh-My-God-Kuya-Rhodel.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 77758
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LM1gU8ojZwU6bn%2FuFuH1%2FD4ngjtRFdCXN9WN2rhcYc7%2BDW2KOzS8A0L6RFdqHh6tIwSILi23WGcYJ9FTT5KRUEvGVLI0aljLOJ%2B7KUAYtLsAlyctiGC7OTiZbgMKvwUgKLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21ca67130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Sabik-sa-sex-si-traxex.jpg
172.67.145.206200 OK 116 kB URL GET HTTP/3 pinaycartel.biz/00_img/Sabik-sa-sex-si-traxex.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x695, components 3
Size 116 kB (115527 bytes)
Hash 222751ab7811f830ad80897c41247a04
0d6cdcb90d1f965b149e1443da6a7bd5c89bb88b
645beda42a1f6614b1fd7572eabd4768e24767aceb0a616e691359987802311a
GET /00_img/Sabik-sa-sex-si-traxex.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 115527
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcY4xMe9fYUknjsbjYgrhEiN4XS89S34p6NFobrSFlbOuKcjqzO9cCVv4eUs0TuJH4sPN1bQGZudgEbvw8AsHzgUSlcKVk69ti4VofWv1BgYuSIlBHxskqkeIHaaUrObgd4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc887130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg
172.67.145.206200 OK 60 kB URL GET HTTP/3 pinaycartel.biz/00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x746, components 3
Hash 078b2c270fe3d8fc80322696fe8b10a2
cb24d92e46b9a1c91247dd00774eeb6faef979d9
37d38905fd0a812f3b11866669005e170b963e62d6792c879e3e69ab0b926111
GET /00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 59905
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J72mscKkGLbLJQgaHBJygpxWdl7Trqd4qvqgddA8%2F%2FR%2B3NifXR5DdDUk8NseBkiEkjLq%2FkwJDbuPXAk%2B6qj%2FYNSWsEA8bzCLBQMfMlTPsz5BTGU0K7CDoRIJtcovS6I7wFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21ca97130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg
172.67.145.206200 OK 93 kB URL GET HTTP/3 pinaycartel.biz/00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1155x650, components 3
Hash f48b1e1c6763fc9bfa2c284ae709bb3d
1edd0e2d1068ece276c42ba1c82ccd84619d0404
937e51412fc2822c889da3a0811d7d12ccf971a15d5f70ea5c6486d5f75e7d7e
GET /00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 92785
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Fri, 15 Sep 2023 01:59:45 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c4vxq7zjJW%2BZy8BfclIX6i0uecf3A1TuucTcAlR3X7ORmsqslnPspcIdIivgjq%2FhJyofr3aEweSyGtWZ3X%2FRJW3giAH1CY8T%2F6B%2BBvhhWrC1WwQipGOFDPAIuzX2RSF49g0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21caa7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg
172.67.145.206200 OK 88 kB URL GET HTTP/3 pinaycartel.biz/00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x720, components 3
Hash b64e8e554e25103137cf5b617a478b74
8c7fea4c73bf37c57eddc8b8e70ed7d4da02f77b
875e1b2716e8654f0a1104c413c5db505210abdf99892e00c4fc069271ec9ed2
GET /00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 88009
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Tue, 24 Oct 2023 02:50:32 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WMDDh91ZoYTk6iDyuV5NODFPHuZp9%2FFjIH1RS%2Fud76kL%2BfSZcLvR9luwEujSF7BeYkPu6L01HZ2aAPEA1A2wFbNckVjdjq2yQqjEhg8S%2FOGPsSE0U%2BtWHgMP26LuryLW89k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21cab7130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_img/Si-kito-kung-umiyot-parang-kuneho.jpg
172.67.145.206200 OK 81 kB URL GET HTTP/3 pinaycartel.biz/00_img/Si-kito-kung-umiyot-parang-kuneho.jpg
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x718, components 3
Hash 1175cf010c0b7c8ae84e713a9b9bb3da
695649da671d78b72d971deb66554712ad7a402c
9f44a4ba6de9be779e63ceed8e4b3c6466c0839d6aa8a640a5ab4ac40e09da93
GET /00_img/Si-kito-kung-umiyot-parang-kuneho.jpg HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/jpeg
content-length: 81186
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 23:47:06 GMT
last-modified: Wed, 16 Aug 2023 14:00:32 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4sLWeYwRC9VCQuv%2FEHl4h9U5eEhwDv%2Bv9HRpBHXN8Q5Scb5vMXJCZfSSxlZM5OyndYM2Hz%2FPXYIPYZkOoBXpXqEzZLwnoCap8bN3hWFjC%2B57uIshdHQNFmU%2BEa3xmU8y3pw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a21ca87130-OSL
alt-svc: h3=":443"; ma=86400
POST impracticalsmell.com/YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W
88.85.68.219200 OK 0 B URL POST HTTP/2 impracticalsmell.com/YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W
IP 88.85.68.219:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectimpracticalsmell.com
FingerprintBA:D6:B8:6D:57:6A:08:FC:86:57:E5:A1:74:38:00:D4:0C:99:FE:DC
ValidityFri, 19 Jul 2024 03:48:49 GMT - Thu, 17 Oct 2024 03:48:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W HTTP/1.1
Host: impracticalsmell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 75
Origin: https://pinaycartel.biz
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:07 GMT
content-length: 0
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
104.17.25.14200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP 104.17.25.14:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA
ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 94544
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=roQkGVV4oODfpDEMZU70eIiiBVA51pzPMSHTw7Sl63wibWrfZOtDgrRUH1x7rpN%2BwARvKHbfR5j0fTvGxHPB596X1OeFY53tPpG1zCf%2F6xGkzIkOeMpDtRaDNsjlomQ51tmfeX3c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a5baac5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js
104.17.25.14200 OK 137 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js
IP 104.17.25.14:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA
ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (48459)
Size 137 kB (137405 bytes)
Hash d7fdaaab43bc993b85290c713fd2d289
46bf3d27b2cf38b0e999d3b0a7613011181c87f9
c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 527253
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8x8NPUyKlG9V0xk%2F1uq8DSDYA5nL1uSfvXcOo8R9aGhrXvWxV6OocUSZcprmBS%2FHhRuI%2BMoEPMphKsYMw8KbViOUbqkW%2FhD8LXyYe8vHCeLyssXMPcIXRiMQNTUsE1nMA%2FKb%2BUYt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a5cab35695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
104.17.25.14200 OK 591 B URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP 104.17.25.14:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA
ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File type JavaScript source, ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1032572
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XgSe1haJTs0Nzv2LAc0lpLpGtgcWMQew%2BLt3VmNjrXxvg6uSJfHqyyx%2FmS7sds4iXQDEeWh6WjCUaq%2BpaCOJB5bjmAjU5I26qG2VwWAkBNf1XSOvz9z%2F%2BtQyXsbB5V%2BbkxiRsBA6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a61af75695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js
104.17.25.14200 OK 1.6 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js
IP 104.17.25.14:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA
ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File type JavaScript source, ASCII text, with very long lines (4505)
Hash f2ecb2bd8a424c8e8cf507ce8bd933c2
3cbc08ca052ea25c3b0834b9291a3ca1e9122e26
4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099
GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 1571
