| r11.o.lencr.org/ |  23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash13ea5888d3245867e3b2271529ae3a07 2ac08d083a3db9818f13427caf2afd6ffe844e19 5c2f7da36674ccad93a922282c4cc5dc25ffe3e17206be2fc0e1dfa98181fd46
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5C2F7DA36674CCAD93A922282C4CC5DC25FFE3E17206BE2FC0E1DFA98181FD46"
Last-Modified: Thu, 22 Aug 2024 00:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10940
Expires: Fri, 23 Aug 2024 15:22:17 GMT
Date: Fri, 23 Aug 2024 12:19:57 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash133a8ab4e8c45f320352685e01db9625 a24555e329796c47c106c0f55d1d8807f652b257 9e748e8be620ce31ed3909b9574b05b4f49bd396482d89699218408c95294d97
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9E748E8BE620CE31ED3909B9574B05B4F49BD396482D89699218408C95294D97"
Last-Modified: Wed, 21 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7626
Expires: Fri, 23 Aug 2024 14:27:03 GMT
Date: Fri, 23 Aug 2024 12:19:57 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8541cd70139dfda2d95ed0b4e252f586 38437f949815bd7b58655cc9dba515e53a6abee6 21b5b0e771d125bc1d1cd5b12f7bb8567f86c7ab1fe44c531bb98e84a62bfdf0
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "21B5B0E771D125BC1D1CD5B12F7BB8567F86C7AB1FE44C531BB98E84A62BFDF0"
Last-Modified: Thu, 22 Aug 2024 09:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7855
Expires: Fri, 23 Aug 2024 14:30:53 GMT
Date: Fri, 23 Aug 2024 12:19:58 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfa24406b28144f03c66e0892b293241b 64ec25a3e583dcd2ea13558272ac7badebbfc3d6 8d1b5de3eaf9d4ae520c30cb01548286eeb9853665444c34be6caac091af5638
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D1B5DE3EAF9D4AE520C30CB01548286EEB9853665444C34BE6CAAC091AF5638"
Last-Modified: Wed, 21 Aug 2024 03:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9090
Expires: Fri, 23 Aug 2024 14:51:28 GMT
Date: Fri, 23 Aug 2024 12:19:58 GMT
Connection: keep-alive
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js |  104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 70929
expires: Wed, 13 Aug 2025 12:19:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XDm9tCORgp3W%2Fol656p%2FplQ4e85wf3eaPA8DZO2MZBgZX5uWp3QfQkeLq9detvy06Cv%2BZqDiMAwrWT%2F96xcb6Z6AuVLoCfZ4FUbuhCMjjneIXV3Fw2s5naltXw7nqtYGapyn%2BhI2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b7b0dd47c7b5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js | 104.17.25.14 | 200 OK | 591 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (1266) Hash4412bf8023109ee9eb1f1f226d391329 c273960aa874a87dd022b5e597887142f1b8e34f d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 174531
expires: Wed, 13 Aug 2025 12:19:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYtlGwq6Pg6FTP%2BV%2BDZxwElqLxrEytF4FrmToJ%2B9cPIXmtsrDg7Jig7BDze0dQtSEcfIylymeVhiacYforAyqSAAf4DAfTgi34reStq7%2F9WsuFEc5x%2Bk2ajbxAP5waq79QSOfLaD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b7b0dd4bcf95684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js | 104.17.25.14 | 200 OK | 1.6 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, ASCII text, with very long lines (4505) Hashf2ecb2bd8a424c8e8cf507ce8bd933c2 3cbc08ca052ea25c3b0834b9291a3ca1e9122e26 4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099
GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 1571
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630ad3e5-623"
last-modified: Sun, 28 Aug 2022 02:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 68721
expires: Wed, 13 Aug 2025 12:19:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UcqagIECoK3EzrwBNa2xG2gS3Ir%2FtR6kMHZMkC15eas%2Bk3kmLYlxmKmldO%2B7Nz4xO8yZRoFetRpTTqpT8EWIJYeSQC%2FSxZLOUGYgynEd8jX0aa0Q052LCbDhQSrApLekdkhaUAf%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b7b0dd4dd305684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js | 104.17.25.14 | 200 OK | 137 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js IP104.17.25.14:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (48459) Size137 kB (137405 bytes) Hashd7fdaaab43bc993b85290c713fd2d289 46bf3d27b2cf38b0e999d3b0a7613011181c87f9 c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 72662
expires: Wed, 13 Aug 2025 12:19:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NPPLAhTWYh6nBQF5w7p5OzU282R5i%2Bmv3MkyDXTKo6R0%2FT3h2g0seSuxo0We22Oipw2ApUiz4wAg3S2UVzoq0gcYNSQS4ftSwjl4dpPLWN1N8WvdyrDbQbpC3UE7tv26HVQ5oY%2Bk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b7b0dd4fd565684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/img/no_video_3.svg | 104.26.6.74 | 200 OK | 2.8 kB |
URL GET HTTP/2i.doodcdn.co/img/no_video_3.svg IP104.26.6.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeSVG Scalable Vector Graphics image Hash077bfdaa49ae4877a42611b739ec4752 a2f9e1222b7af9abc05122411ab8902efcc08ead 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Sat, 21 Sep 2024 18:38:24 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 21985
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fzN1CXKoX2rJ9oqlqgK38jEUh3DTcMRrhacyLvhKlLMu9%2B4MycYDO5g3IDY72iSj3rwN99eXJqEdIGNWNZMKCpx0akm044wf0DWAjCRyZfFz20GNTu99RXggsvo2xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0dd4fb73b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/ads/ad.js | 104.26.6.74 | 200 OK | 18 B |
IP104.26.6.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeASCII text, with no line terminators Hash071c641b229d2bfadd243b8fa2a9c88d 4048ed3ad506f9bb9052c23283912d0cfea8bcc6 3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Fri, 22 Aug 2025 23:30:57 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 22008
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VwzF6%2F7c4oySK6wxyn4SX%2FBNSah1RhTOeNAZlCngUK2NIaHaS1wL7dHcqGAFAvR%2BU7oo3K2FepApSmGKBuYyr8hbU1Kv7Wbs4ipA%2F6XPKHlTOSr28MPKj%2BTntPl5OQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dd4fb91b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.doodcdn.co/js/embed3.js | 104.26.6.74 | 200 OK | 113 kB |
URL GET HTTP/2static.doodcdn.co/js/embed3.js IP104.26.6.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators Size113 kB (112790 bytes) Hash59698656a40921f7585e25a5bb347955 75de624e80155463ff8bb09090b712098eb74dd6 69e11aff34d69dbde839afd8e63b2a65e2cdf15c140f66fa55c477eeb6b33a34
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: application/javascript
content-length: 112790
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=112944
etag: "65bf48c8-1b930"
expires: Sat, 21 Sep 2024 18:37:46 GMT
last-modified: Sun, 04 Feb 2024 08:20:24 GMT
cf-cache-status: HIT
age: 22011
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7vpzpAQv2HXm%2B17nzEBBZtaj3CQCdYA7sF2S%2FRppG5fGVWu4zKz1gRjO4jSGwZWblKxquT8QWLa8FpGzLAPHdt%2B%2F8lV%2BSe2mJfnzDctGS9D5STI9ZcpHk8n5S2AYS2%2F6q0I0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0dd53c14b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.doodcdn.co/splash/tik4c7go14rs9uj4.jpg | 104.26.6.74 | 200 OK | 127 kB |
URL GET HTTP/2img.doodcdn.co/splash/tik4c7go14rs9uj4.jpg IP104.26.6.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3 Size127 kB (127130 bytes) Hashfcfee7312b2556839370f7bf9b08ea5f fdc47925a4d4a0dd5dceba4cedd47186a08f705c e9091869f180754fa33fadd0636af65e280edc90634aa5c92dcf5b458a4564e4
GET /splash/tik4c7go14rs9uj4.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: image/jpeg
content-length: 127130
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=129358
etag: "66b47399-1f94e"
expires: Fri, 06 Sep 2024 09:43:54 GMT
last-modified: Thu, 08 Aug 2024 07:28:25 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DSk6mNtqkUnhmEhFDTfGRTl6B1Vl0ZSFQzOEe2iQJ%2BW%2BHHixrg5EF6wvGq%2BKyk2FGm0Yew4O8qmOLT6KghkI8Sdv6PzGgRHPidh4fI%2B8gqOmP9xycPTjE9b0MBPL6Xh7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0dd50ba7b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| d3eub2e21dc6h0.cloudfront.net/?ebued=1004075 |  54.230.241.62 | 200 OK | 69 kB |
URL GET HTTP/2d3eub2e21dc6h0.cloudfront.net/?ebued=1004075 IP54.230.241.62:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15945) Hasha9780d1e3bb99ddf7945ac456eafad3b d942814cbb4aac53ae98d78b757c57de1c6dd34b f0b50dc10d372182a1f60e67b62a0365d2d0edcfe7bab6a33d24dadd626c1393
GET /?ebued=1004075 HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 69429
date: Fri, 23 Aug 2024 12:19:59 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -p7NaG_VPq6QT7fu8daSi92zlbWqm4MTjeD3O2OY6NIQA5UoGUY4NA==
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashbdecd9f84e2b8b5cee6c873df89e21e0 9517a0ef0c23743ad189aa24b457dc2a2d42ba70 b7212f4ca41e1aa909819f60fb5faf187b984dd6ac44861bc5f25b0234cdc13e
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B7212F4CA41E1AA909819F60FB5FAF187B984DD6AC44861BC5F25B0234CDC13E"
Last-Modified: Thu, 22 Aug 2024 16:54:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17931
Expires: Fri, 23 Aug 2024 17:18:50 GMT
Date: Fri, 23 Aug 2024 12:19:59 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash004f54596c317ca203a261ae12b053c4 fa9f187128813d52f9234a900db52b59e8c2af70 56885d76b4912e54d8ba85ac9f8d618aa1ce34b181fba5e8675a5699fc7719c8
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "56885D76B4912E54D8BA85AC9F8D618AA1CE34B181FBA5E8675A5699FC7719C8"
Last-Modified: Wed, 21 Aug 2024 17:48:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8632
Expires: Fri, 23 Aug 2024 14:43:51 GMT
Date: Fri, 23 Aug 2024 12:19:59 GMT
Connection: keep-alive
|
|
| ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG |  23.109.170.72 | 200 OK | 20 B |
URL GET HTTP/1.1ey.dramshaplite.com/rBoMTOsebwJmPbn9/MQmjG IP23.109.170.72:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectey.dramshaplite.com Fingerprint8E:78:37:5C:4A:84:BE:85:4B:73:C4:DD:71:FC:D8:D9:20:15:3F:4C ValidityWed, 31 Jul 2024 06:15:51 GMT - Tue, 29 Oct 2024 06:15:50 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rBoMTOsebwJmPbn9/MQmjG HTTP/1.1
Host: ey.dramshaplite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Aug 2024 12:19:59 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dood.li
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sat, 24-Aug-2024 12:19:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 24-Aug-2024 12:19:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| troubledcontradiction.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js | 172.240.253.132 | 200 OK | 14 kB |
URL GET HTTP/1.1troubledcontradiction.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js IP172.240.253.132:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjecttroubledcontradiction.com FingerprintCD:D9:F9:CB:C6:1B:9B:25:CA:3E:F3:F4:2D:96:9A:B4:7F:C1:D2:AF ValidityTue, 06 Aug 2024 16:05:45 GMT - Mon, 04 Nov 2024 16:05:44 GMT
File typeJavaScript source, ASCII text, with very long lines (39560), with no line terminators Hasha76806226b6d759ac6dc50efb95ef36e 5be20ff7aa09163e11be805cce9c75f7e6fa97d2 e3563426249d2724151e1789e16d1eea2cca8bc13514c9173ec4a31e52590281
GET /2c/03/60/2c0360ed33b0b4736859081c701f9a91.js HTTP/1.1
Host: troubledcontradiction.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 23 Aug 2024 12:19:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: troubledcontradiction.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c922e4c14b665f3355ac6e366156938a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| i.doodcdn.com/theme_2/img/loader.svg | 172.67.208.102 | 301 Moved Permanently | 167 B |
URL GET HTTP/2i.doodcdn.com/theme_2/img/loader.svg IP172.67.208.102:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.com FingerprintC4:B2:FF:D7:AC:99:CA:06:A1:DB:D7:A2:C2:ED:27:F4:2C:E7:FB:3F ValidityTue, 06 Aug 2024 09:13:15 GMT - Mon, 04 Nov 2024 09:13:14 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: text/html
content-length: 167
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Fri, 23 Aug 2024 13:19:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2GIufHmL9tysNRcFwjbeiD3FsJb5rZDscO1d6MWug7BsTldmlzYlBaLXbhWfMm6vB%2Bky97llDTXvV2k%2BWrK9hzhgf4rm%2FncdDO2%2BeWaWPoXyHcJvxLj5%2FJOGgiAGeBO5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0dd9ca2056cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| | 172.67.68.133 | 200 OK | 0 B |
URL User Request GET HTTP/2IP172.67.68.133:443
CertificateIssuerGoogle Trust Services Subjectdood.li Fingerprint64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C ValidityFri, 26 Jul 2024 23:34:22 GMT - Thu, 24 Oct 2024 23:34:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Anti-debugging code |
HEAD /e/2acf7ajdrlaw HTTP/1.1
Host: dood.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/e/2acf7ajdrlaw
Cookie: file_id=169292344; aff=17300; ref_url=; lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 22 Aug 2024 12:19:59 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yhqJFDp1wFjgSIvG88YozwxaS46CH7VTQRW53hcT8QjxDqYj7CF36nfY5SyexGOhnhf6iCNlhcT1C95ERkXmu1gt0pe87nRciWabNAmQDj%2FxQxbm8LJLzrY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dd9ab1b569a-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 | 104.26.7.74 | 200 OK | 24 kB |
URL GET HTTP/3i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 IP104.26.7.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23812, version 1.524 Hasheb586e5a1b86dbf1c866e3ed80f9d18e 280ee78d19c017ab9335f769595e5157d3c4a343 714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Sat, 21 Sep 2024 16:09:29 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21538
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2F6Ib0zr%2B%2Fu5syy0ekNz3wmF%2FXFGHHKJFYIlx%2Bpz2ZJ2M0vPgM0pAZ7dX58hNvske86emcE4kHTWBCYRNBBMy67kL6Utp8kQ9SajoVFdS7kfdXWow2xQDoMI3WFLPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dd9f883b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| img.doodcdn.co/splash/tik4c7go14rs9uj4.jpg | 104.26.7.74 | 200 OK | 127 kB |
URL GET HTTP/2img.doodcdn.co/splash/tik4c7go14rs9uj4.jpg IP104.26.7.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3 Size127 kB (127130 bytes) Hashfcfee7312b2556839370f7bf9b08ea5f fdc47925a4d4a0dd5dceba4cedd47186a08f705c e9091869f180754fa33fadd0636af65e280edc90634aa5c92dcf5b458a4564e4
GET /splash/tik4c7go14rs9uj4.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: image/jpeg
content-length: 127130
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=129358
etag: "66b47399-1f94e"
expires: Thu, 05 Sep 2024 15:58:22 GMT
last-modified: Thu, 08 Aug 2024 07:28:25 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RkRR3WXTwMmtHKKrU7nrQdfJeZA5jEWAk2pxWqCwFdJNr3oNcoZxgm8tuaDeedMFdJsW77FXfQxm4BzCdrkTfCxRp2P5kP9fzrXLMT7V9yT9%2Bxtqeuiymw8wAco6Walc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0dd96fe4b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashbeb7051de6548b57927ea2ba1050bd28 9646e880c0264f454242cbb9603d4711cc9ed323 e7f3d11e0509c41d91ce4bc210482ab4516b923b79b1b11d2908f072a93a05d7
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E7F3D11E0509C41D91CE4BC210482AB4516B923B79B1B11D2908F072A93A05D7"
Last-Modified: Thu, 22 Aug 2024 13:41:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3832
Expires: Fri, 23 Aug 2024 13:23:51 GMT
Date: Fri, 23 Aug 2024 12:19:59 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashbeb7051de6548b57927ea2ba1050bd28 9646e880c0264f454242cbb9603d4711cc9ed323 e7f3d11e0509c41d91ce4bc210482ab4516b923b79b1b11d2908f072a93a05d7
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E7F3D11E0509C41D91CE4BC210482AB4516B923B79B1B11D2908F072A93A05D7"
Last-Modified: Thu, 22 Aug 2024 13:41:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3832
Expires: Fri, 23 Aug 2024 13:23:51 GMT
Date: Fri, 23 Aug 2024 12:19:59 GMT
Connection: keep-alive
|
|
| waisheph.com/tag.min.js |  139.45.197.245 | 200 OK | 26 kB |
IP139.45.197.245:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectwaisheph.com Fingerprint68:94:2B:35:6C:6A:DF:A9:03:5C:1C:8B:30:7E:DC:82:BE:43:C7:55 ValidityTue, 20 Aug 2024 00:37:21 GMT - Mon, 18 Nov 2024 00:37:20 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash01a074613fe2f267e156dc0e6d6cb34a ecb21050125cf9d9710401685995e80554f23639 dad11c0e5ff101cec53b3bea022482e746f889b15c581dda7c0e50d28f6d3a81
GET /tag.min.js HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: text/javascript; charset=utf-8
content-length: 26515
content-encoding: br
x-trace-id: 55ceb142eba8dca87777742736da9a47
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 23 Aug 2024 09:47:40 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| niersfohiplaceof.info/S2hxS1BkVxI4bRlaRHsDHFlBHDt6XyYTGhE8KXIyLwQFDjYnB1c/OS9VQHtgf1hGfnY7ARV2YW0bBSokPhtMenYiBhckbW0eTHp+eFxfeGZlXFc+bXpOBTsxLFVAbSA/HB12YXxaRX9hfl1IcmZ/XQ | 188.114.97.1 | 204 No Content | 0 B |
URL GET HTTP/2niersfohiplaceof.info/S2hxS1BkVxI4bRlaRHsDHFlBHDt6XyYTGhE8KXIyLwQFDjYnB1c/OS9VQHtgf1hGfnY7ARV2YW0bBSokPhtMenYiBhckbW0eTHp+eFxfeGZlXFc+bXpOBTsxLFVAbSA/HB12YXxaRX9hfl1IcmZ/XQ IP188.114.97.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectniersfohiplaceof.info Fingerprint49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /S2hxS1BkVxI4bRlaRHsDHFlBHDt6XyYTGhE8KXIyLwQFDjYnB1c/OS9VQHtgf1hGfnY7ARV2YW0bBSokPhtMenYiBhckbW0eTHp+eFxfeGZlXFc+bXpOBTsxLFVAbSA/HB12YXxaRX9hfl1IcmZ/XQ HTTP/1.1
Host: niersfohiplaceof.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 23 Aug 2024 12:19:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mbL9lg3e9ke4zRvOkGaIBpU0ByelGmPkmwa7S3WZutNzUTmnvFsr50VDnPePbcLbbWUiis3PSweGKY7zDKCGeazLyQfoVMue0y4FGGwnF1hkRjO9wjRcumQMabO22HtPhAtOJ8uKgPo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dda6b2eb505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| anceenablesas.com/NGQ1M0ZVBlZeeVVZVxUzRggIFnRyQQd1IgcBQFF0UVYEVyUCDAUdJVgLQFcgRgtbR2haAUEWdHJUV2sMQAZbfgl8NXh6EnYPV3AQeidtZgxuPF5hH2ImBVAAUxBlcBdxB3ZlMXYmBGYOdTV8cgcFJXZwd24he0kQYTJdVwp2DFZ4ElhVYHIXDAB2WH94J00DCWBVTXoDUw9kZgBEMnJiD3cmYAcBdRN8dwdlE3JyLgAsZkQleTFNBwV3JWRwDkMcbWs/XCNkAwx9PHB9AHcITVUQWFBCYABMIHRhNXAjQkcPZSIFZBUFF0Fkd0QzbVkEfTxwfiB2IRhbInkIZ3YXBVFUYAN2AHZhH3sjZHkKZTdBch5iXXFrE3oAbQIcUjVSQA51NVJmB1w+Yms8ZjFidXdQMndbEmUDE1k1WwpFDjZSXAJpAQ1cUQ | 108.157.229.33 | 200 OK | 1.2 kB |
URL GET HTTP/2anceenablesas.com/NGQ1M0ZVBlZeeVVZVxUzRggIFnRyQQd1IgcBQFF0UVYEVyUCDAUdJVgLQFcgRgtbR2haAUEWdHJUV2sMQAZbfgl8NXh6EnYPV3AQeidtZgxuPF5hH2ImBVAAUxBlcBdxB3ZlMXYmBGYOdTV8cgcFJXZwd24he0kQYTJdVwp2DFZ4ElhVYHIXDAB2WH94J00DCWBVTXoDUw9kZgBEMnJiD3cmYAcBdRN8dwdlE3JyLgAsZkQleTFNBwV3JWRwDkMcbWs/XCNkAwx9PHB9AHcITVUQWFBCYABMIHRhNXAjQkcPZSIFZBUFF0Fkd0QzbVkEfTxwfiB2IRhbInkIZ3YXBVFUYAN2AHZhH3sjZHkKZTdBch5iXXFrE3oAbQIcUjVSQA51NVJmB1w+Yms8ZjFidXdQMndbEmUDE1k1WwpFDjZSXAJpAQ1cUQ IP108.157.229.33:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerAmazon Subjectanceenablesas.com Fingerprint87:48:18:2F:7F:90:CC:A3:D3:8C:7F:F2:DB:B8:C7:64:D8:E5:61:E8 ValidityTue, 18 Jun 2024 00:00:00 GMT - Thu, 17 Jul 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3030), with no line terminators Hash9130575cddb0c4e7cffb4014a8565bf0 660d3d059f11e08767a84615d6984f9dd2d417d4 2114a27b3b59372762c88796e26f83d753f1e485eb5a8d855eddfb214175f93e
