{"report_id":"bc14de38-ee89-40e1-a88c-5d4ddc0aaab7","version":6,"status":"done","tags":["suspicious"],"date":"2024-08-13T23:47:35Z","url":{"schema":"http","addr":"pinaycartel.biz/watch.php?vid=oj3tl9itav1x","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"pinaycartel.biz/watch.php?vid=oj3tl9itav1x","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"title":"Hindi pinalampas kahit bagong langas"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T00:28:30Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"waisheph.com","ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"","domain_rank":74994,"first_seen":"","last_seen":"","alert_count":0,"request_count":3,"received_data":43928,"sent_data":2000,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.doodcdn.co","ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":2,"received_data":62058,"sent_data":886,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vrgvugostlyhewo.info","ip":{"addr":"172.67.136.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":4,"received_data":2456,"sent_data":2151,"comment":"","tags":null,"fingerprints":null},{"fqdn":"getrunkhomuto.info","ip":{"addr":"52.85.243.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":1818,"sent_data":929,"comment":"","tags":null,"fingerprints":null},{"fqdn":"w346ob.cloudatacdn.com","ip":{"addr":"141.94.143.82","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":15690,"sent_data":396,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.famous-mall.pro","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":2,"received_data":141592,"sent_data":891,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":887,"sent_data":327,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.doodcdn.co","ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":113656,"sent_data":396,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":4,"received_data":3548,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d3eub2e21dc6h0.cloudfront.net","ip":{"addr":"54.230.241.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":3,"received_data":71480,"sent_data":1756,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.doodcdn.com","ip":{"addr":"172.67.208.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":56705,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":844,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":81,"first_seen":"","last_seen":"","alert_count":0,"request_count":6,"received_data":23559,"sent_data":3639,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"","domain_rank":9054,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":736,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"impracticalsmell.com","ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":2,"received_data":43512,"sent_data":1057,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"","domain_rank":235,"first_seen":"","last_seen":"","alert_count":0,"request_count":4,"received_data":171597,"sent_data":1727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ey.dramshaplite.com","ip":{"addr":"23.109.170.72","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":1,"request_count":1,"received_data":1451,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dood.sh","ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":163516,"first_seen":"","last_seen":"","alert_count":1,"request_count":5,"received_data":110053,"sent_data":2283,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kologyrtyndwean.info","ip":{"addr":"108.157.214.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":1831,"sent_data":946,"comment":"","tags":null,"fingerprints":null},{"fqdn":"blurbreimbursetrombone.com","ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":4,"received_data":138909,"sent_data":3003,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pogothere.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":2,"received_data":104072,"sent_data":814,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pinaycartel.biz","ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":29,"received_data":2441374,"sent_data":14351,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.doodcdn.co","ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":7,"received_data":119159,"sent_data":3031,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-13","alert":"Sinkholed","trigger":"dramshaplite.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c8de09d9920b85384e5e8a3bc9361b8","sha1":"079571a7e1290fba6a1fc2b6a6161af12a943ce3","sha256":"cfed7e6f459f56bf32fcde5f30f679346d9b04e06dfe5abf7169836a055afa4c","sha512":"649c9cb25d7b5b9690bb245fe39939c4b31e3c47a38e2e9e2c7a43b53e8b87af5786305bcd5cdf5c8a83012b83486655d52c2023898324d86ac74672290ce6bd","ssdeep":"192:tsUXsVvKoSUrTpr4uT9o2gJtGcQGh/9uzmZSkennyN4AiA3Vo:tsmsVvN3T5ZpotGHGh/9uzmZrennD2i","tlshash":"770264a13ed08768c3e2165bb73fd654f6a28eec29d6cc08e14a6908f741d87d6716b0","size":8910,"data":"","first_seen":"2024-08-19T13:24:25.13681Z","last_seen":"2024-08-19T13:24:25.13681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4c1f84a22b8d001e682302a38e88152","sha1":"7990ed8ff72e70a4da21573385662d902d2b8555","sha256":"c1852b7771acd27f5505ee9a1f55d5569ae528a48e8e8b36186ff06630fab418","sha512":"fea9f1d0b7256b344e219952b45aa2c301d8cdd16465958263616a951742fe56e599e854489583e5a25c6456f1d78f81905721c66a274318fcbf8c4316cd818a","ssdeep":"","tlshash":"11b0223c3002802288abc8afb828c8003c28000cb032f30bfa2f80f20c30ee2208b028","size":89,"data":"","first_seen":"2023-03-10T13:33:58Z","last_seen":"2026-03-26T00:46:16.5102Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg","fqdn":"kologyrtyndwean.info","domain":"kologyrtyndwean.info","tld":"info"},"ip":{"addr":"108.157.214.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"14b8e5b41bd2ded39d742c929c816111","sha1":"1cf83653071f29e0103228187180dfa86b995886","sha256":"6368c607da1ed07142d9f8260b057f06064ef21d22bde69e0e3ea03645367440","sha512":"7d3b7d195e84c9e5f5d1a99a3f83cde815bafdafa678cfdaa0414b7ec6188559ff20dc2e4bb39dfeb30f8fb18d1fdfbc8a55310dedcb33ac6c6de590580adcc8","ssdeep":"","tlshash":"3651ee9d34f3a08182b66025453bb89afa385aa0834ccb18873d97bcbd715ed6357f4c","size":2989,"data":"","first_seen":"2024-08-19T13:24:25.138711Z","last_seen":"2024-08-19T13:24:25.138711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/watch.php?vid=oj3tl9itav1x","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75bbc90dde4dd773e949d15c6b83d301","sha1":"729f1af93e19057860324781b137a4363345982f","sha256":"0a3dbeff24d2ae4f9540600bb53e4d782855d1a9fb6880d67620dcefdd152633","sha512":"21a2ea914e527f495e3ff3a9a5822b383364fa34938e16169558036a26145689c6eebe5888782a599545056aad53cd66971d72f0e2c79eb79f9cd700d45064d6","ssdeep":"","tlshash":"37e0e79c040d3571a1c5003f6628c726342010047906f434ec9de4023727fff0c1dcd5","size":305,"data":"","first_seen":"2024-08-19T13:24:25.139342Z","last_seen":"2024-08-19T13:24:25.139342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.co/js/embed3.js","fqdn":"static.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59698656a40921f7585e25a5bb347955","sha1":"75de624e80155463ff8bb09090b712098eb74dd6","sha256":"69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34","sha512":"da0ee57e16f28bea2b354e0a71f148f6d614ec4aaa26f046f0f8e2605d1de1c293978de542c1524f2e61d74ab33057e4b06872a95e8a6c895c86b0446bb912d1","ssdeep":"1536:1Swx/jSB9d9mNcnaz/oj1jxtFzkYZo2nopAMiu4aMVn3rRRk7U5oAAT5Smka7azH:Iwxo9mNcnaqNNSAMi3E+G7gp","tlshash":"44b32bc872d2b0a257e37079103f610bf23a5d69b80d8458b159d9e97cf8d8a8237f79","size":112790,"data":"","first_seen":"2024-02-04T21:01:01Z","last_seen":"2024-11-23T09:20:45.225924Z","times_seen":661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6378756fb05332bce1acbc3862ebb4b3","sha1":"6fb32f5daca1a4bcd1ee147dc02c0d29cdca8d8c","sha256":"e519fdd1c4fc28500bde4d9456889fea2d55a8865bad0196e21406f84249a218","sha512":"d9c4d789478c7ce57b3b7131e13321bb05fc0a2565a2109cdf390c5d2e8d9d5d0a2e4b767fb831d05c3ccdca361de23d7b92397353ef1533b187b6668589c043","ssdeep":"","tlshash":"a671c902e58169bb52e230f8ad9bc502157d1211c7010a64fa16769c2fbfddf357aabc","size":3571,"data":"","first_seen":"2024-08-19T13:24:25.140049Z","last_seen":"2024-08-19T13:24:25.140049Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"68de076788584cd91372c62adcd88b99","sha1":"45848e7140e17e8bfdbec7a76f7e2ce51f5c5012","sha256":"cbcb5b7741012a71f98861cb5c0c7f0cb0fdea7edfc929e55de8fc4b32ffa68e","sha512":"91320d53f9064587f6954edb839087408aabe75a856753171b2e74ef84ceb47556a4cdac079bfc7c3d3f02537cde494f7e6ec8e617bf2be6e63a4f7bf20f229b","ssdeep":"","tlshash":"e1f09ed7a604906590d975c6d42224887d768155c7036b02ec5a325c77f8dcb942dce4","size":474,"data":"","first_seen":"2024-08-19T13:24:25.140758Z","last_seen":"2024-08-19T13:24:25.140758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3626868a03c72c37ead34627d6f1ea74","sha1":"662cacb88b7f12749577de7c4cbd8eb958b84357","sha256":"76c2139b95bb6ea2482214173de02efd7155ce7c7efc543cae10ee77f0280388","sha512":"bbfec93ff629b6e463ac5fdd6bc2f659615ec6d0a012377b52d33c2098502233a461077a79ba0047e662866460a3f36d8eb7f705636cb5c9fc170e5bcc5c7e7d","ssdeep":"","tlshash":"a1e07d2775706f560445b48804c6f8164efb62a73071ef00061e5ce4cb019290c4cd29","size":308,"data":"","first_seen":"2024-08-19T13:24:25.116142Z","last_seen":"2024-08-19T13:24:25.116142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/watch.php?vid=oj3tl9itav1x","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c83b1a0d60473aaf42836ba0102086b6","sha1":"b6537e0c77e35eb7c48c279da38176afec1c9b7d","sha256":"d59f7b3abfd443120d372b64383fe2ca222318241fe57f2c7270bfaca57e5c2c","sha512":"600d8751f9ed5ed7b38694dadcc655903383c900fa6a9f98d3ca52b76a3f16ca11646413791e9ed260436f7cc2cfade9626d10a706d10326f6fa9592a8c9921f","ssdeep":"","tlshash":"5fc08c09be511f3aeca33aad417a964430206002c408c511300c55900f395900636788","size":147,"data":"","first_seen":"2024-07-07T16:45:51Z","last_seen":"2025-01-06T01:47:53.517863Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.famous-mall.pro/ecc874/877b0c85adf8.js","fqdn":"www.famous-mall.pro","domain":"famous-mall.pro","tld":"pro"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32ed3efcd6f57ee9c34e01527ce683c9","sha1":"c26b86888ed140a6afb26db710a20a3db668a5ef","sha256":"0c7ef00938be5d846c17cc2551fed8a7616f5695c71f555b27d2db30b0fc22d3","sha512":"560586615960ac291d65177fd4348b5daafce5cdc2c7235ce7dda66badd16e99441677c0947491a654e2651bad6100348a9de03dfc7ce32e08dcd386ecb86353","ssdeep":"1536:07k1f0mqgzRUaCYNzpVrN/fDO/cJRhnxsPNTmjIRtMAJNbkUW5J72eXzrMXWyDzD:074ffqMRUaCYNzpVrN/fDO/cJRhnxsP9","tlshash":"7763f8c97183644411e6d5ba106f328d99b98c10c9c90ce8df63d6e6dc346deca73eba","size":70365,"data":"","first_seen":"2024-08-13T19:55:59Z","last_seen":"2024-08-21T10:20:16.602188Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abe0086d1b796dac213b9c594fff7c4","sha1":"87858cfa281e3876c485db53a84dce6fd057afe2","sha256":"ff7534cb96a552459763f803e4090a596fb8c959f63d71ec07d40c307415a2a2","sha512":"5a1bc492972f6a62f8ef6cddcbf88be23e4cbdf7cf22bb11febce53d4ed4de59b916889c58d544b814406c4d0cdae5f8101be72ce964fe489ffaee12e86a398a","ssdeep":"768:oiGPrfnn5xQqLoYpWIDcPN7cwu6wvW7eiNWD4cDlWcL41UMt:Aj5lLoYZycwu6wQZhcDlWcLsUy","tlshash":"62432f1c7c9260481952e3baa12b31d56a257200d86e4cf2b818d3d7de752df8da3fde","size":58916,"data":"","first_seen":"2024-01-27T02:26:54Z","last_seen":"2025-02-27T04:55:48.93157Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-07T22:35:21.712281Z","times_seen":219315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7fdaaab43bc993b85290c713fd2d289","sha1":"46bf3d27b2cf38b0e999d3b0a7613011181c87f9","sha256":"c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e","sha512":"e1cc8a4de54d2d1454b9b58718c7446aba03c7901e09b72a480bfa1d916c96492df25acfe1a95e8fcb15ea9ef12a48ccf799a0eedcf36640524ec089e38f2077","ssdeep":"6144:t4iiw3vnwan/i4WfvISkj4dsJDMXEuxFY9zpDkmqPgr4dAXFeUffWuRgn:t4iiw3vnhn/iyDMXEu0sTdExRgn","tlshash":"b9c42bc87285717247d370b6543f120a723a9e6d5808c16cf529e9da2df8e4da23bf78","size":589278,"data":"","first_seen":"2023-10-15T07:44:37Z","last_seen":"2026-04-07T16:00:49.843807Z","times_seen":2029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2ecb2bd8a424c8e8cf507ce8bd933c2","sha1":"3cbc08ca052ea25c3b0834b9291a3ca1e9122e26","sha256":"4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099","sha512":"5c5cb01b30e7dad3dcfad17845b399768970d755c1743dce82602f9c2fb2a220f5a8148656c8593d912ae9dd576330ab66936b557a4f72e60f771de4d1066473","ssdeep":"96:2GATaPI0DPsUpUjS0kCofLMdAxRF3gb3CuxE6eVK5HtkH28ugVkkTiU:bAOPI0DkaUjJkvId3bBLp5SHfth","tlshash":"faa1d8d47002f52201e586e616fba48f27726dd66c0c007a211eebfc7dbd7ab43038a6","size":4580,"data":"","first_seen":"2023-03-09T00:26:57Z","last_seen":"2026-04-07T16:00:49.853062Z","times_seen":2028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c60e4585220c73ae2f761532540e858","sha1":"bdcd78dfb56c61cd4a6aa5675c46d7040560527f","sha256":"c1813170711e7a6e03342ecb794b0275209d011c75ed485d3f8d90bce45a285f","sha512":"486c9661dce1641b6649104ff71bdaf4538a768085777aed97c39099a2c57aed9522b8b2cc2d11e1cc8d9eac44d343a3333092e3d1c36ce93c53f7e277186ba6","ssdeep":"","tlshash":"60f0237aa9301070001b402ef677cb1c7d7310291a318880423caa99ad75f6f9024ff6","size":444,"data":"","first_seen":"2024-01-23T14:06:14Z","last_seen":"2025-02-27T04:55:48.945787Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b9278f79eaa9aff4bd631a45c547ce0","sha1":"edcf820101c6cc9d9d7ef1f8abb781a0fcc38d7a","sha256":"51f67410b8bb2fd891d1c0a1776a972f901f7725bbae5205229dd8320f932eb5","sha512":"862378d9d5845c786bcbd3303c51b2ecd64f91b50d0ecb29ba9c2edd438c073484b4f50748c3a0d37e2ec6ad6653c5973c98aa02c355072c38e7c4dc6312a63a","ssdeep":"768:ioSzd6fWZc8uvOo1f+XgI9FkAH+2teY63MSzQiFLxyBKHanpv9BA64rm0VGwKbrC:Hl8chX4kAV4Y6c0Han59Bx4ywKPC","tlshash":"4493b899f183649542d3d1be003b324e9ca8dc10e58a8dd99b63d7c29d740db48f7ab7","size":91819,"data":"","first_seen":"2024-08-19T13:24:25.143387Z","last_seen":"2024-08-19T13:24:25.143387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG","fqdn":"ey.dramshaplite.com","domain":"dramshaplite.com","tld":"com"},"ip":{"addr":"23.109.170.72","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"497df677895be4b6926a5bc9418ae22d","sha1":"5ac0373193913cd5a16d08286273113f4820525b","sha256":"b31e97904556fa0d126a43e59a9c29b47e24ea05c8b0804956fbef78b9520b8b","sha512":"cc141a59b58e362ba5bd46c660ab26c57f97a37c83aa1c789194c175ae39fef9759d266ba73380478ce8bc4247a638a79d1632d7bfa258225baf646e164f8225","ssdeep":"","tlshash":"02c0c080f3780bf204b900c227022c43e0e70ca08bbc34a7134c8b0dae528c7c60b363","size":172,"data":"","first_seen":"2024-08-19T13:24:25.144043Z","last_seen":"2024-08-19T13:24:25.144043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/bootstrap/js/bootstrap.min.js","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d3cf48f5bba5db5258a2ff0f65ef00f","sha1":"52abb563b246cbce1edf317417c6ff631059a2d6","sha256":"0ff3cadb509482ccb23bb600c5c01eb721877a5cd7187d96c8b0af2135c29ca7","sha512":"92b9279b3066e5787393b19e486f841a95090e1d834c9e9c4087a05cd050d56917ba6e891ab8c57f4d4a3fc988b2457332b8ba802952b9e0b60017c5a9876a86","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kG:b4Fj8GPwRM3CiI9BtX","tlshash":"d273c6593244b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc867277f7c","size":80372,"data":"","first_seen":"2023-03-14T07:19:49Z","last_seen":"2026-04-05T01:21:44.494994Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9c9646d94a5c611da699cc85559b16a","sha1":"f39c9ab70e5f845dc3dcd5c64f6d49ab15e5dcf4","sha256":"5684f700a873bc557b39d8c7bb349a3a9037c908b15f899f9cc2c98c4cd1d91f","sha512":"9342f3068f29d2f7c8b1329ba7d2dcf1bcc20ef4b8028df3c788e4babb9dbb12c95be52f23509d6094ceadb53eb623c1b4011a7ed3ea2f2ad2566558f326b50c","ssdeep":"","tlshash":"2011521d8f804eab64a3716217f4f4ee46c664cb04b41b2923230b02fb48f5fca9072e","size":859,"data":"","first_seen":"2024-08-19T13:24:25.116943Z","last_seen":"2024-08-19T13:24:25.116943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q","fqdn":"getrunkhomuto.info","domain":"getrunkhomuto.info","tld":"info"},"ip":{"addr":"52.85.243.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a98289df14efc1119dbae0910e0ab97e","sha1":"3aad282e7c8608dec3db8f0dbf0d15d17aaba7fa","sha256":"aa9b5a950e2fcf03365a168380c3b8d8d035f350e6eb2ca3aa0fdbbd2c19142f","sha512":"343a4862d347b9a811d8d0028756246b8841354c9b63f5b0427e316f81102222062f3ef893acd9c31ab5f7eef644f2a6b5ee2e9a7c92a54fc9bb85ffc70efc4e","ssdeep":"","tlshash":"6e51d18d34f3a0c282b26025453bb95afa3c5a94934cca18873d96bcbd715ed6357f4c","size":2980,"data":"","first_seen":"2024-08-19T13:24:25.144686Z","last_seen":"2024-08-19T13:24:25.144686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"impracticalsmell.com/cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl","fqdn":"impracticalsmell.com","domain":"impracticalsmell.