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630ad3e5-623"
last-modified: Sun, 28 Aug 2022 02:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 521557
expires: Sun, 03 Aug 2025 23:47:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bFXA1d8iEOpVGW9TfBIvKSifUd3H5pQa8q6OPRstHh4Ow9y48E5e2nWy6%2BlM3RM6lemIzEcT6R1eQrFnHfS%2Ft%2BOfq8j9UJPxyeLZ0WUHJZf5xx7V1x6hlGPsHzzXD%2FPMhXRLMo%2Bu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b2c96a62b095695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.doodcdn.co/img/no_video_3.svg
104.26.6.74200 OK 2.8 kB URL GET HTTP/2 i.doodcdn.co/img/no_video_3.svg
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type SVG Scalable Vector Graphics image
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Wed, 11 Sep 2024 18:37:36 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 63288
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2LqvfCFcWXmlW81IRRcJOxBjVexBtNmZdgxiDLC%2FOws1f92WYHHEk7J7%2F6JfNKyWgM0bGW4IHb9nNrVSbKubfLq2NqereSqFpKnhek9vhKwMJYoSdt3bv3v21nU4Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a64ef2712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.doodcdn.co/ads/ad.js
104.26.6.74200 OK 18 B IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type ASCII text, with no line terminators
Hash 071c641b229d2bfadd243b8fa2a9c88d
4048ed3ad506f9bb9052c23283912d0cfea8bcc6
3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Tue, 12 Aug 2025 23:30:26 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 63287
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0mQqJpnB%2F7zsSVmwTqiQZELVWrnkWKmAP29mJPmTE8GKjpk7Tp9wmAZA9ucqYKZqgO4Z16eUoWheS6BGt%2BohP0FtmY7Os2fcCsgD6ArZ9p7nxe7OJW%2FTdFdV0hYzgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a65f01712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r11.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b9655dc1d84f6d40730654968058777
b9843885ab69f7788181090b55050a7ea79c078e
3947d4ef03cdda1c274c3b37e8aeecec986ea1eea8e5a88d02cfeadb0261da64
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3947D4EF03CDDA1C274C3B37E8AEECEC986EA1EEA8E5A88D02CFEADB0261DA64"
Last-Modified: Tue, 13 Aug 2024 02:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6609
Expires: Wed, 14 Aug 2024 01:37:16 GMT
Date: Tue, 13 Aug 2024 23:47:07 GMT
Connection: keep-alive
GET static.doodcdn.co/js/embed3.js
104.26.6.74200 OK 113 kB URL GET HTTP/2 static.doodcdn.co/js/embed3.js
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators
Size 113 kB (112790 bytes)
Hash 59698656a40921f7585e25a5bb347955
75de624e80155463ff8bb09090b712098eb74dd6
69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
content-length: 112790
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=112944
etag: "65bf48c8-1b930"
expires: Wed, 11 Sep 2024 18:37:36 GMT
last-modified: Sun, 04 Feb 2024 08:20:24 GMT
cf-cache-status: HIT
age: 63282
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IsSZi4elWKHcQicRlHm0i%2Fvf%2B%2BQDHKZym%2FVKOGqcxaRuVb2lYk4DPW71rPKdsafFO1sKaINhoqJ5%2BuP6I5BK%2BMKHsuVEPP0YZ3v%2Fe7XU61Ty8mhBCqmSh3xE7dzOlo5Ssx9g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a66f06712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r11.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b9655dc1d84f6d40730654968058777
b9843885ab69f7788181090b55050a7ea79c078e
3947d4ef03cdda1c274c3b37e8aeecec986ea1eea8e5a88d02cfeadb0261da64
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3947D4EF03CDDA1C274C3B37E8AEECEC986EA1EEA8E5A88D02CFEADB0261DA64"
Last-Modified: Tue, 13 Aug 2024 02:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6609
Expires: Wed, 14 Aug 2024 01:37:16 GMT
Date: Tue, 13 Aug 2024 23:47:07 GMT
Connection: keep-alive
GET img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg
104.26.6.74200 OK 30 kB URL GET HTTP/3 img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 402x715, components 3
Hash ab616705ae0ddedc63c27a70a9071627
759bd4223a0482f59f08339e1c143627fa9a04f8
ec4577c275b2d1deaef01399337349d65613d6e71ade62ee42d0c0b6125f67fe
GET /splash/1ng7gbzaumfpmp95.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/jpeg
content-length: 30225
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=30417
etag: "64d7f56a-76d1"
expires: Tue, 27 Aug 2024 16:28:37 GMT
last-modified: Sat, 12 Aug 2023 21:11:06 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AzOC3M5YPwAA11qdXaERIWqWK9SjS%2B5mGZMG42CV5S7%2FRzjwgj0ql98WgHQfFzVsSc%2BXuwCqq5loxAEazkrLGPSIfLz2inDeyN6Z5kV9pyX0tu2X56xonqD0e%2FBxxkq7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a66f0a712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pinaycartel.biz/00_settings/site_icon.png
172.67.145.206200 OK 7.7 kB URL GET HTTP/3 pinaycartel.biz/00_settings/site_icon.png
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 156x156, components 3
Hash a5b7f601a86c02677a6cdb6b31b2c830
53afaa1b004c2ca958f043b94c5d0cd762aa2e3a
12a429a9cfcbb031d13b3f64107392154b7f955b91e6d57800515e67d943b0af
GET /00_settings/site_icon.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/png
content-length: 7697
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 01:40:38 GMT
last-modified: Wed, 16 Aug 2023 14:01:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 79590
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ucQ9l9W7EwQ67OgMiKea3RkYp9RqmB0wYYWstEplmioabFhVl%2FBzGCt5vC0dKRY6Oo8W0x6KE6oP0JSxfh7oG8%2FJfVvWX%2FD8ZEtIXtmwpzqlCo2WgNIIvtavO%2FfhWbwXlW8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a74f297130-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/00_settings/site_icon.png
172.67.145.206200 OK 7.7 kB URL GET HTTP/3 pinaycartel.biz/00_settings/site_icon.png
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 156x156, components 3
Hash a5b7f601a86c02677a6cdb6b31b2c830
53afaa1b004c2ca958f043b94c5d0cd762aa2e3a
12a429a9cfcbb031d13b3f64107392154b7f955b91e6d57800515e67d943b0af
GET /00_settings/site_icon.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/png
content-length: 7697
cache-control: public, max-age=604800
expires: Tue, 20 Aug 2024 01:40:38 GMT
last-modified: Wed, 16 Aug 2023 14:01:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 79590
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yc9epoK3vc797O21KJ1ysJnzT8IzYsWUmU6k58xi3RR7IiD%2FEoF6t9EZsdWHcZ1brSAlR3azG%2BJbibidmhnJcFO%2FnNMrnEFVvI%2F3JYxFm8SUoNX8UbYnIEmlEPOG6cmCwrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a74f2a7130-OSL
alt-svc: h3=":443"; ma=86400
GET ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG
23.109.170.72200 OK 20 B URL GET HTTP/1.1 ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG
IP 23.109.170.72:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectey.dramshaplite.com
Fingerprint8E:78:37:5C:4A:84:BE:85:4B:73:C4:DD:71:FC:D8:D9:20:15:3F:4C
ValidityWed, 31 Jul 2024 06:15:51 GMT - Tue, 29 Oct 2024 06:15:50 GMT
File type gzip compressed data, from Unix
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rBoMTOsebwJmPbn9/MQmjG HTTP/1.1
Host: ey.dramshaplite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Aug 2024 23:47:08 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dood.sh