GET /NGQ1M0ZVBlZeeVVZVxUzRggIFnRyQQd1IgcBQFF0UVYEVyUCDAUdJVgLQFcgRgtbR2haAUEWdHJUV2sMQAZbfgl8NXh6EnYPV3AQeidtZgxuPF5hH2ImBVAAUxBlcBdxB3ZlMXYmBGYOdTV8cgcFJXZwd24he0kQYTJdVwp2DFZ4ElhVYHIXDAB2WH94J00DCWBVTXoDUw9kZgBEMnJiD3cmYAcBdRN8dwdlE3JyLgAsZkQleTFNBwV3JWRwDkMcbWs/XCNkAwx9PHB9AHcITVUQWFBCYABMIHRhNXAjQkcPZSIFZBUFF0Fkd0QzbVkEfTxwfiB2IRhbInkIZ3YXBVFUYAN2AHZhH3sjZHkKZTdBch5iXXFrE3oAbQIcUjVSQA51NVJmB1w+Yms8ZjFidXdQMndbEmUDE1k1WwpFDjZSXAJpAQ1cUQ HTTP/1.1
Host: anceenablesas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1182
date: Fri, 23 Aug 2024 12:19:59 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b301fa8d72072cc0289eb055d8389e68.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: uIrZSv7kmflO74MWK29Hcy6Nvl2qIvgvokwoIgP8QXzG9CGJfXSzBw==
X-Firefox-Spdy: h2
|
|
| getrunkhomuto.info/V1BCWTU2MiE0CjZtIH9AJTx/fAcRdXAfUWQ1NzsHMmJzPVZhOHJ3Vjs/Nz1TJT8sLRs5NTZ8BxE2EGpdDh4UGF4RKhgNVy0dEAl0PzgmaV0kEhU9Qg85KhF7BBYECXM4dXAffGYJcgF9DiQBI1E1GQo2ABlhMjdWPR00OmE4GQs+RR8SETZWMTsHKHxnBi0cTyA9BDMNHjQrEGIYJyoxbAU7eg8HZioaMAQCMhE2bR48NWF+Lzx7G00NKRQ0UgYJLD1kHhEQMWw8IyMcch1jBB1zNRoWYFE2Nxc2U2dkChgHBTkRIVoGCSw6fhs4ADN3PBY3HgcVJRoOGDgWDCB8NR1zKQQzBHcodwAWcQpyPBYbDn8cMQQUABkCcnwHFQcrMVwEOHYUbzo8Cz9eFSQmPhM9Iy03RWoRLTYCYhs1HV8YChArYDo0 | 108.157.229.111 | 200 OK | 1.2 kB |
URL GET HTTP/2getrunkhomuto.info/V1BCWTU2MiE0CjZtIH9AJTx/fAcRdXAfUWQ1NzsHMmJzPVZhOHJ3Vjs/Nz1TJT8sLRs5NTZ8BxE2EGpdDh4UGF4RKhgNVy0dEAl0PzgmaV0kEhU9Qg85KhF7BBYECXM4dXAffGYJcgF9DiQBI1E1GQo2ABlhMjdWPR00OmE4GQs+RR8SETZWMTsHKHxnBi0cTyA9BDMNHjQrEGIYJyoxbAU7eg8HZioaMAQCMhE2bR48NWF+Lzx7G00NKRQ0UgYJLD1kHhEQMWw8IyMcch1jBB1zNRoWYFE2Nxc2U2dkChgHBTkRIVoGCSw6fhs4ADN3PBY3HgcVJRoOGDgWDCB8NR1zKQQzBHcodwAWcQpyPBYbDn8cMQQUABkCcnwHFQcrMVwEOHYUbzo8Cz9eFSQmPhM9Iy03RWoRLTYCYhs1HV8YChArYDo0 IP108.157.229.111:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerAmazon Subjectgetrunkhomuto.info Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3025), with no line terminators Hash721275b5f5fa52d45ac37f126c95b3b0 1e8b0dd3370bdcb58b034f402f87030b9d79530c 64242979abb2e7441c35c16b0bb97ffc8359f57956de076b3f48a35c53459364
GET /V1BCWTU2MiE0CjZtIH9AJTx/fAcRdXAfUWQ1NzsHMmJzPVZhOHJ3Vjs/Nz1TJT8sLRs5NTZ8BxE2EGpdDh4UGF4RKhgNVy0dEAl0PzgmaV0kEhU9Qg85KhF7BBYECXM4dXAffGYJcgF9DiQBI1E1GQo2ABlhMjdWPR00OmE4GQs+RR8SETZWMTsHKHxnBi0cTyA9BDMNHjQrEGIYJyoxbAU7eg8HZioaMAQCMhE2bR48NWF+Lzx7G00NKRQ0UgYJLD1kHhEQMWw8IyMcch1jBB1zNRoWYFE2Nxc2U2dkChgHBTkRIVoGCSw6fhs4ADN3PBY3HgcVJRoOGDgWDCB8NR1zKQQzBHcodwAWcQpyPBYbDn8cMQQUABkCcnwHFQcrMVwEOHYUbzo8Cz9eFSQmPhM9Iy03RWoRLTYCYhs1HV8YChArYDo0 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1182
date: Fri, 23 Aug 2024 12:19:59 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 36510edbc7ba8916907c18e15b00f64c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: UwbB-sJkkzm1Fa1qpL4HHeJBkklwtT-1oFJZxQU4Em3Ab0108herFQ==
X-Firefox-Spdy: h2
|
|
| niersfohiplaceof.info/NEVZMEgbejpDdXkvG3IdXhwfcQBmLBhHAXMhNHUYdRQ9BSlDCH9EIVB4aAB4AHVuB25ELD0NeQxjKkQpQDAqDXkSLDdWJwljLw15GnV3AmYBYywNeRIxKVEvCXR/QDxAKWQBfwZxbQF9AXxgBn4H | 188.114.97.1 | 204 No Content | 0 B |
URL GET HTTP/2niersfohiplaceof.info/NEVZMEgbejpDdXkvG3IdXhwfcQBmLBhHAXMhNHUYdRQ9BSlDCH9EIVB4aAB4AHVuB25ELD0NeQxjKkQpQDAqDXkSLDdWJwljLw15GnV3AmYBYywNeRIxKVEvCXR/QDxAKWQBfwZxbQF9AXxgBn4H IP188.114.97.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectniersfohiplaceof.info Fingerprint49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NEVZMEgbejpDdXkvG3IdXhwfcQBmLBhHAXMhNHUYdRQ9BSlDCH9EIVB4aAB4AHVuB25ELD0NeQxjKkQpQDAqDXkSLDdWJwljLw15GnV3AmYBYywNeRIxKVEvCXR/QDxAKWQBfwZxbQF9AXxgBn4H HTTP/1.1
Host: niersfohiplaceof.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 23 Aug 2024 12:19:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97sFY84VK7ulLX%2FgOKiKxWX75btwzknIQctU9kquq3mhPd2Ohhx8sovDiNgLFBFTbb8z8xSmnjfYA5%2FRhsl0VKdOy7yS32ahHl%2BEOC1dmrGCMM657ixM3OoYt3JHJhCh9YWcld6eiVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dda7b3fb505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.r2m03.amazontrust.com/ | 54.230.218.11 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP54.230.218.11:0
Hash1cdb99b0b82c31eca2ad5ed656cfb1c3 cb5c4c15cc51af701166f389e15fef8a2d292231 9d0252ea7fa4520bef8bece15bc5794d9d98c776b46270af9645ac1d56300139
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 23 Aug 2024 12:19:59 GMT
Last-Modified: Fri, 23 Aug 2024 11:33:04 GMT
Server: ECAcc (ska/F7A3)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hRvdEbetNaMekHcVMPJ_rHkz8JaUKHnj__eL0cfHEmS1sKA_-LbztQ==
Age: 2816
|
|
| i.doodcdn.co/img/logo-s.png | 104.26.6.74 | 200 OK | 1.9 kB |
URL GET HTTP/3i.doodcdn.co/img/logo-s.png IP104.26.6.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash8211fb3cc137d3e1c1e399b86476f951 136d8ef228959aa0cee12e5ed463b6e6a4fcf720 2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Sat, 21 Sep 2024 21:00:24 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 21994
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CwCplqbv6rCoxwoo7L1rOGjScMpnwGpNkLbSINPLP1Pra%2F8NY91pvRFK%2FgVchvLrLYjzIRt6lFVXodw8JXlTm6ZwisXm%2FCB5iKBSA7rL1BR91e5eoFhxNx73ZFNu3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0ddc0d18b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| proftrafficcounter.com/stats |  3.123.210.174 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP3.123.210.174:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash7967e9902094ba05e6d5ce175e242880 9d5021b9241e41d7399b67d12a96d05eaa967c1a dd26faf5fd901c600f529bb7c09362732038df067e6eea3c436a08339648cf35
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dood.li
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d:2:1; expires=Mon, 21 Aug 2034 12:20:00 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0cf9a34a6f57813192631a9e7449d116 36d010d635bb01ed6e75fa85620602285ec974f1 a930b90bfe8389db235828b592e53e550f0118fd8ace5ea6cd81ffd03e511efd
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A930B90BFE8389DB235828B592E53E550F0118FD8ACE5EA6CD81FFD03E511EFD"
Last-Modified: Thu, 22 Aug 2024 16:46:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19742
Expires: Fri, 23 Aug 2024 17:49:02 GMT
Date: Fri, 23 Aug 2024 12:20:00 GMT
Connection: keep-alive
|
|
| blurbreimbursetrombone.com/solid.gif?z=1999414&nojs=0&abvar=535&febuild=76e65645779d627ff15e88d10ce1c883411be21d&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3&afid=7431360695235584&eclog=0&snc=0&ssc=0&im=1&cs=5 |  94.242.247.30 | 200 OK | 43 B |
URL POST HTTP/2blurbreimbursetrombone.com/solid.gif?z=1999414&nojs=0&abvar=535&febuild=76e65645779d627ff15e88d10ce1c883411be21d&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3&afid=7431360695235584&eclog=0&snc=0&ssc=0&im=1&cs=5 IP94.242.247.30:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1999414&nojs=0&abvar=535&febuild=76e65645779d627ff15e88d10ce1c883411be21d&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3&afid=7431360695235584&eclog=0&snc=0&ssc=0&im=1&cs=5 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None
UID=24082307205cbf48c2d57c4c93a53fd01d29; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| recordedthereby.com/sfp.js | 188.114.96.1 | 200 OK | 28 kB |
URL GET HTTP/2recordedthereby.com/sfp.js IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectrecordedthereby.com FingerprintA1:CB:3E:AF:CE:F5:E9:D2:26:FB:E2:D4:FE:4B:29:D2:B3:C9:AD:3B ValiditySat, 06 Jul 2024 15:25:15 GMT - Fri, 04 Oct 2024 15:25:14 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hash7e3e44049654b6e244c1777e68ffb8e7 8f2a8298666d607afd92a0baa362ef4dc9ccd039 4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: 29418e0f3bcc9f868ca5aec8b43e4242
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F65S22Ph%2B0iF8FC2aur7evTuS0ZUcsMBlMcu0bJ3%2BCubmGaDUEKeH68GSTaNqtFgr9fuv4elpZcUHROSae1sOyI50eSXhI2l5gSLJIiHlbPF0vU98lfNcqmrCJS0bIpUyNYUM8UF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0ddb4c5b56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashcf4beded5cc66b936a54a6514b3d9bc8 a53a94acfc4c8ee1478737c46b73ffc45644b63e 80698e8fd5496078caf28a66f56b4d83c215ab7ce22eba2948be2e7e505957c2
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "80698E8FD5496078CAF28A66F56B4D83C215AB7CE22EBA2948BE2E7E505957C2"
Last-Modified: Thu, 22 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2751
Expires: Fri, 23 Aug 2024 13:05:51 GMT
Date: Fri, 23 Aug 2024 12:20:00 GMT
Connection: keep-alive
|
|
| blurbreimbursetrombone.com/get/1999414?zoneid=1999414&jp=_clitep5t710x1wroy4dbd1&nojs=0&abvar=535&febuild=76e65645779d627ff15e88d10ce1c883411be21d&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3&afid=7431360695235584&eclog=0&snc=0&ssc=0&im=1&cs=5&uf=0 | 94.242.247.30 | 200 OK | 8.4 kB |
URL GET HTTP/2blurbreimbursetrombone.com/get/1999414?zoneid=1999414&jp=_clitep5t710x1wroy4dbd1&nojs=0&abvar=535&febuild=76e65645779d627ff15e88d10ce1c883411be21d&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3&afid=7431360695235584&eclog=0&snc=0&ssc=0&im=1&cs=5&uf=0 IP94.242.247.30:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typegzip compressed data, from Unix Hash1c3c20de9c482b305bf8fbe4d457899c 3b2fe4525d2d4e23ab1b574a40ec5c6bb9d7ad61 468eba36814055482231ff1534f0c2940d02527fbc4cb52fbf2c68c536c48342