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ec3864b2c4e1894b231320b2ce55542","sha1":"5821428f6a2d29fa18f1f2473e53a8e3052a4819","sha256":"87ee21b0f58798ba83ed67f2ab954f5e400d63cf28df8c8ca71f9403d2901fe4","sha512":"cd1890bc1c4bce0b45d7bd1eb50025f7a94a16c1d1776cbd5d52d63c95fc028ec0562a9850659e0da807d0d32ca827d67d5bb86ee417f2fb980e1356aef870d5","ssdeep":"768:gkedZg7ry2Mqv9aTF9dFaQpp8JYCV9c6SboEBkleZ2FhYePALg0oDacXIl5iG82r:gkkg7rKqlTQpp8J9V9c6SboEBkleZ2FC","tlshash":"3613d9dcb1c7682643e6513c753b7208b23a54659429b024b839c8e4fdb9ecf8167bbd","size":41777,"data":"","first_seen":"2024-08-19T13:24:25.145378Z","last_seen":"2024-08-19T13:24:25.145378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2ef1c1d05960e113959af8bfe2d08b3","sha1":"be5d045b4a9a5185b7bcd205119cabbc004d3a54","sha256":"04e46cbe9e9aef603edc90c2a0be2f77f4682dbf1183bd9f8c11f7a7590e715d","sha512":"6a51a921636f226cb96d0a09d065e58a7e30b9bd9f7135e8d10da127ff67fddad476d01e032602ae2d643092f9d447be98ab5a4802f113d040e3adc1bcdb7157","ssdeep":"384:LTFcoHxz6FJcauwgod2beMjMQdWvFuV+ruhIXNZSYgn0yi8iCYY:LT+oRz6FCwV2beMPWdGhIXNZSln0t8iM","tlshash":"de425340be50744817ebab7f721b70e6e06e09693b89c98fd013f8922451537feda631","size":12457,"data":"","first_seen":"2024-05-23T22:22:40Z","last_seen":"2024-08-31T08:35:20.179908Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0da46a2e3d755aa201ea05b6109468e","sha1":"3e29ce6764ad77f577c9b1c56e173d3fa627785e","sha256":"d4b724d774c6bb0fc5d48d55115107a66c6b2ed11b9c8cdd797de37b99a29e79","sha512":"c140c4c4ed90cc895ff950998a72adf3b93e847f4156e331fb3e4120e6c0ffa5fd4388eafa231417ce624d835823e86af32a99b03abbed02bc6ca6fdf3228fb2","ssdeep":"1536:YAdo+yp+814Qox5eVHVhdRnNBRzlpvzoRwDkOFKa7HR+0TdsuiZTBP6sU1ODQAvw:YAdo+16oAjWHKTDiNhsAvhWL","tlshash":"aed31dc06a4734e65333a32d4d6ffc97e3ebb8d6085c5956e02cd58c2d6d205c2bae68","size":131422,"data":"","first_seen":"2024-08-13T23:00:02Z","last_seen":"2024-08-19T13:33:06.921513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/js/script.min.js","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb7989a353ff55caed9830584ca215e7","sha1":"f35448417382431c297e85bf96e0432e2c6817aa","sha256":"66a7d90571a79b8c39b1683dd22a9822342269fc5b9bf3aa3cdd71e39759ad35","sha512":"9305bbebdb52187cbc8807a03b6f81cec9bbb8dc7d24d6c1e0d6de625e7249ed38a22bdaf957744c5801f25f8690b647657c209d03f39867f7965837db107f61","ssdeep":"","tlshash":"4b014e35eb0ad577456b73b262efb3941f273880984680243428dc9d8c98c87b272ef5","size":813,"data":"","first_seen":"2024-07-07T16:45:51Z","last_seen":"2025-01-06T01:47:53.506493Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/ads/ad.js","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"071c641b229d2bfadd243b8fa2a9c88d","sha1":"4048ed3ad506f9bb9052c23283912d0cfea8bcc6","sha256":"3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e","sha512":"31b7b4ae25e93eb16162f1ebe71a1fb95e11187a94b20f9d54f30241e0e3bc6acc5985c36f8c08054b76d65d426ebf65fd86ed19cb6ba700089b267ba98d0b39","ssdeep":"","tlshash":"7070008222008032800ca0008088c0088008020280a0800232008000000028300000c2","size":18,"data":"","first_seen":"2023-03-07T01:38:47Z","last_seen":"2024-11-23T09:20:45.223064Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/?ebued=1004075","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40686440ea5d3a4dd9d0cd8419cb6c11","sha1":"2226b47f1479c0ab389afabbf9b96f7a680a1461","sha256":"53e447ceb1bf314a322a9344c92239c37e58648fb09eef7de929d8083a756d6c","sha512":"7d5908a3c4c407a04c1f72da65dbc07e9fdc9ce35e67cba060d762b478c3158f860b51d54b6cb21b291df5fc8316213125d1f1e7d003bc21108a090d200abc30","ssdeep":"3072:IpmI95e44J6azbjK+55U3Hv5KNG+mtz1H63NZkUMsE3:Ip/5eHJ6onA1a3N+wI","tlshash":"58243b8dba92346983a374b540bf124eb23f4669bc084dd4b49ad4d07db4d4943bbfac","size":209761,"data":"","first_seen":"2024-08-19T13:24:25.108568Z","last_seen":"2024-08-19T13:24:25.108568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6109c78e8f3718e136127b0cf4b02b93","sha1":"88eda0a19fea7c9ff947b9940bb0700c5dda3797","sha256":"8848052c215c00db295f2c77168c91f19fbd2b1cea39cc6fd33d85768d03926c","sha512":"9956cbba9df9f83240dcce9b37f336cae1b85887ae7c212d7ac942c9a52316629287d29acb0b47bf9761a868cd2b4da31df5c6409e262bc8a8b3777cf64822ec","ssdeep":"","tlshash":"5bd097a628398830238c024e22b3e3a42222246026106741c1c9cc1a6e20fc304b29ac","size":236,"data":"","first_seen":"2024-08-19T13:24:25.146821Z","last_seen":"2024-08-19T13:24:25.146821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/get/1999414?zoneid=1999414\u0026jp=_cl1pw4dlzhokn1y848holt\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.312\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4\u0026afid=394432356381184\u0026eclog=0\u0026seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026snc=0\u0026ssc=1\u0026im=1\u0026cs=5\u0026uf=0","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5b5202bdde1c85d412d54933caeeafb","sha1":"9db27f7eec4f81753ab3e8cc5d41bb21e4d61d21","sha256":"d52546585b1413f36d013e89a2b86d79b72f16fe25c07fdb115abcdcddbd00b9","sha512":"f1fcc1a3bcbc24c6527fab6ddb75f508c529d90af2f2ace97a81238f9550629988ab1bac53b7a0cbf5f3533d572c9295200b8a4c207050428b1efc6f48a74c59","ssdeep":"","tlshash":"aa710be3a1c31442406afb79d2df2c3724b63a4dd5ce533d95227c4c7e836298a72a91","size":3246,"data":"","first_seen":"2024-08-19T13:24:25.147488Z","last_seen":"2024-08-19T13:24:25.147488Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"0f2156c870caf45442179b3827bf249b71baf655d09e80a4c3c6d6d43f788660e52eb9","size":1300,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-07T22:25:34.489461Z","times_seen":17906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bd944abded89aa39f7d6ff0e6605585","sha1":"7023d044f205e813cd45560b9ab4e984a8678c93","sha256":"744da56aae24ad7600df5141d9739eaaea7e8da57975576d008333566554880a","sha512":"9b1e00981feb977bbb70d144721cc6d02e41eabf2da3bb9c869123cfbc6dc41063b4e5b6356b160e8f0fe36f9b913b7bc057309f20a14cd90f02350c08a41c38","ssdeep":"192:ekjFHmgTbwlD7h2BMVhaEsVR1sVpJF6KET6/jfyJ+gT8b:ekjAgTbwlD7h9V0EeR1eX8KETUyQyY","tlshash":"68e118c0746625ba42f230e55d2fa6273137569cdb0d4a40b109f69c3efce8631bb9d8","size":7359,"data":"","first_seen":"2024-08-19T13:24:25.14821Z","last_seen":"2024-08-19T13:24:25.14821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"86245ddb205b0d537ad1e6134780076a","sha1":"76d33d432096e340972d2ec6cac321ddf2296afe","sha256":"1c835f95475788a5d4dc8337a3cee440ea8761542ca88f033007f24b42b082f9","sha512":"066460c3100a4ba975644a2271dc6e39998258bbb43f898085bcfd4dac1d021c5a63757e50d4f2888870ffcd94923b6a959e2daebf8a22d3e00fa653df864c7e","ssdeep":"","tlshash":"44210072a10266b0fbd970bf876ff305b77324c64044b561a8860c8c7d1b81a972bdb1","size":1138,"data":"","first_seen":"2023-03-29T21:39:55Z","last_seen":"2024-10-23T23:03:36.974537Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/tag.min.js","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cea47c4ab2963d3d93d9f1931e0de91","sha1":"c71cb86da149cee1cab013723b08487aafc219ca","sha256":"a74fa0f1f017157f11ca71db86567c7625c8f66fdb180020229f4fdd88cad42c","sha512":"6613d83c429bb1744dab8f1555f76718b477a18b41ec7685f681725592ca3a94a278d14deeadf104e35320e76ebe21c0739b0d2b1ff4549e5287f311254a101c","ssdeep":"1536:OC85wZ0SFXHa5d+rcXTJVSJEe0hFiyeXcMpwQp:16S0cX66rcXTJVMWIyesYwQ","tlshash":"886329a173d5b832427f5021103b44096a9a8f44184fceb6d2a76577e8a571cc3abffb","size":68838,"data":"","first_seen":"2024-08-13T23:00:02Z","last_seen":"2024-08-19T13:33:06.872143Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7452252b153c44dfd97458874a1de9f8","sha1":"daf04e24dbfe9dd3d79775c39a9cddc2cfbcae69","sha256":"fcc74055cfe894d1f0243be84cd995ba8658b845892c8ec01f55807560beb409","sha512":"01e5627391f70b6c277ae7634644856d7329f61ab94ebcd37eda5c3920dc16bed8024c86d275b0ae8e95d6c554d6b31994e890ee19c2cfb785358366165118de","ssdeep":"96:BR/wRHPryaXXZA8MvI98k3Gcrig0Z4VORE7BPzmIjpm/1/lNQpHZhdt/0W3mvBn3:XwxryaHZ1MvI6kxTBPFuCnNH3mpul0","tlshash":"22f1b5933bc6fc12023278fe807f68a675199fb675145ca3d91094e9bb70384e4eed86","size":7793,"data":"","first_seen":"2024-08-19T13:24:25.118412Z","last_seen":"2024-08-19T13:24:26.371161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8fe3c5c33fb4a3ff26a814a1c3c4bad","sha1":"64d5fbb88946723e3bdf29f0d08d9ca7463e381a","sha256":"bacf7fa6e6d5986f83c7b1b2a7dfd7705094712b601dde6c01877626cad25d63","sha512":"973e2b2da13b9292e8c0669921e58390662777f96648b604d16254d1de358538df47ff24a535341bc85046b66e44ac327c8ff50c6d9cabfb6e1c9d563c8f58e7","ssdeep":"","tlshash":"e611d0753a1a2534c7c5418b317ee7a93d3260216a029185c2accc245d18e8314efcbe","size":921,"data":"","first_seen":"2024-08-19T13:24:25.150402Z","last_seen":"2024-08-19T13:24:25.150402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"709330398a6b5d9b52f98b31956f0c3f","sha1":"440856e7c06b760f9393f45afd4c533e8c034521","sha256":"d2d69040741b7158e312a80d9cc5b435c77811a9590359579fa224376f4dbb71","sha512":"6e054aadf8d1aa01a40c02f6aea8e01ac522a84a7633ffb0e9873b7a474c311e97116f8f3c83a1e39caca99af6ce2efd012cdd21e4b6c1df7d9d305adafcc2ff","ssdeep":"","tlshash":"68d0a7fb2134a592bfdb91e7f85ba40ae112790de468c8c5a4f514b3153812e4251469","size":241,"data":"","first_seen":"2024-05-23T18:19:13Z","last_seen":"2024-10-22T05:58:24.112902Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"191cecc7838d2b7091ce74e7a42ceecf","sha1":"15d7e7aa2330af7f03d0ff59b0c97575e72a2f2e","sha256":"b8cf37a6c466bdf4ae8e6c0145846d96826ad4480bd35eeabf8db223204edd6e","sha512":"fd9ed4694df97008c643eee1f57a0001c5f5707341662531c35f07f6a6962cd5503b48793f64add7eed3cfa8261875b1c0ff96ce7fcfc83b70678ead655b6eca","ssdeep":"","tlshash":"9ed05efb277cf591ff5981e6b48bb80de2122609d4f894dab0e13871042403a0216854","size":240,"data":"","first_seen":"2024-05-23T18:19:13Z","last_seen":"2024-10-22T05:58:24.114409Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-13T23:47:06.296779824Z","timestamp":1723592826296,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"94E9518D845BB5293C2F009A196B74A3859A5AE3B3A1438234F867017C167E1B\"\r\nLast-Modified: Tue, 13 Aug 2024 18:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7865\r\nExpires: Wed, 14 Aug 2024 01:58:11 GMT\r\nDate: Tue, 13 Aug 2024 23:47:06 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"024341a123220bb7f476663e0c2f941d","sha1":"20e2ab3bdab6d6f5241eb3c45d44a9b191f6cb44","sha256":"94e9518d845bb5293c2f009a196b74a3859a5ae3b3a1438234f867017c167e1b","sha512":"9a9f70d829e972dcef3fc7c1b2671546c48991dc0ff3b9c128aed8254127bed7322c44f9c13f9ffa3b3a725b34ebd40d6d14b74d6d4e00e9434046f2991db1fc","ssdeep":"","tlshash":"22f0054266f768d075a64513dcc5d6032b1cef6618818af99e2901e21d087e1c1d602d","first_seen":"2024-08-14T00:09:57Z","last_seen":"2024-08-19T13:32:40.697939Z","times_seen":14092,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/img/650x350.png","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.020Z","timestamp":1723592827020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/img/650x350.png HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1001\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Aug 2024 22:07:20 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 265187\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FjmQ1GRMzJrN68MWvYEKys02SGfYrDia0rQ%2FXFcqHctOqvsjBNOt%2BCe5uYhhnH0yGlIxFqMurBQa7PMlId5U8zOdxiaZ%2F7f1FYmk%2BoPPG8D63rBSuIYbNAWfbcKzUClLFmg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0cc117130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1001,"size_decoded":1001,"mime_type":"image/png","magic":"PNG image data, 650 x 350, 8-bit/color RGBA, non-interlaced","md5":"64605e73317629dd781f3b02334fb76c","sha1":"917c0314c7bcd02657e449e278f071e56300387a","sha256":"0f5dc054633258c466d5acf6203b47d34a4669aaa66f1e6486886c7e395032e3","sha512":"0c2b3f9c7ed3669f5cd86c773d572a132f57f1f3dc8630eade843d4db5f06a0079d6700de784bce25104ade5169b7995e40c3c2277f30d40628be2c08464ac36","ssdeep":"","tlshash":"af119bd1aa508db5c55703b240595110d4524666461353a46545d4153af574880a9355","first_seen":"2024-08-19T13:24:25.086151Z","last_seen":"2024-08-19T13:24:25.086151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/img/33.png","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.015Z","timestamp":1723592827015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/img/33.png HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 235812\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Aug 2024 22:34:37 GMT\r\nlast-modified: Sat, 14 Oct 2023 16:27:22 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 90749\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oBRXyF%2BXuZw8ZZ8nhPog%2FTZipO2m3xBlu%2F8RE5JXGMx3Cvr8K2HUUXq8W0LnnAKRdFoik%2BSwiQesB9s7YdZXTCO651wAtoKdgKH905cEHN%2F8AHODGeuUpIoh1TCJol%2BcKoU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0bc0d7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235812,"size_decoded":235812,"mime_type":"image/png","magic":"PNG image data, 1150 x 351, 8-bit/color RGBA, non-interlaced","md5":"bebb9af01364a03b30cd59776c993a1e","sha1":"69e6310ee304db6721f2703840c60e82e739ac4e","sha256":"ea6f3013015bf72db496f641c484f6b202fda6060f608ac067d62bdc14092493","sha512":"64fd3e72d675f0ecb0fa3cbc41e476bfab1103531671a6ba255b04442bf6e505ace4b8b0b603903cc1aa29acd00af46023319e4d22c43761e621d880e5c96c95","ssdeep":"6144:vEuTlnckMYjbbJFaJNtZn7QpijH4k2jCfnvcDZOugCNLm:TTO2jnJIJNjQpm4k2jCMZ1g","tlshash":"5d3412cdf8fe1cdc9ca2267ba08b384a177252bbb009541d658c72264e6e43f378559f","first_seen":"2024-08-19T13:24:25.086881Z","last_seen":"2024-08-19T13:24:25.086881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/PHPVIP-1.gif","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.017Z","timestamp":1723592827017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /PHPVIP-1.gif HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 669253\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Aug 2024 14:50:09 GMT\r\nlast-modified: Wed, 12 Jun 2024 17:29:52 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 205018\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GUSaHPV68%2BsUOJiSrY4uvE2JqCMLcZDE5DEZW08i%2BpV1tNBQpHpWcktMPHewwV4f8LzHq%2BuxUkjF3kYoIwM5b4nh3TrwuvOVG8x1KiZEdeWafvjdY0VqAAPsuBQhovUa5xQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0cc0f7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":669253,"size_decoded":669253,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 165","md5":"52ce8901be0d44a13d40bf1813ea468c","sha1":"bd99d7f59f91fee861e0940a2f4141b9b690faa4","sha256":"46ac2fc23007edd5c805e89e67072de1e8d41b88b8c34480ece42043247f796a","sha512":"84cd6383e8602d0e6c51583b181e156fedab8039b8b379b90cdcbb504423400088c43d4ee26e045909f75f03eeeaf382a38ac5c8fd865cee3579d9b737e6082a","ssdeep":"12288:QU5PJY/qxrPJY/qxrP7hky8Rhky8Rhky8nGAuE46GAuE46GAuE4y:QAY/q3Y/qcssybrbrb8","tlshash":"7de42387cfdae121af6c98143b9e1b05081ae124f29214e34375b7c30b5e5be3676ad7","first_seen":"2024-07-07T16:45:52Z","last_seen":"2025-01-06T01:47:53.363337Z","times_seen":5,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/js/script.min.js","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.027Z","timestamp":1723592827027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/js/script.min.js HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Aug 2024 14:50:09 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 205018\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=D4dRqoY%2BBeTISvCgvgkHojgniLvQa9aH3PzDEAkCfIWL%2F2%2BA0j2acZpw2X37NV0qV0yLc5mPkwMm%2B%2FY4iUGlp0BkJ6D1h4oInwvjuMYJt2MltBT7P42TZ9SV1V0X0CgW6uM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0cc137130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2955,"size_decoded":813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (813), with no line terminators","md5":"cb7989a353ff55caed9830584ca215e7","sha1":"f35448417382431c297e85bf96e0432e2c6817aa","sha256":"66a7d90571a79b8c39b1683dd22a9822342269fc5b9bf3aa3cdd71e39759ad35","sha512":"9305bbebdb52187cbc8807a03b6f81cec9bbb8dc7d24d6c1e0d6de625e7249ed38a22bdaf957744c5801f25f8690b647657c209d03f39867f7965837db107f61","ssdeep":"","tlshash":"4b014e35eb0ad577456b73b262efb3941f273880984680243428dc9d8c98c87b272ef5","first_seen":"2024-07-07T16:45:51Z","last_seen":"2025-01-06T01:47:53.506493Z","times_seen":5,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.210Z","timestamp":1723592827210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-02-Romansa-ni-Gorio.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115375\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 02:18:45 GMT\r\nlast-modified: Tue, 26 Sep 2023 19:11:53 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 77302\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eoMZwfGfBYzLdJhmO7TqvEkfJEvZNVZZTTxxUZikua%2BBebkLF1TXxDClBfiptvlsAJZVhXQ05jHeXUxCelwVNNUsKh%2Bo0gqAD7rS3hrzo8HjFZ2XHfdDjp%2FEpbesPtQFRoA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc847130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115375,"size_decoded":115375,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1155x650, components 3","md5":"fa862b3c312b80dc1e749a04743289ba","sha1":"0e7166cf8ecdb3248a52b11442f0047eefbbaa7d","sha256":"c4c7a997bf9b013109bd61486d26931eda1f68f1107661dba1d6b30ed14e9b41","sha512":"58871bb9e989c626efa20adbbdab3384da1df8b8115e3be9c5efe472189f57f68b054114e54a7663542c5ccf103cb3ce3711c7b8ca1e93e04cf7cf2c0feda861","ssdeep":"3072:KtIwrz3WJLChwPiN1Hpz7VU6n/36TGsHNpsS:AIImUh59pzv/3At+S","tlshash":"22b3127877b14d53fb55cb30a8dbba927c68f7f9031e288d97cc56809b488d48a1f610","first_seen":"2024-08-19T13:24:25.08888Z","last_seen":"2024-08-19T13:24:25.08888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.230Z","timestamp":1723592827230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Sa-loob-ng-silid-na-may-ilaw-na-pula-may-dalawang-nag-bobombahan-na-tigang-.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11431\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Aug 2024 18:19:31 GMT\r\nlast-modified: Fri, 08 Sep 2023 11:39:16 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 106056\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BNS5ZMAjiBqMFdnd1vqA3TwJLGc4zz%2FVT1zneejfUSb7DVBk0XlUvb6aquXpa9i6%2FP139BGZxbubuVzqdaDM%2FSgExrqYhVyB6AEVLpWmD2r%2F3F5KeVCXXZ1GECrJUnZNS24%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc8a7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11431,"size_decoded":11431,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x304, components 3","md5":"72ada1b29b98085a9e752fc4706f4b60","sha1":"760582a71395fdb298b8d2ea895da5d4a3bbcd3e","sha256":"1748550a22c973c601130fd791618243a8761e66377979d81f7862f6ba54834b","sha512":"89a80ea0af25d7b6ca87b1a4e2f5fde2fb8f413028f7f10d67a7c6ee77ee5d3554fac3914df901bb47461dfc9632c22a165c565839f0cefe19df93972d562918","ssdeep":"192:3OGePBSk+4/7vn1HuDmF+RsRrNHyi+UoQ0bYCJObsh9+5dozk:+GmJ+lDVMrwbYarWdL","tlshash":"d032af89b3d22746d08ad17ab3eb22b1e307ef38cc961dec2d6254051b187d05f48b5e","first_seen":"2024-08-19T13:24:25.089602Z","last_seen":"2024-08-19T13:24:25.089602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/fonts/fa-regular-400.woff2","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.346Z","timestamp":1723592827346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/assets/fonts/fontawesome-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13576\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Aug 2024 03:21:00 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 159967\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kpa5mCKgYZ9STQrSZnStCvzG%2BZWLBE2jBepy8jUuCh5od9cAhMlv3zkqI8PiT0hMvoEcGtEci8R0ZmgYmB%2Blctiw9%2BzSn5SGwV%2Fs3ZwtAsNen5Er0C1sRgAjQrkK4mLEcME%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a2bd207130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13576,"size_decoded":13576,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13576, version 330.