cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 274529
expires: Tue, 19 Nov 2024 12:01:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BLKg76Lcy3CvOVgZsxHWx5J0GiXIYoKqUhebodDJcuOad24uZyDuKagkrS4%2FpT1iFETomyi4a3CpoittMQ1xc8OfRmTbU0xMeNVv1bwjYAYtVq1zqXL18MogYFFL%2F9haVHz1O%2B94"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82e2ef1eb9335687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
200 OK 591 B URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 277230
expires: Tue, 19 Nov 2024 12:01:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bgxa%2FIrPn6LGOErpjCIJOh74PASvmc9gxi5LDFevqCiW%2FqNXjWFxXbjo0mtME5bP7OE3YxXbRSYywgR4gClvMkU4jDu1bL5JDVQs0MP%2BFf9Ivhh19ShZHqMIGofbxT8TL4CWiGh0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82e2ef1ec9485687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/img/no_video_3.svg
200 OK 2.8 kB URL GET HTTP/2 i.doodcdn.co/img/no_video_3.svg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (2789)
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:08 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Fri, 29 Dec 2023 07:26:26 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 23131
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mbvvcCaRJaEznEin1ER%2BjwqU%2FXtQB2scMfHEfFNsT709Ww0rE57o8F8CzYWtFE%2F%2B%2Fwc2EvXHD3RlZndIx8B%2BfoVGTeVZukej2CFX2hWefaF6sTeivG7h6fEgxaycIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f0c3256ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/tvlfilpw9hbs1e0x.jpg
200 OK 0 B URL GET HTTP/2 img.doodcdn.co/snaps/tvlfilpw9hbs1e0x.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /snaps/tvlfilpw9hbs1e0x.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
content-security-policy: upgrade-insecure-requests;
etag: "61d3187c-0"
expires: Fri, 29 Dec 2023 17:19:26 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=exs%2FTKCmvfxwELNb8PXc%2FQyNILKswVZ6lSPZtksz7%2Fwzk2lyrVmXVZacYrKad%2BogsPdEdg9MdDMlnI6WCQ59HxRSLcxcMSLF%2FQ9dnZtbaQy1kygQhA6JdLI4P%2FfrpbHA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3d56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/13pbq32pradjvr7m.jpg
200 OK 0 B URL GET HTTP/2 img.doodcdn.co/snaps/13pbq32pradjvr7m.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /snaps/13pbq32pradjvr7m.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
content-security-policy: upgrade-insecure-requests;
etag: "61d3187c-0"
expires: Sat, 30 Dec 2023 11:13:44 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bS8PymV1IB6uE%2Fy7u8RvoEtriuGV3U914R61QrMAUCoXcE8ndPKXQTX6p3rew7CJ%2BPg2HPYzJ8mojozb0hyHkKyEDwT2GAj2JHdXEF5kuJN6baKLhBQXIPIB7lyGoi1A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c4256ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/dot1z20k5z5m8vd8.jpg
200 OK 17 kB URL GET HTTP/2 img.doodcdn.co/snaps/dot1z20k5z5m8vd8.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 352x640, components 3\012- data
Hash e64ae31ed020b788acbd30ef3af8b5a6
83f836ffe537a924271795a6c33f964b62c9cc52
9ecb308ff1a8b8b65fd7e3c335d4e6893e3efa1c9704127aa1c40c151bf5781c
GET /snaps/dot1z20k5z5m8vd8.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 16926
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=17058
etag: "65560b8c-42a2"
expires: Thu, 14 Dec 2023 03:22:49 GMT
last-modified: Thu, 16 Nov 2023 12:31:08 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ShRDBK%2BzLJV%2BesQH9oAOv79wejEtPr%2F2XqSO7peWgfHi%2BlaJq7vIe9M9LxxCDajTMkamGeuKBDPsfn6evxPXU84ciXT0eaDT9QwipcnkPOjwURxlLYu6AevKXbtHqpGX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3e56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/poyup1f3l7od28f8.jpg
200 OK 48 kB URL GET HTTP/2 img.doodcdn.co/snaps/poyup1f3l7od28f8.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 64x45, segment length 16, progressive, precision 8, 720x576, components 3\012- data
Hash 5a9d7a4a2045ca9916761db69290fe3b
3a98393bb4e2110ecc944b1fd4dd1e71bdafb6bf
2b20cf6f170c9de63c3c51e17e98acd7c3825d114883cc2c6cd62c748e84f918
GET /snaps/poyup1f3l7od28f8.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 47669
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=48026
etag: "6565b5a9-bb9a"
expires: Wed, 13 Dec 2023 17:32:30 GMT
last-modified: Tue, 28 Nov 2023 09:40:57 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EGzBzSC%2FxZa0bOdNbJrBOgyMflFqeXx4CLaZ6cwXTTECcGlogOS3riffmkFWjuAjgYV0ywiEIHYj7t76pIF1EAOTr2wxCtgFUDCsus679Ecq4sM01iclQtjdfd1XN7Gy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3b56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/jpdmjw3xmm3tw07n.jpg
200 OK 20 kB URL GET HTTP/2 img.doodcdn.co/snaps/jpdmjw3xmm3tw07n.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x404, components 3\012- data
Hash 2865e12e1a7c5943da391fc9ecadffde
d9eb2d2de74b07cb0face16b2df972e65fec0c91
8273928037bc7ffa0c866223868c33bda1163df89d4383aa49b0681e2afcc336
GET /snaps/jpdmjw3xmm3tw07n.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 20229
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=20452
etag: "655680a3-4fe4"
expires: Thu, 14 Dec 2023 00:02:36 GMT
last-modified: Thu, 16 Nov 2023 20:50:43 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cj0IEApo1YGBBzDuU558HyVSyVDfHUyXhD8z%2BvXRMSgd9YyOKiZ0GvMB32xdL6ngVzc9leRryCbv3PJUbmrd3vu9PyzA1eMdBZAGO7xLkX%2BWFE3OSrW%2F%2BEW1tPjR4dHL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3856ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/w2lqjn1rxmcmh7ck.jpg
200 OK 27 kB URL GET HTTP/2 img.doodcdn.co/snaps/w2lqjn1rxmcmh7ck.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x405, components 3\012- data
Hash 0fbaf62a033cd6dd0791f3afa65ff0c7
0e067a6cf6f9e0a7601e6349993ca0c2e610bf68
38b718c82bb542a9fb8d33c0d59b3f640bcd81ef963d0c756916634866135d37
GET /snaps/w2lqjn1rxmcmh7ck.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 26938
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=27153
etag: "6548f05b-6a11"
expires: Thu, 14 Dec 2023 10:22:54 GMT
last-modified: Mon, 06 Nov 2023 13:55:39 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VRnDBp0fvKj017ubnrn2W0LAVXZRTpCdjj5N5n%2FCyYgOFEefd%2F6KXN45nVhNMyFwUCWH7u9P%2BK5%2FZ%2FiFzAiYUIazyKQmTA49lUsIN8%2BqrJryxBWOfiaad0SAG8p%2FrQa5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3c56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/iwgollq6lgwb0luq.jpg
200 OK 0 B URL GET HTTP/2 img.doodcdn.co/snaps/iwgollq6lgwb0luq.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /snaps/iwgollq6lgwb0luq.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
content-security-policy: upgrade-insecure-requests;
etag: "61d3187c-0"
expires: Sat, 30 Dec 2023 04:09:10 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MPD3u99PztmSPXBwrpD9%2B5J2PB0udI76TdU%2FoIkaixrqy%2B9LBHviO%2B994SGmkiXUmqxdcmXSB0CDukSGCOT1ZqIvcRO7y9SSEPq3GkD1JtMJvDTzi5iXQ%2BNHwEP4fQNA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3656ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/fq7ppu21coaz4c2a.jpg
200 OK 10 kB URL GET HTTP/2 img.doodcdn.co/snaps/fq7ppu21coaz4c2a.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 268x480, components 3\012- data
Hash 1161f380bcefe4e8686bb56b204e6512
2b2053c8b277d01756dcf17495c28d82c0f5188e
f76bc25ed32c1da42386268845b88cccb545640895af0030a22a3439195c0afd
GET /snaps/fq7ppu21coaz4c2a.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 10347
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "65573858-286b"
expires: Thu, 14 Dec 2023 02:54:34 GMT
last-modified: Fri, 17 Nov 2023 09:54:32 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LMkmdVLNFcRjvL%2B0y3zBTAMOp2fSf3uNNggLJQPoZNtnaV70u8HqQoqePu%2BIauallNYP7gCWQmsTQE%2B1LLqf%2FtiUjCQXaPJcVB9KpV%2FAFsASWUmSdsq8mCj53qS7WLR1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c4156ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
200 OK 30 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectdood.guru
Fingerprint7B:AD:71:9C:77:5F:C3:60:0B:20:4D:90:EE:17:A2:E7:F6:88:0D:52
ValidityMon, 27 Nov 2023 09:43:09 GMT - Sun, 25 Feb 2024 09:43:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1085)
Hash df46d6a3654760ae596b285308cb265d
f0b6eb63d18710d02dd01a2f741775b66babcf33
8ec233e2393577832baf1006ead2c89192072cde877917ace4a09fd62f5e5c40
GET /e/o9i9w29p8va8 HTTP/1.1
Host: dood.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1asuoB%2FG0rTjp%2BajccNqKjxZsR9vqcVIP%2F6bwLEVU%2Fn%2FDdmyBQ8HY5Py7Mz2o8BqHNzshDtQ8EygnLPq2lF7tEvF2X9l%2BCBuphk%2B5ahrfrKbZwB%2FIGM1jYwAcc0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef1a5a9356b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/bzxubfgakkr0d8t1.jpg
200 OK 8.0 kB URL GET HTTP/2 img.doodcdn.co/snaps/bzxubfgakkr0d8t1.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x352, components 3\012- data
Hash 88fc7ee9c6dbf0f4e0db838de4b637b3
55b64827fa4bd7bf9f43906d02c28038fe347e46
09d9da46d954749da79230fa475331dc530e51b7e6b1ee3fa9e27837f2fac92a
GET /snaps/bzxubfgakkr0d8t1.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 8033
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8366
etag: "6548d7d6-20ae"
expires: Thu, 14 Dec 2023 12:01:09 GMT
last-modified: Mon, 06 Nov 2023 12:11:02 GMT
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XCEqyqpqEVHbaYPGdagC3CRtMe%2BDx7mQ9mLQRiiLWtI6tso9FJ5DJRjDmrNdoewzTjtk1G%2Bnjv04%2FAIAtqNZYs2pyvCKXtd1oNzx6R53GwqzrAcgGyzb9DUAS4oitFs6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3456ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pl20441690.toprevenuegate.com/a9/c2/d4/a9c2d4993a0ac39b7e5fb05d9ddf8566.js
200 OK 23 kB URL GET HTTP/1.1 pl20441690.toprevenuegate.com/a9/c2/d4/a9c2d4993a0ac39b7e5fb05d9ddf8566.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjecttoprevenuegate.com
Fingerprint7D:44:5C:97:A8:B4:D2:87:5C:7C:4E:B7:DA:3A:38:99:85:00:67:40
ValidityFri, 20 Oct 2023 09:02:00 GMT - Thu, 18 Jan 2024 09:01:59 GMT
File type ASCII text, with very long lines (59704), with no line terminators
Hash db21af4f95d86e2393ecb42e79dbe46f
d3d49195b279dae928cca5e228ed6d410bb2826f
13a3c489d8e85296c004270dab84669918aab57290c7fe9ddb4105da58c17bd2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a9/c2/d4/a9c2d4993a0ac39b7e5fb05d9ddf8566.js HTTP/1.1
Host: pl20441690.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 12:01:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dabf09fdbe98ba95fa877491a5c6d1fb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
i.doodcdn.co/theme_2/css/style.css?v=0.1
200 OK 38 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/style.css?v=0.1
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65465)
Hash 6ff549c82309fe93cb6f38f8fcf60e49
c5621629b2a258c7fb572ab9d03517c7d60896fd
668326f298c9701a6422f5b7f229966fd87ae68940381a9c0c898197667a8c4c
GET /theme_2/css/style.css?v=0.1 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:08 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=249272
expires: Fri, 29 Nov 2024 01:38:36 GMT
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 36218