GET /get/1999414?zoneid=1999414&jp=_clitep5t710x1wroy4dbd1&nojs=0&abvar=535&febuild=76e65645779d627ff15e88d10ce1c883411be21d&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=2&pt=osv3iIiRGVzcGljYWJsZSUyME1lJTIwNCUyMDIwMjQlMjBNdWx0aSUyMFZmcSUyMC0lMjBEb29kU3RyZWFtOjpOb3QlMjBGb3VuZA&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&psu=cnEMN5MaHR0cHM6Ly9kb29kLmxpL2UvMmFjZjdhamRybGF3&afid=7431360695235584&eclog=0&snc=0&ssc=0&im=1&cs=5&uf=0 HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None
UID=240823072067c6c085f2e243e98cefeb51e7; Path=/; Expires=Fri, 26 Sep 2025 12:20:00 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| dood.li/favicon.ico | 172.67.68.133 | 200 OK | 15 kB |
IP172.67.68.133:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdood.li Fingerprint64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C ValidityFri, 26 Jul 2024 23:34:22 GMT - Thu, 24 Oct 2024 23:34:21 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash30d3656f43c817e38c3e7d70b2bfbdad 1aa43b43755e7cba5e145d0978517f7bedad7da6 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico HTTP/1.1
Host: dood.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/e/2acf7ajdrlaw
Cookie: lang=1; UGVyc2lzdFN0b3JhZ2U=%7B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: image/x-icon
content-length: 15406
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Wed, 04 Sep 2024 18:34:48 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 1532712
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2Bm7v8u%2BpHRaIY6RB7aUz73UOAXQd037nJaxRfI270NaBdVsHpbjSi%2FAqCeAFLj38CAnlCiPvr%2Fveree6Jyr%2FBx6TpMRXq8xIrotgXx0187reK53ScEfHD0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0ddda919569a-OSL
X-Firefox-Spdy: h2
|
|
| d3eub2e21dc6h0.cloudfront.net/fR3hYNVAkFzZTbzMRPAhhd0hsBWdwXihHNSFFPFo/I1Y0XHYtCzdbIHo5N1pncjMvcToIIgpHBSocfkEqI0VoEzwmFj8IdiIWOwhhYRk8V21zXi1UbSoXIlw8Kxl9BxZyVmgQYndQIARhYksaEGJ3FDFbJT9dagUof04HA2RiSxoQYncKLhBjBkFuG2BuXW-oFNyIbM1p1dT5qBWF3SGkFYWJKaFM5NR0+WihiSh4MZmlIfkBtdg | 54.230.241.62 | | 264 B |
URL d3eub2e21dc6h0.cloudfront.net/fR3hYNVAkFzZTbzMRPAhhd0hsBWdwXihHNSFFPFo/I1Y0XHYtCzdbIHo5N1pncjMvcToIIgpHBSocfkEqI0VoEzwmFj8IdiIWOwhhYRk8V21zXi1UbSoXIlw8Kxl9BxZyVmgQYndQIARhYksaEGJ3FDFbJT9dagUof04HA2RiSxoQYncKLhBjBkFuG2BuXW-oFNyIbM1p1dT5qBWF3SGkFYWJKaFM5NR0+WihiSh4MZmlIfkBtdg IP54.230.241.62:0
CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (308), with no line terminators Hashac76bdfadfe56a30e2b18eba2dcef490 74e49858558d69ab9667719c422c67672023c541 dd3c7f876df12441e2b23adf56d6a449c3f6397af2355f9b6af7ed4de62693fb
GET /fR3hYNVAkFzZTbzMRPAhhd0hsBWdwXihHNSFFPFo/I1Y0XHYtCzdbIHo5N1pncjMvcToIIgpHBSocfkEqI0VoEzwmFj8IdiIWOwhhYRk8V21zXi1UbSoXIlw8Kxl9BxZyVmgQYndQIARhYksaEGJ3FDFbJT9dagUof04HA2RiSxoQYncKLhBjBkFuG2BuXW-oFNyIbM1p1dT5qBWF3SGkFYWJKaFM5NR0+WihiSh4MZmlIfkBtdg HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://getrunkhomuto.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 264
date: Fri, 23 Aug 2024 12:20:00 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eqtn-lP9bw4QpCaIS6kjznbMmIn72H0PCOho4xWs4PL40R-C6SuDWg==
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/theme_2/img/loader.svg | 104.26.6.74 | 200 OK | 4.1 kB |
URL GET HTTP/3i.doodcdn.co/theme_2/img/loader.svg IP104.26.6.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeexported SGML document, ASCII text Hashbe00fc4a29d03016e78b28c9943e3f51 10f2025f5aa96706cc81e050eadfcaa9bcc55af5 eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sat, 21 Sep 2024 17:29:35 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 22009
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cQEQ%2FVU8TMAhgW2goKvnQ9UCYnlcInxXeiTS3I58iZ2Y2GuZlKp6YyWzqb0YWxOorHou4QIMHVMw2cFGlsShEA4zp3x9glerEhiNg1AwugGb%2BE46ml9oKa0JSOVEpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0ddb3c08b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash27466fb380d486bf2c9a016b0f31a289 1a26479e42c3e52b860f23792ffdb41c972a11c8 f9064bfb1ec61afc1c394b833f3c23c215ba0496d040866e238e1896f54cdfb1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash27466fb380d486bf2c9a016b0f31a289 1a26479e42c3e52b860f23792ffdb41c972a11c8 f9064bfb1ec61afc1c394b833f3c23c215ba0496d040866e238e1896f54cdfb1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.163.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP64.233.163.84:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintCF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD ValidityTue, 30 Jul 2024 12:50:16 GMT - Tue, 22 Oct 2024 12:50:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:dxbB0n54wDlTf2Ry3ymhk8lLtl10Dg:zu3sQyr8BMjumm44; Expires=Sun, 23-Aug-2026 12:20:00 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 23 Aug 2024 12:20:00 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3rsr8r4i0enVNl3B-9JzYZGeF5xak8wUDZromNhOkzr03d38akmYK3gYAgVGC2m1QKQh4wM9Q
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-N6-UaO3sqmFpNybHAVEJoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/css/embed.css | 104.26.6.74 | 200 OK | 114 kB |
URL GET HTTP/2i.doodcdn.co/css/embed.css IP104.26.6.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeUnicode text, UTF-8 text, with very long lines (65532), with no line terminators Size114 kB (113505 bytes) Hasha5c91b724f97f22dcbd30015e428905d 2e17655248703d8adff91a8cee2171b382a985db 5c23246f49386f3207b85ebf3480e39647d40542f1f626017ddfc03cda3a7f6f
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:58 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: W/"61d3187c-13812"
expires: Sun, 22 Sep 2024 03:26:54 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 22009
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtE9qeDbO3Cx3fW4kk%2BsBrneieJxKML9v%2B0M5HUVwgxP20PzbVWy0qle%2B2M4Q6OkCp5Fy6j8EXf3RiQx%2Fp%2B%2BsnaQXNj%2FZVsOatKHMDFYRoNtOB8OxgZWZERHdah0WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dd4fb6cb509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.163.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP64.233.163.84:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintCF:39:12:AA:9B:5C:4C:3E:5A:7A:3D:A5:4F:3A:36:FF:78:D9:4B:BD ValidityTue, 30 Jul 2024 12:50:16 GMT - Tue, 22 Oct 2024 12:50:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:CEL7g4l1HJVLmVVc1tqTJ05pgoUI7w:3SdGQJcIBG-rMlp4; Expires=Sun, 23-Aug-2026 12:20:00 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 23 Aug 2024 12:20:00 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3rIvYM97AJAjc6qqSebod1p7qyAejuZhbD-eGRrf8tWKa7dKnFm-1WW_1Kf0sGiyHw42jY6LQ
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-kCOqrNSlnORhSYBsvrbftQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 3.123.210.174 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP3.123.210.174:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash7967e9902094ba05e6d5ce175e242880 9d5021b9241e41d7399b67d12a96d05eaa967c1a dd26faf5fd901c600f529bb7c09362732038df067e6eea3c436a08339648cf35
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: uid_id2=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dood.li
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash422606778f6d2e49a58db1bbf3c1151a b14a21b8e924a3683118ecbf7e24ea7fabdc8d3b b8db68a61414973a8df9bf4eada88200d0d8780f6b8990d1b1a481f53872266d
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| handbagwishesliver.com/sbar.json?key=2c0360ed33b0b4736859081c701f9a91 | 192.243.59.13 | 200 OK | 8.2 kB |
URL GET HTTP/1.1handbagwishesliver.com/sbar.json?key=2c0360ed33b0b4736859081c701f9a91 IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjecthandbagwishesliver.com Fingerprint12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88 ValidityMon, 01 Jul 2024 13:54:37 GMT - Sun, 29 Sep 2024 13:54:36 GMT
Hash79d8d69097489e6c3578c4f0acccd94b a560242cda9dc507e279a3f16efba8dc83c0552e fa44ef67c7233a322ec7a6ac11b69234f77be91d83abac3e1176dfdd69ff175c
GET /sbar.json?key=2c0360ed33b0b4736859081c701f9a91 HTTP/1.1
Host: handbagwishesliver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 23 Aug 2024 12:20:00 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dood.li
Access-Control-Allow-Origin: https://dood.li
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=19079684; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Sat, 24 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0b0b5b472d9144b5e30397019b793689
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashbae98e72a3fd029aaa4d9bcfa969c7a9 d74a277160b4a0a4dc7ab1a40147f7f828924699 c50e5dc0cd820913f907bee1cf9a9a8f616a147ae20071fa000295983cac0d4f
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C50E5DC0CD820913F907BEE1CF9A9A8F616A147AE20071FA000295983CAC0D4F"
Last-Modified: Thu, 22 Aug 2024 16:46:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11699
Expires: Fri, 23 Aug 2024 15:34:59 GMT
Date: Fri, 23 Aug 2024 12:20:00 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha66b7b3889e7d972bbec1283a77935f5 f678350c2d43ba850aaff764fb9ec251108a2fdc acf41305ab2920b24807a7eac1dc7d74977233042da663f9c2e69ebe8731b931
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "ACF41305AB2920B24807A7EAC1DC7D74977233042DA663F9C2E69EBE8731B931"
Last-Modified: Thu, 22 Aug 2024 20:12:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8152
Expires: Fri, 23 Aug 2024 14:35:52 GMT
Date: Fri, 23 Aug 2024 12:20:00 GMT
Connection: keep-alive
|
|
| my.rtmark.net/gid.js?userId=0080c138acc54b56e2fe20eab31f0b53 | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=0080c138acc54b56e2fe20eab31f0b53 IP139.45.195.8:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
Hashcc8a203dd7cb9122b9811d877a9b94fe 32d1359ee7e4206481461ff4c3749f0507df58b0 3639e2cf32ed8ce39dc992b224e23b6e826ef267875ab7dbb36f4407d43b2a79