-16253","md5":"9efb86976bd53e159166c12365f61e25","sha1":"830f8653e5f4a5331ac0b47c5701f65fe9f1bb32","sha256":"86e496b536b26ba60cdb68df9dd9143b19a63b65e30e373b0321833aab1295d6","sha512":"0767677bb9da08fcf2e2facd285b27e0e7092525734ee0c87f2c940aef11a33d797f86ac89bc5c46f50abf8de3877a9a4166fefde699bf9c7f61f96126fc1475","ssdeep":"384:os7DSv/xjmBqcG/09/TdcMRDjjGb55+/sZzyqz4:Zuv/xKBm/09/RVRp8ztz4","tlshash":"8152af649d640986ca0117757d4ec90226a106ccacf369daf8ffe0fda20a97097663e7","first_seen":"2023-04-18T21:12:59Z","last_seen":"2026-04-07T14:05:55.241812Z","times_seen":1702,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/fonts/fa-solid-900.woff2","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.442Z","timestamp":1723592827442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/assets/fonts/fontawesome-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76084\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Aug 2024 03:21:00 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 159967\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BM51PB7UxL8EgTxObC6NIaje6lkHsJ9lSWJS0s1xkdMSb48%2Bs5XVBRjBpCFkkuaTDTXPzNauCv8kpeUlXTRG3%2Fzwm%2FWvr5XV95GIISFT52cPuAHEdCzdIzG3Gn6fjCnwECc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a2ed347130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76084,"size_decoded":76084,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76084, version 330.-16253","md5":"f6121be597a72928f54e7ab5b95512a1","sha1":"b2c74520c3f506efbfefca867918e5ae28bd5222","sha256":"787d76ad6deab67ccf8bac1b584260205e114f508fc5542b612e3f75d49a34e4","sha512":"ff0dc2e7f41b5dda10f19ca4d476d6c786fa7a595288f9cb3db2c068293149a1b358119a9c1d9da616b5f9d3fd3f414258f295570e7bb755a665b143861be6fb","ssdeep":"1536:5aSdUQZ3ADXjohf3m4qWSmBItOgDmEyN1M8cKRBFj3JLnD29fsAP+TSd:5aeJpIXjoBmA7fkmEyNuK/95W9fbmTa","tlshash":"7a7302ff77b7a4eabc607780467253d3818aa059e48f507eca4d02dda69d17c2063687","first_seen":"2023-04-07T23:35:47Z","last_seen":"2026-04-07T21:35:52.428609Z","times_seen":5893,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.244Z","timestamp":1723592827244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Only-at-Pinay-Cartelnet-Rare-Edition-Entry-04-Kumpletos-rekado-simula-una-hanggang-sa-dulo-malagkit-na-salpukan-ang-iyong-masisilayan.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21770\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Thu, 31 Aug 2023 05:33:59 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ehhvDe8NhxYMo9491kXfgJJ792EAGEWmYQDRXKtOKTDsEDDQs1AcFcWooje3%2Bn9SfNV3TNPkrIdD6zjOKbAtUDDw7wbgaOCnyAZVuJHR2jGpXIjv7cYCYYdNTAlrr1RYXzQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc8d7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21770,"size_decoded":21770,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x304, components 3","md5":"722521c6320f784b20de7fe2312f0d91","sha1":"56570232038190503def461f5d7478ca1c4cd54b","sha256":"55c4a3687aa40c184c4d8dbe91a7430f8fefbdb3045409e585a57b190590352b","sha512":"ce0681c81182af30f947e284753846c639ee7749dc60684a39a6a9cd759388b3f226a4828a7c10f5cbb3b1deca82b3280e9ff676d3a619b07b9e74ad37c341ad","ssdeep":"384:yGvTVgWBmV3H9spM30QHdvOqfnnAC8w0LR103u85h0fwF7RmB7q9Cc:yGvT9mV39s099vNn58w0V1Cutc7Rc7GP","tlshash":"b9a2e17b6301c784d5149739a8bdc377d1f4582daf1e5e9d86e2c290a9c80d64d9838d","first_seen":"2024-08-19T13:24:25.091609Z","last_seen":"2024-08-19T13:24:25.091609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.291Z","timestamp":1723592827291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Sa-panahong-tag-lamig-mag-isang-nag-painit.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36244\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:44 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XQUTVHruzWgShCRJXgwch%2FpgQUPfRioZcRCY69Z9QMDOIftuSyfdX%2FEmsnvzgTYHjpOZ8PFpPDdJCt2is98VSIs8zUV%2F8VOEwo%2FQp9mlrKZozo7GS19PmQbUMqL5xtR4Dl0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a21cae7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36244,"size_decoded":36244,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x759, components 3","md5":"ff49a5025ef245da8f0d1d20b67284d2","sha1":"09ffe1cee73179d29e093157bd8eaf43524866a7","sha256":"049b912543e58b80208768cc09284b322744d96143a85212b8c2f92740786f23","sha512":"97c4ba976d8995ded922482536672d64b692812ee0c4238fc763438fefbedc8752c022e6ded8d2c354bd186b63c407e9f0d4ffeb0c200300363aa2f22ee08633","ssdeep":"768:qBh1c8hYvj+6EcII+4xLrBtjgbg4f9KZfVw/sKJ/87OCzWqltCO/qS+v0SFsdNu7:s1vKb3e2N+9f9KZtwE+wxy4/X+8Wucs4","tlshash":"c5f2f12aa72c2733c692143550ffc501fe41a974ba554d679413e938baa6eb12f3fb20","first_seen":"2024-08-19T13:24:25.092289Z","last_seen":"2024-08-19T13:24:25.092289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.248Z","timestamp":1723592827248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Napaka-cute-ng-jowa-ni-benny-ang-sarap-putukan-sa-pisnge.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71685\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:40 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FOzxwnqIqkfnhB6ZttyLSLvvbXV9V3JBMK1rIyvEOy0Tc%2FT5AFi5Awh%2BjGp4AZ7lAEBWWJUegTC04v5G9rklMaFfpzz2%2BmUyJ0wYcmqtwscdXuV8GmciAHTmuWZrs0jk9V4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc8e7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71685,"size_decoded":71685,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x763, components 3","md5":"b26d3d8f341f021961f41ce554104e5c","sha1":"cc0c0bbe060320ffc0d7552dc3c2d0a67f185142","sha256":"75ee37900452ce9d48c2ee9a20b8d5ccd35f4095bd7f68cad5ac8fa419a61f39","sha512":"328d5e340bf59598b89390a0bf430d8e744aede7614a28d35599a5f52ec73fdac9e57538e07369e5d27532dc11e22b0476372c3f1996920ef367a3940d4ebedb","ssdeep":"1536:O5Ye5SAuLV1DfX9GphbHan3JBTv14GudRWa/T8eMl5pkiR+S:8duLnJGDza3JBDiGudx8eMl5pk3S","tlshash":"d6630273dc01ff5531a2a129276dfb919698e100f9a0154efa1094c2bbac7e72df2bd0","first_seen":"2024-08-19T13:24:25.092932Z","last_seen":"2024-08-19T13:24:25.092932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Naligo-si-anne-may-camera-pang-kasama.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.225Z","timestamp":1723592827225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Naligo-si-anne-may-camera-pang-kasama.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73814\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:20 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r5ebsnQHeaV5erZHo1ospQCc42E1iCc2PZHxpBG%2B%2F%2FZkIRRpDliQiO0uol0Sil3eZShYt%2BWnK4zFcdYAOY%2FFHFs4evmDtO670VEJaxLTaljfzxVsfRLeJQTkKU3d9YJxZ2g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc867130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73814,"size_decoded":73814,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x812, components 3","md5":"5cd144601dd5de1b243b1d90e7b3d159","sha1":"844d68538b1a12c18f13f24722b30ab1986fc5d8","sha256":"7bb23f99bf86892bd61abd68338c01b2dd14bca5ce8b1831f118a67e5b1396a0","sha512":"c84bf6cb456634b63c54ab39cdc831423a8fb9cb4846a930a204f5f0e0c48302ec48f1182e1f62a003c113b3ea6135d17bc435e70c425e8a8fde8c265bf5f487","ssdeep":"1536:DxYGTXVZzE7iLzs1nRG9NYHVd+sRmdkWnCnp:l1TXV5ciLOnRGMHCscp+p","tlshash":"ad7302f98caf9f93b1f0ec595d9b787be6b3331520b019a5444f10cad43a9e10ee0142","first_seen":"2024-08-19T13:24:25.093586Z","last_seen":"2024-08-19T13:24:25.093586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.251Z","timestamp":1723592827251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/tuwang-tuwa-si-johny-habang-sinusubo-sya-ni-carla.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57397\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Tue, 09 Jan 2024 01:10:10 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EWERRbQdMLG%2BoVPcjawqTYG0Yx1sVbSwt7cgquC%2Fw23VbRAjnMTLmzkfl3dKEPns9jaXKz9JjYslRBQvE4umxiZtR16BOr9VxsJWj9TJMG0sf6nRfNInA3fOJkVF5V%2FCzNo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc907130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57397,"size_decoded":57397,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.96.100\", baseline, precision 8, 1000x1000, components 3","md5":"a46b5503ea5c15cb2d24e30ca3ff728a","sha1":"412ad029130a0fec7703821b6579dc12ea85e260","sha256":"b9842282542a7a92f662e82e0d864cbdcf2a3a691a71649d023235fe90f8172c","sha512":"e23c010a4be937c5b88b5e92434f7ccc69241c4ef88e6cf99d4cac26c7191f83c8ab77f310c6e9766864c401c0b5aa3a5b28d3697a7a1acdff2ff49d3f238007","ssdeep":"1536:gT707BQmCt1SDEWZHhsZC8geUrz9Ndv+pBhH2K:0707BQmm4EU6qrz9Tv+pTWK","tlshash":"c3430252fb68fcc9c560beb08237436a200c34b64866d66581cf96b77c9b78be6c1157","first_seen":"2024-08-19T13:24:25.094181Z","last_seen":"2024-08-19T13:24:25.094181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.241Z","timestamp":1723592827241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Matamis-hanggang-dulo-pagsi-kris-ang-kumiskis.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42384\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:50 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H8H9rUOmekTncvkdcCekJ0W6C1F1pz8dsF2Syqd8fiCPdw9nkGQbnnkWvLag59zUhQzrcVJu7maNlHRKYB5GwydZeSnUi6mXUC4WeJky%2FywzqYyGMRsagCVFJnDLZq%2FKk1k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc8c7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42384,"size_decoded":42384,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x780, components 3","md5":"35c82c0025c0a42b8f0a64f0f11f2bcc","sha1":"71e9dac45275c46c7ddd4d2c24c4c6c0165711e0","sha256":"cf64f23618ffbd4835299a4d064c7a8c48fa37c1fabc2d53892e7741f30f5a76","sha512":"474db62cbc5d653bb5df2f927cd1855539e83648c007facfbe492127303c41107c9b31a78b91cde0ba7b3172ea00e956f3bc50f4321fb8019a92711c0cdff0bc","ssdeep":"768:XB+IfOeTR+JLGP2OpZDchM1hCu5tUEfnl+7TgJgWjWXldZQB9D8vfzLQqUN7XFd6:XAMfEZ417gqh3bQ7TpZQBJ8nYqUFXF4","tlshash":"8813f1379b1e1bb454f21e90a3ec2339ad0329a200e9c1bf45488de1652f4ceddd9db1","first_seen":"2024-08-19T13:24:25.094772Z","last_seen":"2024-08-19T13:24:25.094772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Yugyugan-sa-barong-barong.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.233Z","timestamp":1723592827233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Yugyugan-sa-barong-barong.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55098\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:34 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4B6S1fZOtdFqpX0tS%2BvOODo2RMdr0eEUH0VZKGGk7RMuVtXj3sj4GrSgVd%2FNktDEkuQJwso40g1rWmD1KMyMA8vhwpXZwffc723mWsF5L5Ld5jzvZWqipE3miAxcSIX5%2BxA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc8b7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55098,"size_decoded":55098,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"7f1c36b8f5db96c85a04109ace180717","sha1":"aabf3a4a6e491ec7fb6dabe93a32fdd6a98367e9","sha256":"d446697772b42cbf41d8ff690f187c267e3c6fc843244a72f577ec043a1f81b6","sha512":"9a1254773626f4512a383d4441fb6eb6466bf539db20716facac9d21b7e516465e2e340b4abcdcda9954f75e6a4fcba3147ada72302502afa65f7894f93ba945","ssdeep":"1536:eMyqyw+HSQYsf65lDcE4NQ33gQpnjgHzyxN:eTqyw3QFfohSyBn6iN","tlshash":"8233f1bae7a93798cdfc193249ae3376ba4898b314d66355cda6ce71731308e1e4b044","first_seen":"2024-08-19T13:24:25.095413Z","last_seen":"2024-08-19T13:24:25.095413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Oh-My-God-Kuya-Rhodel.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.262Z","timestamp":1723592827262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Oh-My-God-Kuya-Rhodel.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77758\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:52 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LM1gU8ojZwU6bn%2FuFuH1%2FD4ngjtRFdCXN9WN2rhcYc7%2BDW2KOzS8A0L6RFdqHh6tIwSILi23WGcYJ9FTT5KRUEvGVLI0aljLOJ%2B7KUAYtLsAlyctiGC7OTiZbgMKvwUgKLc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a21ca67130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77758,"size_decoded":77758,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x721, components 3","md5":"8065271244ca717153c29933d7f44e09","sha1":"071a0105120b85ad545b9793fe5e95fa29765c3d","sha256":"9077ea37e608545286dcdd55bba21fb7ded4e7270040a1021dcf4067f3398971","sha512":"2a933512aecd6a7b74a1fbf737215b1686a19c059cf6a587f1f6a9e0e4b07c2e1e5d1be26d31c13ac723c1ade0558103a41b83101d6db19def8a217cbf3aaa33","ssdeep":"1536:JAZqiAzxcowqa4HtLe7zyjYl23JDaof5HKxtXjeYlcRlqTCYr92Qtlt:JAZqvt+cBi2J5RmvciTJc0H","tlshash":"da7302bb318b1a6be4bd06b2761b2762ef25b80706e373a7de034967b4072d53494137","first_seen":"2024-08-19T13:24:25.096121Z","last_seen":"2024-08-19T13:24:25.096121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Sabik-sa-sex-si-traxex.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.228Z","timestamp":1723592827228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Sabik-sa-sex-si-traxex.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115527\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:16 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QcY4xMe9fYUknjsbjYgrhEiN4XS89S34p6NFobrSFlbOuKcjqzO9cCVv4eUs0TuJH4sPN1bQGZudgEbvw8AsHzgUSlcKVk69ti4VofWv1BgYuSIlBHxskqkeIHaaUrObgd4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc887130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115527,"size_decoded":115527,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x695, components 3","md5":"222751ab7811f830ad80897c41247a04","sha1":"0d6cdcb90d1f965b149e1443da6a7bd5c89bb88b","sha256":"645beda42a1f6614b1fd7572eabd4768e24767aceb0a616e691359987802311a","sha512":"9b2ea808b230971adb572c84aefe47c3eaab4bd67601e60fe1e426aebb703553e3621d53c5bf0fd9f9550a90a7f4d58f0c54cee071c13c1082797a65432381a5","ssdeep":"3072:0bVNA43LOSLRR6s0ynQKHga8GdvuWj6rEi3kmpd:U3A43b/EKHJfjFmj","tlshash":"48b312a509da770b48cf2c30066cef6a7633dd7403ff9681c90adda62961f94a8c6357","first_seen":"2024-08-19T13:24:25.096724Z","last_seen":"2024-08-19T13:24:25.096724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.266Z","timestamp":1723592827266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Kapatid-ni-potpot-grabe-tumurotot-ng-tarugong-kulay-bunot.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59905\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:56 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J72mscKkGLbLJQgaHBJygpxWdl7Trqd4qvqgddA8%2F%2FR%2B3NifXR5DdDUk8NseBkiEkjLq%2FkwJDbuPXAk%2B6qj%2FYNSWsEA8bzCLBQMfMlTPsz5BTGU0K7CDoRIJtcovS6I7wFg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a21ca97130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59905,"size_decoded":59905,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x746, components 3","md5":"078b2c270fe3d8fc80322696fe8b10a2","sha1":"cb24d92e46b9a1c91247dd00774eeb6faef979d9","sha256":"37d38905fd0a812f3b11866669005e170b963e62d6792c879e3e69ab0b926111","sha512":"348ecfa1aa8f8d5b54cedfc60814fa7acab266c019ff022f3bb5752f46741b669baacfa042eba139f351781e2f849e7c569492937d59567133f0435fbbbb5e04","ssdeep":"1536:sa3vhPcd4uhIMtzDNCMi3+gMWawQ9erQKPr32:safUXhltzDNrC+gMiQgrzr32","tlshash":"0b43018d751e2781e4c50979474e338474705f96ebca24ab21922b2f43ec8f0346fabb","first_seen":"2024-08-19T13:24:25.097335Z","last_seen":"2024-08-19T13:24:25.097335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.280Z","timestamp":1723592827280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Cute-na-lambingan-sa-mamahaling-kwarto.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92785\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Fri, 15 Sep 2023 01:59:45 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c4vxq7zjJW%2BZy8BfclIX6i0uecf3A1TuucTcAlR3X7ORmsqslnPspcIdIivgjq%2FhJyofr3aEweSyGtWZ3X%2FRJW3giAH1CY8T%2F6B%2BBvhhWrC1WwQipGOFDPAIuzX2RSF49g0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a21caa7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92785,"size_decoded":92785,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1155x650, components 3","md5":"f48b1e1c6763fc9bfa2c284ae709bb3d","sha1":"1edd0e2d1068ece276c42ba1c82ccd84619d0404","sha256":"937e51412fc2822c889da3a0811d7d12ccf971a15d5f70ea5c6486d5f75e7d7e","sha512":"3765300edbf15e795b7402940d9343fde8f3182b7b98ddecbb7c5443627c97c1d275811aafc05a6647936b0cb2dbda3ef5c4d9c168fdf997c2d1fdfa24ef0370","ssdeep":"1536:yn7Q4iNxyCPV2aRBoFdBmXZElkDSA9ZOpJjpJWfBaGYTxVvXTZzXaeUt2uQ:H+CP4Sid8rWeZOprgjYBLaeE2l","tlshash":"2393120b7510861ac30aacf459a6f3ab9227c64f16de4fcc31d7174f6a78a1c1a7406f","first_seen":"2024-08-19T13:24:25.097966Z","last_seen":"2024-08-19T13:24:25.097966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.289Z","timestamp":1723592827289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Finger-Muna-Habang-Tulog-Pa-Sila-Mama.