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VoHZNqffSncFL8%2FksKIY5FSM0NOrO1YgdCO24HhL9zOECBNtx4CIV0L31Bt%2FNYVjlk%2B9wymmCOPAwagahbZNYdnLqLCE4iA4u9iNxBcmW3RvKuAeBtSimIxTYUkUNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef1f1c4456ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash bd245bb00421766198e330085d293ca2
a2547e408821b7907455ba0798773b5174ab2855
ed2a5c89037bf2a56c8286935a6a64bdcb721804e1498f594556849eb120138d
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dood.guru
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=98a9e5fc-ab53-4141-bf71-de72850a88b6:2:1; expires=Sun, 27 Nov 2033 12:01:10 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
dood.guru/sw.js
404 Not Found 598 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectdood.guru
Fingerprint7B:AD:71:9C:77:5F:C3:60:0B:20:4D:90:EE:17:A2:E7:F6:88:0D:52
ValidityMon, 27 Nov 2023 09:43:09 GMT - Sun, 25 Feb 2024 09:43:08 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /sw.js HTTP/1.1
Host: dood.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/e/o9i9w29p8va8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hbcE%2FwzoEXVbmlx3sw2hqnaMtfVSQ6Snl7Se0iRglHt6mAnhLGCwtJSS4oRAfa%2FEur6o0boekqNTNyIt%2Bdk8BTVk5wOa7u6pMNNdcLHeDor6yfZziVKFWj5Qunk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1e8ee30b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524\012- data
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sat, 30 Dec 2023 07:25:35 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yitf%2FoPGTLh7M1G7wEK4WDFTdE4OUPflGahvrCB7KMoEaw2w4v7NaI22%2FnliGf56QtUJK%2BooTUyWLeQKsiZXsgPogsv%2Bbf%2F7msRVWYDRnQ9zWjNz9wFDe3PO89NJHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef265ad65688-OSL
alt-svc: h3=":443"; ma=86400
joyous-north.pro/Y.2_xEpFZGWH5-0JZKGLFM0_YOTP9QyRc-mTlUkVPWW_JYiZOaTbF-jdNeWfRgj_Mi2jUk2lO-DnEozpYq2_IsztMumvN-jxYy2zNAh_OCGDFEhFM-THgI1JOKG_NMmN
200 OK 0 B URL POST HTTP/2 joyous-north.pro/Y.2_xEpFZGWH5-0JZKGLFM0_YOTP9QyRc-mTlUkVPWW_JYiZOaTbF-jdNeWfRgj_Mi2jUk2lO-DnEozpYq2_IsztMumvN-jxYy2zNAh_OCGDFEhFM-THgI1JOKG_NMmN
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectjoyous-north.pro
FingerprintB5:64:76:6E:3D:2B:12:6C:C4:FC:2A:11:6D:8B:37:13:7A:91:F9:32
ValiditySun, 22 Oct 2023 00:36:49 GMT - Sat, 20 Jan 2024 00:36:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Y.2_xEpFZGWH5-0JZKGLFM0_YOTP9QyRc-mTlUkVPWW_JYiZOaTbF-jdNeWfRgj_Mi2jUk2lO-DnEozpYq2_IsztMumvN-jxYy2zNAh_OCGDFEhFM-THgI1JOKG_NMmN HTTP/1.1
Host: joyous-north.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:10 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
baseballrabble.com/pixel/purst?dl=0&th=0&sc=0&rs=1674&rd=1674&fd=1032&bv=23.11.v.9&tmpl=70
200 OK 0 B URL GET HTTP/1.1 baseballrabble.com/pixel/purst?dl=0&th=0&sc=0&rs=1674&rd=1674&fd=1032&bv=23.11.v.9&tmpl=70
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectbaseballrabble.com
Fingerprint50:66:07:D7:FE:80:97:CD:FB:25:8E:81:0A:53:97:C0:02:A0:E4:9A
ValidityTue, 28 Nov 2023 10:52:26 GMT - Mon, 26 Feb 2024 10:52:25 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1674&rd=1674&fd=1032&bv=23.11.v.9&tmpl=70 HTTP/1.1
Host: baseballrabble.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:01:10 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
harshplant.com/bRXIV.sBdEGOlq0/YxWJdDiWYSWL5/uhZXX-Ip/ne/mZ9/uEZMUil/kRP/TbQB4DMbzzUI1/NRD/E/tINxD/gxzoNlT/Ug0ZM/gH
200 OK 18 kB URL GET HTTP/2 harshplant.com/bRXIV.sBdEGOlq0/YxWJdDiWYSWL5/uhZXX-Ip/ne/mZ9/uEZMUil/kRP/TbQB4DMbzzUI1/NRD/E/tINxD/gxzoNlT/Ug0ZM/gH
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectharshplant.com
FingerprintAF:E3:6B:1E:68:D7:E8:03:19:35:DE:92:0F:AA:B0:07:88:09:FF:DA
ValiditySat, 28 Oct 2023 23:43:59 GMT - Fri, 26 Jan 2024 23:43:58 GMT
File type Unicode text, UTF-8 text, with very long lines (21403)
Hash f93ae8fbe60454404b5cee173b78a684
6ff524fbb1fdebaabffb88a747f97a2a6eb2c450
19331d5db7e860cad2a677feeef7dcbf45ab4573b97dca9003ef1c6689a72d51
GET /bRXIV.sBdEGOlq0/YxWJdDiWYSWL5/uhZXX-Ip/ne/mZ9/uEZMUil/kRP/TbQB4DMbzzUI1/NRD/E/tINxD/gxzoNlT/Ug0ZM/gH HTTP/1.1
Host: harshplant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: https://dood.guru
vary: Accept-Encoding, Origin
last-modified: Thu, 30 Nov 2023 12:01:10 GMT
access-control-allow-headers: Content-Type
access-control-allow-methods: GET
access-control-allow-credentials: true
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE3MDEzMTI5NzgsInpvbmVzIjp7IjQ0MTg1MjIiOls0NDE4NTIyLDEsMTcwMTMxMjk3OF0sIjQ1MTMwMzgiOls0NTEzMDM4LDEsMTcwMTMxNjQwOV0sIjQ1OTQ3NjQiOls0NTk0NzY0LDEsMTcwMTMzNjQ4NV0sIjQ4MzA1NzciOls0ODMwNTc3LDEsMTcwMTM0NTY3MF0sIjQ4MzU1NDEiOls0ODM1NTQxLDEsMTcwMTM0NTY3MF0sIjQ5NTIwOTIiOls0OTUyMDkyLDUsMTcwMTMzNjQ4NV0sIjc0NzQ4OSI6Wzc0NzQ4OSwxLDE3MDEzMjYzNDBdfX0=; max-age=1732881670; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
harshplant.com/YC2Dx.pEZ_WG5H0IZJG-FL0MYNTO9_yQcRmSlTk-PVWWUXzYN_maFbmcYdj-AfxgMh2iM_1kMlzmlnk-OpDqVrlsY_zuQvxwMxD-EzzAMBzCM_1EMFjGMHx-YJTKYL5M
200 OK 0 B URL POST HTTP/2 harshplant.com/YC2Dx.pEZ_WG5H0IZJG-FL0MYNTO9_yQcRmSlTk-PVWWUXzYN_maFbmcYdj-AfxgMh2iM_1kMlzmlnk-OpDqVrlsY_zuQvxwMxD-EzzAMBzCM_1EMFjGMHx-YJTKYL5M
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectharshplant.com
FingerprintAF:E3:6B:1E:68:D7:E8:03:19:35:DE:92:0F:AA:B0:07:88:09:FF:DA
ValiditySat, 28 Oct 2023 23:43:59 GMT - Fri, 26 Jan 2024 23:43:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /YC2Dx.pEZ_WG5H0IZJG-FL0MYNTO9_yQcRmSlTk-PVWWUXzYN_maFbmcYdj-AfxgMh2iM_1kMlzmlnk-OpDqVrlsY_zuQvxwMxD-EzzAMBzCM_1EMFjGMHx-YJTKYL5M HTTP/1.1
Host: harshplant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:10 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.highcpmcreativeformat.com/e7f69f7a8b80b2cd44f4966c076f3556/invoke.js
200 OK 11 kB URL GET HTTP/1.1 www.highcpmcreativeformat.com/e7f69f7a8b80b2cd44f4966c076f3556/invoke.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjecthighcpmcreativeformat.com
FingerprintDC:3C:35:A8:31:08:8E:E0:A8:24:1F:F4:A8:BE:E4:04:AE:7B:18:BD
ValidityFri, 20 Oct 2023 09:02:37 GMT - Thu, 18 Jan 2024 09:02:36 GMT
File type exported SGML document, ASCII text, with very long lines (29610), with no line terminators
Hash ac5027f9dc4350d88d2f4ff53dc61e14
6576fc8cb60634fcc6e977800a023506c792fccf
f13951c750f2692e554ac62d0bbecb7013cadf1ed17d445bdd35c03954bab351
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /e7f69f7a8b80b2cd44f4966c076f3556/invoke.js HTTP/1.1
Host: www.highcpmcreativeformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:01:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b36fa59878cac02a076df6c60a971a7d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
img.doodcdn.co/snaps/13pbq32pradjvr7m.jpg
200 OK 0 B URL GET HTTP/2 img.doodcdn.co/snaps/13pbq32pradjvr7m.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /snaps/13pbq32pradjvr7m.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
content-security-policy: upgrade-insecure-requests;
etag: "61d3187c-0"
expires: Sat, 30 Dec 2023 11:13:44 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fLDeGAHM318p0ge8YtotQ26P1AdS6IXfKCZsbBj2DRzj7FTNDfSjrSHyzUUdYLOQgxZygIxiYXXWw4izvrrldR0QrnSPOITy9%2Fqw2eg2ZHSIqIStaiCNY%2B7DnXsg3Azz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2a3ba4b524-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
200 OK 184 kB URL GET HTTP/3 i.doodcdn.co/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 184476, version 330.-16253\012- data
Size 184 kB (184476 bytes)
Hash 2a6dec1227f9970376f578270a642d06
150a6a7ffdec6e2e2ff4c712d7cee8bd9b930284
e228b909313044a18dec1a674cfd4935071c36eb3eb6a0cd38a45afac6ae3996
GET /theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: font/woff2
content-length: 184476
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sat, 30 Dec 2023 08:22:19 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=70kEm51EdhAASZWc8vN%2B8YAvejjgR9xRQ34Gq37x5HHmBcZr4IBeDeD5X10WRiSu0ZBCO8O9Oj6cV3hHGIHJjIu6c8IlwaiXeL8IrC%2Fv4D1PiZ3qVJl5pRCdOAnWiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef29ff3e5688-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/theme_2/fonts/avertastd-bold-webfont.woff2
200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-bold-webfont.woff2
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23604, version 1.0\012- data
Hash e9133fd11f14c09a2e4556c395a0ef7d
00fad09605f3342df5c9aeba130156fe19ade8b0
06244cc9cd0c998581b1bf93f5222deee7d2d0b09299190e163961afa973ba91
GET /theme_2/fonts/avertastd-bold-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: font/woff2
content-length: 23604
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sat, 30 Dec 2023 08:22:19 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YH8trkuwtZhei%2FoR4H6%2FcPVY4jfNrptcEB6Bv0ae1fZ2T2PaVA%2BDsJtuWl9r8cbA8HzNXf%2FTGLUZUlwz4K9SEeCQ3n4AUQme5LRVvLIj0xZFhyg7SIpFDDjtUKtY5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef29ff405688-OSL
alt-svc: h3=":443"; ma=86400
img.doodcdn.co/snaps/tvlfilpw9hbs1e0x.jpg
200 OK 0 B URL GET HTTP/2 img.doodcdn.co/snaps/tvlfilpw9hbs1e0x.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /snaps/tvlfilpw9hbs1e0x.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
content-security-policy: upgrade-insecure-requests;
etag: "61d3187c-0"
expires: Fri, 29 Dec 2023 17:19:26 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=05TSX29JoiaiQr6X9M3MX6stOAsG5ZNK1h%2FNEtrB3DMVArZ13pGcm6YgP6eHAE8bqAFTXz%2FGfKKBQr3%2FA27HQEIiZMkaeSgLCKZICs4H%2B4HRFJxkBDic%2FTaN0X69l0TO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2a6bc5b524-OSL
alt-svc: h3=":443"; ma=86400
img.doodcdn.co/snaps/iwgollq6lgwb0luq.jpg
200 OK 0 B URL GET HTTP/2 img.doodcdn.co/snaps/iwgollq6lgwb0luq.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /snaps/iwgollq6lgwb0luq.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
content-security-policy: upgrade-insecure-requests;
etag: "61d3187c-0"
expires: Sat, 30 Dec 2023 04:09:10 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mg5e8pbC%2BfyXQjJv5ZwJL00uk0ZCRwFcTccsWiXkn9CLCrhcp3aNHaOfbe0DpT1JDkfDv6k3s%2FxRAXA%2BToud90VdtURTbB62biM3K6M9YjYhA2ZyJEMVrabYp6I2IDU9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2a7bd4b524-OSL
alt-svc: h3=":443"; ma=86400
6.adsco.re/
200 OK 0 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://dood.guru
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2c5ec35685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 628053
expires: Tue, 19 Nov 2024 12:01:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DdhSndeTc8ZYXVX6FSqUA3PQPKfgl%2Fqy%2F2Mj8lkwNjGbhkj%2FJ0xTPaCb0TcbvEddGwQEQdWfwsJ3bfFmFHdU0%2FQ0sC83%2BEFZlT3dx1dKU3%2FXgVD89kQduah9UolwrqyGxTp%2FQZix"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82e2ef2cbafe0b65-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
200 OK 591 B URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 277233
expires: Tue, 19 Nov 2024 12:01:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vzj7KNdrpxL3tv84b1bPROWloeVhGeHgBfATqrpYm1C%2Fa30vBYxuDfSWsOsnlw3Pid6Pjj1Ofju1F4giHjq2k96lDX4SrQj6eB%2FgFTo7lb1pxaeGm2Tn8o9b9h2Rt6H9p8Ov2kP4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82e2ef2cbaff0b65-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/ads/ad.js