GET /gid.js?userId=0080c138acc54b56e2fe20eab31f0b53 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dood.li
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080c138acc54b56e2fe20eab31f0b53; expires=Sat, 23 Aug 2025 12:20:00 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb2d14a6eb8ef4572f662117f25029fa1 e84bfd20eda255cf53ab8f8ab773d07c8000658e 090e91dbd98d4aebc6015773b69c3b0658b809d0295b0cb98e46a62b31fa5670
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "090E91DBD98D4AEBC6015773B69C3B0658B809D0295B0CB98E46A62B31FA5670"
Last-Modified: Thu, 22 Aug 2024 16:52:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3099
Expires: Fri, 23 Aug 2024 13:11:39 GMT
Date: Fri, 23 Aug 2024 12:20:00 GMT
Connection: keep-alive
|
|
| handbagwishesliver.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSu3uzJeDAS8CBCowQUZLZ7ZrZnxgjBuK4urknMKnqT6qqa2XKqu9qq%2FpldQRYDkpMM3vTU%2B81uFk3w5%2BbFIL0BDQtCxtMesnj1quBZelwcfVD13qvvK%2Fjqe%2FXJbnZCmsjo8cobelsqRZeWG5777Lu%2Bf9Fdl3E2ckfd4L2gfdE1%2BQu9oOE9574q2FAvNT3f83zPd1elEX09WqpByOROz2%2F0vEa72fCX2xiZ%2F%2Fc2c2CpA56fkMch%2BXTxnnMeklWIo29XhB2mOnn%2BlShTNNUGOT94Ox7GuogRzcu%2BcdCPD07Z0PbB6l3oeH8mFzr%2FlxjKKXF%2BuoswPjgViTDfm%2BkMFUSMkJ9FkVcQqoKkFZi%2BAckfEIBxXLmKOLp1RZuCbv2D0hqdksW%2F%2FoQspmTx4XnE0deXlRy5G1plqdSxxahfQo4qyEGFJDtEur0AWRyCpR9D8l%2BI98RZxNHt1w6%2Fz%2BXQzYUZQvJyZoGUFWS%2FghJjUOsgq5d0kPUdZImDiB%2B7zPf9jscZ9bo9xlq8I8KAez7t9H3qe0EXGatVjpEmYzA1BjM7SMwOhnIMk%2F0Iu1nCcgc2nRLnzR3kvEQhCApLUFCCQhIUKUGRl%2Ftc2aYtb3Fls9A%2Fzc3T3ConOh3s0n2dDkRMQM0Yhpe7yQk5V9vkPPP0Iobi2G0yrxV4grdaoRe2O62gu9zzuj7reH6%2FR3s%2BrCwh7cLsydtySi58cAmJnJJH759DSA9h1SGYvACaPQValKCbJbbjb3yuNbepETRqMB2B6xJJuoh0y9lVJ%2BTJ2aw2%2FvgQgh1duv95HV%2BAmRKJKfG%2BvEcwUDcn13VB9q7rwpLvriapjOQ2ree4kdJUnPnqdbFVaMPXVuz4y5dYDdTlnbeETddpzGU8sOT2Zcm5MKvaMEF%2BWLPviPBaZjcvZybOkvVrL6%2BuRYkR1kodV6BySsinv4PJKXns4YuzL7r0yG%2BQpoLJSkTZETkNSF2BJTuwyVy%2F1QRGzTlh4qDIyolphvNDJQmUmPc0LGH%2F04fzemJofZvKctfexMAsgKY3EEclclMiVyWoGsNmZyZpYo4u%2FdqaBUK1MAmVWdgLlVGfzWyuty1Yeex2Wi2PBr1lv9OhohO2m91%2B4HNKm%2B2gGQS0hdRO%2Bz9%2FlPwdAAD%2F%2F13DcPN8BAAA | 192.243.59.13 | 200 OK | 7 B |
URL GET HTTP/1.1handbagwishesliver.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSu3uzJeDAS8CBCowQUZLZ7ZrZnxgjBuK4urknMKnqT6qqa2XKqu9qq%2FpldQRYDkpMM3vTU%2B81uFk3w5%2BbFIL0BDQtCxtMesnj1quBZelwcfVD13qvvK%2Fjqe%2FXJbnZCmsjo8cobelsqRZeWG5777Lu%2Bf9Fdl3E2ckfd4L2gfdE1%2BQu9oOE9574q2FAvNT3f83zPd1elEX09WqpByOROz2%2F0vEa72fCX2xiZ%2F%2Fc2c2CpA56fkMch%2BXTxnnMeklWIo29XhB2mOnn%2BlShTNNUGOT94Ox7GuogRzcu%2BcdCPD07Z0PbB6l3oeH8mFzr%2FlxjKKXF%2BuoswPjgViTDfm%2BkMFUSMkJ9FkVcQqoKkFZi%2BAckfEIBxXLmKOLp1RZuCbv2D0hqdksW%2F%2FoQspmTx4XnE0deXlRy5G1plqdSxxahfQo4qyEGFJDtEur0AWRyCpR9D8l%2BI98RZxNHt1w6%2Fz%2BXQzYUZQvJyZoGUFWS%2FghJjUOsgq5d0kPUdZImDiB%2B7zPf9jscZ9bo9xlq8I8KAez7t9H3qe0EXGatVjpEmYzA1BjM7SMwOhnIMk%2F0Iu1nCcgc2nRLnzR3kvEQhCApLUFCCQhIUKUGRl%2Ftc2aYtb3Fls9A%2Fzc3T3ConOh3s0n2dDkRMQM0Yhpe7yQk5V9vkPPP0Iobi2G0yrxV4grdaoRe2O62gu9zzuj7reH6%2FR3s%2BrCwh7cLsydtySi58cAmJnJJH759DSA9h1SGYvACaPQValKCbJbbjb3yuNbepETRqMB2B6xJJuoh0y9lVJ%2BTJ2aw2%2FvgQgh1duv95HV%2BAmRKJKfG%2BvEcwUDcn13VB9q7rwpLvriapjOQ2ree4kdJUnPnqdbFVaMPXVuz4y5dYDdTlnbeETddpzGU8sOT2Zcm5MKvaMEF%2BWLPviPBaZjcvZybOkvVrL6%2BuRYkR1kodV6BySsinv4PJKXns4YuzL7r0yG%2BQpoLJSkTZETkNSF2BJTuwyVy%2F1QRGzTlh4qDIyolphvNDJQmUmPc0LGH%2F04fzemJofZvKctfexMAsgKY3EEclclMiVyWoGsNmZyZpYo4u%2FdqaBUK1MAmVWdgLlVGfzWyuty1Yeex2Wi2PBr1lv9OhohO2m91%2B4HNKm%2B2gGQS0hdRO%2Bz9%2FlPwdAAD%2F%2F13DcPN8BAAA IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjecthandbagwishesliver.com Fingerprint12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88 ValidityMon, 01 Jul 2024 13:54:37 GMT - Sun, 29 Sep 2024 13:54:36 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSu3uzJeDAS8CBCowQUZLZ7ZrZnxgjBuK4urknMKnqT6qqa2XKqu9qq%2FpldQRYDkpMM3vTU%2B81uFk3w5%2BbFIL0BDQtCxtMesnj1quBZelwcfVD13qvvK%2Fjqe%2FXJbnZCmsjo8cobelsqRZeWG5777Lu%2Bf9Fdl3E2ckfd4L2gfdE1%2BQu9oOE9574q2FAvNT3f83zPd1elEX09WqpByOROz2%2F0vEa72fCX2xiZ%2F%2Fc2c2CpA56fkMch%2BXTxnnMeklWIo29XhB2mOnn%2BlShTNNUGOT94Ox7GuogRzcu%2BcdCPD07Z0PbB6l3oeH8mFzr%2FlxjKKXF%2BuoswPjgViTDfm%2BkMFUSMkJ9FkVcQqoKkFZi%2BAckfEIBxXLmKOLp1RZuCbv2D0hqdksW%2F%2FoQspmTx4XnE0deXlRy5G1plqdSxxahfQo4qyEGFJDtEur0AWRyCpR9D8l%2BI98RZxNHt1w6%2Fz%2BXQzYUZQvJyZoGUFWS%2FghJjUOsgq5d0kPUdZImDiB%2B7zPf9jscZ9bo9xlq8I8KAez7t9H3qe0EXGatVjpEmYzA1BjM7SMwOhnIMk%2F0Iu1nCcgc2nRLnzR3kvEQhCApLUFCCQhIUKUGRl%2Ftc2aYtb3Fls9A%2Fzc3T3ConOh3s0n2dDkRMQM0Yhpe7yQk5V9vkPPP0Iobi2G0yrxV4grdaoRe2O62gu9zzuj7reH6%2FR3s%2BrCwh7cLsydtySi58cAmJnJJH759DSA9h1SGYvACaPQValKCbJbbjb3yuNbepETRqMB2B6xJJuoh0y9lVJ%2BTJ2aw2%2FvgQgh1duv95HV%2BAmRKJKfG%2BvEcwUDcn13VB9q7rwpLvriapjOQ2ree4kdJUnPnqdbFVaMPXVuz4y5dYDdTlnbeETddpzGU8sOT2Zcm5MKvaMEF%2BWLPviPBaZjcvZybOkvVrL6%2BuRYkR1kodV6BySsinv4PJKXns4YuzL7r0yG%2BQpoLJSkTZETkNSF2BJTuwyVy%2F1QRGzTlh4qDIyolphvNDJQmUmPc0LGH%2F04fzemJofZvKctfexMAsgKY3EEclclMiVyWoGsNmZyZpYo4u%2FdqaBUK1MAmVWdgLlVGfzWyuty1Yeex2Wi2PBr1lv9OhohO2m91%2B4HNKm%2B2gGQS0hdRO%2Bz9%2FlPwdAAD%2F%2F13DcPN8BAAA HTTP/1.1
Host: handbagwishesliver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 23 Aug 2024 12:20:00 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: abf4665dbd4fd551e9f77b3bd2b52b9d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| dm545lq.cloudatacdn.com/favicon.ico?i |  15.235.118.201 | 200 OK | 15 kB |
URL GET HTTP/1.1dm545lq.cloudatacdn.com/favicon.ico?i IP15.235.118.201:443
Requested bymoz-nullprincipal:{10b7da85-4144-4c41-b1bc-577ba8776d7c}?https://dood.li CertificateIssuerSectigo Limited Subject*.cloudatacdn.com FingerprintD9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash30d3656f43c817e38c3e7d70b2bfbdad 1aa43b43755e7cba5e145d0978517f7bedad7da6 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: dm545lq.cloudatacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Aug 2024 12:20:00 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
|
|
| scaredframe.com/pixel/purst?dl=0&th=0&sc=0&rs=2194&rd=2194&fd=664&bv=24.8.5008&tmpl=136 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1scaredframe.com/pixel/purst?dl=0&th=0&sc=0&rs=2194&rd=2194&fd=664&bv=24.8.5008&tmpl=136 IP172.240.108.68:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectscaredframe.com FingerprintB4:17:07:1E:EA:E6:2C:F5:A0:FC:FA:1C:B1:4C:C2:75:36:0B:A2:E2 ValidityThu, 27 Jun 2024 14:01:46 GMT - Wed, 25 Sep 2024 14:01:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2194&rd=2194&fd=664&bv=24.8.5008&tmpl=136 HTTP/1.1
Host: scaredframe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 23 Aug 2024 12:20:00 GMT
Content-Length: 0
Connection: keep-alive
Host: scaredframe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| niersfohiplaceof.info/popunder.gif | 188.114.97.1 | | 58 B |
URL GET niersfohiplaceof.info/popunder.gif IP188.114.97.1:0
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectniersfohiplaceof.info Fingerprint49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: niersfohiplaceof.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 71011
last-modified: Thu, 22 Aug 2024 16:36:29 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gu1bYzuhjsrWHnWaq2n2mxC3toedcQwmyCvsMfrhH0dev3H%2FUxRJGlxCgDLczuDlfn0v3AsBvlQxuv8DpCnWvR2YxZiFUb14p83qhAc8lo565mEf1Z6fZIBXciRjK0211jjK98b2K%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0de1fe6a56bf-OSL
alt-svc: h3=":443"; ma=86400
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3rIvYM97AJAjc6qqSebod1p7qyAejuZhbD-eGRrf8tWKa7dKnFm-1WW_1Kf0sGiyHw42jY6LQ | 64.233.163.84 | 302 Found | 423 B |
URL GET HTTP/3accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3rIvYM97AJAjc6qqSebod1p7qyAejuZhbD-eGRrf8tWKa7dKnFm-1WW_1Kf0sGiyHw42jY6LQ IP64.233.163.84:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeHTML document, ASCII text, with very long lines (393) Hash62a9e39d470b598ba73cdfd36127f2ce d8d93da2fb49b71d6d3e6ba13ddbe9f98a1990a7 818b47a92b1eaa5864829f0caf3224f698d1a8f23ac92c3f1adc60a654833c2a
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3rIvYM97AJAjc6qqSebod1p7qyAejuZhbD-eGRrf8tWKa7dKnFm-1WW_1Kf0sGiyHw42jY6LQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:fO5mkxDZ4Nng-l9Aj-TJUg6UyrPmzQ:xQRh6YIwpH3TvdsH;Path=/;Expires=Sun, 23-Aug-2026 12:20:01 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 23 Aug 2024 12:20:01 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3p88E2_iHvKh4VhljxX4AJk4fz5biEZSvxdWTED5LRQjgdYTxwa2zTqNpT2it7ykkcwkqi4&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1993648408%3A1724415601107533&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-9vMFh8JArsgYU6E8qaBDBg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 423
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3rsr8r4i0enVNl3B-9JzYZGeF5xak8wUDZromNhOkzr03d38akmYK3gYAgVGC2m1QKQh4wM9Q | 64.233.163.84 | 302 Found | 418 B |
URL GET HTTP/3accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3rsr8r4i0enVNl3B-9JzYZGeF5xak8wUDZromNhOkzr03d38akmYK3gYAgVGC2m1QKQh4wM9Q IP64.233.163.84:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File typeHTML document, ASCII text, with very long lines (388) Hash5206207b68012ac81c1148310cc752ea 432f945625bd396d7c7bd9c01a628762984660e6 16d793764fdd1d51db19230ff61526124c362cda616fadf704c7e9d338cf4f50