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Wed, 14-Aug-2024 23:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Wed, 14-Aug-2024 23:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET d3eub2e21dc6h0.cloudfront.net/?ebued=1004075
54.230.241.107200 OK 69 kB URL GET HTTP/2 d3eub2e21dc6h0.cloudfront.net/?ebued=1004075
IP 54.230.241.107:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (15945)
Hash 40686440ea5d3a4dd9d0cd8419cb6c11
2226b47f1479c0ab389afabbf9b96f7a680a1461
53e447ceb1bf314a322a9344c92239c37e58648fb09eef7de929d8083a756d6c
GET /?ebued=1004075 HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 69406
date: Tue, 13 Aug 2024 23:47:08 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DJzI67m-UXclrzqv9TKctxWvjfMxnJ6LSViHVpq20Reyhz566zVZTQ==
X-Firefox-Spdy: h2
GET i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
104.26.6.74200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Wed, 11 Sep 2024 17:33:45 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 61488
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w3Cy61%2FsGBoYcuFmZAAeW9BSSj6HPKKw6m8pKWK38mL%2B1glUzkGzK8j%2FQKI2qn70SopzfFg2f3%2FLOfpX01PjK2Hs8L59is%2FJwQlQhDqktUMvX0Ckl7vDNZYpR0KWbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ab6e125696-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.com/theme_2/img/loader.svg
172.67.208.102301 Moved Permanently 167 B URL GET HTTP/2 i.doodcdn.com/theme_2/img/loader.svg
IP 172.67.208.102:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.com
FingerprintC4:B2:FF:D7:AC:99:CA:06:A1:DB:D7:A2:C2:ED:27:F4:2C:E7:FB:3F
ValidityTue, 06 Aug 2024 09:13:15 GMT - Mon, 04 Nov 2024 09:13:14 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/html
content-length: 167
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Wed, 14 Aug 2024 00:47:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lZKofwBOUKWutk5TtpkVnHdD4VUz8GHzb69U5z22Tb6uqUh6hCX97wAo8kEZ6c0TEHpusfsHJ7N8p%2Bumw2Qxh9Mtr5U%2BVJ6Gs9lYVxyy4BAuTyVVleB0LLOOA5oFHgei"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96ab988db4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET dood.sh/e/oj3tl9itav1x
172.67.75.197200 OK 0 B IP 172.67.75.197:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdood.sh
Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E
ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery suspicious Suspicious - Anti-debugging code
HEAD /e/oj3tl9itav1x HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/e/oj3tl9itav1x
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Mon, 12 Aug 2024 23:47:08 GMT
set-cookie: lang=1; domain=.dood.sh; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BJU1XardqwQ22qp3kK9BWoVMvuBl3z7N0Vjumw%2BE3HY2S9hOZRGlw%2BzZmtc5QfTmN0OcjM9pMZrGefL1iX08C8KP%2FPHYwXTSjSkYwSmNWoyf%2F7f%2BnQiLGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96abbfe6b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg
104.26.6.74200 OK 30 kB URL GET HTTP/3 img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 402x715, components 3
Hash ab616705ae0ddedc63c27a70a9071627
759bd4223a0482f59f08339e1c143627fa9a04f8
ec4577c275b2d1deaef01399337349d65613d6e71ade62ee42d0c0b6125f67fe
GET /splash/1ng7gbzaumfpmp95.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: image/jpeg
content-length: 30225
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=30417
etag: "64d7f56a-76d1"
expires: Tue, 27 Aug 2024 17:09:56 GMT
last-modified: Sat, 12 Aug 2023 21:11:06 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s%2Fa0fssHdCJR5bLPzPFmMrvfcJ368QlNHlwbhDKaLb178CLnLukqywCZLX1QqsNvs5NXw9x053LFIeRJpFUWaULZcIfTnTjYP7PTAhGw%2F3pLbO%2BhLmbjHTzDXoSkV76w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96ab6e115696-OSL
alt-svc: h3=":443"; ma=86400
GET waisheph.com/tag.min.js
139.45.197.245200 OK 26 kB IP 139.45.197.245:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectwaisheph.com
FingerprintA9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81
ValidityTue, 18 Jun 2024 23:53:23 GMT - Mon, 16 Sep 2024 23:53:22 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 5cea47c4ab2963d3d93d9f1931e0de91
c71cb86da149cee1cab013723b08487aafc219ca
a74fa0f1f017157f11ca71db86567c7625c8f66fdb180020229f4fdd88cad42c
GET /tag.min.js HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/javascript; charset=utf-8
content-length: 26352
content-encoding: br
x-trace-id: df7a5a68f45ba7ff626497c083bb4dd9
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Tue, 13 Aug 2024 18:34:10 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET pinaycartel.biz/assets/bootstrap/js/bootstrap.min.js
172.67.145.206200 OK 94 kB URL GET HTTP/3 pinaycartel.biz/assets/bootstrap/js/bootstrap.min.js
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type JavaScript source, ASCII text, with very long lines (65299)
Hash 7d3cf48f5bba5db5258a2ff0f65ef00f
52abb563b246cbce1edf317417c6ff631059a2d6
0ff3cadb509482ccb23bb600c5c01eb721877a5cd7187d96c8b0af2135c29ca7
GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 14:50:09 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 205018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IK8DgFMH9MkN9a0jb62aQmQWEfNzzWvxOe8P15Pcdw8sWiEcPfCQWlUqNlqZnoeu9wNuXyRYTf9N9NQe5fW%2BEeu8rfEtxZB13VbvPD0V3xwu%2FV0ZT3pbuuGiq7Zx%2BaDuicQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0cc127130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET vrgvugostlyhewo.info/NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw
172.67.136.138204 No Content 0 B URL GET HTTP/2 vrgvugostlyhewo.info/NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw
IP 172.67.136.138:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectvrgvugostlyhewo.info
FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8
ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 13 Aug 2024 23:47:08 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OKL1J8XdfevZWaGXmjoSa86irsp2jQSenYDkRxs6tjDaEh2RtFUuHJAvcfm5uBKlObg9DF7%2B%2Fpj630or13Qsuwv784nIxJ4lAxtKeewzB7YAcl4tRtcoJjar2jZsUl8QY2tdc%2FKbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ac18b0712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg
108.157.214.55200 OK 1.2 kB URL GET HTTP/2 kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg
IP 108.157.214.55:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerAmazon
Subjectkologyrtyndwean.info
Fingerprint5E:8B:19:67:7F:06:13:2B:24:F1:D0:7F:4C:E4:AC:77:EA:7C:3D:99
ValiditySun, 28 Jul 2024 00:00:00 GMT - Tue, 26 Aug 2025 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3034), with no line terminators
Hash 8c692c8944872129f48567305fcea54a
55a32a9b37ce36df780b00cd43d6675ce983c3a1
27a5565499f0da77cda061ab66cf5fd35c2feeba827294dbf093193e3991b5a8
GET /aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg HTTP/1.1
Host: kologyrtyndwean.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1189
date: Tue, 13 Aug 2024 23:47:08 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 009f08cce389af684f28c36891875534.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: E48j2JZzd-OR3qeqmYZYKWD7WyjAD2xr-QN1PK0cXu9FWP1yxJohlQ==
X-Firefox-Spdy: h2
GET getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q
52.85.243.99200 OK 1.2 kB URL GET HTTP/2 getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q