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88009\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Tue, 24 Oct 2023 02:50:32 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WMDDh91ZoYTk6iDyuV5NODFPHuZp9%2FFjIH1RS%2Fud76kL%2BfSZcLvR9luwEujSF7BeYkPu6L01HZ2aAPEA1A2wFbNckVjdjq2yQqjEhg8S%2FOGPsSE0U%2BtWHgMP26LuryLW89k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a21cab7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88009,"size_decoded":88009,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"b64e8e554e25103137cf5b617a478b74","sha1":"8c7fea4c73bf37c57eddc8b8e70ed7d4da02f77b","sha256":"875e1b2716e8654f0a1104c413c5db505210abdf99892e00c4fc069271ec9ed2","sha512":"c3e08aa02793df3961cd8ee2011da152f14ff61575da5d22dba1fbd7ea112e3151c4797098269dcbffa5d21988e866d37e7e22553f4d91ad3e24931782de03a3","ssdeep":"1536:QVq47axkuY6zENKLVp2lmnq1fedVda7GVlv1y6i8VzHTESUhEf8pEcwQcaKuqLYr:QA42OF6z/Vp2eq1fedVdaqvHXHbU88mW","tlshash":"7a83022e432c0c989a9890f9e1964578f52c170bb4b564f3336d363eb768261fe89279","first_seen":"2024-08-19T13:24:25.098586Z","last_seen":"2024-08-19T13:24:25.098586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_img/Si-kito-kung-umiyot-parang-kuneho.jpg","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.264Z","timestamp":1723592827264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_img/Si-kito-kung-umiyot-parang-kuneho.jpg HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81186\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 23:47:06 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:32 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4sLWeYwRC9VCQuv%2FEHl4h9U5eEhwDv%2Bv9HRpBHXN8Q5Scb5vMXJCZfSSxlZM5OyndYM2Hz%2FPXYIPYZkOoBXpXqEzZLwnoCap8bN3hWFjC%2B57uIshdHQNFmU%2BEa3xmU8y3pw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a21ca87130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81186,"size_decoded":81186,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x718, components 3","md5":"1175cf010c0b7c8ae84e713a9b9bb3da","sha1":"695649da671d78b72d971deb66554712ad7a402c","sha256":"9f44a4ba6de9be779e63ceed8e4b3c6466c0839d6aa8a640a5ab4ac40e09da93","sha512":"71725cbb3ff8a55a3833426f55aad79c992313e1695107224029f3480e3004d23e488d73b16a2543d9437a637db38fadfe771b0877cad15c0d440776d696b824","ssdeep":"1536:m8dVhvyYMNwfJW4ry9cflDTZwj54AwptVyJUAoh3F:pjvyYMNwfPrGcfxTK1401ohV","tlshash":"538302f1abbae326bfce21462d9e1a9c2940bb26f015b434b6110c1d551c4cf45edeaf","first_seen":"2024-08-19T13:24:25.099281Z","last_seen":"2024-08-19T13:24:25.099281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"impracticalsmell.com/YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W","fqdn":"impracticalsmell.com","domain":"impracticalsmell.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.651Z","timestamp":1723592827651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"impracticalsmell.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jul 2024 03:48:49 GMT","end":"Thu, 17 Oct 2024 03:48:48 GMT"},"fingerprint":{"sha1":"BA:D6:B8:6D:57:6A:08:FC:86:57:E5:A1:74:38:00:D4:0C:99:FE:DC","sha256":"5C:EA:CF:2A:5B:8C:98:68:96:27:A0:6F:E3:AC:2E:CF:05:EE:12:1A:04:A2:97:A1:ED:04:32:E8:78:B6:02:08"}}},"request":{"raw":"POST /YM2_xOpPZ.WQ5R0-ZTGUFV0WY_TY9Zyacbm-ldkePfTgA_3iZjWkJlj-NnmoNpkqM_jsFthuNv2-FxhyYz2AI_2CMDzEgF5-MHjIBJjKN_GMNNjOMPG-YR4SZTjUQ_0W HTTP/1.1\r\nHost: impracticalsmell.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 75\r\nOrigin: https://pinaycartel.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-length: 0\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.674Z","timestamp":1723592827674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 94544\r\nexpires: Sun, 03 Aug 2025 23:47:07 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=roQkGVV4oODfpDEMZU70eIiiBVA51pzPMSHTw7Sl63wibWrfZOtDgrRUH1x7rpN%2BwARvKHbfR5j0fTvGxHPB596X1OeFY53tPpG1zCf%2F6xGkzIkOeMpDtRaDNsjlomQ51tmfeX3c\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b2c96a5baac5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27958,"size_decoded":89476,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-07T22:35:21.712281Z","times_seen":219315,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":118,"dns":2,"connect":2,"send":0,"wait":24,"receive":4,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.684Z","timestamp":1723592827684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 137405\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64bb5c88-218bd\"\r\nlast-modified: Sat, 22 Jul 2023 04:35:20 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 527253\r\nexpires: Sun, 03 Aug 2025 23:47:07 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8x8NPUyKlG9V0xk%2F1uq8DSDYA5nL1uSfvXcOo8R9aGhrXvWxV6OocUSZcprmBS%2FHhRuI%2BMoEPMphKsYMw8KbViOUbqkW%2FhD8LXyYe8vHCeLyssXMPcIXRiMQNTUsE1nMA%2FKb%2BUYt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b2c96a5cab35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137405,"size_decoded":589278,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48459)","md5":"d7fdaaab43bc993b85290c713fd2d289","sha1":"46bf3d27b2cf38b0e999d3b0a7613011181c87f9","sha256":"c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e","sha512":"e1cc8a4de54d2d1454b9b58718c7446aba03c7901e09b72a480bfa1d916c96492df25acfe1a95e8fcb15ea9ef12a48ccf799a0eedcf36640524ec089e38f2077","ssdeep":"6144:t4iiw3vnwan/i4WfvISkj4dsJDMXEuxFY9zpDkmqPgr4dAXFeUffWuRgn:t4iiw3vnhn/iyDMXEu0sTdExRgn","tlshash":"b9c42bc87285717247d370b6543f120a723a9e6d5808c16cf529e9da2df8e4da23bf78","first_seen":"2023-10-15T07:44:37Z","last_seen":"2026-04-07T16:00:49.843807Z","times_seen":2029,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":26,"receive":26,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.676Z","timestamp":1723592827676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 591\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-514\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1032572\r\nexpires: Sun, 03 Aug 2025 23:47:07 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XgSe1haJTs0Nzv2LAc0lpLpGtgcWMQew%2BLt3VmNjrXxvg6uSJfHqyyx%2FmS7sds4iXQDEeWh6WjCUaq%2BpaCOJB5bjmAjU5I26qG2VwWAkBNf1XSOvz9z%2F%2BtQyXsbB5V%2BbkxiRsBA6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b2c96a61af75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591,"size_decoded":1300,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"0f2156c870caf45442179b3827bf249b71baf655d09e80a4c3c6d6d43f788660e52eb9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-07T22:25:34.489461Z","times_seen":17906,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.685Z","timestamp":1723592827685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 04:16:10 GMT","end":"Tue, 29 Oct 2024 04:16:09 GMT"},"fingerprint":{"sha1":"00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA","sha256":"72:D6:2B:56:73:25:5D:B2:70:3A:75:0F:19:F3:83:0B:91:D5:33:80:81:11:2E:DC:30:85:21:D7:91:C7:89:33"}}},"request":{"raw":"GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1571\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"630ad3e5-623\"\r\nlast-modified: Sun, 28 Aug 2022 02:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 521557\r\nexpires: Sun, 03 Aug 2025 23:47:07 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bFXA1d8iEOpVGW9TfBIvKSifUd3H5pQa8q6OPRstHh4Ow9y48E5e2nWy6%2BlM3RM6lemIzEcT6R1eQrFnHfS%2Ft%2BOfq8j9UJPxyeLZ0WUHJZf5xx7V1x6hlGPsHzzXD%2FPMhXRLMo%2Bu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8b2c96a62b095695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1571,"size_decoded":4580,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4505)","md5":"f2ecb2bd8a424c8e8cf507ce8bd933c2","sha1":"3cbc08ca052ea25c3b0834b9291a3ca1e9122e26","sha256":"4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099","sha512":"5c5cb01b30e7dad3dcfad17845b399768970d755c1743dce82602f9c2fb2a220f5a8148656c8593d912ae9dd576330ab66936b557a4f72e60f771de4d1066473","ssdeep":"96:2GATaPI0DPsUpUjS0kCofLMdAxRF3gb3CuxE6eVK5HtkH28ugVkkTiU:bAOPI0DkaUjJkvId3bBLp5SHfth","tlshash":"faa1d8d47002f52201e586e616fba48f27726dd66c0c007a211eebfc7dbd7ab43038a6","first_seen":"2023-03-09T00:26:57Z","last_seen":"2026-04-07T16:00:49.853062Z","times_seen":2028,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":15,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/img/no_video_3.svg","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.679Z","timestamp":1723592827679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /img/no_video_3.svg HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2812\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-afc\"\r\nexpires: Wed, 11 Sep 2024 18:37:36 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 63288\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2LqvfCFcWXmlW81IRRcJOxBjVexBtNmZdgxiDLC%2FOws1f92WYHHEk7J7%2F6JfNKyWgM0bGW4IHb9nNrVSbKubfLq2NqereSqFpKnhek9vhKwMJYoSdt3bv3v21nU4Kw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a64ef2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2812,"size_decoded":2812,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"077bfdaa49ae4877a42611b739ec4752","sha1":"a2f9e1222b7af9abc05122411ab8902efcc08ead","sha256":"70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c","sha512":"9eac1eaf362f200f037ae6c0c9d5c257bb57708de9955816c69d67689293430bdf39cdcd91522a993c48b823971cb984956e1ebe44516a323da03ebcd2cbefe3","ssdeep":"","tlshash":"c95164dcb81c45bd890aa7f85a687e61366f91cd40734c8d78bd0ee223d0eadb114a9c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-04-07T16:00:49.87746Z","times_seen":2681,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/ads/ad.js","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.677Z","timestamp":1723592827677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /ads/ad.js HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 18\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\ncf-bgj: minify\r\ncf-polished: origSize=20\r\nexpires: Tue, 12 Aug 2025 23:30:26 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nvary: User-Agent,Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 63287\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0mQqJpnB%2F7zsSVmwTqiQZELVWrnkWKmAP29mJPmTE8GKjpk7Tp9wmAZA9ucqYKZqgO4Z16eUoWheS6BGt%2BohP0FtmY7Os2fcCsgD6ArZ9p7nxe7OJW%2FTdFdV0hYzgA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96a65f01712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18,"size_decoded":18,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"071c641b229d2bfadd243b8fa2a9c88d","sha1":"4048ed3ad506f9bb9052c23283912d0cfea8bcc6","sha256":"3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e","sha512":"31b7b4ae25e93eb16162f1ebe71a1fb95e11187a94b20f9d54f30241e0e3bc6acc5985c36f8c08054b76d65d426ebf65fd86ed19cb6ba700089b267ba98d0b39","ssdeep":"","tlshash":"7070008222008032800ca0008088c0088008020280a0800232008000000028300000c2","first_seen":"2023-03-07T01:38:47Z","last_seen":"2024-11-23T09:20:45.223064Z","times_seen":1039,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":218,"dns":19,"connect":12,"send":0,"wait":10,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-13T23:47:08.036106874Z","timestamp":1723592828036,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3947D4EF03CDDA1C274C3B37E8AEECEC986EA1EEA8E5A88D02CFEADB0261DA64\"\r\nLast-Modified: Tue, 13 Aug 2024 02:28:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6609\r\nExpires: Wed, 14 Aug 2024 01:37:16 GMT\r\nDate: Tue, 13 Aug 2024 23:47:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"3b9655dc1d84f6d40730654968058777","sha1":"b9843885ab69f7788181090b55050a7ea79c078e","sha256":"3947d4ef03cdda1c274c3b37e8aeecec986ea1eea8e5a88d02cfeadb0261da64","sha512":"2a5a2691ab2eb1f5d68b23b8827c643803965e122ae53c2108c7621e6767882e9c8a0eddc98a5f1b0a85f4353b5dd893ba998f460ec2640f921166d0e02c9cb4","ssdeep":"","tlshash":"4af00e1372adec0127ba445a1ce3d1223c3494dd9978204a48c843d56ce6becb88a2cc","first_seen":"2024-08-13T19:56:00Z","last_seen":"2024-08-19T13:34:00.889239Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.co/js/embed3.js","fqdn":"static.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.686Z","timestamp":1723592827686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /js/embed3.js HTTP/1.1\r\nHost: static.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 112790\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: minify\r\ncf-polished: origSize=112944\r\netag: \"65bf48c8-1b930\"\r\nexpires: Wed, 11 Sep 2024 18:37:36 GMT\r\nlast-modified: Sun, 04 Feb 2024 08:20:24 GMT\r\ncf-cache-status: HIT\r\nage: 63282\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IsSZi4elWKHcQicRlHm0i%2Fvf%2B%2BQDHKZym%2FVKOGqcxaRuVb2lYk4DPW71rPKdsafFO1sKaINhoqJ5%2BuP6I5BK%2BMKHsuVEPP0YZ3v%2Fe7XU61Ty8mhBCqmSh3xE7dzOlo5Ssx9g\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a66f06712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112790,"size_decoded":112790,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators","md5":"59698656a40921f7585e25a5bb347955","sha1":"75de624e80155463ff8bb09090b712098eb74dd6","sha256":"69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34","sha512":"da0ee57e16f28bea2b354e0a71f148f6d614ec4aaa26f046f0f8e2605d1de1c293978de542c1524f2e61d74ab33057e4b06872a95e8a6c895c86b0446bb912d1","ssdeep":"1536:1Swx/jSB9d9mNcnaz/oj1jxtFzkYZo2nopAMiu4aMVn3rRRk7U5oAAT5Smka7azH:Iwxo9mNcnaqNNSAMi3E+G7gp","tlshash":"44b32bc872d2b0a257e37079103f610bf23a5d69b80d8458b159d9e97cf8d8a8237f79","first_seen":"2024-02-04T21:01:01Z","last_seen":"2024-11-23T09:20:45.225924Z","times_seen":661,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":31,"connect":13,"send":0,"wait":12,"receive":121,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-13T23:47:08.060407908Z","timestamp":1723592828060,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3947D4EF03CDDA1C274C3B37E8AEECEC986EA1EEA8E5A88D02CFEADB0261DA64\"\r\nLast-Modified: Tue, 13 Aug 2024 02:28:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6609\r\nExpires: Wed, 14 Aug 2024 01:37:16 GMT\r\nDate: Tue, 13 Aug 2024 23:47:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"3b9655dc1d84f6d40730654968058777","sha1":"b9843885ab69f7788181090b55050a7ea79c078e","sha256":"3947d4ef03cdda1c274c3b37e8aeecec986ea1eea8e5a88d02cfeadb0261da64","sha512":"2a5a2691ab2eb1f5d68b23b8827c643803965e122ae53c2108c7621e6767882e9c8a0eddc98a5f1b0a85f4353b5dd893ba998f460ec2640f921166d0e02c9cb4","ssdeep":"","tlshash":"4af00e1372adec0127ba445a1ce3d1223c3494dd9978204a48c843d56ce6becb88a2cc","first_seen":"2024-08-13T19:56:00Z","last_seen":"2024-08-19T13:34:00.889239Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg","fqdn":"img.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.656Z","timestamp":1723592828656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /splash/1ng7gbzaumfpmp95.jpg HTTP/1.1\r\nHost: img.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30225\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=30417\r\netag: \"64d7f56a-76d1\"\r\nexpires: Tue, 27 Aug 2024 16:28:37 GMT\r\nlast-modified: Sat, 12 Aug 2023 21:11:06 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AzOC3M5YPwAA11qdXaERIWqWK9SjS%2B5mGZMG42CV5S7%2FRzjwgj0ql98WgHQfFzVsSc%2BXuwCqq5loxAEazkrLGPSIfLz2inDeyN6Z5kV9pyX0tu2X56xonqD0e%2FBxxkq7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a66f0a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30225,"size_decoded":30225,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 402x715, components 3","md5":"ab616705ae0ddedc63c27a70a9071627","sha1":"759bd4223a0482f59f08339e1c143627fa9a04f8","sha256":"ec4577c275b2d1deaef01399337349d65613d6e71ade62ee42d0c0b6125f67fe","sha512":"cb4b5d2a7faef00e24d5697d6c575ff4726015c28d974830397cfd72c1f5926cfa0fd001c97d204b9bac9613b3b077d6a3829097065adea9300d8528ac25addb","ssdeep":"384:giqnfpPdnhdhyg5kxgYRQxcvEYe+b5cta6pa3zcqSkuKM70K/ssgCo76DwXKjRGD:mnR/fgluL6bGtXC2ADsg73OGzR//6C","tlshash":"add2e13233414b1efe0ea4e6a55e2ffb87b7d2e2584669897f0c6a954014737503e2a8","first_seen":"2024-08-19T13:24:25.106065Z","last_seen":"2024-08-19T13:24:25.106065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":120,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_settings/site_icon.png","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:08.116Z","timestamp":1723592828116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_settings/site_icon.png HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7697\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 01:40:38 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:01:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 79590\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ucQ9l9W7EwQ67OgMiKea3RkYp9RqmB0wYYWstEplmioabFhVl%2FBzGCt5vC0dKRY6Oo8W0x6KE6oP0JSxfh7oG8%2FJfVvWX%2FD8ZEtIXtmwpzqlCo2WgNIIvtavO%2FfhWbwXlW8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a74f297130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7697,"size_decoded":7697,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 156x156, components 3","md5":"a5b7f601a86c02677a6cdb6b31b2c830","sha1":"53afaa1b004c2ca958f043b94c5d0cd762aa2e3a","sha256":"12a429a9cfcbb031d13b3f64107392154b7f955b91e6d57800515e67d943b0af","sha512":"ad1b97f2d80f4b17b9386cd75854a0a5d1cb6cfdaceec5b87bde9081f4a05e5436463f75dde54376e652b9c244b783c5e49229765db0491291c9241425261549","ssdeep":"192:zi2IXC1qdTlNNOGBTK5MN2ry547WuAyj5vQQAax02OT:G2TgDRK56WdAyVzxaT","tlshash":"8ff17d379a5247548912b1320e97098c4f44137de1e914ad7c7387b39a18f72836efbe","first_seen":"2024-08-19T13:24:25.107182Z","last_seen":"2024-08-19T13:24:25.107182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/00_settings/site_icon.png","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:08.116Z","timestamp":1723592828116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /00_settings/site_icon.png HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7697\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 20 Aug 2024 01:40:38 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:01:00 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 79590\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yc9epoK3vc797O21KJ1ysJnzT8IzYsWUmU6k58xi3RR7IiD%2FEoF6t9EZsdWHcZ1brSAlR3azG%2BJbibidmhnJcFO%2FnNMrnEFVvI%2F3JYxFm8SUoNX8UbYnIEmlEPOG6cmCwrw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a74f2a7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7697,"size_decoded":7697,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 156x156, components 3","md5":"a5b7f601a86c02677a6cdb6b31b2c830","sha1":"53afaa1b004c2ca958f043b94c5d0cd762aa2e3a","sha256":"12a429a9cfcbb031d13b3f64107392154b7f955b91e6d57800515e67d943b0af","sha512":"ad1b97f2d80f4b17b9386cd75854a0a5d1cb6cfdaceec5b87bde9081f4a05e5436463f75dde54376e652b9c244b783c5e49229765db0491291c9241425261549","ssdeep":"192:zi2IXC1qdTlNNOGBTK5MN2ry547WuAyj5vQQAax02OT:G2TgDRK56WdAyVzxaT","tlshash":"8ff17d379a5247548912b1320e97098c4f44137de1e914ad7c7387b39a18f72836efbe","first_seen":"2024-08-19T13:24:25.107182Z","last_seen":"2024-08-19T13:24:25.107182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG","fqdn":"ey.dramshaplite.com","domain":"dramshaplite.com","tld":"com"},"ip":{"addr":"23.109.170.72","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.688Z","timestamp":1723592827688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ey.dramshaplite.