200 OK 18 B IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 071c641b229d2bfadd243b8fa2a9c88d
4048ed3ad506f9bb9052c23283912d0cfea8bcc6
3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Fri, 29 Nov 2024 02:25:28 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 22831
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s5XQhbQEcslz8OXO4yaAKJEIvf7u1MoyTfY3AJBsXPrm4HcPesnCu8NzK0RLBA4yzjzkxUGYRRG9gRjJPWTb1zMnL8ug0wtIL%2F2SQoCK%2FC2MxapQbrcy6Gp1sb0NKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef2cbdcab524-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/img/no_video_3.svg
200 OK 2.8 kB URL GET HTTP/2 i.doodcdn.co/img/no_video_3.svg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (2789)
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Fri, 29 Dec 2023 07:26:26 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 23134
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GLJ9Dgtx8QWGEiZBqHEreCWxIENjR3aqfnyUNmSZVlSzxfhDl8LgxcVMVnA9JcVLKtAjvc1ba4BIveJtTffQyjCyMaQmXxnyG7QpnMNElGPBotgxMZNvu%2FQC5Zzw7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2ccdcfb524-OSL
alt-svc: h3=":443"; ma=86400
sensualtestresume.com/watch.649022280142.js?key=e7f69f7a8b80b2cd44f4966c076f3556&kw=%5B%22aninda%22%2C%22tiktok%22%2C%22toge%22%2C%22colmek%22%2C%22tas%22%2C%22gantung%22%2C%22dood%22%2C%22guru%22%5D&refer=https%3A%2F%2Fdood.guru%2Fe%2Fo9i9w29p8va8&tz=0&dev=e&res=14.3095&uuid=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 sensualtestresume.com/watch.649022280142.js?key=e7f69f7a8b80b2cd44f4966c076f3556&kw=%5B%22aninda%22%2C%22tiktok%22%2C%22toge%22%2C%22colmek%22%2C%22tas%22%2C%22gantung%22%2C%22dood%22%2C%22guru%22%5D&refer=https%3A%2F%2Fdood.guru%2Fe%2Fo9i9w29p8va8&tz=0&dev=e&res=14.3095&uuid=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectsensualtestresume.com
Fingerprint8A:B9:2B:DF:06:40:60:0F:2B:17:C0:4F:CF:AA:B5:00:E4:03:D3:A0
ValidityTue, 28 Nov 2023 11:01:45 GMT - Mon, 26 Feb 2024 11:01:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.649022280142.js?key=e7f69f7a8b80b2cd44f4966c076f3556&kw=%5B%22aninda%22%2C%22tiktok%22%2C%22toge%22%2C%22colmek%22%2C%22tas%22%2C%22gantung%22%2C%22dood%22%2C%22guru%22%5D&refer=https%3A%2F%2Fdood.guru%2Fe%2Fo9i9w29p8va8&tz=0&dev=e&res=14.3095&uuid=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1 HTTP/1.1
Host: sensualtestresume.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 12:01:11 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dood.guru
Access-Control-Allow-Origin: https://dood.guru
Access-Control-Allow-Credentials: true
Location: https://sensualtestresume.com/watch.649022280142.js?key=e7f69f7a8b80b2cd44f4966c076f3556&kw=%5B%22aninda%22%2C%22tiktok%22%2C%22toge%22%2C%22colmek%22%2C%22tas%22%2C%22gantung%22%2C%22dood%22%2C%22guru%22%5D&refer=https%3A%2F%2Fdood.guru%2Fe%2Fo9i9w29p8va8&tz=0&dev=e&res=14.3095&uuid=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1&shu=c23ecad42848e0fb92b40cec8bcd38b53d62f0b8330c2184931d2898d5e5720e0c203820281ea4106e34282c5b3998e4c53190df7b4d2bf0c25beda0f404193d58491521b53994369789f181ae4370b3b7cc81acb6451165700699ea2a681e&pst=1701345731&rmtc=t
Set-Cookie: u_pl=20882367; expires=Fri, 01 Dec 2023 12:01:11 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.xPijVAWSrFEG4yIo1MKRAtLoEE3ek-NHA1SovFJv2PE; expires=Thu, 30 Nov 2023 12:02:11 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 97e1f702c8e853cd74f06fd5a7395be3
Strict-Transport-Security: max-age=0; includeSubdomains
10945-2.s.cdn15.com/creatives/71940/284507/536359_19284.png
200 OK 128 kB URL GET HTTP/2 10945-2.s.cdn15.com/creatives/71940/284507/536359_19284.png
IP
Requested by https://harshplant.com/avW-ZxyyP.2zQA9_MCTDcEwFM-THMI0JNKT_YM3NMODPI-2RNSjTQUz_MWDXUYyZM-ibZcpdZe2_5gvhcimjV-wlbm3nBoz_Yq2rhsltb-WvUw9xMyS_ZAtBdCWDx-0FaGXHRIh_ZK2LJMhNb-mP5QlRcSj_1U0VcWnXV-lZJanbpcv_bemfVgphZ-Dj0k0lOmD_Mo1pNqTrQ-5t?iframeId=wujsdb
Certificate IssuerSectigo Limited
Subject*.s.cdn15.com
Fingerprint83:79:A5:D7:C8:5D:B4:A5:B9:DC:F5:F4:59:D5:63:FC:F1:69:5A:0E
ValidityMon, 23 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 128 kB (128283 bytes)
Hash 486a9f6836ff57347169b53556c85f3e
e87a60bf41925d583fe54f3e8b8ac94b4b31b056
66d7b7e70663a3329247acf50030969b8e6037d71e816cf2fb6df33f77f6fc5a
GET /creatives/71940/284507/536359_19284.png HTTP/1.1
Host: 10945-2.s.cdn15.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://harshplant.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ucdn/1.24.0
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: image/png
content-length: 128283
last-modified: Wed, 04 Oct 2023 09:31:34 GMT
etag: "486a9f6836ff57347169b53556c85f3e"
x-timestamp: 1696411893.74856
x-trans-id: txef6f8ebb161140a6ac965-00651d5427
x-openstack-request-id: txef6f8ebb161140a6ac965-00651d5427
expires: Fri, 15 Mar 2024 19:46:54 GMT
cache-control: max-age=9186343
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsog41fW3hOd965Uj5PfSqLO5jngzO4v15H/4XOXMHf5kBdesHq2ojvvXowTQOwGQ5U=
x-served-from: l1
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, OPTIONS
x-vhostid: 104, 21521
accept-ranges: bytes
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 12:01:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://dood.guru
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
img.doodcdn.co/splash/u6jh2dhswnua0e7e.jpg
200 OK 34 kB URL GET HTTP/3 img.doodcdn.co/splash/u6jh2dhswnua0e7e.jpg
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 406x715, components 3\012- data
Hash 190a7663cd86b625321813417edcf394
55e0804d10f6e5ebfbc6f717a56dc6ebe86129d5
f119a069df6baa2a58fbd298678fbe99e62835106db53a6bc20cab16854b7e98
GET /splash/u6jh2dhswnua0e7e.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: image/jpeg
content-length: 34240
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=34713
etag: "652d4206-8799"
expires: Thu, 14 Dec 2023 12:01:11 GMT
last-modified: Mon, 16 Oct 2023 14:00:38 GMT
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8lIsol97xSo5RXy0Lano89JMP%2BYqYa7PL8MUVUmHadp%2F9A37IRLb2oWZB1XjogVv84gV3kx55xXMdYbsmiLCRWE%2Bd7q0jOq03R9aNm2ku0sxgfeGjLsUfzLZ7%2FlQ1auB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2ccdd7b524-OSL
alt-svc: h3=":443"; ma=86400
rsb5bshbzxqs.l4.adsco.re/
200 OK 0 B URL POST HTTP/2 rsb5bshbzxqs.l4.adsco.re/
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint30:24:2D:06:44:32:CD:4B:46:E0:81:9A:CF:B1:F6:9B:D2:4F:F3:6F
ValidityMon, 25 Sep 2023 16:35:45 GMT - Sun, 24 Dec 2023 16:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: rsb5bshbzxqs.l4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
6.adsco.re/
200 OK 0 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2e99ae5695-OSL
alt-svc: h3=":443"; ma=86400
d3eub2e21dc6h0.cloudfront.net/?ebued=1004073
200 OK 70 kB URL GET HTTP/2 d3eub2e21dc6h0.cloudfront.net/?ebued=1004073
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash 7f6916e04794aee0b82b397d195c8b8e
06e716c131e1a0dc76b054193a7beea44f9f59f8
4385980704c5a5d632cb432dab75ee7df0f5146db5fad90f72a4dd0771de3295
GET /?ebued=1004073 HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 69587
date: Thu, 30 Nov 2023 12:01:11 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tysi9E-R6uMMCADRrIgS7sXeYMNiF5CO3EeIM-tXmBY8obZc8_4lNg==
X-Firefox-Spdy: h2
cdn.tsyndicate.com/sdk/v1/p.js
200 OK 4.5 kB URL GET HTTP/2 cdn.tsyndicate.com/sdk/v1/p.js
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subjectcdn.tsyndicate.com
FingerprintB6:87:8F:D6:E3:48:CF:61:4E:55:B9:6B:66:FC:B2:13:7F:A0:0D:BA
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (9503)
Hash 6d87c24f44c88210f6bb07862a74ab82
25793c9b128a92b8393aa9f3f0f21717ae14e4e1
311cba72a3181f33f1b4e39a56e15c5344b97bd82987f64cabd1ed1f2bd340e1
GET /sdk/v1/p.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: application/javascript
content-length: 4524
server: nginx
last-modified: Mon, 30 Oct 2023 10:14:53 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"653f821d-256b"
content-encoding: gzip
age: 2684196
accept-ranges: bytes
X-Firefox-Spdy: h2
rsb5bshbzxqs.n4.adsco.re/
200 OK 0 B URL POST HTTP/2 rsb5bshbzxqs.n4.adsco.re/
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintAF:10:8A:4D:72:FD:FC:08:77:84:8F:BE:F7:48:3B:D0:52:53:23:0A
ValidityFri, 29 Sep 2023 17:35:50 GMT - Thu, 28 Dec 2023 17:35:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: rsb5bshbzxqs.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 12:01:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
i.doodcdn.co/css/embed.css
200 OK 80 kB URL GET HTTP/3 i.doodcdn.co/css/embed.css
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash a6e43ebf1882c6bbf639658b4910090b
6aeb2bab0e8a01962d9c961c6f3185ebe173a2bb
f9d88390d5957e6b63d04ba82b306209991695f7aa91ba6c41441c587544caae
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: W/"61d3187c-13812"
expires: Sat, 30 Dec 2023 01:53:45 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 34260
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uEOVqBBcP4T9HH5qegfxPLKMCkQzfC1VWh%2Bd7m2ERGTmTLDGWTD2QVHA2Rb%2BVRa%2Fz2SQBJIZf%2FkS%2F8ibMuy%2BGeBWlCASneD9jPs0zbfH0vidgaF7dAA2oxoOw0A5aQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef2ccdd6b524-OSL
alt-svc: h3=":443"; ma=86400
doods.pro/e/o9i9w29p8va8
200 OK 52 kB IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectdoods.pro
Fingerprint1B:93:34:9C:A2:F4:45:6B:44:39:12:71:73:2D:FC:77:F1:13:65:A8
ValidityThu, 05 Oct 2023 20:49:39 GMT - Wed, 03 Jan 2024 20:49:38 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 0a659763e79af71131859fc12049eb76
00f8d6a6dea5dbc74303caf48ad61f8cc3559197
eb7b44543fd55185409708dde07452f4dc558e6a7975a4c22c4b5a3262e55f21
GET /e/o9i9w29p8va8 HTTP/1.1
Host: doods.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 29 Nov 2023 12:01:10 GMT
set-cookie: lang=1; domain=.doods.pro; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5hlY0QFsPSbvVStqP9kGS0kYXWwfMm629WrFGv%2F0qMMruvapKEPumVBzM8IEZdoU97atr%2BUevfHZFYhBl8Pko3l5EM3mwIPgbgHHqDghXA9AHJQ5kFSNHJ1RwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef29daee56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524\012- data
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Sat, 30 Dec 2023 03:32:47 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 20726
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6UGfZOyaMovFTYCPh0FnHxguOWwv0mm74EbyLdWV8XmztzsCvLz5Ir%2BZ09NPWHAaJlUq%2FG7fwVwjCk3VT3EFqjnVXy9LCmYr76LC14VYFuHT%2FZoHi4i6ugZoDDv2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef312e555688-OSL
alt-svc: h3=":443"; ma=86400
img.doodcdn.co/splash/u6jh2dhswnua0e7e.jpg
200 OK 35 kB URL GET HTTP/3 img.doodcdn.co/splash/u6jh2dhswnua0e7e.jpg
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 406x715, components 3\012- data
Hash f647288ff9a4a1fe95ee61d9fd504645
51c4e45c16e712f8f6a115381ace067e269ad5e6
1b9f71a1ecae35b1ddbd1d78b4a2bb5e001e012d69eca9ea78fed387550cbf84
GET /splash/u6jh2dhswnua0e7e.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: image/jpeg