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3rsr8r4i0enVNl3B-9JzYZGeF5xak8wUDZromNhOkzr03d38akmYK3gYAgVGC2m1QKQh4wM9Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:_Rzezd3TnKohD9iY8mkMjovY9Hkb7A:yxyICjPUkzEi3E1z;Path=/;Expires=Sun, 23-Aug-2026 12:20:01 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 23 Aug 2024 12:20:01 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3pXAX5W-pYAxPDOa_m00w-wjaQ-RKs_NC69xMzMHqYelLl_cAO_YaAkA2ffoqunhCwgwbvK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-769790794%3A1724415601108420&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-VS7haJhBgWmN1dHUjRUzvQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 418
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| waisheph.com/?rb=au4nPvVaQhF6Fo4nzQNRZc_MLbifEOaXSbCFEU4pzMWRtgvFCbYU6oJG-9nps_LM4EKpmNQn7FDelemyd881Dpy_TnmM_yM_hi7poTGQ6bhACKLkYxA1z7JcPigVthSCRsC0A5Og_aBPT-ruvw2M1LwpMoot4Vz3pPVmvXPg1zdbcgXw3tQT4SCRGm9mfCOb7Fm-8Qaejbwzd-ZWAp3JUR5cuqyzoah5FsH44YgKA-wT-KxVIyZUsadf3JsDt_X92BZJPHN1imE%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.903.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=2&pl=https%3A%2F%2Fdood.li%2Fe%2F2acf7ajdrlaw&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.903.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=ce5e34d5-7f1c-4501-b5b7-53cc6b95d05f&wasm=1&userId=0080c138acc54b56e2fe20eab31f0b53&m=link | 139.45.197.245 | 200 OK | 4.2 kB |
URL GET HTTP/2waisheph.com/?rb=au4nPvVaQhF6Fo4nzQNRZc_MLbifEOaXSbCFEU4pzMWRtgvFCbYU6oJG-9nps_LM4EKpmNQn7FDelemyd881Dpy_TnmM_yM_hi7poTGQ6bhACKLkYxA1z7JcPigVthSCRsC0A5Og_aBPT-ruvw2M1LwpMoot4Vz3pPVmvXPg1zdbcgXw3tQT4SCRGm9mfCOb7Fm-8Qaejbwzd-ZWAp3JUR5cuqyzoah5FsH44YgKA-wT-KxVIyZUsadf3JsDt_X92BZJPHN1imE%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.903.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=2&pl=https%3A%2F%2Fdood.li%2Fe%2F2acf7ajdrlaw&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.903.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=ce5e34d5-7f1c-4501-b5b7-53cc6b95d05f&wasm=1&userId=0080c138acc54b56e2fe20eab31f0b53&m=link IP139.45.197.245:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectwaisheph.com Fingerprint68:94:2B:35:6C:6A:DF:A9:03:5C:1C:8B:30:7E:DC:82:BE:43:C7:55 ValidityTue, 20 Aug 2024 00:37:21 GMT - Mon, 18 Nov 2024 00:37:20 GMT
File typegzip compressed data, max speed, from Unix Hashaa120e7b3d54168cff66a91459648c3b 96148401cd27de33fe04a2985462c70ac135fad7 38dcc82cfaec5911998fc0a915cd58bee6b0e75b791f4e1670d0f80e794581d6
GET /?rb=au4nPvVaQhF6Fo4nzQNRZc_MLbifEOaXSbCFEU4pzMWRtgvFCbYU6oJG-9nps_LM4EKpmNQn7FDelemyd881Dpy_TnmM_yM_hi7poTGQ6bhACKLkYxA1z7JcPigVthSCRsC0A5Og_aBPT-ruvw2M1LwpMoot4Vz3pPVmvXPg1zdbcgXw3tQT4SCRGm9mfCOb7Fm-8Qaejbwzd-ZWAp3JUR5cuqyzoah5FsH44YgKA-wT-KxVIyZUsadf3JsDt_X92BZJPHN1imE%3D&request_ab2=0&zoneid=6936539&js_build=iclick-v1.903.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=2&pl=https%3A%2F%2Fdood.li%2Fe%2F2acf7ajdrlaw&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.903.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=ce5e34d5-7f1c-4501-b5b7-53cc6b95d05f&wasm=1&userId=0080c138acc54b56e2fe20eab31f0b53&m=link HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Cookie: OAID=0080c138acc54b56e2fe20eab31f0b53; oaidts=1724415599
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: application/json
x-trace-id: 6cadc5424e9b9c5cec37a2092d87991c
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080c138acc54b56e2fe20eab31f0b53; expires=Sat, 23 Aug 2025 12:20:00 GMT; path=/; secure; SameSite=None
oaidts=1724415600; expires=Sat, 23 Aug 2025 12:20:00 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 30 Aug 2024 12:20:00 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/animate.css | 188.114.96.1 | 200 OK | 6.2 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/animate.css IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcreative-bars1.com FingerprintEB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46 ValiditySun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
File typegzip compressed data, from Unix Hash2bbfa55e15e3b2ff1fd815e1f2f6ea0c d3805b8086dfb1733254823dccab6582740aa787 b297c307fefc35b8b8f47a2c33354c122334853640abdf06b13564e39f4f2bcc
GET /sb/ssp/interstitial/center_banner/2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:45 GMT
etag: W/"65aa8501-13365"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: HIT
age: 3870469
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ydL22IjRQvNTEJpKyUTKge5yy27APLe6KUnSMJW5nu%2FSJahkk%2FNXiFaIk67LlDU9OcR%2BJRomW%2BAq%2F3xBxckUp%2FQ2QouZ7mTVmmRuq0X9X9W0t%2FgdWcD23rrWqbZJZUYiVq54MGR073k4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0de368720b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashca089ae4cb5c9c06f3de930f9163eb94 92ef4800f0103b7fc1744be58bb8259c76d90f4f 2d09c25b7d254e7e41f86fb76e16b788e9af16dc5b35f86c60ad0a5bfaf8dbd5
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.cloudimagesb.com/si/09dc0f5611040962ae1e6d30d18b572eddfbbfb77e50aa358668c563df1f9777.png | 45.133.44.9 | 200 OK | 13 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/09dc0f5611040962ae1e6d30d18b572eddfbbfb77e50aa358668c563df1f9777.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59 ValiditySat, 20 Jul 2024 04:00:43 GMT - Fri, 18 Oct 2024 04:00:42 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hashd5660465f489bba10152eea2ffcc17f5 ce6852bc339fc42b63d13d73d283ef497d91e97d 18a23bd3e5aace18b4270e75746d218f55daa9859c817f73dd39f249c7260a0b
GET /si/09dc0f5611040962ae1e6d30d18b572eddfbbfb77e50aa358668c563df1f9777.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: image/png
content-length: 12710
server: nginx/1.21.6
last-modified: Mon, 01 Jul 2024 02:15:47 GMT
etag: "66821153-31a6"
expires: Sun, 25 Aug 2024 12:20:01 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/546bea17ef821f8ccfac98c1914b82ccc0e0fc7f994db93da6d386c51f230a0c.png | 45.133.44.9 | 200 OK | 57 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/546bea17ef821f8ccfac98c1914b82ccc0e0fc7f994db93da6d386c51f230a0c.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59 ValiditySat, 20 Jul 2024 04:00:43 GMT - Fri, 18 Oct 2024 04:00:42 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3 Hash97ec74b07f1204d29f60296ed592d970 e3dde12591f6d5cd85c06b671f72a5e4eee4d61c cc48efe9da4e4754c2c65f77e897793279dd7287aaa2764455847f43b83dfe0b
GET /si/546bea17ef821f8ccfac98c1914b82ccc0e0fc7f994db93da6d386c51f230a0c.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: image/png
content-length: 56923
server: nginx/1.21.6
last-modified: Mon, 01 Jul 2024 02:15:28 GMT
etag: "66821140-de5b"
expires: Sun, 25 Aug 2024 12:20:01 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashca089ae4cb5c9c06f3de930f9163eb94 92ef4800f0103b7fc1744be58bb8259c76d90f4f 2d09c25b7d254e7e41f86fb76e16b788e9af16dc5b35f86c60ad0a5bfaf8dbd5
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| niersfohiplaceof.info/b3FDSW9ATiA6UjpBDTkNXiskLV4tFRokNV8kBSUINh8ZEzgoNGU9BgtMcnlfW0F0fEkfGCd0XkkCNygbGgJ+el9fQGUgAQkefnlfX0BlP1JeX3B9QVxHbX1JGkx0f1xbRnR9XlZEd3teXUZlPR8OFn54SR8FNyVSXkZxfVteRHV5XlhBcg | 188.114.97.1 | 204 No Content | 0 B |
URL POST HTTP/3niersfohiplaceof.info/b3FDSW9ATiA6UjpBDTkNXiskLV4tFRokNV8kBSUINh8ZEzgoNGU9BgtMcnlfW0F0fEkfGCd0XkkCNygbGgJ+el9fQGUgAQkefnlfX0BlP1JeX3B9QVxHbX1JGkx0f1xbRnR9XlZEd3teXUZlPR8OFn54SR8FNyVSXkZxfVteRHV5XlhBcg IP188.114.97.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectniersfohiplaceof.info Fingerprint49:E8:5E:E4:64:7C:4C:86:58:08:A5:5A:8E:4E:1E:D6:A6:94:B5:0C ValidityTue, 09 Jul 2024 04:19:01 GMT - Mon, 07 Oct 2024 04:19:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /b3FDSW9ATiA6UjpBDTkNXiskLV4tFRokNV8kBSUINh8ZEzgoNGU9BgtMcnlfW0F0fEkfGCd0XkkCNygbGgJ+el9fQGUgAQkefnlfX0BlP1JeX3B9QVxHbX1JGkx0f1xbRnR9XlZEd3teXUZlPR8OFn54SR8FNyVSXkZxfVteRHV5XlhBcg HTTP/1.1
Host: niersfohiplaceof.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Fri, 23 Aug 2024 12:20:01 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tUwUVVle%2Fm1TotHm%2Bl8YAhP%2FSm0ukwzIJN7z%2B%2BgiTYxSf7zbeotAsZP%2Bi1%2FWkhiDseAQ9kzDl1sZwd%2FBWgI4BzzNdgwwU%2FY8WBascovlMLUFDEJL43y8G6JuYNNkYnXEwzB6FZOCZu8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0de6df7556bf-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash75d64cb899c2a88ad2157b10b3e599b7 27d9b26bd287444bb96e2917afc745b0d3fc5f4a b8fab05fad241c55319827f1646271df81cec4a78c1734ad4e9c1df6f048dc95
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8FAB05FAD241C55319827F1646271DF81CEC4A78C1734AD4E9C1DF6F048DC95"
Last-Modified: Wed, 21 Aug 2024 06:36:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20168
Expires: Fri, 23 Aug 2024 17:56:10 GMT
Date: Fri, 23 Aug 2024 12:20:02 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash75d64cb899c2a88ad2157b10b3e599b7 27d9b26bd287444bb96e2917afc745b0d3fc5f4a b8fab05fad241c55319827f1646271df81cec4a78c1734ad4e9c1df6f048dc95
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8FAB05FAD241C55319827F1646271DF81CEC4A78C1734AD4E9C1DF6F048DC95"
Last-Modified: Wed, 21 Aug 2024 06:36:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20168
Expires: Fri, 23 Aug 2024 17:56:10 GMT
Date: Fri, 23 Aug 2024 12:20:02 GMT
Connection: keep-alive
|
|