IP 52.85.243.99:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerAmazon
Subjectgetrunkhomuto.info
Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E
ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3025), with no line terminators
Hash 1ead4d2bc4e597a26f9cc0e96bf2d819
cfb4940b6a1e1ec79a48a43baab691fea77af783
d1717761a77e41d1f77ed68d6fabbdb2ea618cd52ca9b1c9ce5d54da93a3d959
GET /WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1177
date: Tue, 13 Aug 2024 23:47:08 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 8mIRo4QXZTTH7OEHldsoAU4H3UutPSIktLeBokGQthskypaAkYyKzg==
X-Firefox-Spdy: h2
GET dood.sh/cdn-cgi/challenge-platform/scripts/jsd/main.js
172.67.75.197302 Found 0 B URL GET HTTP/3 dood.sh/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 172.67.75.197:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdood.sh
Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E
ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Tue, 13 Aug 2024 23:47:09 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZlJdj7fji7B095DV0uzz9CPm1q%2Fd9hBUc9yFRjoqueg7Y5iNEZICOcg6MVJ%2B1%2FYCr2FBeErBuJX%2F84ntfoRSIi0sSODNhKSP3GWaRRFvP23HgqlBL1KYXZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96ae694cb511-OSL
alt-svc: h3=":443"; ma=86400
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
108.177.14.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 108.177.14.84:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
FingerprintCF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD
ValidityTue, 30 Jul 2024 12:50:16 GMT - Tue, 22 Oct 2024 12:50:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:RmoXqr71Y4M07M-BXSX0sucuLx-ufw:D4MlYtKBbyMH5sT7; Expires=Thu, 13-Aug-2026 23:47:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-9ukQD11B13fpdIc0aTCz4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
108.177.14.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 108.177.14.84:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
FingerprintCF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD
ValidityTue, 30 Jul 2024 12:50:16 GMT - Tue, 22 Oct 2024 12:50:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:XEuMGdFVgFpA_6Fln4Vb9IPDu4UsQg:NhtpeRWryZoq-LRR; Expires=Thu, 13-Aug-2026 23:47:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-M8eRj84q27rZ0wXfE7rMkA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET i.doodcdn.co/theme_2/img/loader.svg
104.26.6.74200 OK 2.3 kB URL GET HTTP/3 i.doodcdn.co/theme_2/img/loader.svg
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type exported SGML document, ASCII text
Hash be00fc4a29d03016e78b28c9943e3f51
10f2025f5aa96706cc81e050eadfcaa9bcc55af5
eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Wed, 11 Sep 2024 17:29:06 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 63298
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t70a0h6MQEsHeMATdnTPCRPQy4cGMdsYDXZAka6G%2FgHi8unxdCpprV0BVRXbvXbSQqdU9aDC%2FgSH3xoXGcWVIziSFNx2WIp9O7EVPC6ildXLkseAmbyvvZUfNKsofQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96aea839b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET my.rtmark.net/gid.js?userId=0080b71cad5d4a3ee02fc798abd75474
139.45.195.8200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=0080b71cad5d4a3ee02fc798abd75474
IP 139.45.195.8:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E
ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
Hash adbc3690dd0db1ac5174c8693dd548cb
4d433aef000fe9deb5af869ecf0a684c5ae63cb7
8d2e1378df73327d4fdb24601eccb78d045065da0ec4097f468b4621db249427
GET /gid.js?userId=0080b71cad5d4a3ee02fc798abd75474 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dood.sh
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET w346ob.cloudatacdn.com/favicon.ico?i
141.94.143.82200 OK 15 kB URL GET HTTP/1.1 w346ob.cloudatacdn.com/favicon.ico?i
IP 141.94.143.82:443
Requested by moz-nullprincipal:{425d8264-c6d1-4943-96b2-37cabac0b47d}?https://dood.sh
Certificate IssuerSectigo Limited
Subject*.cloudatacdn.com
FingerprintD9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B
ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: w346ob.cloudatacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Aug 2024 23:47:09 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
POST blurbreimbursetrombone.com/solid.gif?z=1999414&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5
94.242.247.30200 OK 43 B URL POST HTTP/2 blurbreimbursetrombone.com/solid.gif?z=1999414&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5
IP 94.242.247.30:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A
ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1999414&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
UID=240813184798ecc249600b422382abb8b440; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET d3eub2e21dc6h0.cloudfront.net/WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA
54.230.241.107200 OK 265 B URL GET HTTP/2 d3eub2e21dc6h0.cloudfront.net/WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA
IP 54.230.241.107:443
Requested by https://getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (308), with no line terminators
Hash 3626868a03c72c37ead34627d6f1ea74
662cacb88b7f12749577de7c4cbd8eb958b84357
76c2139b95bb6ea2482214173de02efd7155ce7c7efc543cae10ee77f0280388
GET /WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://getrunkhomuto.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 265
date: Tue, 13 Aug 2024 23:47:09 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hMkjf7WQ3FOSZth5XAr2V85xRCRB6FAj_xQiCc5_8ZXfyNvQPp5DQA==
X-Firefox-Spdy: h2
GET d3eub2e21dc6h0.cloudfront.net/RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/
54.230.241.107200 OK 592 B URL GET HTTP/2 d3eub2e21dc6h0.cloudfront.net/RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/
IP 54.230.241.107:443
Requested by https://kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (859), with no line terminators
Hash b9c9646d94a5c611da699cc85559b16a
f39c9ab70e5f845dc3dcd5c64f6d49ab15e5dcf4
5684f700a873bc557b39d8c7bb349a3a9037c908b15f899f9cc2c98c4cd1d91f
GET /RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/ HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kologyrtyndwean.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 592
date: Tue, 13 Aug 2024 23:47:09 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WqyNXPLjOeJdb0W5636BDjU03XdFUrsxpPVVM2J56eS94YDM7fVa8g==
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD
108.177.14.84302 Found 424 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD
IP 108.177.14.84:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type HTML document, ASCII text, with very long lines (391)
Hash 11c495c77042643273c27c02e192b2e2
0f17e1a6de3ecdd7f87fc7ca7713f07f672d9392
b0aeda8c8431a3cb7a87510f4427bc7b0018c71b40b414a18464e05993fe84c8
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:Xdv500pN4w2TOm03MECaUgIjw28gVw:M79sX1SqROa2MzFf;Path=/;Expires=Thu, 13-Aug-2026 23:47:09 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-DTZ2OYKAlnyKqmyugOhVRg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 424
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET dood.sh/cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js?