content-length: 34713
last-modified: Mon, 16 Oct 2023 14:00:38 GMT
etag: "652d4206-8799"
expires: Thu, 14 Dec 2023 12:01:11 GMT
cache-control: max-age=1209600
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jaqccw7zebMA%2BJmmCwMB6gK83kgh1H0qV0C6F4Hv%2F%2B5uEVLsW3y1kwjY0h8OMJmsf5Y3XBB3wpcOuX5a%2F96nuohha8FgTH7j7lbQ49iuaN2H1ege%2BnaBXZVHVHG7k7jz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef30b9f8b524-OSL
alt-svc: h3=":443"; ma=86400
static.a-ads.com/a-ads-banners/406681/300x250?region=eu-central-1
200 OK 621 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/406681/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/2256102?size=300x250
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Size 621 kB (621339 bytes)
Hash c8694e7d5d3b9a928d4d57026ac2b68b
169b9f311167e19bd5061b53fc7e4f528e3ba7a9
0c23834abdcff9f74a47b37290da55f2c84c31c82ce26d9493b39a388b51ed6a
GET /a-ads-banners/406681/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: image/gif
content-length: 621339
x-amz-id-2: NYA97pW7iMa36wiv1U+yscd5BERXa+Ll4fRXDP5IIM3eu3IZETycFrPX8MN/X+8c28n8K8mLCmc=
x-amz-request-id: BHMT9FYHNSZM77NV
x-amz-replication-status: COMPLETED
last-modified: Thu, 04 Aug 2022 08:12:39 GMT
etag: "c8694e7d5d3b9a928d4d57026ac2b68b"
cache-control: max-age=315360000
x-amz-version-id: 4E6UO4Ah7Y9Th7PfdrLCDL4YiygucdkX
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
forfeitsubscribe.com/6f/0a/93/6f0a93cda652e64b72651fd9588be3d4.js
200 OK 14 kB URL GET HTTP/1.1 forfeitsubscribe.com/6f/0a/93/6f0a93cda652e64b72651fd9588be3d4.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectforfeitsubscribe.com
Fingerprint82:B2:D8:34:F6:E3:2B:C7:7B:42:8E:0F:C8:FB:E1:E9:FC:49:04:1B
ValidityTue, 28 Nov 2023 06:52:30 GMT - Mon, 26 Feb 2024 06:52:29 GMT
File type ASCII text, with very long lines (37805), with no line terminators
Hash 63dd9dbebfaa9fae42a2b3b094395d3e
45bd9e054bcaecc73c7f69ca466a77925d01ffc1
278eec724ce12633f2d82e5e179c3123919beffeb9582ce565af486d2a2fb2e5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /6f/0a/93/6f0a93cda652e64b72651fd9588be3d4.js HTTP/1.1
Host: forfeitsubscribe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 12:01:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 437dbbcba8e792ce01f107688af44762
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.tsyndicate.com/sdk/v1/puengine.js
200 OK 34 kB URL GET HTTP/2 cdn.tsyndicate.com/sdk/v1/puengine.js
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subjectcdn.tsyndicate.com
FingerprintB6:87:8F:D6:E3:48:CF:61:4E:55:B9:6B:66:FC:B2:13:7F:A0:0D:BA
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c495ad40af8735dd306d62ef02c34a1f
0e51a0a423ded63b3c69cd207504213f5fd77ee0
016066d634922630d7cbb5bf83b022cd5cd07f8c346d4a21608ec1d6644ef2e0
GET /sdk/v1/puengine.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: application/javascript
content-length: 33968
server: nginx
last-modified: Thu, 19 Jan 2023 15:15:58 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"63c95eae-15db6"
content-encoding: gzip
age: 10334253
accept-ranges: bytes
X-Firefox-Spdy: h2
fvcwqkkqmuv.com/solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1110&y=624&md=0&afid=5740998924463104&eclog=0&sp=1&im=1
200 OK 43 B URL POST HTTP/2 fvcwqkkqmuv.com/solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1110&y=624&md=0&afid=5740998924463104&eclog=0&sp=1&im=1
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1941940&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1110&y=624&md=0&afid=5740998924463104&eclog=0&sp=1&im=1 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Thu, 02 Jan 2025 12:01:12 GMT; Secure; SameSite=None
UID=23113007015d65e596263244ba874b69a840; Path=/; Expires=Thu, 02 Jan 2025 12:01:12 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
i.doodcdn.co/img/logo-s.png
200 OK 1.9 kB URL GET HTTP/3 i.doodcdn.co/img/logo-s.png
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8211fb3cc137d3e1c1e399b86476f951
136d8ef228959aa0cee12e5ed463b6e6a4fcf720
2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Sat, 30 Dec 2023 05:07:56 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 22833
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t4VjBE3rPnpmDjsJs%2BIZ%2B0sxCZgzaxrT8KSw7Ee9A2OWrS6orCo3j1drjlwFXLh%2FjzGoTRggL4r9Zcb%2BQfcQK5YkaFmQIEDtgtRcC1Oxc%2B2FlpWf4KyKl6Olu8N%2B4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef333beab524-OSL
alt-svc: h3=":443"; ma=86400
orgotitedu.info/NVd4M2VUNRteWlRqGhUQRztFFldzckp1AQYyDVFXUGVJVwYDP0gdBlk4DVcDRzgWR0tbMgwWV3NlHAEVWDYSYjB3Bh9+JkIaPHIJVhEqAhVmAB99IGEWD2kyTTwZZBIEbzxlKEwWSXYHfhUbRCdzEh17JAEdKgMSfhRJXDRjZzljMl0FIGVVTQE9RA1XDxB6IXIwE3EmZwY5dw17ETBbCncWSWU3fSAcazJnMCl3Em8OPlhcYBs5dT9iPDZqJ3NvHHcSZwY/cVVjAw9pLXcVMmMnXjMaZQ5kEi1fDl4DD2ktfQZAdiReGShlNlIFKmUKUA85cTZiBFVhNXc8G2ogcG8wfQlBACBLFX0GSH08dxU5YydkERpmCVIwL3I3cgAUaQd3EiJjM3MnK3sNUhM8dRZlA0liFncCHFU2czgrcglRD15ZFlo5CA4CfS1BZwxQOzpCPwU
200 OK 1.2 kB URL GET HTTP/2 orgotitedu.info/NVd4M2VUNRteWlRqGhUQRztFFldzckp1AQYyDVFXUGVJVwYDP0gdBlk4DVcDRzgWR0tbMgwWV3NlHAEVWDYSYjB3Bh9+JkIaPHIJVhEqAhVmAB99IGEWD2kyTTwZZBIEbzxlKEwWSXYHfhUbRCdzEh17JAEdKgMSfhRJXDRjZzljMl0FIGVVTQE9RA1XDxB6IXIwE3EmZwY5dw17ETBbCncWSWU3fSAcazJnMCl3Em8OPlhcYBs5dT9iPDZqJ3NvHHcSZwY/cVVjAw9pLXcVMmMnXjMaZQ5kEi1fDl4DD2ktfQZAdiReGShlNlIFKmUKUA85cTZiBFVhNXc8G2ogcG8wfQlBACBLFX0GSH08dxU5YydkERpmCVIwL3I3cgAUaQd3EiJjM3MnK3sNUhM8dRZlA0liFncCHFU2czgrcglRD15ZFlo5CA4CfS1BZwxQOzpCPwU
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerAmazon
Subjectorgotitedu.info
Fingerprint79:CC:FF:0E:F4:F4:8A:D7:72:F6:75:7A:06:B2:F5:7A:84:55:95:F5
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3043), with no line terminators
Hash 677703d62a742e0f23c8d4822c45afab
c4ea0129e06be1e18a914c98c58701c3ecfa3c87
b110529c60e3d8dbb280988921e7f253067b1b6ad67312ebc1b588fc22ab832f
GET /NVd4M2VUNRteWlRqGhUQRztFFldzckp1AQYyDVFXUGVJVwYDP0gdBlk4DVcDRzgWR0tbMgwWV3NlHAEVWDYSYjB3Bh9+JkIaPHIJVhEqAhVmAB99IGEWD2kyTTwZZBIEbzxlKEwWSXYHfhUbRCdzEh17JAEdKgMSfhRJXDRjZzljMl0FIGVVTQE9RA1XDxB6IXIwE3EmZwY5dw17ETBbCncWSWU3fSAcazJnMCl3Em8OPlhcYBs5dT9iPDZqJ3NvHHcSZwY/cVVjAw9pLXcVMmMnXjMaZQ5kEi1fDl4DD2ktfQZAdiReGShlNlIFKmUKUA85cTZiBFVhNXc8G2ogcG8wfQlBACBLFX0GSH08dxU5YydkERpmCVIwL3I3cgAUaQd3EiJjM3MnK3sNUhM8dRZlA0liFncCHFU2czgrcglRD15ZFlo5CA4CfS1BZwxQOzpCPwU HTTP/1.1
Host: orgotitedu.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1191
date: Thu, 30 Nov 2023 12:01:12 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 f33514300fff2b9161f119d57e09b528.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Y_v_fpnm7ljJP6Ft9qFOqEGe4FkPalO3kAg5FSV_1pVtpdhALMheTw==
X-Firefox-Spdy: h2
atherthishinhe.com/aThSUUUIWjE8eggFMHcwG1RvdHcvHWAXIVpdJzN3DApjNSZfUGJ/JgVXJzUjG1c8JWsHXSZ0dy96HQRwIW4aPSQgazkoFwIIPBh3BXERCXATYhdlCwh7Yj8DBVt3YwcMUmIwEzgINRMEWEkUPAAOeWNgPw0LGwcSKnk1MBNQWxsSFxlrEGkzIEIIFAE+XysfEDttGwV1UH4EBDMwVQt0dy98FRN2Cm0hGx8DeWsXdFlQHxIhCnthZTUgfiUdIwdiOQcyBUo2Ex8Ke2FlMjlqMQEgBHI8Hj0RADYoPTl8BSV1L1QlHSMDbTsJBAZoNjwXJH5hZDAKbSEbDjoVG2IABWIgNRcjdBEJfFpiFzYPDwoYPBY/ADwfESxeBDsfAGI4aQwPVhhnFjsAZTQoPB44IioHSG84JgV7NQExOmA
200 OK 1.2 kB URL GET HTTP/2 atherthishinhe.com/aThSUUUIWjE8eggFMHcwG1RvdHcvHWAXIVpdJzN3DApjNSZfUGJ/JgVXJzUjG1c8JWsHXSZ0dy96HQRwIW4aPSQgazkoFwIIPBh3BXERCXATYhdlCwh7Yj8DBVt3YwcMUmIwEzgINRMEWEkUPAAOeWNgPw0LGwcSKnk1MBNQWxsSFxlrEGkzIEIIFAE+XysfEDttGwV1UH4EBDMwVQt0dy98FRN2Cm0hGx8DeWsXdFlQHxIhCnthZTUgfiUdIwdiOQcyBUo2Ex8Ke2FlMjlqMQEgBHI8Hj0RADYoPTl8BSV1L1QlHSMDbTsJBAZoNjwXJH5hZDAKbSEbDjoVG2IABWIgNRcjdBEJfFpiFzYPDwoYPBY/ADwfESxeBDsfAGI4aQwPVhhnFjsAZTQoPB44IioHSG84JgV7NQExOmA
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerAmazon
Subjectatherthishinhe.com
Fingerprint24:51:A0:C2:53:EA:9C:3F:AF:A6:4C:DC:B9:E3:2B:B2:B6:EE:3C:93
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3015), with no line terminators
Hash dff0bc39c6d4e7faa567f2948596a10d
5a587c0cfe85b6739c27779c85475b15cf27a34e
4e88f7928554fe2fea40190b9316d093592551f7713ba7642a012eb730df57f5
GET /aThSUUUIWjE8eggFMHcwG1RvdHcvHWAXIVpdJzN3DApjNSZfUGJ/JgVXJzUjG1c8JWsHXSZ0dy96HQRwIW4aPSQgazkoFwIIPBh3BXERCXATYhdlCwh7Yj8DBVt3YwcMUmIwEzgINRMEWEkUPAAOeWNgPw0LGwcSKnk1MBNQWxsSFxlrEGkzIEIIFAE+XysfEDttGwV1UH4EBDMwVQt0dy98FRN2Cm0hGx8DeWsXdFlQHxIhCnthZTUgfiUdIwdiOQcyBUo2Ex8Ke2FlMjlqMQEgBHI8Hj0RADYoPTl8BSV1L1QlHSMDbTsJBAZoNjwXJH5hZDAKbSEbDjoVG2IABWIgNRcjdBEJfFpiFzYPDwoYPBY/ADwfESxeBDsfAGI4aQwPVhhnFjsAZTQoPB44IioHSG84JgV7NQExOmA HTTP/1.1
Host: atherthishinhe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1168
date: Thu, 30 Nov 2023 12:01:12 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 d42e11d52edd8bb7c6c82444d8414824.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: xI1v2nknEuHRhR9WKx720hpLsms5yxQt_aeulmM8Bz_7l0P9ajrm4A==
X-Firefox-Spdy: h2
harshplant.com/aCW_1EwFc.mGVHz-cJ2KlLvMb_jO9PhQZRG-lTkUPVTWU_zYNZjaMb1-OdSeZfigd_Gi4j9kQl2-dnKoTp1qR_4sStUupvZ-bxkypz2AW_VCdDSEaFV-lHXINJWKt_NMSNWOJP6-bR2SFTzUR_0W9XNYVZj-QbmcZdDe0_xgNhziAjx-MlzmQn1oN_jqcrwsMtj-Yv2wNxDyM_wANBTCIDy-JFmGlHmIc_mKFLtMZNW-lPkQPRXSd_1UaVnWNXk-YZiaZbpcZ_2e5fvgchm-Vjwkbl3mB_zoYp2qhrl-btWuUv9wM_SyZztAdBW-xD0EaFXGR_hIZJ2KJLh-bNmO5PlQc_jS1T0UcVn-VXlYJZnap_vcbdmeVfp-ZhDi0j0kO_DmMn1oNpT-Qr5s
200 OK 0 B URL GET HTTP/2 harshplant.com/aCW_1EwFc.mGVHz-cJ2KlLvMb_jO9PhQZRG-lTkUPVTWU_zYNZjaMb1-OdSeZfigd_Gi4j9kQl2-dnKoTp1qR_4sStUupvZ-bxkypz2AW_VCdDSEaFV-lHXINJWKt_NMSNWOJP6-bR2SFTzUR_0W9XNYVZj-QbmcZdDe0_xgNhziAjx-MlzmQn1oN_jqcrwsMtj-Yv2wNxDyM_wANBTCIDy-JFmGlHmIc_mKFLtMZNW-lPkQPRXSd_1UaVnWNXk-YZiaZbpcZ_2e5fvgchm-Vjwkbl3mB_zoYp2qhrl-btWuUv9wM_SyZztAdBW-xD0EaFXGR_hIZJ2KJLh-bNmO5PlQc_jS1T0UcVn-VXlYJZnap_vcbdmeVfp-ZhDi0j0kO_DmMn1oNpT-Qr5s
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectharshplant.com
FingerprintAF:E3:6B:1E:68:D7:E8:03:19:35:DE:92:0F:AA:B0:07:88:09:FF:DA
ValiditySat, 28 Oct 2023 23:43:59 GMT - Fri, 26 Jan 2024 23:43:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aCW_1EwFc.mGVHz-cJ2KlLvMb_jO9PhQZRG-lTkUPVTWU_zYNZjaMb1-OdSeZfigd_Gi4j9kQl2-dnKoTp1qR_4sStUupvZ-bxkypz2AW_VCdDSEaFV-lHXINJWKt_NMSNWOJP6-bR2SFTzUR_0W9XNYVZj-QbmcZdDe0_xgNhziAjx-MlzmQn1oN_jqcrwsMtj-Yv2wNxDyM_wANBTCIDy-JFmGlHmIc_mKFLtMZNW-lPkQPRXSd_1UaVnWNXk-YZiaZbpcZ_2e5fvgchm-Vjwkbl3mB_zoYp2qhrl-btWuUv9wM_SyZztAdBW-xD0EaFXGR_hIZJ2KJLh-bNmO5PlQc_jS1T0UcVn-VXlYJZnap_vcbdmeVfp-ZhDi0j0kO_DmMn1oNpT-Qr5s HTTP/1.1
Host: harshplant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: application/javascript
content-length: 0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Thu, 30 Nov 2023 12:01:12 GMT
set-cookie: kadACap=521270:1:1701336492;536359:1:1701345672;388634:1:1701336492;390252:1:1701336497;534890:1:1700930862;534896:1:1700930862;534887:1:1701030239;346327:1:1701190440; max-age=1732881672; path=/
kadASCap=390252:1:1701336497;536359:1:1701345672;521270:1:1701336492;388634:1:1701336492; path=/
kadRPixJ=bnVsbA==; max-age=1732881672; path=/
kadUnP3=CAcQ2JWgqwYaDQjdkacCEAEYiPOhqwYaDQikoK4CEAMYrKuhqwYaDQj2iP8BEAMY2JWgqwYiCggBEAQYrKuhqwYiCggDEAMY2JWgqwYqDAi4jiUQAxjYlaCrBioMCKqqKBADGKyroasGKgwIwPEpEAEYiPOhqwY=; max-age=1732881672; path=/
x-content-type-options: nosniff