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Jul 2024 06:15:51 GMT","end":"Tue, 29 Oct 2024 06:15:50 GMT"},"fingerprint":{"sha1":"8E:78:37:5C:4A:84:BE:85:4B:73:C4:DD:71:FC:D8:D9:20:15:3F:4C","sha256":"73:75:03:04:D4:67:FF:70:92:C0:F5:93:E6:4B:65:9E:A0:13:F8:5B:8A:8B:98:9A:33:7C:87:D4:CF:9C:5A:3A"}}},"request":{"raw":"GET /rBoMTOsebwJmPbn9/MQmjG HTTP/1.1\r\nHost: ey.dramshaplite.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Aug 2024 23:47:08 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://dood.sh\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Wed, 14-Aug-2024 23:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Wed, 14-Aug-2024 23:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, from Unix","md5":"7029066c27ac6f5ef18d660d5741979a","sha1":"46c6643f07aa7f6bfe7118de926b86defc5087c4","sha256":"59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2","sha512":"7e8e93f4a89ce7fae011403e14a1d53544c6e6f6b6010d61129dc27937806d2b03802610d7999eab33a4c36b0f9e001d9d76001b8354087634c1aa9c740c536f","ssdeep":"","tlshash":"de70000000c03c30cc00003000000000000c30000000c00300000c3000030c000c003c","first_seen":"2023-04-09T15:32:38Z","last_seen":"2025-03-02T06:10:10.559841Z","times_seen":229342,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":162,"connect":18,"send":0,"wait":24,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-13","alert":"Sinkholed","trigger":"dramshaplite.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/?ebued=1004075","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.693Z","timestamp":1723592827693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Thu, 19 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52","sha256":"E9:59:5B:FB:7B:3B:3F:96:AE:46:70:B0:A0:33:9A:0E:15:23:16:45:47:E4:D7:05:52:4B:6B:08:84:7B:BA:1D"}}},"request":{"raw":"GET /?ebued=1004075 HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 69406\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: DJzI67m-UXclrzqv9TKctxWvjfMxnJ6LSViHVpq20Reyhz566zVZTQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69406,"size_decoded":209761,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15945)","md5":"40686440ea5d3a4dd9d0cd8419cb6c11","sha1":"2226b47f1479c0ab389afabbf9b96f7a680a1461","sha256":"53e447ceb1bf314a322a9344c92239c37e58648fb09eef7de929d8083a756d6c","sha512":"7d5908a3c4c407a04c1f72da65dbc07e9fdc9ce35e67cba060d762b478c3158f860b51d54b6cb21b291df5fc8316213125d1f1e7d003bc21108a090d200abc30","ssdeep":"3072:IpmI95e44J6azbjK+55U3Hv5KNG+mtz1H63NZkUMsE3:Ip/5eHJ6onA1a3N+wI","tlshash":"58243b8dba92346983a374b540bf124eb23f4669bc084dd4b49ad4d07db4d4943bbfac","first_seen":"2024-08-19T13:24:25.108568Z","last_seen":"2024-08-19T13:24:25.108568Z","times_seen":1,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":39,"connect":40,"send":0,"wait":173,"receive":4,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/fonts/avertastd-regular-webfont.woff2","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.659Z","timestamp":1723592828659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.co/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23812\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\ncache-control: max-age=2592000\r\nexpires: Wed, 11 Sep 2024 17:33:45 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 61488\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w3Cy61%2FsGBoYcuFmZAAeW9BSSj6HPKKw6m8pKWK38mL%2B1glUzkGzK8j%2FQKI2qn70SopzfFg2f3%2FLOfpX01PjK2Hs8L59is%2FJwQlQhDqktUMvX0Ckl7vDNZYpR0KWbg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96ab6e125696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23812,"size_decoded":23812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23812, version 1.524","md5":"eb586e5a1b86dbf1c866e3ed80f9d18e","sha1":"280ee78d19c017ab9335f769595e5157d3c4a343","sha256":"714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf","sha512":"18b5a9996a6d0fd263f778b1ce4b7a84c42febf2dfcd5187bdc74192c156571823e973d6720f45536ef1048a355313169a4f1de1ebc30bdb0989065a1ff9ffea","ssdeep":"384:bdPI9PvaAAoKG+zf3bAVYGlg96u6Z+tUF7ZrzSkorNYlVFLhfkZv9wPXcqEbJtuE:bdPIdCA7+jVhvUFtrzSkMNOp9k99h7dr","tlshash":"c2b2e17ad02cde72f5b6f3a59b2486e2d136d235232333e2151b89ba826170e1d16bd0","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-07T16:00:49.874936Z","times_seen":4026,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.com/theme_2/img/loader.svg","fqdn":"i.doodcdn.com","domain":"doodcdn.com","tld":"com"},"ip":{"addr":"172.67.208.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.657Z","timestamp":1723592828657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Aug 2024 09:13:15 GMT","end":"Mon, 04 Nov 2024 09:13:14 GMT"},"fingerprint":{"sha1":"C4:B2:FF:D7:AC:99:CA:06:A1:DB:D7:A2:C2:ED:27:F4:2C:E7:FB:3F","sha256":"27:F9:24:E2:A1:B4:33:9E:6B:D7:BC:7A:A1:1B:FA:8E:F5:2A:F3:05:A0:32:0E:71:1D:E0:13:66:A0:CB:E4:B1"}}},"request":{"raw":"GET /theme_2/img/loader.svg HTTP/1.1\r\nHost: i.doodcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://i.doodcdn.co/theme_2/img/loader.svg\r\ncache-control: max-age=3600\r\nexpires: Wed, 14 Aug 2024 00:47:08 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lZKofwBOUKWutk5TtpkVnHdD4VUz8GHzb69U5z22Tb6uqUh6hCX97wAo8kEZ6c0TEHpusfsHJ7N8p%2Bumw2Qxh9Mtr5U%2BVJ6Gs9lYVxyy4BAuTyVVleB0LLOOA5oFHgei\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96ab988db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":167,"size_decoded":167,"mime_type":"image/svg+xml","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0104c301c5e02bd6148b8703d19b3a73","sha1":"7436e0b4b1f8c222c38069890b75fa2baf9ca620","sha256":"446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f","sha512":"84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf","ssdeep":"","tlshash":"c4c08cad6b523c98b8a73b3960c3a1a0e2ec803022d9042202b04a07f0cb1e78ec23d1","first_seen":"2023-04-05T06:32:17Z","last_seen":"2025-09-21T18:05:05.674757Z","times_seen":190494,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":76,"dns":34,"connect":5,"send":0,"wait":6,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/e/oj3tl9itav1x","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.178Z","timestamp":1723592827178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Jun 2024 00:03:33 GMT","end":"Fri, 20 Sep 2024 00:03:32 GMT"},"fingerprint":{"sha1":"90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E","sha256":"D0:B5:F1:39:E7:7E:B2:B7:84:FA:B2:CC:31:DE:D1:17:92:58:F8:5E:FF:9A:56:A0:B5:AE:52:8E:FD:A7:4C:0C"}}},"request":{"raw":"HEAD /e/oj3tl9itav1x HTTP/1.1\r\nHost: dood.sh\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/e/oj3tl9itav1x\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Mon, 12 Aug 2024 23:47:08 GMT\r\nset-cookie: lang=1; domain=.dood.sh; path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=f%2BJU1XardqwQ22qp3kK9BWoVMvuBl3z7N0Vjumw%2BE3HY2S9hOZRGlw%2BzZmtc5QfTmN0OcjM9pMZrGefL1iX08C8KP%2FPHYwXTSjSkYwSmNWoyf%2F7f%2BnQiLGQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96abbfe6b511-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":78,"dns":49,"connect":1,"send":0,"wait":86,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"img.doodcdn.co/splash/1ng7gbzaumfpmp95.jpg","fqdn":"img.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.656Z","timestamp":1723592828656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /splash/1ng7gbzaumfpmp95.jpg HTTP/1.1\r\nHost: img.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30225\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=30417\r\netag: \"64d7f56a-76d1\"\r\nexpires: Tue, 27 Aug 2024 17:09:56 GMT\r\nlast-modified: Sat, 12 Aug 2023 21:11:06 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s%2Fa0fssHdCJR5bLPzPFmMrvfcJ368QlNHlwbhDKaLb178CLnLukqywCZLX1QqsNvs5NXw9x053LFIeRJpFUWaULZcIfTnTjYP7PTAhGw%2F3pLbO%2BhLmbjHTzDXoSkV76w\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96ab6e115696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30225,"size_decoded":30225,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 402x715, components 3","md5":"ab616705ae0ddedc63c27a70a9071627","sha1":"759bd4223a0482f59f08339e1c143627fa9a04f8","sha256":"ec4577c275b2d1deaef01399337349d65613d6e71ade62ee42d0c0b6125f67fe","sha512":"cb4b5d2a7faef00e24d5697d6c575ff4726015c28d974830397cfd72c1f5926cfa0fd001c97d204b9bac9613b3b077d6a3829097065adea9300d8528ac25addb","ssdeep":"384:giqnfpPdnhdhyg5kxgYRQxcvEYe+b5cta6pa3zcqSkuKM70K/ssgCo76DwXKjRGD:mnR/fgluL6bGtXC2ADsg73OGzR//6C","tlshash":"add2e13233414b1efe0ea4e6a55e2ffb87b7d2e2584669897f0c6a954014737503e2a8","first_seen":"2024-08-19T13:24:25.106065Z","last_seen":"2024-08-19T13:24:25.106065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":120,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/tag.min.js","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.776Z","timestamp":1723592828776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"waisheph.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Jun 2024 23:53:23 GMT","end":"Mon, 16 Sep 2024 23:53:22 GMT"},"fingerprint":{"sha1":"A9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81","sha256":"53:06:D6:17:98:93:14:0E:96:FB:16:54:A8:27:B4:10:34:94:12:FD:96:0C:5F:BB:E9:31:58:7A:EA:A3:92:13"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: waisheph.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 26352\r\ncontent-encoding: br\r\nx-trace-id: df7a5a68f45ba7ff626497c083bb4dd9\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\naccept-ranges: bytes\r\nlast-modified: Tue, 13 Aug 2024 18:34:10 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26352,"size_decoded":68838,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5cea47c4ab2963d3d93d9f1931e0de91","sha1":"c71cb86da149cee1cab013723b08487aafc219ca","sha256":"a74fa0f1f017157f11ca71db86567c7625c8f66fdb180020229f4fdd88cad42c","sha512":"6613d83c429bb1744dab8f1555f76718b477a18b41ec7685f681725592ca3a94a278d14deeadf104e35320e76ebe21c0739b0d2b1ff4549e5287f311254a101c","ssdeep":"1536:OC85wZ0SFXHa5d+rcXTJVSJEe0hFiyeXcMpwQp:16S0cX66rcXTJVMWIyesYwQ","tlshash":"886329a173d5b832427f5021103b44096a9a8f44184fceb6d2a76577e8a571cc3abffb","first_seen":"2024-08-13T23:00:02Z","last_seen":"2024-08-19T13:33:06.872143Z","times_seen":8,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":103,"dns":11,"connect":27,"send":0,"wait":54,"receive":13,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/bootstrap/js/bootstrap.min.js","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.025Z","timestamp":1723592827025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Aug 2024 14:50:09 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 205018\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IK8DgFMH9MkN9a0jb62aQmQWEfNzzWvxOe8P15Pcdw8sWiEcPfCQWlUqNlqZnoeu9wNuXyRYTf9N9NQe5fW%2BEeu8rfEtxZB13VbvPD0V3xwu%2FV0ZT3pbuuGiq7Zx%2BaDuicQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0cc127130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93717,"size_decoded":80372,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7d3cf48f5bba5db5258a2ff0f65ef00f","sha1":"52abb563b246cbce1edf317417c6ff631059a2d6","sha256":"0ff3cadb509482ccb23bb600c5c01eb721877a5cd7187d96c8b0af2135c29ca7","sha512":"92b9279b3066e5787393b19e486f841a95090e1d834c9e9c4087a05cd050d56917ba6e891ab8c57f4d4a3fc988b2457332b8ba802952b9e0b60017c5a9876a86","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kG:b4Fj8GPwRM3CiI9BtX","tlshash":"d273c6593244b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc867277f7c","first_seen":"2023-03-14T07:19:49Z","last_seen":"2026-04-05T01:21:44.494994Z","times_seen":114,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrgvugostlyhewo.info/NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw","fqdn":"vrgvugostlyhewo.info","domain":"vrgvugostlyhewo.info","tld":"info"},"ip":{"addr":"172.67.136.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.801Z","timestamp":1723592828801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrgvugostlyhewo.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"E1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8","sha256":"9C:82:A9:D6:3C:5B:FE:49:98:F3:78:EB:66:E9:11:DA:12:CE:BC:B5:FC:44:E7:A0:D7:27:9E:CA:68:26:47:97"}}},"request":{"raw":"GET /NnU5a2UZSloYWGUgUhwwBx0NDiR4GVszJ043fjEKUz1KLTxxAh8fDFJICFtVAkUOXkNGHF1WVBAGTQoRQwYEWkNfG18EWBADBFpLBUEXWFMYQR8eWAdTTRsEUUgITRVCAVVWVAFHCl5cBE0LU1IDRw HTTP/1.1\r\nHost: vrgvugostlyhewo.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4OKL1J8XdfevZWaGXmjoSa86irsp2jQSenYDkRxs6tjDaEh2RtFUuHJAvcfm5uBKlObg9DF7%2B%2Fpj630or13Qsuwv784nIxJ4lAxtKeewzB7YAcl4tRtcoJjar2jZsUl8QY2tdc%2FKbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96ac18b0712f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":157,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg","fqdn":"kologyrtyndwean.info","domain":"kologyrtyndwean.info","tld":"info"},"ip":{"addr":"108.157.214.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.796Z","timestamp":1723592828796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kologyrtyndwean.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 28 Jul 2024 00:00:00 GMT","end":"Tue, 26 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5E:8B:19:67:7F:06:13:2B:24:F1:D0:7F:4C:E4:AC:77:EA:7C:3D:99","sha256":"8A:A0:A6:A7:40:CD:DD:26:0C:62:06:00:34:F2:2A:E7:65:91:17:DE:65:39:D9:B1:03:CA:18:6D:DE:E2:62:64"}}},"request":{"raw":"GET /aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg HTTP/1.1\r\nHost: kologyrtyndwean.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1189\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 009f08cce389af684f28c36891875534.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: E48j2JZzd-OR3qeqmYZYKWD7WyjAD2xr-QN1PK0cXu9FWP1yxJohlQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1189,"size_decoded":3034,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3034), with no line terminators","md5":"8c692c8944872129f48567305fcea54a","sha1":"55a32a9b37ce36df780b00cd43d6675ce983c3a1","sha256":"27a5565499f0da77cda061ab66cf5fd35c2feeba827294dbf093193e3991b5a8","sha512":"662632cdbc56abafeb4c8dab979a450f55d36a4813b4ce7c8fe6d3f487150ba2eac8672b3d1d64265f5f2008451f9b53d885923a5108af3118b36c16ca40b28f","ssdeep":"","tlshash":"4651119d34f3a0c282f66025043bb99afa285aa1834ccb14867d97bcbd715ed6357f4c","first_seen":"2024-08-19T13:24:25.111992Z","last_seen":"2024-08-19T13:24:25.111992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":65,"dns":30,"connect":8,"send":0,"wait":113,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q","fqdn":"getrunkhomuto.info","domain":"getrunkhomuto.info","tld":"info"},"ip":{"addr":"52.85.243.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.818Z","timestamp":1723592828818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getrunkhomuto.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 01 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E","sha256":"E0:2E:8E:E2:F4:4D:47:72:B3:70:D4:85:A4:D4:78:58:C5:6D:3D:49:C0:F7:FD:EE:97:88:D5:8D:1F:B6:8D:02"}}},"request":{"raw":"GET /WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q HTTP/1.1\r\nHost: getrunkhomuto.