172.67.75.197200 OK 106 kB URL GET HTTP/3 dood.sh/cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js?
IP 172.67.75.197:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdood.sh
Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E
ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
File type JavaScript source, ASCII text, with very long lines (7793), with no line terminators
Size 106 kB (106442 bytes)
Hash 7452252b153c44dfd97458874a1de9f8
daf04e24dbfe9dd3d79775c39a9cddc2cfbcae69
fcc74055cfe894d1f0243be84cd995ba8658b845892c8ec01f55807560beb409
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js? HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bSm9g7ikw2TJnl58jZn3OcB9%2FnfJvr7q5PCsWrMW4IOUieChLEa0NRX9xitByvWWUTNYavU1ZBC1yYA19YPOUqLKKj9cCPGlwyIxEQwi1pZfB12xREvJ6gM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96af99dab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pogothere.xyz/
188.114.97.1200 OK 29 B IP 188.114.97.1:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpogothere.xyz
Fingerprint07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A
ValidityTue, 23 Jul 2024 05:27:01 GMT - Mon, 21 Oct 2024 05:27:00 GMT
File type ASCII text, with no line terminators
Hash 2e4d500d5eeef786f42e40e66a53ffd3
765eb5c0aa2fb7eafedb3d176233fc504993486b
f17ec71f37e7a21b3978f424f6a9ec904fd8cf5a2d169b3cdf2e8f4f6a15c134
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/plain
set-cookie: csu=2038897297894246@1@1723592829; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1yOjmf36Yqhm1fGu9wFwtfv2R443Nx%2FhPLPQTT5wnxZ%2BJxC%2F3X%2Fcr9nbyTWyOqDEUxz9vqq3ohBy4cXrt78XhIlvO10TInwwEswwkr89WR2L961HKY1Ad%2FFvNHjiq1h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96b06b947130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vrgvugostlyhewo.info/popunder.gif
172.67.136.138 58 B URL GET vrgvugostlyhewo.info/popunder.gif
IP 172.67.136.138:0
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectvrgvugostlyhewo.info
FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8
ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
File type GIF image data, version 89a, 1 x 1
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:10 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 79078
last-modified: Tue, 13 Aug 2024 01:49:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5QoMFnJ2A0sjT2RYHSx1s%2BDMfPPOqbldmzXDApXHOCmWTIkoH5r1z3J2fiAAdDIBcMm%2FUJ0Xc3USpwtikfaGbA9UC%2BIJnmhd4jtuRDjNaORVelp5xK8hVOffjaGNHuM0%2BhtpXeJSLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96b50be35687-OSL
alt-svc: h3=":443"; ma=86400
r11.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 77619f0113a62e8c4c44f195901b385c
1e1a5e3768ca683e66667aa14efa7042df57ee2f
520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3965
Expires: Wed, 14 Aug 2024 00:53:15 GMT
Date: Tue, 13 Aug 2024 23:47:10 GMT
Connection: keep-alive
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0
108.177.14.84403 Forbidden 1.3 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0
IP 108.177.14.84:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type gzip compressed data, max compression
Hash 4a033d865af949346e8dfce339281436
57e472f1420039da71b7996a22ad28edbf157bdf
6fbb7cb4183c018f00db27cee3637e6630461074a142f7558dd5d63457516913
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-1GySiR7aoGTjrePe29HP1w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.zDlak_ZpRIU.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
r11.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 77619f0113a62e8c4c44f195901b385c
1e1a5e3768ca683e66667aa14efa7042df57ee2f
520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3965
Expires: Wed, 14 Aug 2024 00:53:15 GMT
Date: Tue, 13 Aug 2024 23:47:10 GMT
Connection: keep-alive
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0
108.177.14.84403 Forbidden 9.0 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0
IP 108.177.14.84:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type gzip compressed data, max compression
Hash 567e79afd4b1e550503567bf8646eb2d
4f4b64eb2d540e54676d897760df082a771d6c12
39904d26e65ee9ebea9023b0ade5530d4cdaa7dcfa631f7f54225e5a40f6755c
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1961058473%3A1723592829581174&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-cyCMtW_QzHJieDzHqpFXQQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.zDlak_ZpRIU.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET vrgvugostlyhewo.info/N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo
172.67.136.138204 No Content 0 B URL GET HTTP/3 vrgvugostlyhewo.info/N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo
IP 172.67.136.138:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectvrgvugostlyhewo.info
FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8
ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 13 Aug 2024 23:47:10 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wip6ooWwOna2OxYqGwKoiIrueTFEme1mgH2h2XUtKq8QhYwo1RS0NJFbaZ%2BZ4fsaNaKztLr5gdWqD5ifT0nXuv3vibDeFPG6qVu7fUtmmM6aL0z1IUTi64v9CXbH3IgfB7z24wlKsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96b53bf25687-OSL
alt-svc: h3=":443"; ma=86400
GET waisheph.com/?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.887.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=480&wiw=736&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=736&wfc=1&pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x&drf=https%3A%2F%2Fpinaycartel.biz%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.887.0&navlng=en-US&pnt=0&pnrc=0&bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b&wasm=1&userId=0080b71cad5d4a3ee02fc798abd75474&m=link
139.45.197.245200 OK 10 kB URL GET HTTP/2 waisheph.com/?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.887.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=480&wiw=736&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=736&wfc=1&pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x&drf=https%3A%2F%2Fpinaycartel.biz%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.887.0&navlng=en-US&pnt=0&pnrc=0&bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b&wasm=1&userId=0080b71cad5d4a3ee02fc798abd75474&m=link