X-Firefox-Spdy: h2
doods.pro/pass_md5/122599773-91-90-1701345670-556ba129fd73332c234851be20d1af33/st2b18bbt8nksdey8z6x8j29
200 OK 90 B URL GET HTTP/3 doods.pro/pass_md5/122599773-91-90-1701345670-556ba129fd73332c234851be20d1af33/st2b18bbt8nksdey8z6x8j29
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectdoods.pro
Fingerprint1B:93:34:9C:A2:F4:45:6B:44:39:12:71:73:2D:FC:77:F1:13:65:A8
ValidityThu, 05 Oct 2023 20:49:39 GMT - Wed, 03 Jan 2024 20:49:38 GMT
File type ASCII text, with no line terminators
Hash b138bc062dd5a2a80f610959cd023971
86eb71084af45395aa571bbd72d1242409f0b186
ba778be8965edd7fce94d5681b1c8cfca7da94e922b293ad62010109a1d5e52a
GET /pass_md5/122599773-91-90-1701345670-556ba129fd73332c234851be20d1af33/st2b18bbt8nksdey8z6x8j29 HTTP/1.1
Host: doods.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/e/o9i9w29p8va8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qEVaQsh9AYeIbu6YnAQux%2BTr9ElR1byPX15%2FhnzvJ6kegkecZgzlzPxEFAKpFcVnget11%2BW1fI2Bh36HEZFnVbn58CWJ0vM0ir3bdML8xIeWTj9Zr%2FK%2B7DR8eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef30b8690b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
thethateronjus.com/eHE5TnpXTlo9Ry40SQwYFjdTKCI6E2gjKEAUb3s+GjkMNCxINB86ExxMCH5KTEEOelwIGF1zS0BXSjobDARKc0teGFcoFUVXT3NLVkEXfFRMV0xzS14FSS8dRUAfPg4MHQR/TUhACnpPTkYPfUtK
204 No Content 0 B URL GET HTTP/2 thethateronjus.com/eHE5TnpXTlo9Ry40SQwYFjdTKCI6E2gjKEAUb3s+GjkMNCxINB86ExxMCH5KTEEOelwIGF1zS0BXSjobDARKc0teGFcoFUVXT3NLVkEXfFRMV0xzS14FSS8dRUAfPg4MHQR/TUhACnpPTkYPfUtK
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectthethateronjus.com
Fingerprint82:8D:02:28:9C:46:8E:23:CC:97:0B:83:3E:AA:C0:6D:6A:0B:B1:5C
ValidityMon, 27 Nov 2023 16:41:03 GMT - Sun, 25 Feb 2024 16:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eHE5TnpXTlo9Ry40SQwYFjdTKCI6E2gjKEAUb3s+GjkMNCxINB86ExxMCH5KTEEOelwIGF1zS0BXSjobDARKc0teGFcoFUVXT3NLVkEXfFRMV0xzS14FSS8dRUAfPg4MHQR/TUhACnpPTkYPfUtK HTTP/1.1
Host: thethateronjus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 12:01:12 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AufK1TrYcWNoAqDZ9EVcD0yuymfTjQ0C2VQI%2B967Bqb5OTviLew2WtWnE6MtUU2UGOf%2FXlDfZS7saDiCxDWJXWdAsMyEHnMKGBqMwKDsZBKYao5vnRF0oldIHBc1odHyci8FtiU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef32fe477129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash bd245bb00421766198e330085d293ca2
a2547e408821b7907455ba0798773b5174ab2855
ed2a5c89037bf2a56c8286935a6a64bdcb721804e1498f594556849eb120138d
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Cookie: uid_id2=98a9e5fc-ab53-4141-bf71-de72850a88b6:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://doods.pro
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
d3eub2e21dc6h0.cloudfront.net/2d2pmajQUBQgMCwMDAlcFR1pSWgNETAwZWxkaWw18DVMyA1EbKBcwBFEeHA4JR0wKC1oQV0APWhRXV0xVEwhbXhIDGgkBCRQADhNFHhoBA1VRHwdXWRgQDwZYFk9ULAFZWkNYBF8dDwRQGB0VTwZHBBJPBkdbVkQEUlkkTwZHHQ8EAkNPVSgRRVoeXABSWS-RPBkcYEE8HNltWXxpHQ0NYBBAPBQFbUlggWARGWlZbBEZPVFpSHhgDDFsPT1QsBUdfSFoSAldX
200 OK 588 B URL GET HTTP/2 d3eub2e21dc6h0.cloudfront.net/2d2pmajQUBQgMCwMDAlcFR1pSWgNETAwZWxkaWw18DVMyA1EbKBcwBFEeHA4JR0wKC1oQV0APWhRXV0xVEwhbXhIDGgkBCRQADhNFHhoBA1VRHwdXWRgQDwZYFk9ULAFZWkNYBF8dDwRQGB0VTwZHBBJPBkdbVkQEUlkkTwZHHQ8EAkNPVSgRRVoeXABSWS-RPBkcYEE8HNltWXxpHQ0NYBBAPBQFbUlggWARGWlZbBEZPVFpSHhgDDFsPT1QsBUdfSFoSAldX
IP
Requested by https://orgotitedu.info/NVd4M2VUNRteWlRqGhUQRztFFldzckp1AQYyDVFXUGVJVwYDP0gdBlk4DVcDRzgWR0tbMgwWV3NlHAEVWDYSYjB3Bh9+JkIaPHIJVhEqAhVmAB99IGEWD2kyTTwZZBIEbzxlKEwWSXYHfhUbRCdzEh17JAEdKgMSfhRJXDRjZzljMl0FIGVVTQE9RA1XDxB6IXIwE3EmZwY5dw17ETBbCncWSWU3fSAcazJnMCl3Em8OPlhcYBs5dT9iPDZqJ3NvHHcSZwY/cVVjAw9pLXcVMmMnXjMaZQ5kEi1fDl4DD2ktfQZAdiReGShlNlIFKmUKUA85cTZiBFVhNXc8G2ogcG8wfQlBACBLFX0GSH08dxU5YydkERpmCVIwL3I3cgAUaQd3EiJjM3MnK3sNUhM8dRZlA0liFncCHFU2czgrcglRD15ZFlo5CA4CfS1BZwxQOzpCPwU
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (828), with no line terminators
Hash 4eb0a89f181d9ddbc8d64c2667218fed
247dd24f828cc3fb04aae9bd4e206da71ba22188
2cfec13876c73892e63037b1790d0442a1cc4c05b4192e412baca813234c71a6
GET /2d2pmajQUBQgMCwMDAlcFR1pSWgNETAwZWxkaWw18DVMyA1EbKBcwBFEeHA4JR0wKC1oQV0APWhRXV0xVEwhbXhIDGgkBCRQADhNFHhoBA1VRHwdXWRgQDwZYFk9ULAFZWkNYBF8dDwRQGB0VTwZHBBJPBkdbVkQEUlkkTwZHHQ8EAkNPVSgRRVoeXABSWS-RPBkcYEE8HNltWXxpHQ0NYBBAPBQFbUlggWARGWlZbBEZPVFpSHhgDDFsPT1QsBUdfSFoSAldX HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://orgotitedu.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 588
date: Thu, 30 Nov 2023 12:01:12 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XWITXOUPsZzxrlNgAm7hNrvnUW0Pjqpyrn5liB9Y2nGaBiSdJDSbtA==
X-Firefox-Spdy: h2
co500vo.video-delivery.net/favicon.ico?i
200 OK 15 kB URL GET HTTP/1.1 co500vo.video-delivery.net/favicon.ico?i
IP
Requested by moz-nullprincipal:{5ac0fff0-bb82-4126-b9f2-bcefd2a3fab5}?https://doods.pro
Certificate IssuerSectigo Limited
Subject*.video-delivery.net
FingerprintB2:D2:20:85:E7:38:3D:67:F7:C4:52:00:66:6C:CD:FE:DD:6D:7E:74
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: co500vo.video-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 12:01:12 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
adsco.re/p
200 OK 841 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1063), with no line terminators
Hash 1796df44b4eabee4afdfc6f5d17049a4
f7ef765180c3964b873426d3d8af7df05491aad7
1678f5d98309e779f6e3b9be37c1f86060c87742406236a09bf83770593813a9
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2095
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 12:01:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://dood.guru
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 5325150631986ca8275f9cba27d4767a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 12:01:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ss91TSLXMHOW0adqS4plIJgI7hhrInd1i1Sn5a9CdyGe7t09TB2DbntsogJOa%2FdpeHnvyiJq6tpPtEI8dVv7pAIjbUj%2Fld5OKeQPkQega6L5HB8PCAalZvdddusUqgz1a2w9Ca9ZXB0nEmA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef35c91ab4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
d3eub2e21dc6h0.cloudfront.net/BOU5HVHlaISkyRk0nI2lICX5zZE4NaC0nFlc+ej0aVQ0gBA1qFmEgA11zd3IVWCAgaV9cICRpSB8vIzZEDWgyNURUIT09FVUvYmY/DGB3cUsJZjA9F10hMCdcC34pIFwLfnZkVwlrdBZcC34wPRcPemJnOxx8dyxPDWt0FlwLfjUiXAoPdmRMF35ucUsJKS-I3ElZrdRJLCX93ZEgJf2JmSV8nNTEfVjZiZj8IfnJ6SR87emU
200 OK 254 B URL GET HTTP/2 d3eub2e21dc6h0.cloudfront.net/BOU5HVHlaISkyRk0nI2lICX5zZE4NaC0nFlc+ej0aVQ0gBA1qFmEgA11zd3IVWCAgaV9cICRpSB8vIzZEDWgyNURUIT09FVUvYmY/DGB3cUsJZjA9F10hMCdcC34pIFwLfnZkVwlrdBZcC34wPRcPemJnOxx8dyxPDWt0FlwLfjUiXAoPdmRMF35ucUsJKS-I3ElZrdRJLCX93ZEgJf2JmSV8nNTEfVjZiZj8IfnJ6SR87emU
IP
Requested by https://atherthishinhe.com/aThSUUUIWjE8eggFMHcwG1RvdHcvHWAXIVpdJzN3DApjNSZfUGJ/JgVXJzUjG1c8JWsHXSZ0dy96HQRwIW4aPSQgazkoFwIIPBh3BXERCXATYhdlCwh7Yj8DBVt3YwcMUmIwEzgINRMEWEkUPAAOeWNgPw0LGwcSKnk1MBNQWxsSFxlrEGkzIEIIFAE+XysfEDttGwV1UH4EBDMwVQt0dy98FRN2Cm0hGx8DeWsXdFlQHxIhCnthZTUgfiUdIwdiOQcyBUo2Ex8Ke2FlMjlqMQEgBHI8Hj0RADYoPTl8BSV1L1QlHSMDbTsJBAZoNjwXJH5hZDAKbSEbDjoVG2IABWIgNRcjdBEJfFpiFzYPDwoYPBY/ADwfESxeBDsfAGI4aQwPVhhnFjsAZTQoPB44IioHSG84JgV7NQExOmA
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 67b2f0b4704317079815e40ece5de2bf
1de98b641fdfcf29bebfb6b167e93fceb3b61e46
4a028e1afac4ad3b3fac79e3e7896314ed50213f8de080b8eb2e1351f8b5dc3c
GET /BOU5HVHlaISkyRk0nI2lICX5zZE4NaC0nFlc+ej0aVQ0gBA1qFmEgA11zd3IVWCAgaV9cICRpSB8vIzZEDWgyNURUIT09FVUvYmY/DGB3cUsJZjA9F10hMCdcC34pIFwLfnZkVwlrdBZcC34wPRcPemJnOxx8dyxPDWt0FlwLfjUiXAoPdmRMF35ucUsJKS-I3ElZrdRJLCX93ZEgJf2JmSV8nNTEfVjZiZj8IfnJ6SR87emU HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://atherthishinhe.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 254
date: Thu, 30 Nov 2023 12:01:12 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YNFTxQXJKk78mFn4Chqi_RTLRwXI1v7fuKwXFF34Fd7mq-9-W0KJvg==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:2SbZyYUIS-wYcq_rGL1Ky1GwTtea2Q:XLdNGFemSTt-aRnb; Expires=Sat, 29-Nov-2025 12:01:13 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 12:01:13 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1xIZpvSAUu-_U7knfinWdNWdQxU1OSrPecRgkIvjKZKT5-NAakX3jWZab2QMmRUJKLFenyqA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-RPWWVVQdwJyMoXHQ1D-wbw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
orgotitedu.info/utx?cb=YkLpymIPxOzZ&top=doods.pro&tid=1004073
204 No Content 0 B URL GET HTTP/2 orgotitedu.info/utx?cb=YkLpymIPxOzZ&top=doods.pro&tid=1004073
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerAmazon
Subjectorgotitedu.info
Fingerprint79:CC:FF:0E:F4:F4:8A:D7:72:F6:75:7A:06:B2:F5:7A:84:55:95:F5
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=YkLpymIPxOzZ&top=doods.pro&tid=1004073 HTTP/1.1
Host: orgotitedu.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 12:01:13 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://doods.pro
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Thu, 30 Nov 2023 12:02:13 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 f33514300fff2b9161f119d57e09b528.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: ftQZI_OxYrTrqO78QrYVX0euWMaMBs1hd5MFGbdvq3I_qVyUcp5kSQ==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:YZESrXBzlsQ3xtbvwxZs4_g9UME9WQ:mHJrzNwH463ByeU8; Expires=Sat, 29-Nov-2025 12:01:13 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 12:01:13 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0lPS7q9ivEotu9ExmdGCm-S4-Qb1ik7FDXwDRjjT1m5sylfAS5Ibl5-HEghaP0uhwBrtzGcg
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-hjWUBKBA28ZT_-PfaSf0Gg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 103 kB IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 103 kB (102872 bytes)
Hash a4590012a6e6fc81754053cae229c239
49b5c7b7d89a56cb1b574de6abd0e31b8adb10b3
bc1eff26725ce1906bf8ee31fcae50bf989bd664ddf6d3e601a847c5caf6c1a1
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doods.pro/
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:13 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://doods.pro
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 6553
last-modified: Thu, 30 Nov 2023 10:12:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cpEiV%2BDsRIQaG4ASPGlp7369K6jb1lU9BOr7t8E5I4QIuStloUVC45jljtWXMLSepMmNUkK10Ayidr3Nts%2FRaaYpxQOZ0%2FAf3VOhMncVkjnJD8MY03oCaSHntdJZxZfa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef3a1c160b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0lPS7q9ivEotu9ExmdGCm-S4-Qb1ik7FDXwDRjjT1m5sylfAS5Ibl5-HEghaP0uhwBrtzGcg
302 Found 409 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0lPS7q9ivEotu9ExmdGCm-S4-Qb1ik7FDXwDRjjT1m5sylfAS5Ibl5-HEghaP0uhwBrtzGcg
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (399)
Hash 4b8fb681266bceadb13a0c59bb550af1
5107d1ee916f62e5a4b559b18240a3909206b857
b201abb47420699e547454d426e7b47ce0454dc9e8f2f77f075d982c097f834a