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1177\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN1-C1\r\nx-amz-cf-id: 8mIRo4QXZTTH7OEHldsoAU4H3UutPSIktLeBokGQthskypaAkYyKzg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1177,"size_decoded":3025,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3025), with no line terminators","md5":"1ead4d2bc4e597a26f9cc0e96bf2d819","sha1":"cfb4940b6a1e1ec79a48a43baab691fea77af783","sha256":"d1717761a77e41d1f77ed68d6fabbdb2ea618cd52ca9b1c9ce5d54da93a3d959","sha512":"13988dbd4ed155903490063495680356b88042d12f3b8e373d0fc6595e85eb38ab61c46d1161fd29faf77c293cea2ab2e3bd270e4d653afd9dd7b17214f47f72","ssdeep":"","tlshash":"c151108d34f3a0c282f26065043bb59afa385aa1834cce14863d96bcbd715ed6357f4c","first_seen":"2024-08-19T13:24:25.112699Z","last_seen":"2024-08-19T13:24:25.112699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":65,"dns":27,"connect":9,"send":0,"wait":116,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.207Z","timestamp":1723592829207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Jun 2024 00:03:33 GMT","end":"Fri, 20 Sep 2024 00:03:32 GMT"},"fingerprint":{"sha1":"90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E","sha256":"D0:B5:F1:39:E7:7E:B2:B7:84:FA:B2:CC:31:DE:D1:17:92:58:F8:5E:FF:9A:56:A0:B5:AE:52:8E:FD:A7:4C:0C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: dood.sh\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZlJdj7fji7B095DV0uzz9CPm1q%2Fd9hBUc9yFRjoqueg7Y5iNEZICOcg6MVJ%2B1%2FYCr2FBeErBuJX%2F84ntfoRSIi0sSODNhKSP3GWaRRFvP23HgqlBL1KYXZA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96ae694cb511-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.211Z","timestamp":1723592829211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:50:16 GMT","end":"Tue, 22 Oct 2024 12:50:15 GMT"},"fingerprint":{"sha1":"CF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD","sha256":"B1:53:4A:25:29:1A:E2:A9:4C:73:F9:2B:D8:A6:BA:63:2B:8E:F1:96:AE:02:C7:36:6F:14:39:58:33:D7:ED:D5"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:RmoXqr71Y4M07M-BXSX0sucuLx-ufw:D4MlYtKBbyMH5sT7; Expires=Thu, 13-Aug-2026 23:47:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-9ukQD11B13fpdIc0aTCz4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":31,"dns":0,"connect":17,"send":0,"wait":33,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.212Z","timestamp":1723592829212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:50:16 GMT","end":"Tue, 22 Oct 2024 12:50:15 GMT"},"fingerprint":{"sha1":"CF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD","sha256":"B1:53:4A:25:29:1A:E2:A9:4C:73:F9:2B:D8:A6:BA:63:2B:8E:F1:96:AE:02:C7:36:6F:14:39:58:33:D7:ED:D5"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:XEuMGdFVgFpA_6Fln4Vb9IPDu4UsQg:NhtpeRWryZoq-LRR; Expires=Thu, 13-Aug-2026 23:47:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-M8eRj84q27rZ0wXfE7rMkA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":55,"dns":0,"connect":30,"send":0,"wait":27,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/theme_2/img/loader.svg","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.246Z","timestamp":1723592829246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /theme_2/img/loader.svg HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i.doodcdn.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Wed, 11 Sep 2024 17:29:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 63298\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=t70a0h6MQEsHeMATdnTPCRPQy4cGMdsYDXZAka6G%2FgHi8unxdCpprV0BVRXbvXbSQqdU9aDC%2FgSH3xoXGcWVIziSFNx2WIp9O7EVPC6ildXLkseAmbyvvZUfNKsofQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96aea839b50b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2295,"size_decoded":694,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"be00fc4a29d03016e78b28c9943e3f51","sha1":"10f2025f5aa96706cc81e050eadfcaa9bcc55af5","sha256":"eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126","sha512":"ea5b50ec59873392642e6cdd1e7fbd84137d8db13906b4e435ec04160dc5412bafdea1a5324efb2a5a08fe12e9af89f4e1c99c18f5b97c987709c55568efd75a","ssdeep":"","tlshash":"6701c0645cfb4548006c8539d3e93850396c50a3954c0194fa9c1c326f008af2c6f38e","first_seen":"2023-04-30T18:25:34Z","last_seen":"2026-04-07T18:21:19.017757Z","times_seen":2278,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=0080b71cad5d4a3ee02fc798abd75474","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.304Z","timestamp":1723592829304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtmark.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Jul 2024 22:30:11 GMT","end":"Thu, 03 Oct 2024 22:30:10 GMT"},"fingerprint":{"sha1":"4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E","sha256":"A2:37:E8:E0:05:A8:D1:C3:09:4B:AC:D3:2B:00:D2:9A:2D:7B:EC:7C:34:AC:BC:6E:6F:C7:78:D4:EC:64:D8:7A"}}},"request":{"raw":"GET /gid.js?userId=0080b71cad5d4a3ee02fc798abd75474 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\naccess-control-allow-origin: https://dood.sh\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:09 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":65,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adbc3690dd0db1ac5174c8693dd548cb","sha1":"4d433aef000fe9deb5af869ecf0a684c5ae63cb7","sha256":"8d2e1378df73327d4fdb24601eccb78d045065da0ec4097f468b4621db249427","sha512":"9ca4323aeb3af88d323a4ed65d383bc53a096eb7cc17f80a0f5faf03e6ca99d9fcd79efa78e76b5f29dbfb790ee73c6f0f3866c6fec1c81c83cf3c70299b1e2c","ssdeep":"","tlshash":"70a022008c20888800002a2a08c2b3088202c280282ccae008c8c00030cb30c000e300","first_seen":"2024-08-19T13:24:25.113973Z","last_seen":"2024-08-19T13:24:25.113973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":59,"dns":8,"connect":26,"send":0,"wait":34,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w346ob.cloudatacdn.com/favicon.ico?i","fqdn":"w346ob.cloudatacdn.com","domain":"cloudatacdn.com","tld":"com"},"ip":{"addr":"141.94.143.82","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{425d8264-c6d1-4943-96b2-37cabac0b47d}?https://dood.sh","date":"2024-08-13T23:47:09.252Z","timestamp":1723592829252,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudatacdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Jul 2024 00:00:00 GMT","end":"Thu, 31 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B","sha256":"53:B3:65:48:0A:CB:DB:9A:54:37:2A:BC:12:D4:42:42:63:43:2F:17:5B:BD:EE:78:95:A1:EF:BB:DB:90:BA:D5"}}},"request":{"raw":"GET /favicon.ico?i HTTP/1.1\r\nHost: w346ob.cloudatacdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Aug 2024 23:47:09 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 15406\r\nConnection: keep-alive\r\nLast-Modified: Sat, 29 Feb 2020 09:26:04 GMT\r\nETag: \"3c2e-59fb38b06e300\"\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15406,"size_decoded":15406,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-07T16:00:49.850246Z","times_seen":3491,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":146,"dns":28,"connect":32,"send":0,"wait":67,"receive":5,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/solid.gif?z=1999414\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.312\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4\u0026afid=394432356381184\u0026eclog=0\u0026seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026snc=0\u0026ssc=1\u0026im=1\u0026cs=5","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.509Z","timestamp":1723592829509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"POST /solid.gif?z=1999414\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.312\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4\u0026afid=394432356381184\u0026eclog=0\u0026seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026snc=0\u0026ssc=1\u0026im=1\u0026cs=5 HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None\nUID=240813184798ecc249600b422382abb8b440; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":43,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-07T21:46:01.77517Z","times_seen":20580,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getrunkhomuto.info/WlZnQ3Y7NAQuSTtrBWUDKDpaZkQcc1UFEmkzEiFEP2RWJxVsPldtFTY5EicQKDkJN1g0MxNmRBwBNRQSaRtVcxsZFAsVIzATKAYBbzUDFRIeF1YzDwsHAwE1GRgGBkctFS4WHR8BVzAAHBQPJz4CMRQTNzkQLgU3HgMhKDIeZilzJjM+MhYjOQ4uFQYSEDYGHRkEJgwlIxctBTdvNT40Lw4DMQEOCwctECMZMS4HIDUULBIsCRc0NwEJAwQULmkANwcBEDU+BSdrEAt6RxkuUicxHmckEScXAAEVMzUUMS8RDBIyFC5pAzECJAAzJQVDGB4xcgULPUoWMhk/JgY+HC4uJw8cECZyDmsAVxoyAhElFSRrAyINARMEPwEgPQAzBj0NZBMbIw8MNic3fDwULBgqaywIQjIzUDcVbhAPdzEJO1Q","date":"2024-08-13T23:47:09.400Z","timestamp":1723592829400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Thu, 19 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52","sha256":"E9:59:5B:FB:7B:3B:3F:96:AE:46:70:B0:A0:33:9A:0E:15:23:16:45:47:E4:D7:05:52:4B:6B:08:84:7B:BA:1D"}}},"request":{"raw":"GET /WRWd3M20mCBlVUjEOEw5cdVdDA1pyQQdBCCNaE1wCIUkEW0svFBhdHXgsPAcFIFADUFkDD0N0PihUUUcXIVpHFQEkCRAOSyAJFA5cYwYTUVBxQQJSUCgIDVoBKQZSAStwSUcWX3VPDwJcYFQ1Fl91Cx5dGD1CRQMVfVEoBVlgVDUWX3UVARZeBF5BHV1sQk-UDCiAEHFxIdyFFA1x1V0YDXGBVR1UENwIRXBVgVTEKW2tXUUZQdA HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getrunkhomuto.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 265\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: hMkjf7WQ3FOSZth5XAr2V85xRCRB6FAj_xQiCc5_8ZXfyNvQPp5DQA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":265,"size_decoded":308,"mime_type":"text/plain","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"3626868a03c72c37ead34627d6f1ea74","sha1":"662cacb88b7f12749577de7c4cbd8eb958b84357","sha256":"76c2139b95bb6ea2482214173de02efd7155ce7c7efc543cae10ee77f0280388","sha512":"bbfec93ff629b6e463ac5fdd6bc2f659615ec6d0a012377b52d33c2098502233a461077a79ba0047e662866460a3f36d8eb7f705636cb5c9fc170e5bcc5c7e7d","ssdeep":"","tlshash":"a1e07d2775706f560445b48804c6f8164efb62a73071ef00061e5ce4cb019290c4cd29","first_seen":"2024-08-19T13:24:25.116142Z","last_seen":"2024-08-19T13:24:25.116142Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kologyrtyndwean.info/aE5oWGkJLAs1VglzCn4cGiJVfVsua1oeDVsrHTpbDXxZPApeJlh2CgQhHTwPGiEGLEcGKxx9Wy4cCR1cMAAgOyUhGgQLOio5BhUeBAk/EFwCDC0aDQkNDB8sD3sSFVgbFywfKAMWLh0qOBoAOStZGw0VWCUBJTACWisADSMqBi4ZLTk2EgIRISwrCygfDT4dJyEKORI7A3oeFVgyBTAfDgIcKj8tCzciOS8AfloXPwcYKSEzEB86Aj8hNAAXIQ8fARYBLggkNh1dDC4SCA4gURU7BCIaAiEyHT82XV8WOjMNJiAhHzsQDFoBPhwMMB8dAyoEEggOJ0UOKj0iGwgLDwQyDy4MNyozCjgFEgoPLwtZYCw5FCAPMV0gKg0NMi9aDSwtHy1gJAQHMR0uHCILM1wNFy87OikiPn1bLmgCKwYGPlUIDQ83Mg8IJiwJEg","date":"2024-08-13T23:47:09.413Z","timestamp":1723592829413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Thu, 19 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52","sha256":"E9:59:5B:FB:7B:3B:3F:96:AE:46:70:B0:A0:33:9A:0E:15:23:16:45:47:E4:D7:05:52:4B:6B:08:84:7B:BA:1D"}}},"request":{"raw":"GET /RaE5XNHcLITlSSBwnMwlGWH5jBEBdaCdGEg5zM1sYDGAkXFECPThaB1UeM1MOMhk2ehUJBHFADQxzZxIbCSAwCVENIDQJRk4vM1ZKXGgjRBgDcyJaFh02OVoVAyZxQRZVIzhOHgQiNhFFLnt5BFJafn9MRllrZHZSWn47XRkdNnIGRxB2YWtBXGtkdlJafi-VCUlsPbgJZWGdyBkcPKzRfGE18EQZHWX5nBUdZa2UEEQE8MlIYEGtlck5eYGcSAlV/ HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kologyrtyndwean.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 592\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: WqyNXPLjOeJdb0W5636BDjU03XdFUrsxpPVVM2J56eS94YDM7fVa8g==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":592,"size_decoded":859,"mime_type":"text/plain","magic":"ASCII text, with very long lines (859), with no line terminators","md5":"b9c9646d94a5c611da699cc85559b16a","sha1":"f39c9ab70e5f845dc3dcd5c64f6d49ab15e5dcf4","sha256":"5684f700a873bc557b39d8c7bb349a3a9037c908b15f899f9cc2c98c4cd1d91f","sha512":"9342f3068f29d2f7c8b1329ba7d2dcf1bcc20ef4b8028df3c788e4babb9dbb12c95be52f23509d6094ceadb53eb623c1b4011a7ed3ea2f2ad2566558f326b50c","ssdeep":"","tlshash":"2011521d8f804eab64a3716217f4f4ee46c664cb04b41b2923230b02fb48f5fca9072e","first_seen":"2024-08-19T13:24:25.116943Z","last_seen":"2024-08-19T13:24:25.116943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.561Z","timestamp":1723592829561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=Ab5oB3o6oraJ8Kz3tOoAXit8W7WFrDalf9iNngXH4DvBqiojgaehYARVSNLEVLZWFkbD9P2ocWLD HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.sh/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:Xdv500pN4w2TOm03MECaUgIjw28gVw:M79sX1SqROa2MzFf;Path=/;Expires=Thu, 13-Aug-2026 23:47:09 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1961058473%3A1723592829581174\u0026ddm=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-DTZ2OYKAlnyKqmyugOhVRg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 424\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":424,"size_decoded":557,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (391)","md5":"11c495c77042643273c27c02e192b2e2","sha1":"0f17e1a6de3ecdd7f87fc7ca7713f07f672d9392","sha256":"b0aeda8c8431a3cb7a87510f4427bc7b0018c71b40b414a18464e05993fe84c8","sha512":"88010bb615bdd407860c73df1d0f8bc8e2d14897808006a4eb4235bc5ca18f70b2cd1085cea3358ae5cb2e273c634903db139372af9a2c32ff33aa8e9d67417b","ssdeep":"","tlshash":"0af0c07f194e00aa559339fa6014f4cc4474286c3edfb8b9b1f1ab5a01d682b202a7f7","first_seen":"2024-08-19T13:24:25.117726Z","last_seen":"2024-08-19T13:24:25.117726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js?","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.395Z","timestamp":1723592829395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Jun 2024 00:03:33 GMT","end":"Fri, 20 Sep 2024 00:03:32 GMT"},"fingerprint":{"sha1":"90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E","sha256":"D0:B5:F1:39:E7:7E:B2:B7:84:FA:B2:CC:31:DE:D1:17:92:58:F8:5E:FF:9A:56:A0:B5:AE:52:8E:FD:A7:4C:0C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/cc21665cd7b9/main.js? HTTP/1.1\r\nHost: dood.sh\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bSm9g7ikw2TJnl58jZn3OcB9%2FnfJvr7q5PCsWrMW4IOUieChLEa0NRX9xitByvWWUTNYavU1ZBC1yYA19YPOUqLKKj9cCPGlwyIxEQwi1pZfB12xREvJ6gM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96af99dab511-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106442,"size_decoded":7793,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7793), with no line terminators","md5":"7452252b153c44dfd97458874a1de9f8","sha1":"daf04e24dbfe9dd3d79775c39a9cddc2cfbcae69","sha256":"fcc74055cfe894d1f0243be84cd995ba8658b845892c8ec01f55807560beb409","sha512":"01e5627391f70b6c277ae7634644856d7329f61ab94ebcd37eda5c3920dc16bed8024c86d275b0ae8e95d6c554d6b31994e890ee19c2cfb785358366165118de","ssdeep":"96:BR/wRHPryaXXZA8MvI98k3Gcrig0Z4VORE7BPzmIjpm/1/lNQpHZhdt/0W3mvBn3:XwxryaHZ1MvI6kxTBPFuCnNH3mpul0","tlshash":"22f1b5933bc6fc12023278fe807f68a675199fb675145ca3d91094e9bb70384e4eed86","first_seen":"2024-08-19T13:24:25.118412Z","last_seen":"2024-08-19T13:24:26.371161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.477Z","timestamp":1723592829477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pogothere.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jul 2024 05:27:01 GMT","end":"Mon, 21 Oct 2024 05:27:00 GMT"},"fingerprint":{"sha1":"07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A","sha256":"D9:4B:5E:DE:9F:1B:BC:B8:AD:E7:0B:9B:E6:D4:30:83:5D:4F:4A:4C:B2:A9:F1:92:76:56:7B:F6:4E:58:C1:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.sh/\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=2038897297894246@1@1723592829; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://dood.sh\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W1yOjmf36Yqhm1fGu9wFwtfv2R443Nx%2FhPLPQTT5wnxZ%2BJxC%2F3X%2Fcr9nbyTWyOqDEUxz9vqq3ohBy4cXrt78XhIlvO10TInwwEswwkr89WR2L961HKY1Ad%2FFvNHjiq1h\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96b06b947130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29,"size_decoded":27,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"2e4d500d5eeef786f42e40e66a53ffd3","sha1":"765eb5c0aa2fb7eafedb3d176233fc504993486b","sha256":"f17ec71f37e7a21b3978f424f6a9ec904fd8cf5a2d169b3cdf2e8f4f6a15c134","sha512":"d43df3031f334cf09a2db170d69cb564fd05b000e2edda4765fe05512273c0579eb01ba5e663098f230d3edd3b84134e244ab76109cf7431233082667986459a","ssdeep":"","tlshash":"63800000030208008a022be282080e38080b28a38083808a0c00e00a2002080a02a882","first_seen":"2024-08-19T13:24:25.119092Z","last_seen":"2024-08-19T13:24:25.119092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":24,"dns":25,"connect":9,"send":0,"wait":125,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrgvugostlyhewo.info/popunder.gif","fqdn":"vrgvugostlyhewo.info","domain":"vrgvugostlyhewo.info","tld":"info"},"ip":{"addr":"172.67.136.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:10.267Z","timestamp":1723592830267,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrgvugostlyhewo.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"E1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8","sha256":"9C:82:A9:D6:3C:5B:FE:49:98:F3:78:EB:66:E9:11:DA:12:CE:BC:B5:FC:44:E7:A0:D7:27:9E:CA:68:26:47:97"}}},"request":{"raw":"GET /popunder.gif HTTP/1.1\r\nHost: vrgvugostlyhewo.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 58\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 79078\r\nlast-modified: Tue, 13 Aug 2024 01:49:12 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5QoMFnJ2A0sjT2RYHSx1s%2BDMfPPOqbldmzXDApXHOCmWTIkoH5r1z3J2fiAAdDIBcMm%2FUJ0Xc3USpwtikfaGbA9UC%2BIJnmhd4jtuRDjNaORVelp5xK8hVOffjaGNHuM0%2BhtpXeJSLw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96b50be35687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":58,"size_decoded":35,"mime_type":"","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-07T22:10:30.781664Z","times_seen":42158,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-13T23:47:10.326255615Z","timestamp":1723592830326,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942\"\r\nLast-Modified: Mon, 12 Aug 2024 21:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3965\r\nExpires: Wed, 14 Aug 2024 00:53:15 GMT\r\nDate: Tue, 13 Aug 2024 23:47:10 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"77619f0113a62e8c4c44f195901b385c","sha1":"1e1a5e3768ca683e66667aa14efa7042df57ee2f","sha256":"520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942","sha512":"459cb24749852faa2cc051ed3001e7591e96899f52c68d761e7a7e9539f87881e58e3a6e3df41df0c01f15106d8c097f8a658ab7f7ac31212afbbffc19ac658d","ssdeep":"","tlshash":"7ff054800d6174120f1508eb96ddc1330930db7414f039f34a9c23e52c79fbe8a4052d","first_seen":"2024-08-12T23:20:08Z","last_seen":"2024-08-19T13:41:24.292342Z","times_seen":47316,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-165510729%3A1723592829581342\u0026ddm=0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.721Z","timestamp":1723592829721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-165510729%3A1723592829581342\u0026ddm=0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.sh/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-1GySiR7aoGTjrePe29HP1w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.zDlak_ZpRIU.