| handbagwishesliver.com/pixel/sbs?c=1 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1handbagwishesliver.com/pixel/sbs?c=1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjecthandbagwishesliver.com Fingerprint12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88 ValidityMon, 01 Jul 2024 13:54:37 GMT - Sun, 29 Sep 2024 13:54:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: handbagwishesliver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 23 Aug 2024 12:20:02 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashcf2494f3acbc540611cc1db5ff399bd8 9c8d0d49436be710e0408f15cc4641c515301bcf b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashcf2494f3acbc540611cc1db5ff399bd8 9c8d0d49436be710e0408f15cc4641c515301bcf b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| handbagwishesliver.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuzubkenBlwYMIg7KgIJPu%2BR9XCMYYDcbddaPoTeqvJ%2BVUd7VV%2FTOJIMEF2ZMM3vTU%2BSbZoLv4c%2FPiIpMFXQLCjqccNnj1quBZZgyOPqh679X3FXz1vfpkLzslNWT0ZPUNs6O0pkvNql959t0guFzZUHE2qAw6rfdajcsVm7%2FQbVX95yqvSt43SzU%2F8P3ADyprysrQDJamIFRypxtUu361UasGzQYG9v%2B9yzw46kHkp%2BRxKDFZvOddhOJjxNG3q9L1U5M8%2F0qUaZoai1wcvh33Y1PEiOZlaD2E8eEZG8Y9WLsLEx%2FM5MLk%2FxKZmhDvp7tg8eGZSLB8f6aTacgYTJxHkY8h9RiKjsHNDSjxgABc4MpVxNGtK8YWdPsflE7RCVn860%2BoYkIWH15EHH29otWgsml0lioTOwzCEmowhuqNkWRHSHcWoIoj8PRjKPEL8Z84jzi6%2FdrR97nqV3Jp%2B1CinFmg1BgqHEPLIajzkE2X8pCFHrLEQyROKjwIgrYvOPU7Xc7roi1ZS%2FgBbYcBDfxWBxmfqhwiTYbgeghud5HYXfTVEDb7EW6rhBMeXDoh3pu7yEWJQhIUjqCgBIUiKFKCIi8PhHY1V94S2mUsOMu1s1wvRybt7dEDk%2FZkTEDtEFaUe8kpuTC1yXvm6UX05Umlxv16y5eiXmc%2Ba7TrrU6z63cC3vaDsEu7AZwqodzC7Mk7akIufbCMRE3Io%2FcvgNEjOH0Eri6BZk%2BBFiXoVomd%2BJtAGCNcaiWNqtxEEKZEki4i3fb29Cl5cjarzT8%2BhOTHy%2Fc%2Fn8YX4LZEYku8r%2B4R9PTN0XVTkP3rpnDku6tJqiK1Q6dz3ExpKs999brcLowV66tu%2BOVLfApMyztvSZdu0FiouOfI7RUlhLRrxnJJflh370h2LXNbK5mNs2Tj2str61FipXPKxGNQNSHk09%2FB1YQ89vDF2RddeuQ3KDuGzUpE2TE5CygzBk924ZK5fmcIrJ5zWOKhyMqRrbH5oVYEWs57ykq4%2F%2FRsXo8snd6mqtxzN9GzC6DpDcRRidyWyHUJqodw2blRmtjj5V%2FrswDTCyOm7cI%2B01Z%2FNrN5um3DqZNK3RdtJkPZZrLRbISSC9ZsMp%2BHnNVFp8ORukn480fJ3wEAAP%2F%2F3RelG3wEAAA%3D | 192.243.59.13 | 200 OK | 7 B |
URL GET HTTP/1.1handbagwishesliver.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuzubkenBlwYMIg7KgIJPu%2BR9XCMYYDcbddaPoTeqvJ%2BVUd7VV%2FTOJIMEF2ZMM3vTU%2BSbZoLv4c%2FPiIpMFXQLCjqccNnj1quBZZgyOPqh679X3FXz1vfpkLzslNWT0ZPUNs6O0pkvNql959t0guFzZUHE2qAw6rfdajcsVm7%2FQbVX95yqvSt43SzU%2F8P3ADyprysrQDJamIFRypxtUu361UasGzQYG9v%2B9yzw46kHkp%2BRxKDFZvOddhOJjxNG3q9L1U5M8%2F0qUaZoai1wcvh33Y1PEiOZlaD2E8eEZG8Y9WLsLEx%2FM5MLk%2FxKZmhDvp7tg8eGZSLB8f6aTacgYTJxHkY8h9RiKjsHNDSjxgABc4MpVxNGtK8YWdPsflE7RCVn860%2BoYkIWH15EHH29otWgsml0lioTOwzCEmowhuqNkWRHSHcWoIoj8PRjKPEL8Z84jzi6%2FdrR97nqV3Jp%2B1CinFmg1BgqHEPLIajzkE2X8pCFHrLEQyROKjwIgrYvOPU7Xc7roi1ZS%2FgBbYcBDfxWBxmfqhwiTYbgeghud5HYXfTVEDb7EW6rhBMeXDoh3pu7yEWJQhIUjqCgBIUiKFKCIi8PhHY1V94S2mUsOMu1s1wvRybt7dEDk%2FZkTEDtEFaUe8kpuTC1yXvm6UX05Umlxv16y5eiXmc%2Ba7TrrU6z63cC3vaDsEu7AZwqodzC7Mk7akIufbCMRE3Io%2FcvgNEjOH0Eri6BZk%2BBFiXoVomd%2BJtAGCNcaiWNqtxEEKZEki4i3fb29Cl5cjarzT8%2BhOTHy%2Fc%2Fn8YX4LZEYku8r%2B4R9PTN0XVTkP3rpnDku6tJqiK1Q6dz3ExpKs999brcLowV66tu%2BOVLfApMyztvSZdu0FiouOfI7RUlhLRrxnJJflh370h2LXNbK5mNs2Tj2str61FipXPKxGNQNSHk09%2FB1YQ89vDF2RddeuQ3KDuGzUpE2TE5CygzBk924ZK5fmcIrJ5zWOKhyMqRrbH5oVYEWs57ykq4%2F%2FRsXo8snd6mqtxzN9GzC6DpDcRRidyWyHUJqodw2blRmtjj5V%2FrswDTCyOm7cI%2B01Z%2FNrN5um3DqZNK3RdtJkPZZrLRbISSC9ZsMp%2BHnNVFp8ORukn480fJ3wEAAP%2F%2F3RelG3wEAAA%3D IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjecthandbagwishesliver.com Fingerprint12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88 ValidityMon, 01 Jul 2024 13:54:37 GMT - Sun, 29 Sep 2024 13:54:36 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuzubkenBlwYMIg7KgIJPu%2BR9XCMYYDcbddaPoTeqvJ%2BVUd7VV%2FTOJIMEF2ZMM3vTU%2BSbZoLv4c%2FPiIpMFXQLCjqccNnj1quBZZgyOPqh679X3FXz1vfpkLzslNWT0ZPUNs6O0pkvNql959t0guFzZUHE2qAw6rfdajcsVm7%2FQbVX95yqvSt43SzU%2F8P3ADyprysrQDJamIFRypxtUu361UasGzQYG9v%2B9yzw46kHkp%2BRxKDFZvOddhOJjxNG3q9L1U5M8%2F0qUaZoai1wcvh33Y1PEiOZlaD2E8eEZG8Y9WLsLEx%2FM5MLk%2FxKZmhDvp7tg8eGZSLB8f6aTacgYTJxHkY8h9RiKjsHNDSjxgABc4MpVxNGtK8YWdPsflE7RCVn860%2BoYkIWH15EHH29otWgsml0lioTOwzCEmowhuqNkWRHSHcWoIoj8PRjKPEL8Z84jzi6%2FdrR97nqV3Jp%2B1CinFmg1BgqHEPLIajzkE2X8pCFHrLEQyROKjwIgrYvOPU7Xc7roi1ZS%2FgBbYcBDfxWBxmfqhwiTYbgeghud5HYXfTVEDb7EW6rhBMeXDoh3pu7yEWJQhIUjqCgBIUiKFKCIi8PhHY1V94S2mUsOMu1s1wvRybt7dEDk%2FZkTEDtEFaUe8kpuTC1yXvm6UX05Umlxv16y5eiXmc%2Ba7TrrU6z63cC3vaDsEu7AZwqodzC7Mk7akIufbCMRE3Io%2FcvgNEjOH0Eri6BZk%2BBFiXoVomd%2BJtAGCNcaiWNqtxEEKZEki4i3fb29Cl5cjarzT8%2BhOTHy%2Fc%2Fn8YX4LZEYku8r%2B4R9PTN0XVTkP3rpnDku6tJqiK1Q6dz3ExpKs999brcLowV66tu%2BOVLfApMyztvSZdu0FiouOfI7RUlhLRrxnJJflh370h2LXNbK5mNs2Tj2str61FipXPKxGNQNSHk09%2FB1YQ89vDF2RddeuQ3KDuGzUpE2TE5CygzBk924ZK5fmcIrJ5zWOKhyMqRrbH5oVYEWs57ykq4%2F%2FRsXo8snd6mqtxzN9GzC6DpDcRRidyWyHUJqodw2blRmtjj5V%2FrswDTCyOm7cI%2B01Z%2FNrN5um3DqZNK3RdtJkPZZrLRbISSC9ZsMp%2BHnNVFp8ORukn480fJ3wEAAP%2F%2F3RelG3wEAAA%3D HTTP/1.1
Host: handbagwishesliver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Cookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 23 Aug 2024 12:20:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 4a6cbeb7eead0ba7117f9a71d2c9e913
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18596, version 1.0 Hashc83e4437a53d7f849f9d32df3d6b68f3 fabea5ad92ed3e2431659b02e7624df30d0c6bbc d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb
GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 06:50:54 GMT
expires: Thu, 21 Aug 2025 06:50:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:21 GMT
content-type: font/woff2
age: 192548
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18536, version 1.0 Hash8eff0b8045fd1959e117f85654ae7770 227fee13ceb7c410b5c0bb8000258b6643cb6255 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 17:36:19 GMT
expires: Wed, 20 Aug 2025 17:36:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
age: 240223
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashcf2494f3acbc540611cc1db5ff399bd8 9c8d0d49436be710e0408f15cc4641c515301bcf b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 12:20:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| unseenreport.com/pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2c0360ed33b0b4736859081c701f9a91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2c0360ed33b0b4736859081c701f9a91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subject*.unseenreport.com FingerprintD9:3D:28:C1:14:1B:2B:53:0E:E4:3E:FC:88:7A:FF:9C:45:4B:63:C7 ValiditySat, 20 Jul 2024 14:59:20 GMT - Fri, 18 Oct 2024 14:59:19 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2c0360ed33b0b4736859081c701f9a91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 23 Aug 2024 12:20:02 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 34481247c2dfb54297fc48bed4c2f754
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=461376390131460d2543a2334b5021e2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=461376390131460d2543a2334b5021e2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subject*.unseenreport.com FingerprintD9:3D:28:C1:14:1B:2B:53:0E:E4:3E:FC:88:7A:FF:9C:45:4B:63:C7 ValiditySat, 20 Jul 2024 14:59:20 GMT - Fri, 18 Oct 2024 14:59:19 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=391f0b9c-5e64-4b7a-85e2-cebb6ff55f5d&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=461376390131460d2543a2334b5021e2&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 23 Aug 2024 12:20:02 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 07ad743b1782c0db720128ba65838911
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| handbagwishesliver.com/46/13/76/461376390131460d2543a2334b5021e2.js | 192.243.59.13 | 200 OK | 95 kB |
URL GET HTTP/1.1handbagwishesliver.com/46/13/76/461376390131460d2543a2334b5021e2.js IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjecthandbagwishesliver.com Fingerprint12:D2:95:85:58:C4:89:66:73:46:13:D6:0C:9D:7D:58:1C:9B:E3:88 ValidityMon, 01 Jul 2024 13:54:37 GMT - Sun, 29 Sep 2024 13:54:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /46/13/76/461376390131460d2543a2334b5021e2.js HTTP/1.1
Host: handbagwishesliver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 23 Aug 2024 12:20:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7fccd62cb04b26c65d3b1a710571faaf
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.138 | 200 OK | 7.0 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.138:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash1b9a5aaa00577f3b515cd8bdb5902734 ac084682592bdc2893faced3b83a36599817add0 19507720081a42c4fcac9da0e5a874af98db546cd9f4aa9aaf271cfb442b9030
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Aug 2024 12:20:01 GMT
date: Fri, 23 Aug 2024 12:20:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dood.li/pass_md5/169292344-91-90-1724415598-53e4888375e4c2ea06edad6d21bb9de6/udbzx08bf817ndrxw527fhbi | 172.67.68.133 | 200 OK | 104 B |
URL GET HTTP/2dood.li/pass_md5/169292344-91-90-1724415598-53e4888375e4c2ea06edad6d21bb9de6/udbzx08bf817ndrxw527fhbi IP172.67.68.133:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdood.li Fingerprint64:42:C3:BB:53:75:85:A0:72:B7:99:72:1F:46:2A:9A:B2:BE:F1:3C ValidityFri, 26 Jul 2024 23:34:22 GMT - Thu, 24 Oct 2024 23:34:21 GMT
File typeASCII text, with no line terminators Hashf6409390049d522b4060e86304eb9f56 bf02389d3be3accd1a5c41df776a7e2f9767b903 25e052d292a04c376ab9857483fc1babd4def8e9bbb5b2c60f4499a40681f351
GET /pass_md5/169292344-91-90-1724415598-53e4888375e4c2ea06edad6d21bb9de6/udbzx08bf817ndrxw527fhbi HTTP/1.1
Host: dood.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://dood.li/e/2acf7ajdrlaw
Cookie: lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DAitsTNXXT7mH9VC9Q2oisw4j8yIiayuud1WSSkwqXdOBOQuPWhP7t6d69nxXlHzdnG0dnoH0a2sUuyhY2rPbVuD%2FOlxJbg7l5lOtVNf4tKpY8UBrSqIrOk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dd93a88569a-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/get_slides/6175/tik4c7go14rs9uj4.jpg | 104.26.7.74 | 200 OK | 3.2 kB |