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp0lPS7q9ivEotu9ExmdGCm-S4-Qb1ik7FDXwDRjjT1m5sylfAS5Ibl5-HEghaP0uhwBrtzGcg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doods.pro/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:tc0N0om-PoUDK5JZkPLmYqmjL9v7gA:YyhtnElMf2INWjIU;Path=/;Expires=Sat, 29-Nov-2025 12:01:13 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 12:01:13 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1ahZLgXPms5bHJfTLYaCXUD2-snVdD_Sucs1ZQAzLWWOfIC8Xyfvk_Eq-XfppyWo8YH3o-Ag&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-939040874%3A1701345673591301&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-ekkKBBwnSoEG0dbEDwUUNA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 409
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1xIZpvSAUu-_U7knfinWdNWdQxU1OSrPecRgkIvjKZKT5-NAakX3jWZab2QMmRUJKLFenyqA
302 Found 405 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1xIZpvSAUu-_U7knfinWdNWdQxU1OSrPecRgkIvjKZKT5-NAakX3jWZab2QMmRUJKLFenyqA
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (394)
Hash 563f9ba4b5566a3d4e6cb11334d44bb5
4ac93c8bda6b65eda4114153e6b3d079b2824d42
65a3a3bbd4200eabd8add1d9eeab0b5058663ffc8560a3b524d52dd182fff210
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1xIZpvSAUu-_U7knfinWdNWdQxU1OSrPecRgkIvjKZKT5-NAakX3jWZab2QMmRUJKLFenyqA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doods.pro/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:khVQ5DA32LSQpYsEZ6LWuLBj-kGnmw:rvyjzydwUhGDYSTr;Path=/;Expires=Sat, 29-Nov-2025 12:01:13 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 12:01:13 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0y6ZvEYGW33fdrfjyeU7h5PtJ_G2RIP-jkvJrsXqBzOJs1J2vQU-fPQuzwhcC_3zHvr2h4fA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S839208190%3A1701345673590405&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-SDaPek3Xn0VfznmzgeJltw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0y6ZvEYGW33fdrfjyeU7h5PtJ_G2RIP-jkvJrsXqBzOJs1J2vQU-fPQuzwhcC_3zHvr2h4fA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S839208190%3A1701345673590405&theme=glif
403 Forbidden 6.6 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0y6ZvEYGW33fdrfjyeU7h5PtJ_G2RIP-jkvJrsXqBzOJs1J2vQU-fPQuzwhcC_3zHvr2h4fA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S839208190%3A1701345673590405&theme=glif
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type gzip compressed data, max compression\012- data
Hash 1253df558d9c24c5c2cb96b50cd18b17
7a2d80a46c6a42c379d5e3f807436bdb376f89d9
5afb221261b2f1f725d3e2db0c465dd7e58904cba900fc2b60796e78623eb17f
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0y6ZvEYGW33fdrfjyeU7h5PtJ_G2RIP-jkvJrsXqBzOJs1J2vQU-fPQuzwhcC_3zHvr2h4fA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S839208190%3A1701345673590405&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doods.pro/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 12:01:13 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-kOd0uNua-p_BZsR8iGI_-w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1ahZLgXPms5bHJfTLYaCXUD2-snVdD_Sucs1ZQAzLWWOfIC8Xyfvk_Eq-XfppyWo8YH3o-Ag&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-939040874%3A1701345673591301&theme=glif
403 Forbidden 1.3 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1ahZLgXPms5bHJfTLYaCXUD2-snVdD_Sucs1ZQAzLWWOfIC8Xyfvk_Eq-XfppyWo8YH3o-Ag&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-939040874%3A1701345673591301&theme=glif
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type gzip compressed data, max compression\012- data
Hash cff8d64ad60443fea4083ade40de207b
628c2ecefe07907f667664ccf6c60acbc1e76fa4
bd823d42eb5acabd2ad6314435978c64624c359cb0f452bf262ffcc5890ca539
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1ahZLgXPms5bHJfTLYaCXUD2-snVdD_Sucs1ZQAzLWWOfIC8Xyfvk_Eq-XfppyWo8YH3o-Ag&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-939040874%3A1701345673591301&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doods.pro/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 12:01:13 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-v_I3aVF8DC4696oYjbGnkw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
visariomedia.com/nstvccexsjrdbmrfnma?shGbPFMp=BQMSAAAAAAAACZUAAnY3EbVrkmuaGuWMwZnthtM59eU3_YFnJgp-kag9W3v-jlYgSwStyn9GFTyjlT-sdmRY4jDktuaAuu-CKdUxVxLEZaBo311Bnbn0I1UnqNe4mA_iAj_OIv8_uHn4y7aFytoF4K2w8NgWyXsflUzVhnT0Y6a1j-M3K2QoAeWWhBUMeH439BNPOvSsuD9TNlyTY_tj7hh07JZyPb3_lkfQXJq4nDmUSG4Da5ls7j6VzmzuKO34DJ6tp85pisc9aQk7EXs2BcUI4X3ED1NNCvLteNse-dQgAkLgtMZzIB5cd_HRhzYbJHrhl1s-qQGevb7KOL4WHE7aO7-Mp3Bu7dbfJ_axQSmLa-oRnnbys00U4DwxoBnaQqorORwR8K0zhcINcBYAV_JxlW1wrDaetPhwjotJNJhZ9pz92YzyYnwBQLfW1J7m-qZjR3P2c-GexqbRn9jgBq5NHZnB9Ptpus05QEqtdVSKJV4BatSqUHgpofz1dQ--tp9W-cEbNxFHNEJES-t3VagKvOjzhgp1xMLp7UA-x40JLQZuG4KL7rMLA0Po45Q1KkHaoW74dloNWBocUuClLbZO3oYqgA07XlJYHkcK-vGuY6INwMDwLwbPCju5YACOTeh75pdOHZ2RrilRf04tq3QysoWZBQwl_d-31SDspyYThI_TpThj4Uzc04aSFduYlkIbWFCI3ug134eaQiszGEO8P49NqFB-isAW1rWJERT_cQJfr1diwhSGER2ccv69iU0uqZxcnglNqfTBTrKmJS5_r7ZCr-SAwAA_oyAT_8ET0Ic8uwhlxQkUqqIanFHGEEmUzK3sblQbhjNGRW-u8r_rksJ-aOvVssGkcvWluLzckxFiATCED2exdnXqVyjnset_GPzTJe4WlBmg9IEiBQUx6RMnnTxJG49ejPcycn8Sq6t4y0ny6FvFaPoHnIl4WQkY8KiiF9VZg-BN6Drf8yGX3Gc_bnkKkCHggnNF0IReqZT0dcS0oDvNyZQeZ_LNDh46pBpx-LyqoEQy3berC4H4xvH-OKy9zZUSIQY&AGbpfRXz=4&wWfqoBgZ=5035280&rBHGFjAm=&nQgRPFAz=0,0&niyJtsjq=&tYczMiJK=&egbAsNhU=1280,1024,1,1280,1024,0
200 OK 44 B URL GET HTTP/2 visariomedia.com/nstvccexsjrdbmrfnma?shGbPFMp=BQMSAAAAAAAACZUAAnY3EbVrkmuaGuWMwZnthtM59eU3_YFnJgp-kag9W3v-jlYgSwStyn9GFTyjlT-sdmRY4jDktuaAuu-CKdUxVxLEZaBo311Bnbn0I1UnqNe4mA_iAj_OIv8_uHn4y7aFytoF4K2w8NgWyXsflUzVhnT0Y6a1j-M3K2QoAeWWhBUMeH439BNPOvSsuD9TNlyTY_tj7hh07JZyPb3_lkfQXJq4nDmUSG4Da5ls7j6VzmzuKO34DJ6tp85pisc9aQk7EXs2BcUI4X3ED1NNCvLteNse-dQgAkLgtMZzIB5cd_HRhzYbJHrhl1s-qQGevb7KOL4WHE7aO7-Mp3Bu7dbfJ_axQSmLa-oRnnbys00U4DwxoBnaQqorORwR8K0zhcINcBYAV_JxlW1wrDaetPhwjotJNJhZ9pz92YzyYnwBQLfW1J7m-qZjR3P2c-GexqbRn9jgBq5NHZnB9Ptpus05QEqtdVSKJV4BatSqUHgpofz1dQ--tp9W-cEbNxFHNEJES-t3VagKvOjzhgp1xMLp7UA-x40JLQZuG4KL7rMLA0Po45Q1KkHaoW74dloNWBocUuClLbZO3oYqgA07XlJYHkcK-vGuY6INwMDwLwbPCju5YACOTeh75pdOHZ2RrilRf04tq3QysoWZBQwl_d-31SDspyYThI_TpThj4Uzc04aSFduYlkIbWFCI3ug134eaQiszGEO8P49NqFB-isAW1rWJERT_cQJfr1diwhSGER2ccv69iU0uqZxcnglNqfTBTrKmJS5_r7ZCr-SAwAA_oyAT_8ET0Ic8uwhlxQkUqqIanFHGEEmUzK3sblQbhjNGRW-u8r_rksJ-aOvVssGkcvWluLzckxFiATCED2exdnXqVyjnset_GPzTJe4WlBmg9IEiBQUx6RMnnTxJG49ejPcycn8Sq6t4y0ny6FvFaPoHnIl4WQkY8KiiF9VZg-BN6Drf8yGX3Gc_bnkKkCHggnNF0IReqZT0dcS0oDvNyZQeZ_LNDh46pBpx-LyqoEQy3berC4H4xvH-OKy9zZUSIQY&AGbpfRXz=4&wWfqoBgZ=5035280&rBHGFjAm=&nQgRPFAz=0,0&niyJtsjq=&tYczMiJK=&egbAsNhU=1280,1024,1,1280,1024,0
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subjectvisariomedia.com
FingerprintDB:12:35:B7:EC:A9:9C:FA:D4:68:5E:7C:DB:D3:27:59:56:1D:22:E8
ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /nstvccexsjrdbmrfnma?shGbPFMp=BQMSAAAAAAAACZUAAnY3EbVrkmuaGuWMwZnthtM59eU3_YFnJgp-kag9W3v-jlYgSwStyn9GFTyjlT-sdmRY4jDktuaAuu-CKdUxVxLEZaBo311Bnbn0I1UnqNe4mA_iAj_OIv8_uHn4y7aFytoF4K2w8NgWyXsflUzVhnT0Y6a1j-M3K2QoAeWWhBUMeH439BNPOvSsuD9TNlyTY_tj7hh07JZyPb3_lkfQXJq4nDmUSG4Da5ls7j6VzmzuKO34DJ6tp85pisc9aQk7EXs2BcUI4X3ED1NNCvLteNse-dQgAkLgtMZzIB5cd_HRhzYbJHrhl1s-qQGevb7KOL4WHE7aO7-Mp3Bu7dbfJ_axQSmLa-oRnnbys00U4DwxoBnaQqorORwR8K0zhcINcBYAV_JxlW1wrDaetPhwjotJNJhZ9pz92YzyYnwBQLfW1J7m-qZjR3P2c-GexqbRn9jgBq5NHZnB9Ptpus05QEqtdVSKJV4BatSqUHgpofz1dQ--tp9W-cEbNxFHNEJES-t3VagKvOjzhgp1xMLp7UA-x40JLQZuG4KL7rMLA0Po45Q1KkHaoW74dloNWBocUuClLbZO3oYqgA07XlJYHkcK-vGuY6INwMDwLwbPCju5YACOTeh75pdOHZ2RrilRf04tq3QysoWZBQwl_d-31SDspyYThI_TpThj4Uzc04aSFduYlkIbWFCI3ug134eaQiszGEO8P49NqFB-isAW1rWJERT_cQJfr1diwhSGER2ccv69iU0uqZxcnglNqfTBTrKmJS5_r7ZCr-SAwAA_oyAT_8ET0Ic8uwhlxQkUqqIanFHGEEmUzK3sblQbhjNGRW-u8r_rksJ-aOvVssGkcvWluLzckxFiATCED2exdnXqVyjnset_GPzTJe4WlBmg9IEiBQUx6RMnnTxJG49ejPcycn8Sq6t4y0ny6FvFaPoHnIl4WQkY8KiiF9VZg-BN6Drf8yGX3Gc_bnkKkCHggnNF0IReqZT0dcS0oDvNyZQeZ_LNDh46pBpx-LyqoEQy3berC4H4xvH-OKy9zZUSIQY&AGbpfRXz=4&wWfqoBgZ=5035280&rBHGFjAm=&nQgRPFAz=0,0&niyJtsjq=&tYczMiJK=&egbAsNhU=1280,1024,1,1280,1024,0 HTTP/1.1
Host: visariomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Thu, 30 Nov 2023 12:01:14 GMT
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 27 B IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 7f774af0452e942be20180ad977b6f16
84911ab91995b19e5afc17e8d1d94d1e0b2f24cf
8e5ef782aaf8a3d32cc661443639b103db4c0f19df51d788783da69b9edd1ee5
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doods.pro/
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:13 GMT
content-type: text/plain
set-cookie: csu=1047642918220515@1@1701345673; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://doods.pro
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gCaY7EdohNR5SMrdZXuv0R2TI7Af%2BmnLZpAYErVtxoUqLIeZaebj%2BcVOZXb4I954kz25Pg3PiHX9ZL1JDYnRCJjE6ZTyVnfVxSud%2BHqclWKgssfCdbokn8xpMEyb8EyI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef3a0c110b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ad.a-ads.com/2256102?size=300x250
200 OK 17 kB URL GET HTTP/2 ad.a-ads.com/2256102?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11012)
Hash 8aa6c8ada347a5c1c256b941f7bdc4f8
d34a8dc9571fa56a87692131a11042f90f313180
77c12f8a25ebbdbd01a924f503a2ba40494ed547a2b8a0077ebe64a99d2499cd
GET /2256102?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://dood.guru/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
dood.guru/favicon.ico
404 Not Found 146 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectdood.guru
Fingerprint7B:AD:71:9C:77:5F:C3:60:0B:20:4D:90:EE:17:A2:E7:F6:88:0D:52
ValidityMon, 27 Nov 2023 09:43:09 GMT - Sun, 25 Feb 2024 09:43:08 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
GET /favicon.ico HTTP/1.1
Host: dood.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/e/o9i9w29p8va8
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1; pp_main_a9c2d4993a0ac39b7e5fb05d9ddf8566=1; a=QOMDFnn8PT5TONETJeSqomcImLK8OHfP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bb7oqtJSbAjGkX%2FUFbHp3NVLoExAFlWfkoKeVYQiNF2%2Bitd4ZwJ0rTzZnfux760EYIM309cwMKOXkLRPYqyA8CB5LNsVWyY%2FqHO02YlD7B6i2Z51jyl1jj%2BukaQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef305cc90b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sensualtestresume.com/watch.649022280142.js?key=e7f69f7a8b80b2cd44f4966c076f3556&kw=%5B%22aninda%22%2C%22tiktok%22%2C%22toge%22%2C%22colmek%22%2C%22tas%22%2C%22gantung%22%2C%22dood%22%2C%22guru%22%5D&refer=https%3A%2F%2Fdood.guru%2Fe%2Fo9i9w29p8va8&tz=0&dev=e&res=14.3095&uuid=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1&shu=c23ecad42848e0fb92b40cec8bcd38b53d62f0b8330c2184931d2898d5e5720e0c203820281ea4106e34282c5b3998e4c53190df7b4d2bf0c25beda0f404193d58491521b53994369789f181ae4370b3b7cc81acb6451165700699ea2a681e&pst=1701345731&rmtc=t
200 OK 4.0 kB URL GET HTTP/1.1 sensualtestresume.com/watch.649022280142.js?key=e7f69f7a8b80b2cd44f4966c076f3556&kw=%5B%22aninda%22%2C%22tiktok%22%2C%22toge%22%2C%22colmek%22%2C%22tas%22%2C%22gantung%22%2C%22dood%22%2C%22guru%22%5D&refer=https%3A%2F%2Fdood.guru%2Fe%2Fo9i9w29p8va8&tz=0&dev=e&res=14.3095&uuid=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1&shu=c23ecad42848e0fb92b40cec8bcd38b53d62f0b8330c2184931d2898d5e5720e0c203820281ea4106e34282c5b3998e4c53190df7b4d2bf0c25beda0f404193d58491521b53994369789f181ae4370b3b7cc81acb6451165700699ea2a681e&pst=1701345731&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectsensualtestresume.com