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":1313,"size_decoded":1313,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max compression","md5":"4a033d865af949346e8dfce339281436","sha1":"57e472f1420039da71b7996a22ad28edbf157bdf","sha256":"6fbb7cb4183c018f00db27cee3637e6630461074a142f7558dd5d63457516913","sha512":"03f90d863b4a643527e8c989dfa332557d699a11c388931ca8a965f1d9d1f17cebe0be46ec50e121959f2320f786d8862183e37813fcc64000e118cbaa1391a7","ssdeep":"","tlshash":"7621a5a40b332db75f2d98a7c819821a1820887448e639d6143c11e63a7b7be1c8942f","first_seen":"2024-08-19T13:24:25.121098Z","last_seen":"2024-08-19T13:24:25.121098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-13T23:47:10.335205126Z","timestamp":1723592830335,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942\"\r\nLast-Modified: Mon, 12 Aug 2024 21:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3965\r\nExpires: Wed, 14 Aug 2024 00:53:15 GMT\r\nDate: Tue, 13 Aug 2024 23:47:10 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"77619f0113a62e8c4c44f195901b385c","sha1":"1e1a5e3768ca683e66667aa14efa7042df57ee2f","sha256":"520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942","sha512":"459cb24749852faa2cc051ed3001e7591e96899f52c68d761e7a7e9539f87881e58e3a6e3df41df0c01f15106d8c097f8a658ab7f7ac31212afbbffc19ac658d","ssdeep":"","tlshash":"7ff054800d6174120f1508eb96ddc1330930db7414f039f34a9c23e52c79fbe8a4052d","first_seen":"2024-08-12T23:20:08Z","last_seen":"2024-08-19T13:41:24.292342Z","times_seen":47316,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1961058473%3A1723592829581174\u0026ddm=0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.714Z","timestamp":1723592829714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3qzE6ICJZKeLNS_ki1HiCj74nFfRJC2lNMwzp1GdSe4CGjZAmHhmPX0ZBDNyxqtSaGyVmtAUQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1961058473%3A1723592829581174\u0026ddm=0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.sh/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-cyCMtW_QzHJieDzHqpFXQQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.zDlak_ZpRIU.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":9001,"size_decoded":9001,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max compression","md5":"567e79afd4b1e550503567bf8646eb2d","sha1":"4f4b64eb2d540e54676d897760df082a771d6c12","sha256":"39904d26e65ee9ebea9023b0ade5530d4cdaa7dcfa631f7f54225e5a40f6755c","sha512":"4b9b207e610a34dbe43474072fde53d9bdb75e6d14b24664ab124181608864e8217994c5299e6c8c80f665b01dfab68f95563831dd2c026ce077bd662542efef","ssdeep":"192:kAWYCErKt/rNqU2wsOO1kDREk+axReoUMykdI9mVy9KOb47:XWLErK9i5kREk+k/xOb47","tlshash":"1602bf5aa3069d04ec6b7eb91b8c83e93b4c349da4448f986f951c72561f2ce1bb11c9","first_seen":"2024-08-19T13:24:25.12206Z","last_seen":"2024-08-19T13:24:25.12206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrgvugostlyhewo.info/N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo","fqdn":"vrgvugostlyhewo.info","domain":"vrgvugostlyhewo.info","tld":"info"},"ip":{"addr":"172.67.136.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:10.273Z","timestamp":1723592830273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrgvugostlyhewo.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"E1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8","sha256":"9C:82:A9:D6:3C:5B:FE:49:98:F3:78:EB:66:E9:11:DA:12:CE:BC:B5:FC:44:E7:A0:D7:27:9E:CA:68:26:47:97"}}},"request":{"raw":"GET /N1lweG4YZhMLU2Y1Nkk8XGgKISttLhUwGkcIKDZXVGs+OQpvMlYMB1NkQUheA2lHTUhHMBRFXxEqBBkaQipNS14HaFYRAFE2TUheB2hWDlMGd0NMQARvXkxIQmRCSF0PYUlPXA5uSEFaBW1GXhpHOBdFXxEpBAwCCmhHSl0CYEJAXQdrQEo HTTP/1.1\r\nHost: vrgvugostlyhewo.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 13 Aug 2024 23:47:10 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wip6ooWwOna2OxYqGwKoiIrueTFEme1mgH2h2XUtKq8QhYwo1RS0NJFbaZ%2BZ4fsaNaKztLr5gdWqD5ifT0nXuv3vibDeFPG6qVu7fUtmmM6aL0z1IUTi64v9CXbH3IgfB7z24wlKsg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96b53bf25687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D\u0026request_ab2=0\u0026zoneid=6936539\u0026js_build=iclick-v1.887.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=480\u0026wiw=736\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=736\u0026wfc=1\u0026pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x\u0026drf=https%3A%2F%2Fpinaycartel.biz%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026wgl=\u0026js_build=iclick-v1.887.0\u0026navlng=en-US\u0026pnt=0\u0026pnrc=0\u0026bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b\u0026wasm=1\u0026userId=0080b71cad5d4a3ee02fc798abd75474\u0026m=link","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.730Z","timestamp":1723592829730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"waisheph.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Jun 2024 23:53:23 GMT","end":"Mon, 16 Sep 2024 23:53:22 GMT"},"fingerprint":{"sha1":"A9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81","sha256":"53:06:D6:17:98:93:14:0E:96:FB:16:54:A8:27:B4:10:34:94:12:FD:96:0C:5F:BB:E9:31:58:7A:EA:A3:92:13"}}},"request":{"raw":"GET /?rb=rBZdRNhPn58_U2Wl2nMObqVIceNP3m7fbQH3vEg000K_hfAJ6uamksyq5c6SLxcQZjXFDWMzYTgqAPUuLLOVqStAUqRWFA0CbrOx1wO2e9qY3g3fY4juAERf3-jWNH1KuohBxw8ipnd12xBeesOxdIe6uADamP7QKVYnMcGfUCjlmQOZBzaGKsOEPfkvj6DompWn_h674qtUE3cyRrG4uhQT5ysSGGHRvrBNPdRrjF4hIa9uc-oJWUZIq1cs6iEJxq_ij9Un2hc%3D\u0026request_ab2=0\u0026zoneid=6936539\u0026js_build=iclick-v1.887.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=480\u0026wiw=736\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=736\u0026wfc=1\u0026pl=https%3A%2F%2Fdood.sh%2Fe%2Foj3tl9itav1x\u0026drf=https%3A%2F%2Fpinaycartel.biz%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026wgl=\u0026js_build=iclick-v1.887.0\u0026navlng=en-US\u0026pnt=0\u0026pnrc=0\u0026bs=d4b4c704-8262-4349-8e3d-38a0cd547f4b\u0026wasm=1\u0026userId=0080b71cad5d4a3ee02fc798abd75474\u0026m=link HTTP/1.1\r\nHost: waisheph.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.sh/\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=0080b71cad5d4a3ee02fc798abd75474; oaidts=1723592828\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: application/json\r\nx-trace-id: feecee50b9417c9b7202ad21dc54818e\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://dood.sh\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:09 GMT; path=/; secure; SameSite=None\noaidts=1723592829; expires=Wed, 13 Aug 2025 23:47:09 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Tue, 20 Aug 2024 23:47:09 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10013,"size_decoded":10013,"mime_type":"application/json","magic":"gzip compressed data, max speed, from Unix","md5":"ea0cc916a2a5cf686b1226838ad3b09f","sha1":"7542cd77b3d8968acfc15a2ab93c24879e2d9902","sha256":"72a63bfacdfc2bb2d9d2917636e5c8e995f9497952c097ca9c0d82248f5a3426","sha512":"dd0ddcce99e1e11cba8641bdf0a0d247b57698ac2ee6454f09af244a6ba4f0bb5ff58635b1b5e298a385be535dd33cd15e08c4a94197521d7a62781997a01dd1","ssdeep":"192:RW0S7d0OwapEi7oeYfJZWDOzviZDNbovHAeu/aVX1ZL7syzIwz6ngZyl8:RWLZqYEiceAJZkOzQZaN1B7syc+yu","tlshash":"5122be16efb1e0fbe27fc27d1b5582892710268f0cf5b2f9f6cde68165228f0459a851","first_seen":"2024-08-19T13:24:25.122933Z","last_seen":"2024-08-19T13:24:25.122933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/fonts/fontawesome-all.min.css","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.009Z","timestamp":1723592827009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/fonts/fontawesome-all.min.css HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Aug 2024 22:34:37 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 90749\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xO1m5gpTw9Ado0Mxx3pLgOd8HMceyHShVMsiTVAukDgbZz1rBgQfyNLCLLG4ZJqYHYs4VAwPdvJRw%2FEvNCDvG0a2ZV6rGCv%2BkC9YqwwbMKjScuUDR8OIRqYirlv9HbBmwjg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0bc0b7130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57126,"size_decoded":57126,"mime_type":"text/css","magic":"ASCII text, with very long lines (56940)","md5":"e0076d9b1984448e1b530d5b1a419c7a","sha1":"95fb81d6859b2c4693e334769f87afe76709e5ac","sha256":"19bc4712bca32db280000f294e2d0c1dc178063a9dd4278fc22d30a39c068846","sha512":"d050889da58fe60d184ed82b7ed15126b2cfc143ec03018b60011b86198eca578659fc62b1e140b95e227f169e92243596e69167b6a65bc7cf228f7a8a3a1c51","ssdeep":"768:sEC319PizNq4/xBo8UHJikQ2R/oMQyYJrX75CthZQzB:sEkPUE4/3uHEB2Wfd7stA9","tlshash":"12430cb8e54c01c9a732c44fbf82b2bc61b6f73de5914d95f00e591c2ad26a811c5fba","first_seen":"2023-04-07T11:55:34Z","last_seen":"2026-04-05T21:54:40.979912Z","times_seen":437,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"impracticalsmell.com/cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl","fqdn":"impracticalsmell.com","domain":"impracticalsmell.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.184Z","timestamp":1723592827184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"impracticalsmell.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jul 2024 03:48:49 GMT","end":"Thu, 17 Oct 2024 03:48:48 GMT"},"fingerprint":{"sha1":"BA:D6:B8:6D:57:6A:08:FC:86:57:E5:A1:74:38:00:D4:0C:99:FE:DC","sha256":"5C:EA:CF:2A:5B:8C:98:68:96:27:A0:6F:E3:AC:2E:CF:05:EE:12:1A:04:A2:97:A1:ED:04:32:E8:78:B6:02:08"}}},"request":{"raw":"GET /cQD/9/6.bK2M5zluSIWPQY9uNpTJMt2/N/TJUyzCMSCY0/1gMfzmYi1rNST_M/xl HTTP/1.1\r\nHost: impracticalsmell.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nlast-modified: Tue, 13 Aug 2024 23:47:07 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET\r\nset-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE3MjM1NzE3MzQsInpvbmVzIjp7IjQ0ODA3ODIiOls0NDgwNzgyLDEsMTcyMzU4Mjc2MV0sIjQ4MDA0MjUiOls0ODAwNDI1LDEsMTcyMzUyOTEyN10sIjQ4NTgzMjMiOls0ODU4MzIzLDEsMTcyMzU4MTEyN10sIjQ4NjU3NjkiOls0ODY1NzY5LDEsMTcyMzU5MTg0MV0sIjUxOTk0NTYiOls1MTk5NDU2LDEsMTcyMzU3Nzc4OF0sIjUzNjU1MzAiOls1MzY1NTMwLDEsMTcyMzU5MjgyN10sIjU0ODY1MzIiOls1NDg2NTMyLDIsMTcyMzU4MzY1OF0sIjc0NzQ4OSI6Wzc0NzQ4OSwxLDE3MjM1MjM3MDFdfX0=; max-age=1755128827; path=/\nuniqCookie=573b30f66ba8cb312cf0b75da52cfc0c; max-age=1726184827; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41777,"size_decoded":41777,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":116,"dns":30,"connect":19,"send":0,"wait":76,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrgvugostlyhewo.info/TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0","fqdn":"vrgvugostlyhewo.info","domain":"vrgvugostlyhewo.info","tld":"info"},"ip":{"addr":"172.67.136.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.819Z","timestamp":1723592828819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrgvugostlyhewo.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jul 2024 04:19:01 GMT","end":"Mon, 07 Oct 2024 04:19:00 GMT"},"fingerprint":{"sha1":"E1:DD:F1:27:B0:3C:54:2C:9D:E1:84:E9:A8:A5:EE:C6:52:14:C8:F8","sha256":"9C:82:A9:D6:3C:5B:FE:49:98:F3:78:EB:66:E9:11:DA:12:CE:BC:B5:FC:44:E7:A0:D7:27:9E:CA:68:26:47:97"}}},"request":{"raw":"GET /TUQ1akJie1YZfyx1fwERGyBTMy4pc2wsdyMSWywpFXZBPyR/FRMeKyl5BFpyeXQCXWQ9LVFXc3ViRh4jOTFGV3NrLVsMLXBiQ1dzY3QbWGx4YkBXc2swRQslcHUTGjY5KAhbdX93AFNwdXYNXXR0 HTTP/1.1\r\nHost: vrgvugostlyhewo.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kMnZik3rTxgS3cEoWF2QGxSR%2FDsy75sIt%2BxY0zWhbIuZaD7n0OMGHuvPZA3gL7zlg09N7PSS4sk362s0LSWrA9yBJBCtnpp0AP979iinmI3lTvLPTN3gOmwqN%2B58EOu9THUKrG94uQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96ac18b1712f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.famous-mall.pro/ecc874/877b0c85adf8.js","fqdn":"www.famous-mall.pro","domain":"famous-mall.pro","tld":"pro"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.601Z","timestamp":1723592827601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.famous-mall.pro","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Aug 2024 08:07:18 GMT","end":"Sun, 10 Nov 2024 08:07:17 GMT"},"fingerprint":{"sha1":"2B:D4:C2:E5:FF:7A:8F:EC:AF:5B:DB:F9:A6:5F:65:5D:4A:09:01:9B","sha256":"BF:72:A8:3E:6E:EA:49:EB:41:E8:83:B0:5F:2F:DA:14:A2:C2:A9:5D:EB:DD:4F:8F:2C:28:6B:14:16:FD:7A:F1"}}},"request":{"raw":"GET /ecc874/877b0c85adf8.js HTTP/1.1\r\nHost: www.famous-mall.pro\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nOrigin: https://pinaycartel.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Thu, 15 Aug 2024 23:47:08 GMT\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ah0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70365,"size_decoded":70365,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"32ed3efcd6f57ee9c34e01527ce683c9","sha1":"c26b86888ed140a6afb26db710a20a3db668a5ef","sha256":"0c7ef00938be5d846c17cc2551fed8a7616f5695c71f555b27d2db30b0fc22d3","sha512":"560586615960ac291d65177fd4348b5daafce5cdc2c7235ce7dda66badd16e99441677c0947491a654e2651bad6100348a9de03dfc7ce32e08dcd386ecb86353","ssdeep":"1536:07k1f0mqgzRUaCYNzpVrN/fDO/cJRhnxsPNTmjIRtMAJNbkUW5J72eXzrMXWyDzD:074ffqMRUaCYNzpVrN/fDO/cJRhnxsP9","tlshash":"7763f8c97183644411e6d5ba106f328d99b98c10c9c90ce8df63d6e6dc346deca73eba","first_seen":"2024-08-13T19:55:59Z","last_seen":"2024-08-21T10:20:16.602188Z","times_seen":26,"resource_available":true,"data":null}},"time_used":1053,"timings":{"blocked":526,"dns":31,"connect":39,"send":0,"wait":20,"receive":0,"ssl":425},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/css/styles.min.css","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.013Z","timestamp":1723592827013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/css/styles.min.css HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Aug 2024 22:34:37 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 90749\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RtU1wZkaI5BZoVUZ%2BVTCA8NrbzI10d3MIK4S06GrSBYnjU7UrjegY93Jy1TVBkBUgelli%2FXQVDUNGjPF3PNJXnAOKNwwCutjGbNfRKfTP%2BSHwdYkP8CPVfO%2FCsU56dEC4U4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0bc0c7130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31075,"size_decoded":31075,"mime_type":"text/css","magic":"ASCII text, with very long lines (31075), with no line terminators","md5":"49d6b1af2ac2f6e6a4baddf4e9c8471d","sha1":"15567131b492beea86861e302099c4e3fff22455","sha256":"8215ab542b9d13edff071c3414cd244bb3b76f6cd7b9d55b3427fe01643325eb","sha512":"41da2b25593ffaf47d826d036722ca9dcbdbe5e14e6f8c89c4081abeaf4f293444a60edb3345e0d6873e843f31782ab217f13df8f807f7d1c701d2af869331ca","ssdeep":"768:UkZsIZ3CIsywk1aAekvDK39yV5/r2eQ0dTjsRAJpG:UkZUywk1aAekvDK39yV5/r2eQ0dT4A6","tlshash":"d5d25bae5891125951230b73c7cc8e688b3dca6754b21cee32527c4b8b46bde33db617","first_seen":"2024-08-19T13:24:25.126139Z","last_seen":"2024-08-19T13:24:25.126139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.560Z","timestamp":1723592829560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:32:53 GMT","end":"Tue, 22 Oct 2024 12:32:52 GMT"},"fingerprint":{"sha1":"A9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69","sha256":"06:5E:3B:66:39:0A:5D:3C:7C:E5:1F:27:34:24:42:60:64:53:B3:D9:8E:4D:4E:97:F5:B7:08:B5:9D:19:0A:0A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=Ab5oB3riV05a_gVS9ntCuC9Oa8VFvfBi3DZIIU3KeYCSPT6z0HDgxLgDMBXjR5BHmo4UPecolc1jHQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.sh/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:-zm2h0-GmWlko54utCyXS7h-smPWhQ:AumpGKs5-b0VVJKM;Path=/;Expires=Thu, 13-Aug-2026 23:47:09 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=Ab5oB3ryexDfzxPhFK3lPaEeYQBBTMhi4IirQ4G2JQQiv8MwyBKTMNmPqjwFEF4gFCjua5z9eWcFVQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-165510729%3A1723592829581342\u0026ddm=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-uLq06S8dxCKIhJw5pgFW7g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 422\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":36,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/check.html","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.219Z","timestamp":1723592829219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 30 Jul 2024 10:01:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a8b9fd-394\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":916,"size_decoded":916,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (956), with no line terminators","md5":"95b931540a96c4d45344472f87f81036","sha1":"7f1c2eae3c09448aa6f8d85f66484439623c520a","sha256":"2ecb5d3152a38f9abb6f14dac557682756b243462770f69a14c4c2b8cf0726d1","sha512":"8a6728b5f2308240681c7a374ee96dd957bc70e6d0a09dc1642f452dc84e8f7a1818c7e9be615ee94b01d04f883ac3f49ffad502c84924f8e4787455b97bf03a","ssdeep":"","tlshash":"c111ba1a38a4646c4213bfb02be762682c32764025d7d01dbf5c97321f826a7dc796ef","first_seen":"2024-06-17T18:45:41Z","last_seen":"2024-11-21T06:40:10.752731Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/get/1999414?zoneid=1999414\u0026jp=_cl1pw4dlzhokn1y848holt\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.312\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4\u0026afid=394432356381184\u0026eclog=0\u0026seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026snc=0\u0026ssc=1\u0026im=1\u0026cs=5\u0026uf=0","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.511Z","timestamp":1723592829511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"GET /get/1999414?zoneid=1999414\u0026jp=_cl1pw4dlzhokn1y848holt\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.312\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=2\u0026pt=JQVQg1vVklEJTIwMjAyMzA1MjklMjAxNDI0MTglMjA4OTQlMjAxMXRoJTIwLSUyMERvb2RTdHJlYW06Ok5vdCUyMEZvdW5k\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026psr=2FMKjMQaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=2ZQbufRaHR0cHM6Ly9kb29kLnNoL2Uvb2ozdGw5aXRhdjF4\u0026afid=394432356381184\u0026eclog=0\u0026seu=HMxX3mtaHR0cHM6Ly9waW5heWNhcnRlbC5iaXov\u0026snc=0\u0026ssc=1\u0026im=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None\nUID=240813184709cf6a2c8cdf43479dda4e558e; Path=/; Expires=Tue, 16 Sep 