IP 139.45.197.245:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectwaisheph.com
FingerprintA9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81
ValidityTue, 18 Jun 2024 23:53:23 GMT - Mon, 16 Sep 2024 23:53:22 GMT
File type gzip compressed data, max speed, from Unix
Hash ea0cc916a2a5cf686b1226838ad3b09f
7542cd77b3d8968acfc15a2ab93c24879e2d9902
72a63bfacdfc2bb2d9d2917636e5c8e995f9497952c097ca9c0d82248f5a3426
GET /?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.887.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=480&wiw=736&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=736&wfc=1&pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x&drf=https%3A%2F%2Fpinaycartel.biz%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.887.0&navlng=en-US&pnt=0&pnrc=0&bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b&wasm=1&userId=0080b71cad5d4a3ee02fc798abd75474&m=link HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; oaidts=1723592828
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: application/json
x-trace-id: feecee50b9417c9b7202ad21dc54818e
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:09 GMT; path=/; secure; SameSite=None
oaidts=1723592829; expires=Wed, 13 Aug 2025 23:47:09 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 20 Aug 2024 23:47:09 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET pinaycartel.biz/assets/fonts/fontawesome-all.min.css
172.67.145.206200 OK 57 kB URL GET HTTP/3 pinaycartel.biz/assets/fonts/fontawesome-all.min.css
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type ASCII text, with very long lines (56940)
Hash e0076d9b1984448e1b530d5b1a419c7a
95fb81d6859b2c4693e334769f87afe76709e5ac
19bc4712bca32db280000f294e2d0c1dc178063a9dd4278fc22d30a39c068846
GET /assets/fonts/fontawesome-all.min.css HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 22:34:37 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 90749
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xO1m5gpTw9Ado0Mxx3pLgOd8HMceyHShVMsiTVAukDgbZz1rBgQfyNLCLLG4ZJqYHYs4VAwPdvJRw%2FEvNCDvG0a2ZV6rGCv%2BkC9YqwwbMKjScuUDR8OIRqYirlv9HbBmwjg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0bc0b7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET impracticalsmell.com/cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl
88.85.68.219200 OK 42 kB URL GET HTTP/2 impracticalsmell.com/cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl
IP 88.85.68.219:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectimpracticalsmell.com
FingerprintBA:D6:B8:6D:57:6A:08:FC:86:57:E5:A1:74:38:00:D4:0C:99:FE:DC
ValidityFri, 19 Jul 2024 03:48:49 GMT - Thu, 17 Oct 2024 03:48:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl HTTP/1.1
Host: impracticalsmell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 13 Aug 2024 23:47:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE3MjM1NzE3MzQsInpvbmVzIjp7IjQ0ODA3ODIiOls0NDgwNzgyLDEsMTcyMzU4Mjc2MV0sIjQ4MDA0MjUiOls0ODAwNDI1LDEsMTcyMzUyOTEyN10sIjQ4NTgzMjMiOls0ODU4MzIzLDEsMTcyMzU4MTEyN10sIjQ4NjU3NjkiOls0ODY1NzY5LDEsMTcyMzU5MTg0MV0sIjUxOTk0NTYiOls1MTk5NDU2LDEsMTcyMzU3Nzc4OF0sIjUzNjU1MzAiOls1MzY1NTMwLDEsMTcyMzU5MjgyN10sIjU0ODY1MzIiOls1NDg2NTMyLDIsMTcyMzU4MzY1OF0sIjc0NzQ4OSI6Wzc0NzQ4OSwxLDE3MjM1MjM3MDFdfX0=; max-age=1755128827; path=/
uniqCookie=573b30f66ba8cb312cf0b75da52cfc0c; max-age=1726184827; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
GET vrgvugostlyhewo.info/TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0
172.67.136.138204 No Content 0 B URL GET HTTP/2 vrgvugostlyhewo.info/TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0
IP 172.67.136.138:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectvrgvugostlyhewo.info
FingerprintE1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8
ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0 HTTP/1.1
Host: vrgvugostlyhewo.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 13 Aug 2024 23:47:08 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kMnZik3rTxgS3cEoWF2QGxSR%2FDsy75sIt%2BxY0zWhbIuZaD7n0OMGHuvPZA3gL7zlg09N7PSS4sk362s0LSWrA9yBJBCtnpp0AP979iinmI3lTvLPTN3gOmwqN%2B58EOu9THUKrG94uQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ac18b1712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.famous-mall.pro/ecc874/877b0c85adf8.js
45.133.44.1200 OK 70 kB URL GET HTTP/2 www.famous-mall.pro/ecc874/877b0c85adf8.js
IP 45.133.44.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectwww.famous-mall.pro
Fingerprint2B:D4:C2:E5:FF:7A:8F:EC:AF:5B:DB:F9:A6:5F:65:5D:4A:09:01:9B
ValidityMon, 12 Aug 2024 08:07:18 GMT - Sun, 10 Nov 2024 08:07:17 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 32ed3efcd6f57ee9c34e01527ce683c9
c26b86888ed140a6afb26db710a20a3db668a5ef
0c7ef00938be5d846c17cc2551fed8a7616f5695c71f555b27d2db30b0fc22d3
GET /ecc874/877b0c85adf8.js HTTP/1.1
Host: www.famous-mall.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://pinaycartel.biz
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 15 Aug 2024 23:47:08 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
GET pinaycartel.biz/assets/css/styles.min.css
172.67.145.206200 OK 31 kB URL GET HTTP/3 pinaycartel.biz/assets/css/styles.min.css
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type ASCII text, with very long lines (31075), with no line terminators
Hash 49d6b1af2ac2f6e6a4baddf4e9c8471d
15567131b492beea86861e302099c4e3fff22455
8215ab542b9d13edff071c3414cd244bb3b76f6cd7b9d55b3427fe01643325eb
GET /assets/css/styles.min.css HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Mon, 19 Aug 2024 22:34:37 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 90749
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RtU1wZkaI5BZoVUZ%2BVTCA8NrbzI10d3MIK4S06GrSBYnjU7UrjegY93Jy1TVBkBUgelli%2FXQVDUNGjPF3PNJXnAOKNwwCutjGbNfRKfTP%2BSHwdYkP8CPVfO%2FCsU56dEC4U4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0bc0c7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ
108.177.14.84302 Found 0 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ
IP 108.177.14.84:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:-zm2h0-GmWlko54utCyXS7h-smPWhQ:AumpGKs5-b0VVJKM;Path=/;Expires=Thu, 13-Aug-2026 23:47:09 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Aug 2024 23:47:09 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-165510729%3A1723592829581342&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-uLq06S8dxCKIhJw5pgFW7g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 422
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET blurbreimbursetrombone.com/check.html
94.242.247.30200 OK 916 B URL GET HTTP/2 blurbreimbursetrombone.com/check.html
IP 94.242.247.30:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A
ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File type HTML document, ASCII text, with very long lines (956), with no line terminators
Hash 95b931540a96c4d45344472f87f81036
7f1c2eae3c09448aa6f8d85f66484439623c520a
2ecb5d3152a38f9abb6f14dac557682756b243462770f69a14c4c2b8cf0726d1
GET /check.html HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/html; charset=utf-8
last-modified: Tue, 30 Jul 2024 10:01:33 GMT
vary: Accept-Encoding
etag: W/"66a8b9fd-394"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET blurbreimbursetrombone.com/get/1999414?zoneid=1999414&jp=_cl1pw4dlzhokn1y848holt&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5&uf=0
94.242.247.30200 OK 3.2 kB URL GET HTTP/2 blurbreimbursetrombone.com/get/1999414?zoneid=1999414&jp=_cl1pw4dlzhokn1y848holt&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5&uf=0
IP 94.242.247.30:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A
ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File type ASCII text, with very long lines (3598), with no line terminators
Hash 9936cf23b7d174cf86e7346af7b6ccf9
d0d016a4788d99ba54f3ee78f86f3e196636048b
4778c0066e3154ea87a807680e8d725bd67ad7ccdf923f92651b1f5991ecf2a9
GET /get/1999414?zoneid=1999414&jp=_cl1pw4dlzhokn1y848holt&nojs=0&abvar=0&febuild=1.0.312&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&ix=0&x=801&y=801&md=0&psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4&afid=394432356381184&eclog=0&seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov&snc=0&ssc=1&im=1&cs=5&uf=0 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
UID=240813184709cf6a2c8cdf43479dda4e558e; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
POST dood.sh/cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d
172.67.75.197200 OK 0 B URL POST HTTP/3 dood.sh/cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d
IP 172.67.75.197:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdood.sh
Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E
ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12154
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/e/oj3tl9itav1x
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.dood.sh; HttpOnly; Secure; SameSite=None
cf_clearance=FqdrNgungyVXqQ22GMEbcCoYShjj7FcHBjUv21NoSgc-1723592829-1.0.1.1-ge09TEvrbQT.B1dHY0FGlz5P7OiG15_ymSu17qty49sFX5jC6n9xWWWc.vs8DpSd_WM8NYHlHPu3MVe0GfB23g; Path=/; Expires=Wed, 13-Aug-25 23:47:09 GMT; Domain=.dood.sh; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l1WE3rmDw5EYxnTNgBOc%2BSIhtLy0lQWvgCocK%2BzZ0pJhOoyIhHwRzVqCAxzkM01irJKjLDo4ftsGbr4dqn1FGe2zdK0tFcSStmFnXZKi%2FaqZixYVuwSa%2FBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96b17ac3b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.famous-mall.pro/ecc874/877b0c85adf8.js
45.133.44.1200 OK 70 kB URL GET HTTP/2 www.famous-mall.pro/ecc874/877b0c85adf8.js
IP 45.133.44.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectwww.famous-mall.pro
Fingerprint2B:D4:C2:E5:FF:7A:8F:EC:AF:5B:DB:F9:A6:5F:65:5D:4A:09:01:9B
ValidityMon, 12 Aug 2024 08:07:18 GMT - Sun, 10 Nov 2024 08:07:17 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 32ed3efcd6f57ee9c34e01527ce683c9
c26b86888ed140a6afb26db710a20a3db668a5ef
0c7ef00938be5d846c17cc2551fed8a7616f5695c71f555b27d2db30b0fc22d3
GET /ecc874/877b0c85adf8.js HTTP/1.1
Host: www.famous-mall.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 15 Aug 2024 23:47:08 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
GET i.doodcdn.co/img/logo-s.png
104.26.6.74200 OK 1.9 kB URL GET HTTP/3 i.doodcdn.co/img/logo-s.png
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type RIFF (little-endian) data, Web/P image
Hash 8211fb3cc137d3e1c1e399b86476f951
136d8ef228959aa0cee12e5ed463b6e6a4fcf720
2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Wed, 11 Sep 2024 16:52:22 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 63282
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dEDyNq1dfgiJ51UyUfM7f3KQNhmKLVrGqLlGg7NPXkCsxd0HN4qIpG3QnqYNBBj1xPz9dagG5t4MF8o6IsbNZviMIDkPVaaa%2FOw5xurWXSAXvX2AhgY%2BSXW7q3i%2FHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96af5891b50b-OSL
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/assets/bootstrap/css/bootstrap.min.css
172.67.145.206200 OK 195 kB URL GET HTTP/3 pinaycartel.biz/assets/bootstrap/css/bootstrap.min.css
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
Size 195 kB (194856 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Sat, 17 Aug 2024 22:07:20 GMT
last-modified: Wed, 16 Aug 2023 14:00:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 265187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJV84skX7Ylty7%2BOcfK1tnWZY4fPawi4x7FoGxCDe9eWihc2cKJADal2yNpIC%2B7MTew6zSiV%2FIe6icRrOSuOaqO9i5lf33%2Fcnl3wEH8U1TAlvPuVcEenEislIXlDkIldR6E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a0bc0a7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET dood.sh/pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2
172.67.75.197200 OK 103 B URL GET HTTP/3 dood.sh/pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2
IP 172.67.75.197:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdood.sh
Fingerprint90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E
ValiditySat, 22 Jun 2024 00:03:33 GMT - Fri, 20 Sep 2024 00:03:32 GMT
File type ASCII text, with no line terminators
Hash 3a1bd5b06263fb791afaf53e88b35383
c79ad1b9ff631eb77a8b82ba192a896862ba83cc
9260c6627e549e88bc88398ce76ccc7134422f7f97fbbc986e3b1ad42556e951
GET /pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2 HTTP/1.1
Host: dood.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/e/oj3tl9itav1x