Fingerprint8A:B9:2B:DF:06:40:60:0F:2B:17:C0:4F:CF:AA:B5:00:E4:03:D3:A0
ValidityTue, 28 Nov 2023 11:01:45 GMT - Mon, 26 Feb 2024 11:01:44 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (4021), with no line terminators
Hash c8b1e29bebe8b50dee88b24dc46eeded
75f781e9b17c7f83c93cc438ddc64a91dea27bee
cd6bba6c6647b733e5d00f6bb1bcc0db4b62b69f8239bdafa033babe7d405cfb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.649022280142.js?key=e7f69f7a8b80b2cd44f4966c076f3556&kw=%5B%22aninda%22%2C%22tiktok%22%2C%22toge%22%2C%22colmek%22%2C%22tas%22%2C%22gantung%22%2C%22dood%22%2C%22guru%22%5D&refer=https%3A%2F%2Fdood.guru%2Fe%2Fo9i9w29p8va8&tz=0&dev=e&res=14.3095&uuid=98a9e5fc-ab53-4141-bf71-de72850a88b6%3A2%3A1&shu=c23ecad42848e0fb92b40cec8bcd38b53d62f0b8330c2184931d2898d5e5720e0c203820281ea4106e34282c5b3998e4c53190df7b4d2bf0c25beda0f404193d58491521b53994369789f181ae4370b3b7cc81acb6451165700699ea2a681e&pst=1701345731&rmtc=t HTTP/1.1
Host: sensualtestresume.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.guru
Referer: https://dood.guru/
DNT: 1
Connection: keep-alive
Cookie: u_pl=20882367; ain=eyJhbGciOiJIUzI1NiJ9.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.xPijVAWSrFEG4yIo1MKRAtLoEE3ek-NHA1SovFJv2PE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 12:01:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dood.guru
Access-Control-Allow-Origin: https://dood.guru
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=98a9e5fc-ab53-4141-bf71-de72850a88b6:2:1; expires=Thu, 07 Dec 2023 12:01:11 GMT; secure; SameSite=None
iprcf1d718f5e21208517a24b7e64143d038=3569682; expires=Thu, 30 Nov 2023 16:01:11 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 01 Dec 2023 12:01:11 GMT; secure; SameSite=None
uncs=1; expires=Fri, 01 Dec 2023 12:01:11 GMT; secure; SameSite=None
pdhtkv32=true; expires=Fri, 01 Dec 2023 12:01:11 GMT; secure; SameSite=None
uncs32=1; expires=Fri, 01 Dec 2023 12:01:11 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4350cd7a6cae2ec7ad2b2bc040c0cf9f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 51ad4905541a486b3b7b505db7e1be02
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 12:01:09 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XzIZQ5gexElP3RheFmfbvMLvnAeeL%2FUzPb%2ByyetPS%2BTlMtWXfKQZsTvOf3et14Ihtq8IaT6IrHiJik%2Be9CDz%2BYCFXL3UyexMU4xpgD%2Bt98epmSvhhhoJyoyI2oTHCIIAQPv1wpI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef255b28b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: e0f4163bffb5475cddf891f11e492d03
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 12:01:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N8qeaGNZn2Z9iw%2BhvvuR5Cx%2BvmFzd%2F0wbULYUw%2FPqQ7eQK%2BXm7Ek%2Bk7mdZsnMS1XI4yR8ltP2C%2FVxbgs4mLtw6AEcAvtRl2XoXuOCTUW7PnttqIA8k4Cll0G0AjiJnm%2BvffQ51A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef34dd4256b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
harshplant.com/avW-ZxyyP.2zQA9_MCTDcEwFM-THMI0JNKT_YM3NMODPI-2RNSjTQUz_MWDXUYyZM-ibZcpdZe2_5gvhcimjV-wlbm3nBoz_Yq2rhsltb-WvUw9xMyS_ZAtBdCWDx-0FaGXHRIh_ZK2LJMhNb-mP5QlRcSj_1U0VcWnXV-lZJanbpcv_bemfVgphZ-Dj0k0lOmD_Mo1pNqTrQ-5t?iframeId=wujsdb
200 OK 2.6 kB URL GET HTTP/2 harshplant.com/avW-ZxyyP.2zQA9_MCTDcEwFM-THMI0JNKT_YM3NMODPI-2RNSjTQUz_MWDXUYyZM-ibZcpdZe2_5gvhcimjV-wlbm3nBoz_Yq2rhsltb-WvUw9xMyS_ZAtBdCWDx-0FaGXHRIh_ZK2LJMhNb-mP5QlRcSj_1U0VcWnXV-lZJanbpcv_bemfVgphZ-Dj0k0lOmD_Mo1pNqTrQ-5t?iframeId=wujsdb
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectharshplant.com
FingerprintAF:E3:6B:1E:68:D7:E8:03:19:35:DE:92:0F:AA:B0:07:88:09:FF:DA
ValiditySat, 28 Oct 2023 23:43:59 GMT - Fri, 26 Jan 2024 23:43:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2606), with no line terminators
Hash 4ded4e93d5376e1fef4fac520cc954cc
bd39d5605a014551a015c4cba0e26d69b06dcce3
ea9c14f6a9c533974f9dc65d843acbb70e6a9cd2df70cdd2fd08cfd0ff7e52e5
GET /avW-ZxyyP.2zQA9_MCTDcEwFM-THMI0JNKT_YM3NMODPI-2RNSjTQUz_MWDXUYyZM-ibZcpdZe2_5gvhcimjV-wlbm3nBoz_Yq2rhsltb-WvUw9xMyS_ZAtBdCWDx-0FaGXHRIh_ZK2LJMhNb-mP5QlRcSj_1U0VcWnXV-lZJanbpcv_bemfVgphZ-Dj0k0lOmD_Mo1pNqTrQ-5t?iframeId=wujsdb HTTP/1.1
Host: harshplant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Thu, 30 Nov 2023 12:01:10 GMT
set-cookie: kadACap=388634:1:1701336492;390252:1:1701336497;534890:1:1700930862;534896:1:1700930862;534887:1:1701030239;346327:1:1701190440;521270:1:1701336492; max-age=1732881670; path=/
kadASCap=521270:1:1701336492;388634:1:1701336492;390252:1:1701336497; path=/
kadRPixJ=bnVsbA==; max-age=1732881670; path=/
kadUnP3=CAYQ2JWgqwYaDQikoK4CEAMYrKuhqwYaDQj2iP8BEAMY2JWgqwYiCggBEAMYrKuhqwYiCggDEAMY2JWgqwYqDAi4jiUQAxjYlaCrBioMCKqqKBADGKyroasG; max-age=1732881670; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
i.doodcdn.com/theme_2/img/loader.svg
301 Moved Permanently 694 B URL GET HTTP/2 i.doodcdn.com/theme_2/img/loader.svg
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectdoodcdn.com
FingerprintBE:D9:17:9A:86:E5:C0:F1:D0:D6:67:BA:94:E4:B3:8B:D7:D2:E5:60
ValiditySat, 14 Oct 2023 09:16:15 GMT - Fri, 12 Jan 2024 09:16:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 30 Nov 2023 12:01:11 GMT
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Thu, 30 Nov 2023 13:01:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gF1xs3iUZ4lzeiIkJzz%2BEH5EkL8tdKcCJzbO3rFhvUafwIZClliruWFJTX0iKjCf7tsutzOYg34456D6Wbera%2BbZpYSTVlKL%2F%2FWfiz73ywYcPTLIkULLX%2Bux9Aq5qZO2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef317ad10b31-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/js/embed2.js
200 OK 339 kB URL GET HTTP/3 i.doodcdn.co/js/embed2.js
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Size 339 kB (339271 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/embed2.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: application/javascript
content-length: 339271
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=339527
etag: "61d3187c-52e47"
expires: Fri, 29 Dec 2023 11:16:10 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 35557
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tTcMoOciTxD1rf2o%2FUcMrhPivAOnRkJggJ0030k12uHADtuN4q6e26tHmAzFCMnWktvzbfbyLxpE%2BNo7nIXsMCuQyEwVHOWhIILYh8m%2F9LY8xoNt6HRortQHDara4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2ccdd9b524-OSL
alt-svc: h3=":443"; ma=86400
c.adsco.re/
0 B IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Sun, 31 Dec 2023 12:01:10 GMT
etag: W/"VvSjYzAovjnBXAoGIY8pKA=="
cf-cache-status: HIT
age: 369566
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef288df95699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.brief-tank.pro/dea777/088ac63535b7.js
200 OK 71 kB URL GET HTTP/2 www.brief-tank.pro/dea777/088ac63535b7.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectwww.brief-tank.pro
FingerprintEC:D0:42:A1:BE:3C:40:4A:C1:60:47:35:8A:63:F4:8E:5C:DD:F6:16
ValidityTue, 28 Nov 2023 07:07:28 GMT - Mon, 26 Feb 2024 07:07:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dea777/088ac63535b7.js HTTP/1.1
Host: www.brief-tank.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ucdn/1.24.0
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315173202, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsrP7jnHS8YSuPjrkuTCVphpWXyPtXW95OS25mdhT/tjlLzkaYNmrg9SuE75YfLGFQLXMUUgDK1cmv9wCy21yoe6
x-served-from: l1
x-vhostid: 156, 21727
content-encoding: br
X-Firefox-Spdy: h2
www.brief-tank.pro/dea777/088ac63535b7.js
200 OK 71 kB URL GET HTTP/2 www.brief-tank.pro/dea777/088ac63535b7.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectwww.brief-tank.pro
FingerprintEC:D0:42:A1:BE:3C:40:4A:C1:60:47:35:8A:63:F4:8E:5C:DD:F6:16
ValidityTue, 28 Nov 2023 07:07:28 GMT - Mon, 26 Feb 2024 07:07:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dea777/088ac63535b7.js HTTP/1.1
Host: www.brief-tank.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ucdn/1.24.0
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315173202, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsrP7jnHS8YSuPjrkuTCVphpWXyPtXW95OS25mdhT/tjlLzkaYNmrg9SuE75YfLGFQLXMUUgDK1cmv9wCy21yoe6
x-served-from: l1
x-vhostid: 156, 21727
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
200 OK 18 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 46da166e2af52022abead95ca5438c88
c05b711a3131289f7aa6e10e17d24517d6e6e7f4
f7c8ae9c7b18adee8a22a5368e7356c09303f88ad6bf59ca66d7bb206236c938
GET /css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 12:01:09 GMT
date: Thu, 30 Nov 2023 12:01:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
joyous-north.pro/cfD.9K6IbZ2/5blTSLWJQ/9/NcDXg/zbM-DwUV3bNMwn
200 OK 42 kB URL GET HTTP/2 joyous-north.pro/cfD.9K6IbZ2/5blTSLWJQ/9/NcDXg/zbM-DwUV3bNMwn
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectjoyous-north.pro
FingerprintB5:64:76:6E:3D:2B:12:6C:C4:FC:2A:11:6D:8B:37:13:7A:91:F9:32
ValiditySun, 22 Oct 2023 00:36:49 GMT - Sat, 20 Jan 2024 00:36:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cfD.9K6IbZ2/5blTSLWJQ/9/NcDXg/zbM-DwUV3bNMwn HTTP/1.1
Host: joyous-north.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
last-modified: Thu, 30 Nov 2023 12:01:10 GMT
access-control-allow-origin: *
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE3MDEzMTI5NzgsInpvbmVzIjp7IjQ0MTg1MjIiOls0NDE4NTIyLDEsMTcwMTMxMjk3OF0sIjQ1MTMwMzgiOls0NTEzMDM4LDEsMTcwMTMxNjQwOV0sIjQ1OTQ3NjQiOls0NTk0NzY0LDEsMTcwMTMzNjQ4NV0sIjQ4MzA1NzciOls0ODMwNTc3LDEsMTcwMTM0NTY3MF0sIjQ5NTIwOTIiOls0OTUyMDkyLDUsMTcwMTMzNjQ4NV0sIjc0NzQ4OSI6Wzc0NzQ4OSwxLDE3MDEzMjYzNDBdfX0=; max-age=1732881670; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.visariomedia.com/input-autogrow.min.css
200 OK 35 kB URL GET HTTP/2 www.visariomedia.com/input-autogrow.min.css
IP
ASN #60068 Datacamp Limited
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subject1178321474.rsc.cdn77.org
FingerprintF4:D2:0F:EF:6D:43:65:D7:73:D5:A6:14:78:01:01:9B:D0:B7:84:6C
ValidityMon, 02 Oct 2023 18:58:38 GMT - Sun, 31 Dec 2023 18:58:37 GMT
File type HTML document, ASCII text, with very long lines (1568)
Hash dada275b17ed514091d2e438dae6562c
090c819896d205dc3cc8f18b3012b86ccc9d8d72
a74cc233d4715b79149256e7e75ba74826e96cd1073bf0147f69c0640e7ed07d
GET /input-autogrow.min.css HTTP/1.1
Host: www.visariomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/x-javascript
vary: Accept-Encoding, Origin
expires: Sat, 02 Dec 2023 08:39:30 GMT
access-control-allow-origin: https://dood.guru
link: <https://visariomedia.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBuUwJDQHXxbsGAAwBuUwKAQGzFVoAAAwB1GY4CQH3/woAAA
x-77-nzt-ray: c0a4cc281e593004867968650193580e
x-accel-expires: @1701506370
x-accel-date: 1700904385
x-77-cache: HIT
x-77-age: 467161
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: EXPIRED, HIT
x-age-lb: 23061, 441285
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