2025 23:47:09 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3246,"size_decoded":3246,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3598), with no line terminators","md5":"9936cf23b7d174cf86e7346af7b6ccf9","sha1":"d0d016a4788d99ba54f3ee78f86f3e196636048b","sha256":"4778c0066e3154ea87a807680e8d725bd67ad7ccdf923f92651b1f5991ecf2a9","sha512":"f95163d54ee456b06a31b8a2de7c34b6b164b62756fa168a016d8c07fad7d69c9c4978f69a504b7a6b2d00fa02494ae1003cc4d1752a80d103001902619e8ee3","ssdeep":"","tlshash":"ee710be3a1c31442406afb79d2df2c3724b63a4dd5ce533d95227c4c7e836298a72a91","first_seen":"2024-08-19T13:24:25.127793Z","last_seen":"2024-08-19T13:24:25.127793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.672Z","timestamp":1723592829672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Jun 2024 00:03:33 GMT","end":"Fri, 20 Sep 2024 00:03:32 GMT"},"fingerprint":{"sha1":"90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E","sha256":"D0:B5:F1:39:E7:7E:B2:B7:84:FA:B2:CC:31:DE:D1:17:92:58:F8:5E:FF:9A:56:A0:B5:AE:52:8E:FD:A7:4C:0C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/8b2c96a25b97569d HTTP/1.1\r\nHost: dood.sh\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 12154\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/e/oj3tl9itav1x\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\nset-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.dood.sh; HttpOnly; Secure; SameSite=None\ncf_clearance=FqdrNgungyVXqQ22GMEbcCoYShjj7FcHBjUv21NoSgc-1723592829-1.0.1.1-ge09TEvrbQT.B1dHY0FGlz5P7OiG15_ymSu17qty49sFX5jC6n9xWWWc.vs8DpSd_WM8NYHlHPu3MVe0GfB23g; Path=/; Expires=Wed, 13-Aug-25 23:47:09 GMT; Domain=.dood.sh; HttpOnly; Secure; SameSite=None; Partitioned\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l1WE3rmDw5EYxnTNgBOc%2BSIhtLy0lQWvgCocK%2BzZ0pJhOoyIhHwRzVqCAxzkM01irJKjLDo4ftsGbr4dqn1FGe2zdK0tFcSStmFnXZKi%2FaqZixYVuwSa%2FBY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96b17ac3b511-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.famous-mall.pro/ecc874/877b0c85adf8.js","fqdn":"www.famous-mall.pro","domain":"famous-mall.pro","tld":"pro"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.603Z","timestamp":1723592827603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.famous-mall.pro","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Aug 2024 08:07:18 GMT","end":"Sun, 10 Nov 2024 08:07:17 GMT"},"fingerprint":{"sha1":"2B:D4:C2:E5:FF:7A:8F:EC:AF:5B:DB:F9:A6:5F:65:5D:4A:09:01:9B","sha256":"BF:72:A8:3E:6E:EA:49:EB:41:E8:83:B0:5F:2F:DA:14:A2:C2:A9:5D:EB:DD:4F:8F:2C:28:6B:14:16:FD:7A:F1"}}},"request":{"raw":"GET /ecc874/877b0c85adf8.js HTTP/1.1\r\nHost: www.famous-mall.pro\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Thu, 15 Aug 2024 23:47:08 GMT\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ah0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70365,"size_decoded":70365,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"32ed3efcd6f57ee9c34e01527ce683c9","sha1":"c26b86888ed140a6afb26db710a20a3db668a5ef","sha256":"0c7ef00938be5d846c17cc2551fed8a7616f5695c71f555b27d2db30b0fc22d3","sha512":"560586615960ac291d65177fd4348b5daafce5cdc2c7235ce7dda66badd16e99441677c0947491a654e2651bad6100348a9de03dfc7ce32e08dcd386ecb86353","ssdeep":"1536:07k1f0mqgzRUaCYNzpVrN/fDO/cJRhnxsPNTmjIRtMAJNbkUW5J72eXzrMXWyDzD:074ffqMRUaCYNzpVrN/fDO/cJRhnxsP9","tlshash":"7763f8c97183644411e6d5ba106f328d99b98c10c9c90ce8df63d6e6dc346deca73eba","first_seen":"2024-08-13T19:55:59Z","last_seen":"2024-08-21T10:20:16.602188Z","times_seen":26,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":471,"dns":29,"connect":39,"send":0,"wait":20,"receive":0,"ssl":376},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/img/logo-s.png","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.360Z","timestamp":1723592829360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /img/logo-s.png HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1932\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6212\r\ncontent-disposition: inline; filename=\"logo-s.webp\"\r\netag: \"61d3187c-1844\"\r\nexpires: Wed, 11 Sep 2024 16:52:22 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 63282\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dEDyNq1dfgiJ51UyUfM7f3KQNhmKLVrGqLlGg7NPXkCsxd0HN4qIpG3QnqYNBBj1xPz9dagG5t4MF8o6IsbNZviMIDkPVaaa%2FOw5xurWXSAXvX2AhgY%2BSXW7q3i%2FHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96af5891b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1932,"size_decoded":1932,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8211fb3cc137d3e1c1e399b86476f951","sha1":"136d8ef228959aa0cee12e5ed463b6e6a4fcf720","sha256":"2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680","sha512":"66b912cd9bf3b97de33bec8bd0061df951b2adb028eb0a13fc9560e2145ed1253dde8612fcdc96efe812e8cffafceac6fb34f18820e319f30b9a434333916070","ssdeep":"","tlshash":"2f410a3a5c2ead6541467d012a1f8e18b79e550107d1dc6493b172a4a3ec2c5e0f54bf","first_seen":"2023-04-25T17:50:26Z","last_seen":"2025-12-21T13:31:50.429113Z","times_seen":866,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/assets/bootstrap/css/bootstrap.min.css","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.004Z","timestamp":1723592827004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Aug 2024 22:07:20 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:12 GMT\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 265187\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FJV84skX7Ylty7%2BOcfK1tnWZY4fPawi4x7FoGxCDe9eWihc2cKJADal2yNpIC%2B7MTew6zSiV%2FIe6icRrOSuOaqO9i5lf33%2Fcnl3wEH8U1TAlvPuVcEenEislIXlDkIldR6E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96a0bc0a7130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":194856,"size_decoded":194856,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dood.sh/pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2","fqdn":"dood.sh","domain":"dood.sh","tld":"sh"},"ip":{"addr":"172.67.75.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.653Z","timestamp":1723592828653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dood.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Jun 2024 00:03:33 GMT","end":"Fri, 20 Sep 2024 00:03:32 GMT"},"fingerprint":{"sha1":"90:F4:6A:8A:F7:67:48:BD:C7:16:0D:13:72:60:82:9C:E9:64:7B:4E","sha256":"D0:B5:F1:39:E7:7E:B2:B7:84:FA:B2:CC:31:DE:D1:17:92:58:F8:5E:FF:9A:56:A0:B5:AE:52:8E:FD:A7:4C:0C"}}},"request":{"raw":"GET /pass_md5/101424555-91-90-1723592827-401a112d8be0bcee80a7af0fed736141/utuh1mjovn96u3dtsu98ige2 HTTP/1.1\r\nHost: dood.sh\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/e/oj3tl9itav1x\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U%2BD5Kqr%2B6pqBRNft3oV2GYDDWLYiR%2FbGgBNyXe%2BtiJP5BPIPHB9uwiYMfxLLQInBthb596%2Bftk%2FCFPnsnA764lHr38OVPqoP1ljxM1%2Fr1hnlyCpqu7jX3eQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96ab1f95b511-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":103,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"3a1bd5b06263fb791afaf53e88b35383","sha1":"c79ad1b9ff631eb77a8b82ba192a896862ba83cc","sha256":"9260c6627e549e88bc88398ce76ccc7134422f7f97fbbc986e3b1ad42556e951","sha512":"ce970ed80673aad5d37daf44ca2b0d981bf5d54f1a2e29b31d82c5dc8595bb2a6ef1ff97b825f182c0ca11cf7d07c85553880c836a86a7830599730423fd6df1","ssdeep":"","tlshash":"72b0126970116b48bd8019d80869761d2c815e6d4540ca41527e0c195e80f873607319","first_seen":"2024-08-19T13:24:25.13007Z","last_seen":"2024-08-19T13:24:25.13007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/watch.php?vid=oj3tl9itav1x","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-08-13T23:47:06.428Z","timestamp":1723592826428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /watch.php?vid=oj3tl9itav1x HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pex9Gygy8LR93xk8NpevuWFo36BfTzZJppkDnB31YJ1nU2GHueGlMY%2FGpX4d1iu3ZbYu82M8xlur2MfnePK8OCCXZCa2mibHpJh%2FdIsjNjKM9oVde897NwKQ9DJiTTKjWvg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c969d49d956a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26333,"size_decoded":26333,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":159,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinaycartel.biz/3px-tile.png","fqdn":"pinaycartel.biz","domain":"pinaycartel.biz","tld":"biz"},"ip":{"addr":"172.67.145.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x","date":"2024-08-13T23:47:07.209Z","timestamp":1723592827209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinaycartel.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Jun 2024 08:00:50 GMT","end":"Sat, 28 Sep 2024 08:00:49 GMT"},"fingerprint":{"sha1":"36:8E:A2:6A:84:38:F3:C9:74:52:54:99:9E:6E:C9:3F:DE:A8:C1:7E","sha256":"74:F9:72:32:59:91:AE:F0:85:F2:02:AF:9F:9D:0D:58:4F:49:9D:E4:35:C4:37:68:E3:69:CB:9C:4F:68:55:58"}}},"request":{"raw":"GET /3px-tile.png HTTP/1.1\r\nHost: pinaycartel.biz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pinaycartel.biz/watch.php?vid=oj3tl9itav1x\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2650\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Aug 2024 22:07:21 GMT\r\nlast-modified: Wed, 16 Aug 2023 14:00:10 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: HIT\r\nage: 265186\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VWdQUPcXiQwB9AnSxtLhvJ8mqGvzORRX9HS51s5oGli5vVe8abfmo%2FGPBvY834Pd49yhHTig8rJHvkRgv1ccOmiT73ttLbDydzOjtPVKVE2Ks%2Ffsri036ugvxSCUdPaQJ0M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96a1fc837130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2650,"size_decoded":2650,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"19eebdb2d63fbe199c75bfdd5b17ce5b","sha1":"9e0edb051b8944b0d1cf2e53f4e0a27b08f23570","sha256":"db0a16ab6426de5cddeae4a4ee1fd3581482497fb94a658e5fdd5e443e570879","sha512":"7d4a25d272b6b0e66333f771159b7d65467c99900b5f3cd131995451af5a5a6b26dd424f054ae825a943f42d0234ae10ad58aaeeaa0df963a3114d0391b5523f","ssdeep":"","tlshash":"","first_seen":"2023-05-22T16:11:41Z","last_seen":"2026-04-06T00:27:33.492858Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/get_slides/420/1ng7gbzaumfpmp95.jpg","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.364Z","timestamp":1723592829364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /get_slides/420/1ng7gbzaumfpmp95.jpg HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: text/vtt\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 13 Aug 2024 16:08:47 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a5Y0wNp7WyxRLQisBY2ocxCRRZJSbweQAiQ2iT%2FopOSNV9Sb%2F1MYPIyRDrgu1D4wSXCeBCZA6fwuWbA99lB7tp%2BgEJG1d2OcTkJOGjVHwiY2%2FmGyhGUpe0hiVC%2F0ow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96af58055696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3158,"size_decoded":3158,"mime_type":"text/vtt","magic":"ASCII text, with very long lines (3268), with no line terminators","md5":"9eeb425e67b1ddc0d96c403d1e3ff92e","sha1":"13d9b5bd349fe7d48a6cc6e7e90622a0505f8ded","sha256":"f7753c421d497163a7f719b401d4b0a79ae41ed40c94315943a1255757991f46","sha512":"893e64648627e24dc276f103b184ca6cea2ba6f0773a76486fb0555bf433749061b71ce64483be73d720f58660e60ced6856a789218ddc6c0f17ad83fc903630","ssdeep":"","tlshash":"996142c2f3744427e2d01764e3ecbadb419c33df7ad16988b1fb5468aa8924bd0394c6","first_seen":"2024-08-19T13:24:25.131873Z","last_seen":"2024-08-19T13:24:25.131873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/css/embed.css","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"104.26.6.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.681Z","timestamp":1723592827681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Jul 2024 19:13:31 GMT","end":"Tue, 29 Oct 2024 19:13:30 GMT"},"fingerprint":{"sha1":"58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75","sha256":"F8:E4:75:7E:F5:CE:C2:57:E2:87:99:18:F8:D8:FD:F7:91:BE:18:A7:A1:DF:30:2E:41:C2:3D:CD:F9:87:7F:8F"}}},"request":{"raw":"GET /css/embed.css HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: minify\r\ncf-polished: origSize=79890\r\netag: W/\"61d3187c-13812\"\r\nexpires: Thu, 12 Sep 2024 03:26:41 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 63286\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Oz%2FYP66UkxMsGBl270HqXSpKIVkouuv9UcdgaHRCOAK%2BGknBUT%2F6PSFcSrbb84SxFOZOW9RLWIw8yw1REf9%2FK5tnBn%2FlJJXL8gTpiXWiOjorEgiD%2FgojzzRuxHfrgA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b2c96a64ef1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79720,"size_decoded":79720,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T22:38:16.996083Z","times_seen":13478183,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":200,"dns":19,"connect":12,"send":0,"wait":15,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js","fqdn":"blurbreimbursetrombone.com","domain":"blurbreimbursetrombone.com","tld":"com"},"ip":{"addr":"94.242.247.30","port":443,"asn":0,"as":"","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:07.698Z","timestamp":1723592827698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 17 May 2024 16:59:31 GMT","end":"Tue, 12 Nov 2024 22:59:00 GMT"},"fingerprint":{"sha1":"30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A","sha256":"D5:FB:5B:81:F4:D0:FF:26:31:88:87:19:CA:1E:08:77:DD:FB:C0:A3:CA:82:56:DC:9A:51:42:9D:26:F4:21:53"}}},"request":{"raw":"GET /aas/r45d/vki/1999414/126a6d05.js HTTP/1.1\r\nHost: blurbreimbursetrombone.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 13 Aug 2024 12:57:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66bb584e-20204\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131422,"size_decoded":131422,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65045)","md5":"f0da46a2e3d755aa201ea05b6109468e","sha1":"3e29ce6764ad77f577c9b1c56e173d3fa627785e","sha256":"d4b724d774c6bb0fc5d48d55115107a66c6b2ed11b9c8cdd797de37b99a29e79","sha512":"c140c4c4ed90cc895ff950998a72adf3b93e847f4156e331fb3e4120e6c0ffa5fd4388eafa231417ce624d835823e86af32a99b03abbed02bc6ca6fdf3228fb2","ssdeep":"1536:YAdo+yp+814Qox5eVHVhdRnNBRzlpvzoRwDkOFKa7HR+0TdsuiZTBP6sU1ODQAvw:YAdo+16oAjWHKTDiNhsAvhWL","tlshash":"aed31dc06a4734e65333a32d4d6ffc97e3ebb8d6085c5956e02cd58c2d6d205c2bae68","first_seen":"2024-08-13T23:00:02Z","last_seen":"2024-08-19T13:33:06.921513Z","times_seen":2,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":22,"connect":64,"send":0,"wait":134,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waisheph.com/5/6936539/?oo=1\u0026aab=1","fqdn":"waisheph.com","domain":"waisheph.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:08.773Z","timestamp":1723592828773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"waisheph.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Jun 2024 23:53:23 GMT","end":"Mon, 16 Sep 2024 23:53:22 GMT"},"fingerprint":{"sha1":"A9:9F:23:12:64:A6:36:AE:9C:77:73:4B:FC:36:7C:CB:37:71:6B:81","sha256":"53:06:D6:17:98:93:14:0E:96:FB:16:54:A8:27:B4:10:34:94:12:FD:96:0C:5F:BB:E9:31:58:7A:EA:A3:92:13"}}},"request":{"raw":"GET /5/6936539/?oo=1\u0026aab=1 HTTP/1.1\r\nHost: waisheph.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dood.sh/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Aug 2024 23:47:08 GMT\r\ncontent-type: application/json\r\nx-trace-id: 77cd8860d56b1a0e1909ad6e9b548e9f\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://yonmewon.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://sr7pv7n5x.com\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://dood.sh\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=0080b71cad5d4a3ee02fc798abd75474; expires=Wed, 13 Aug 2025 23:47:08 GMT; path=/; secure; SameSite=None\noaidts=1723592828; expires=Wed, 13 Aug 2025 23:47:08 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4174,"size_decoded":4174,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (4178), with no line terminators","md5":"f2e94c883cf186e77409ff3cf192096b","sha1":"0584786ffe9811364a69fbe99e641593adb9ab62","sha256":"88f6271253bd72122a15032e7455857d501e36ba47068fedba0b4aea61bbf76c","sha512":"ff31bcc7024b4069b6c29f3cc2498137e1875410e7efb8887e6595b498da47612a1ab7a96d00653ec1c1676b5e1133d9aab9d5a9292dba02eb86988bbb3dcd58","ssdeep":"96:sNwXKfMNRag412wz4yWJgI30o9M8ZyIbqBjGLsLpwhxjQahh65L2:sNGKfMNH412fyWJMo9pbqlGYdw9hMS","tlshash":"c581fa258fe2bd4d9cdbc2155e38f22c00afd0e2938dd6998e79de0d3a9434718bb640","first_seen":"2024-08-19T13:24:25.133803Z","last_seen":"2024-08-19T13:24:25.133803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":99,"dns":9,"connect":27,"send":0,"wait":31,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/asd100.bin","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dood.sh/e/oj3tl9itav1x","date":"2024-08-13T23:47:09.475Z","timestamp":1723592829475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pogothere.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jul 2024 05:27:01 GMT","end":"Mon, 21 Oct 2024 05:27:00 GMT"},"fingerprint":{"sha1":"07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A","sha256":"D9:4B:5E:DE:9F:1B:BC:B8:AD:E7:0B:9B:E6:D4:30:83:5D:4F:4A:4C:B2:A9:F1:92:76:56:7B:F6:4E:58:C1:F3"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dood.sh/\r\nOrigin: https://dood.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Aug 2024 23:47:09 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://dood.sh\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 6804\r\nlast-modified: Tue, 13 Aug 2024 21:53:45 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=b2E1yeWazjQ%2Ftz4EbGwiOOUdwItX0TI4AJJKb4pgvKns5JHj6Cq7zO2AMSicE3dQpa1uYd2UE5Au7LuQLVgrxHqHDDeVJunI0AkUw%2FiC8p0ugEdHFQkVbg%2BsDyydwxRy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8b2c96b06b9b7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":102400,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":31,"dns":26,"connect":6,"send":0,"wait":11,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