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BD5Kqr%2B6pqBRNft3oV2GYDDWLYiR%2FbGgBNyXe%2BtiJP5BPIPHB9uwiYMfxLLQInBthb596%2Bftk%2FCFPnsnA764lHr38OVPqoP1ljxM1%2Fr1hnlyCpqu7jX3eQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96ab1f95b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pinaycartel.biz/watch.php?vid=oj3tl9itav1x
172.67.145.206200 OK 26 kB URL User Request GET HTTP/2 pinaycartel.biz/watch.php?vid=oj3tl9itav1x
IP 172.67.145.206:443
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.php?vid=oj3tl9itav1x HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pex9Gygy8LR93xk8NpevuWFo36BfTzZJppkDnB31YJ1nU2GHueGlMY%2FGpX4d1iu3ZbYu82M8xlur2MfnePK8OCCXZCa2mibHpJh%2FdIsjNjKM9oVde897NwKQ9DJiTTKjWvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c969d49d956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pinaycartel.biz/3px-tile.png
172.67.145.206200 OK 2.7 kB URL GET HTTP/3 pinaycartel.biz/3px-tile.png
IP 172.67.145.206:443
Requested by https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpinaycartel.biz
Fingerprint36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E
ValiditySun, 30 Jun 2024 08:00:50 GMT - Sat, 28 Sep 2024 08:00:49 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Hash 19eebdb2d63fbe199c75bfdd5b17ce5b
9e0edb051b8944b0d1cf2e53f4e0a27b08f23570
db0a16ab6426de5cddeae4a4ee1fd3581482497fb94a658e5fdd5e443e570879
GET /3px-tile.png HTTP/1.1
Host: pinaycartel.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: image/png
content-length: 2650
cache-control: public, max-age=604800
expires: Sat, 17 Aug 2024 22:07:21 GMT
last-modified: Wed, 16 Aug 2023 14:00:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 265186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VWdQUPcXiQwB9AnSxtLhvJ8mqGvzORRX9HS51s5oGli5vVe8abfmo%2FGPBvY834Pd49yhHTig8rJHvkRgv1ccOmiT73ttLbDydzOjtPVKVE2Ks%2Ffsri036ugvxSCUdPaQJ0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96a1fc837130-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/get_slides/420/1ng7gbzaumfpmp95.jpg
104.26.6.74200 OK 3.2 kB URL GET HTTP/3 i.doodcdn.co/get_slides/420/1ng7gbzaumfpmp95.jpg
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File type ASCII text, with very long lines (3268), with no line terminators
Hash 9eeb425e67b1ddc0d96c403d1e3ff92e
13d9b5bd349fe7d48a6cc6e7e90622a0505f8ded
f7753c421d497163a7f719b401d4b0a79ae41ed40c94315943a1255757991f46
GET /get_slides/420/1ng7gbzaumfpmp95.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Tue, 13 Aug 2024 16:08:47 GMT
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a5Y0wNp7WyxRLQisBY2ocxCRRZJSbweQAiQ2iT%2FopOSNV9Sb%2F1MYPIyRDrgu1D4wSXCeBCZA6fwuWbA99lB7tp%2BgEJG1d2OcTkJOGjVHwiY2%2FmGyhGUpe0hiVC%2F0ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96af58055696-OSL
alt-svc: h3=":443"; ma=86400
GET i.doodcdn.co/css/embed.css
104.26.6.74200 OK 80 kB URL GET HTTP/2 i.doodcdn.co/css/embed.css
IP 104.26.6.74:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectdoodcdn.co
Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75
ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: W/"61d3187c-13812"
expires: Thu, 12 Sep 2024 03:26:41 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 63286
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oz%2FYP66UkxMsGBl270HqXSpKIVkouuv9UcdgaHRCOAK%2BGknBUT%2F6PSFcSrbb84SxFOZOW9RLWIw8yw1REf9%2FK5tnBn%2FlJJXL8gTpiXWiOjorEgiD%2FgojzzRuxHfrgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b2c96a64ef1712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js
94.242.247.30200 OK 131 kB URL GET HTTP/2 blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js
IP 94.242.247.30:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A
ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File type JavaScript source, ASCII text, with very long lines (65045)
Size 131 kB (131422 bytes)
Hash f0da46a2e3d755aa201ea05b6109468e
3e29ce6764ad77f577c9b1c56e173d3fa627785e
d4b724d774c6bb0fc5d48d55115107a66c6b2ed11b9c8cdd797de37b99a29e79
GET /aas/r45d/vki/1999414/126a6d05.js HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 13 Aug 2024 12:57:50 GMT
vary: Accept-Encoding
etag: W/"66bb584e-20204"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET waisheph.com/5/6936539/?oo=1&aab=1
139.45.197.245200 OK 4.2 kB URL GET HTTP/2 waisheph.com/5/6936539/?oo=1&aab=1
IP 139.45.197.245:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerLet's Encrypt
Subjectwaisheph.com
FingerprintA9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81
ValidityTue, 18 Jun 2024 23:53:23 GMT - Mon, 16 Sep 2024 23:53:22 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4178), with no line terminators
Hash f2e94c883cf186e77409ff3cf192096b
0584786ffe9811364a69fbe99e641593adb9ab62
88f6271253bd72122a15032e7455857d501e36ba47068fedba0b4aea61bbf76c
GET /5/6936539/?oo=1&aab=1 HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Referer: https://dood.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 13 Aug 2024 23:47:08 GMT
content-type: application/json
x-trace-id: 77cd8860d56b1a0e1909ad6e9b548e9f
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:08 GMT; path=/; secure; SameSite=None
oaidts=1723592828; expires=Wed, 13 Aug 2025 23:47:08 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET pogothere.xyz/asd100.bin
188.114.97.1200 OK 102 kB IP 188.114.97.1:443
Requested by https://dood.sh/e/oj3tl9itav1x
Certificate IssuerGoogle Trust Services
Subjectpogothere.xyz
Fingerprint07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A
ValidityTue, 23 Jul 2024 05:27:01 GMT - Mon, 21 Oct 2024 05:27:00 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.sh/
Origin: https://dood.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 13 Aug 2024 23:47:09 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.sh
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 6804
last-modified: Tue, 13 Aug 2024 21:53:45 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b2E1yeWazjQ%2Ftz4EbGwiOOUdwItX0TI4AJJKb4pgvKns5JHj6Cq7zO2AMSicE3dQpa1uYd2UE5Au7LuQLVgrxHqHDDeVJunI0AkUw%2FiC8p0ugEdHFQkVbg%2BsDyydwxRy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b2c96b06b9b7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2