thethateronjus.com/Z2hkZHVIVwcXSD5ZJhQWIAw8PjNeLTxVAQg/IS4QMS8mBycxLUIQHANVVVRFU1hTV1MXAQBZREEbEAUBEhtZVVMOBgILSEEeWVVbVFxKV0FJWEIRSFZOEBQUAFVVQgUTHAhZRFBYVVdBUl5TUkdeWQ
204 No Content 0 B URL GET HTTP/2 thethateronjus.com/Z2hkZHVIVwcXSD5ZJhQWIAw8PjNeLTxVAQg/IS4QMS8mBycxLUIQHANVVVRFU1hTV1MXAQBZREEbEAUBEhtZVVMOBgILSEEeWVVbVFxKV0FJWEIRSFZOEBQUAFVVQgUTHAhZRFBYVVdBUl5TUkdeWQ
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectthethateronjus.com
Fingerprint82:8D:02:28:9C:46:8E:23:CC:97:0B:83:3E:AA:C0:6D:6A:0B:B1:5C
ValidityMon, 27 Nov 2023 16:41:03 GMT - Sun, 25 Feb 2024 16:41:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Z2hkZHVIVwcXSD5ZJhQWIAw8PjNeLTxVAQg/IS4QMS8mBycxLUIQHANVVVRFU1hTV1MXAQBZREEbEAUBEhtZVVMOBgILSEEeWVVbVFxKV0FJWEIRSFZOEBQUAFVVQgUTHAhZRFBYVVdBUl5TUkdeWQ HTTP/1.1
Host: thethateronjus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 12:01:12 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AVKpe%2Bjsw1bCamL6GfmUoPtopGb5QVC3T91WIA2S3k6v1ijuaCYzse0zuu%2FK0JJnMm653nEieyT3KDNpXu5DWQ%2FnnwhSuPTTbkZq3iQB1U2iJQMNY2du74yDOfjb8zmLdbdNV4k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef32ee347129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.doodcdn.co/snaps/z5ypv008e7ej0llg.jpg
200 OK 25 kB URL GET HTTP/2 img.doodcdn.co/snaps/z5ypv008e7ej0llg.jpg
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1445x1441, segment length 16, progressive, precision 8, 536x480, components 3\012- data
Hash 40f69b36aa592017b23302d3a851d868
51dca8b277f862650a8e7b8e1623d0b42acf09e1
282819993c2714d592f06bc8ad65311b5948fc77f8db7ed0a734cdd6af95ce7b
GET /snaps/z5ypv008e7ej0llg.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:09 GMT
content-type: image/jpeg
content-length: 24670
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=24874
etag: "651fd584-612a"
expires: Wed, 13 Dec 2023 18:21:01 GMT
last-modified: Fri, 06 Oct 2023 09:38:12 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uFMmYs9NBHrKN7sG5dr6LIj53PGpj%2Fb4v1gdwgHufI6afVkGM%2Fg6NZdTFMgcjUjhLRQweOnASIPW2Ya2IdFrF6FSUjUxdyKxqMByNduiWKRUaSsL4htL9tWoYOlPvgNE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef1f1c3956ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/get_slides/211/u6jh2dhswnua0e7e.jpg
200 OK 3.2 kB URL GET HTTP/3 i.doodcdn.co/get_slides/211/u6jh2dhswnua0e7e.jpg
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (3268), with no line terminators
Hash a53b0e0beec56bb03654e7a354dd780d
f27ef81f896b7d761aefecc157de617a9a73d147
076de490dfc7a61b5eb006380ca86c4f8ff6e94f24b47a0fb3591711201f8758
GET /get_slides/211/u6jh2dhswnua0e7e.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doods.pro
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Thu, 30 Nov 2023 07:14:51 GMT
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dMFkJ9HjrAnCYdRO2DJoAjDs6D%2FUxDVLkwu2sJ7LxPjrtvealmUEwjwatLy4TYnl%2BMpY5dKwWgahOHmCjvFcUbCCZuZtEhBsVn%2F%2ByDlWawMe0DlTDEGW27oH0GS4aA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef3348445688-OSL
alt-svc: h3=":443"; ma=86400
www.brief-tank.pro/dea777/088ac63535b7.js
200 OK 71 kB URL GET HTTP/2 www.brief-tank.pro/dea777/088ac63535b7.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectwww.brief-tank.pro
FingerprintEC:D0:42:A1:BE:3C:40:4A:C1:60:47:35:8A:63:F4:8E:5C:DD:F6:16
ValidityTue, 28 Nov 2023 07:07:28 GMT - Mon, 26 Feb 2024 07:07:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dea777/088ac63535b7.js HTTP/1.1
Host: www.brief-tank.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ucdn/1.24.0
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315173202, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsrP7jnHS8YSuPjrkuTCVphpWXyPtXW95OS25mdhT/tjlLzkaYNmrg9SuE75YfLGFQLXMUUgDK1cmv9wCy21yoe6
x-served-from: l1
x-vhostid: 156, 21680
content-encoding: br
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/css/bootstrap.min.css
200 OK 160 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/bootstrap.min.css
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65324)
Size 160 kB (159515 bytes)
Hash 7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6
GET /theme_2/css/bootstrap.min.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:08 GMT
content-type: text/css
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Fri, 29 Nov 2024 05:26:11 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
cf-cache-status: HIT
age: 22979
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ygc%2Fn78qH4laynb81mA8dYMohyYs%2BMjzxTnwmj6NbWUuvLALDGeA1BVuSkAIOxMMbJdbuEDIptVvjqsaCZlevwKVoV%2B0ph7rOQoysKT9N4YY2ih%2F2T79qb%2FqsY46yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef1f0c3056ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/406687/970x90?region=eu-central-1
0 B URL GET static.a-ads.com/a-ads-banners/406687/970x90?region=eu-central-1
IP
Requested by https://ad.a-ads.com/2256102?size=300x250
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a-ads-banners/406687/970x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
c.adsco.re/
200 OK 80 kB IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (881)
Hash 56f4a3633028be39c15c0a06218f2928
dc5d3ee0fd000122902055ac9a2d740b747aa6de
f5207111c0adcfc06de486a24e5197a5ed3bd2af7ac217d82365895ce362012a
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Sun, 31 Dec 2023 12:01:11 GMT
etag: W/"VvSjYzAovjnBXAoGIY8pKA=="
cf-cache-status: HIT
age: 369567
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef2bfe4a5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fvcwqkkqmuv.com/aas/r45d/vki/1941940/b25e6007.js
200 OK 90 kB URL GET HTTP/2 fvcwqkkqmuv.com/aas/r45d/vki/1941940/b25e6007.js
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (65106)
Hash 81f3e1014d9c9cb9d95d644b7551f935
482675d8e5eb6a308a14f58b0f24f62283dc8ead
620d073688cf200975253345c61fb4360dc6c5785ed808cb0cf63a287321dd63
GET /aas/r45d/vki/1941940/b25e6007.js HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:11 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 11:34:35 GMT
vary: Accept-Encoding
etag: W/"6565d04b-15e20"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
rsb5bshbzxqs.s4.adsco.re/
0 B URL POST rsb5bshbzxqs.s4.adsco.re/
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: rsb5bshbzxqs.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
fvcwqkkqmuv.com/get/1941940?zoneid=1941940&jp=_clo7il4jv5zmo5zkkwryoh&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1110&y=624&md=0&afid=5740998924463104&eclog=0&sp=1&im=1
200 OK 4.1 kB URL GET HTTP/2 fvcwqkkqmuv.com/get/1941940?zoneid=1941940&jp=_clo7il4jv5zmo5zkkwryoh&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1110&y=624&md=0&afid=5740998924463104&eclog=0&sp=1&im=1
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (4463), with no line terminators
Hash d2889ea285499a68bf3b918c7797e005
aec4b8ea213b3975e0c4c48714e345a221fd43e8
864c8c6411820df284253efdb6c69da902a826ceebf37c86832a7d617ea294b5
GET /get/1941940?zoneid=1941940&jp=_clo7il4jv5zmo5zkkwryoh&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1110&y=624&md=0&afid=5740998924463104&eclog=0&sp=1&im=1 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://doods.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Thu, 02 Jan 2025 12:01:12 GMT; Secure; SameSite=None
UID=23113007010664d1641da54f2c83ab1d7ed1; Path=/; Expires=Thu, 02 Jan 2025 12:01:12 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/e7/7f/66/e77f66a1bf85e2e04ab5cc04da0f3a33/1658915540.gif
200 OK 5.8 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/e7/7f/66/e77f66a1bf85e2e04ab5cc04da0f3a33/1658915540.gif
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type GIF image data, version 89a, 320 x 50\012- data
Hash 9435690825affab0d3786533519f2e39
20e7701821ca04cce18bb07b53f5b80bf4d9ff8c
42f117a4284f3aafdf140b07a569992be9f36b2d84257697bcf940fdab35245f
GET /cti/e7/7f/66/e77f66a1bf85e2e04ab5cc04da0f3a33/1658915540.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:01:14 GMT
content-type: image/gif
content-length: 5817
server: nginx/1.21.6
last-modified: Wed, 27 Jul 2022 09:52:28 GMT
etag: "62e10adc-16b9"
expires: Sat, 02 Dec 2023 12:01:14 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.brief-tank.pro/dea777/088ac63535b7.js
200 OK 71 kB URL GET HTTP/2 www.brief-tank.pro/dea777/088ac63535b7.js
IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerLet's Encrypt
Subjectwww.brief-tank.pro
FingerprintEC:D0:42:A1:BE:3C:40:4A:C1:60:47:35:8A:63:F4:8E:5C:DD:F6:16
ValidityTue, 28 Nov 2023 07:07:28 GMT - Mon, 26 Feb 2024 07:07:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dea777/088ac63535b7.js HTTP/1.1
Host: www.brief-tank.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://dood.guru
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ucdn/1.24.0
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315173202, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsrP7jnHS8YSuPjrkuTCVphpWXyPtXW95OS25mdhT/tjlLzkaYNmrg9SuE75YfLGFQLXMUUgDK1cmv9wCy21yoe6
x-served-from: l1
x-vhostid: 156, 21680
content-encoding: br
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/img/loader.svg
200 OK 694 B URL GET HTTP/3 i.doodcdn.co/theme_2/img/loader.svg
IP
Requested by https://doods.pro/e/o9i9w29p8va8
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (750), with no line terminators
Hash e0c38124a46835a055de826afbf33d9b
255567da0faa3de6c4bcef1780e9990ba7c9c0ff
e186e235e7552b286f217c94c747abdd5a8df8279c2334a61202817f937ea960
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:12 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Fri, 29 Dec 2023 10:26:38 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 17787
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mUxsPtTAHOwwyWUPjoklPCQzlIgtvTP4EiKMc7NyBeeRKgwhbsVcIQ8znk5LwcDPp6PTN4krXxy4bFRC6SaP910npjK1UpeSrSLAqtgfFE4Dx1fgoutoqoHWGyqKTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2ef335c00b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dood.guru/efb386d845.php
200 OK 9.8 kB IP
Requested by https://dood.guru/e/o9i9w29p8va8
Certificate IssuerGoogle Trust Services LLC
Subjectdood.guru
Fingerprint7B:AD:71:9C:77:5F:C3:60:0B:20:4D:90:EE:17:A2:E7:F6:88:0D:52
ValidityMon, 27 Nov 2023 09:43:09 GMT - Sun, 25 Feb 2024 09:43:08 GMT
File type ASCII text, with very long lines (11384), with no line terminators
Hash 258f0d64a57a19e233b6b62db9c77e7c
06ee3bbd675b3ea7c6467bb8a62f4c0d3de57b5f
ad340e820bed2822cf84e26520d87ead62650baa1bb7871fb517c19cf3664581
GET /efb386d845.php HTTP/1.1
Host: dood.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.guru/e/o9i9w29p8va8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:01:10 GMT
content-type: application/javascript
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2BnEPD%2F6XFeiCkbIvDnAANOvASrl8U8vFWlyQtkHg46kg7bM2ZOZzLSoMem8QLZ%2BmgxD%2FovC83uzU8w0fZtH794TFMu8ULiSspLqjAsOpIu1hOizD3bb90tE%2BcU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2ef1e6ecd0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
172.67.209.148
46.4.20.137
0.0.0.0
185.200.118.51
188.72.219.36
188.114.96.1
146.59.55.124
185.76.9.17
212.117.190.201