URL GET HTTP/3i.doodcdn.co/get_slides/6175/tik4c7go14rs9uj4.jpg IP104.26.7.74:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectdoodcdn.co Fingerprint58:33:2C:BA:E4:5F:78:4E:02:DD:A7:FB:49:BB:D3:83:1A:14:DA:75 ValidityWed, 31 Jul 2024 19:13:31 GMT - Tue, 29 Oct 2024 19:13:30 GMT
File typeASCII text, with very long lines (3268), with no line terminators Hash6c55ad49c898ba903f40d139f7fa79ab ee07749adb622fd1be85007a5799536c9adc0e71 2c3c9694e485a089404d234835e84eea81f4c5b7de31c7283c02302490db6dbe
GET /get_slides/6175/tik4c7go14rs9uj4.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Fri, 23 Aug 2024 09:38:53 GMT
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3fSx6YXW%2B6kNOXC0dnBt0JL%2B0zCeK5vuWSuxOfdyc22F6WBo%2F0nRa37%2FnqGDpYm6c707SVM4hat%2BVB4fTj29MUaeL2bbrBBPU8sXgaWJor2BYBOqlb1oSnjCuF%2BX%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0ddc1afcb523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/img/close.svg | 188.114.96.1 | 200 OK | 2.5 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/img/close.svg IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcreative-bars1.com FingerprintEB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46 ValiditySun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
File typeSVG Scalable Vector Graphics image Hashd05ebade4b5acd19668c0e26c2252d14 ced1fb92de4c6e06f54946dbf03349d7e8337150 0538059a2b31e76581ee1c105ef9c138a6a6c02a6f44363fad6650be18587fea
GET /sb/ssp/interstitial/center_banner/2/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: image/svg+xml
last-modified: Fri, 19 Jan 2024 14:19:45 GMT
etag: W/"65aa8501-9c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6133405
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtVBbXWQUooUbch4%2B%2BDq02msFUep1CkVd6Bn8KJ86XdVuKzJcjHsBZklY0dAlT1qHCbcajh8vdSA7LzHSChVKFADIJS5gTVKGCouajdKjrKx3%2FFL5KAr1uMffJp%2BTr4xVDDZvcZd2K1N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0de3e9e856a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pogothere.xyz/ | 188.114.96.1 | 200 OK | 26 B |
IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectpogothere.xyz Fingerprint07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A ValidityTue, 23 Jul 2024 05:27:01 GMT - Mon, 21 Oct 2024 05:27:00 GMT
File typeASCII text, with no line terminators Hash0978e0acd169e99ffbf2fbeeb2a035fd 3122bdcbbb80b4edd44fc4f57b2bb3b8b6f9f621 ef0a205234377a9677cda99e1ad38946ed7612a6f3f2543e1885ff0b48e8754e
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: text/plain
set-cookie: csu=763477419542127@1@1724415600; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fKjRQrdevH%2Bp26gbskVr1TWtPs8dp3M8FnZg6Y%2FfTN%2BuF9cIBLqZo1AQThyOQoazD3PAlwX9hfBkTfGJU8zojpT6VJkoicD5lnbWK2QMRRNeDVEeFdf8Lf%2B3h%2FndWcKV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7b0dde1d255685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/style.css | 188.114.96.1 | 200 OK | 4.3 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/style.css IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcreative-bars1.com FingerprintEB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46 ValiditySun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
File typeASCII text, with very long lines (4467), with no line terminators Hashe33e809f2279220b3f8bc46acdf81a4d 2a09c94d4901ce3373c7b5311589edba5a4d7be5 ab8d29170e5a2787b1033df15b4e35b9f485ebdbbee469d09468f9f64ae6735a
GET /sb/ssp/interstitial/center_banner/2/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:45 GMT
etag: W/"65aa8501-10a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: HIT
age: 3870469
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FP883kpkxWyC3G0XUFuFZvj8E7kVFggP56m%2FPwWJXWVW4Tlu4wOBqIDJ9dp53dR%2Fp3A51TBkrj%2BK4pWSV%2FT3R5PaPxWdb85D8rhju3xVIMD%2FIqm%2Fm70nzWJ%2F6hghU6xQppy0H3m3KNbw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0de368750b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3pXAX5W-pYAxPDOa_m00w-wjaQ-RKs_NC69xMzMHqYelLl_cAO_YaAkA2ffoqunhCwgwbvK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-769790794%3A1724415601108420&ddm=0 | 64.233.163.84 | 403 Forbidden | 0 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3pXAX5W-pYAxPDOa_m00w-wjaQ-RKs_NC69xMzMHqYelLl_cAO_YaAkA2ffoqunhCwgwbvK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-769790794%3A1724415601108420&ddm=0 IP64.233.163.84:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3pXAX5W-pYAxPDOa_m00w-wjaQ-RKs_NC69xMzMHqYelLl_cAO_YaAkA2ffoqunhCwgwbvK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-769790794%3A1724415601108420&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 23 Aug 2024 12:20:01 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-Tp13Tn5DuYGkbC6lnfZwPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NrHcuvGl79o.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3p88E2_iHvKh4VhljxX4AJk4fz5biEZSvxdWTED5LRQjgdYTxwa2zTqNpT2it7ykkcwkqi4&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1993648408%3A1724415601107533&ddm=0 | 64.233.163.84 | 403 Forbidden | 0 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3p88E2_iHvKh4VhljxX4AJk4fz5biEZSvxdWTED5LRQjgdYTxwa2zTqNpT2it7ykkcwkqi4&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1993648408%3A1724415601107533&ddm=0 IP64.233.163.84:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69 ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3p88E2_iHvKh4VhljxX4AJk4fz5biEZSvxdWTED5LRQjgdYTxwa2zTqNpT2it7ykkcwkqi4&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1993648408%3A1724415601107533&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 23 Aug 2024 12:20:01 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-ALjgoro0IXbY6CsE3cU9qA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NrHcuvGl79o.es5.O/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.barscreative1.com/sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html | 45.133.44.3 | 200 OK | 1.8 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html IP45.133.44.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintA2:3E:46:AA:B1:90:A8:AE:3D:15:ED:7F:CA:0F:EF:AF:53:4A:20:65 ValidityMon, 08 Jul 2024 03:01:17 GMT - Sun, 06 Oct 2024 03:01:16 GMT
File typeHTML document, ASCII text, with very long lines (1879), with no line terminators Hash9c074ba628a488033b36166778e610b5 5a612f81115838990e3b8741943f900c97bd3f8f b18c3b575c2be7aa1ee3d73301c049cd4862a206e38ee5eb7651c0026d8cf8b3
GET /sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Sun, 29 Oct 2023 10:17:36 GMT
etag: W/"653e3140-6f1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 23 Aug 2024 13:20:00 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
|
|
| pogothere.xyz/asd100.bin | 188.114.96.1 | 200 OK | 102 kB |
IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectpogothere.xyz Fingerprint07:B6:9C:F9:CF:D9:C8:A6:57:9C:E3:13:F4:CD:43:4A:94:CE:06:6A ValidityTue, 23 Jul 2024 05:27:01 GMT - Mon, 21 Oct 2024 05:27:00 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dood.li/
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 12:20:00 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4177
last-modified: Fri, 23 Aug 2024 11:10:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QgoWiW7gsZ1WWYLMmJ3I%2BoIBuUWHOteUEJJ1Co5%2FG%2BCLQdK6eeA6XOeVzBl1cki5zZLPfaXoX3YPXAR2H9v9hqRQ0NOuCyqp3LmUox1otMkZRRB96mLgcSwy2%2F%2FFR5L2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0dde2d455685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/script.js | 188.114.96.1 | 200 OK | 975 B |
URL GET HTTP/3cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/script.js IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcreative-bars1.com FingerprintEB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46 ValiditySun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
File typeASCII text, with very long lines (1026), with no line terminators Hash56f5217ee29771ce2ae4c86ff026496c 9b3780593c5dce75b397078fcc2005b4d81aaf25 00233eef52d4b6024e389215842798af314a85d0e50ca433ee4cfd472cdf15ca
GET /sb/ssp/interstitial/center_banner/2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:45 GMT
etag: W/"65aa8501-3cf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 3870469
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5AZtclDtnVDYHJ%2Fg4JEhZZZ5YHwFyalDfbjJJWBwwn0zPVOPEKp1DHBrjVMknxrX06WYLo8%2FTrdtaoUIkdUNH%2B9PISfRcd4kx%2F4oSHG4sxrQ1Gfan7I5JraR1aLUty7tPiEm45VMJ0f2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0de6cde056a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| waisheph.com/5/6936539/?oo=1&aab=1 | 139.45.197.245 | 200 OK | 4.2 kB |
URL GET HTTP/2waisheph.com/5/6936539/?oo=1&aab=1 IP139.45.197.245:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerLet's Encrypt Subjectwaisheph.com Fingerprint68:94:2B:35:6C:6A:DF:A9:03:5C:1C:8B:30:7E:DC:82:BE:43:C7:55 ValidityTue, 20 Aug 2024 00:37:21 GMT - Mon, 18 Nov 2024 00:37:20 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4173), with no line terminators Hashed262d2c993c8c0baacd7efbbe71adeb bc22a8f4c42b7a521e17611f09cc123c9d7fa027 23071c1670a47ae2de5284c8fbd25794908ace2bf0bd8609a7bdfebb6468336a
GET /5/6936539/?oo=1&aab=1 HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.li
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: application/json
x-trace-id: 420a8f217c05f5b9a1fd4ccae257f13b
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://dood.li
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0080c138acc54b56e2fe20eab31f0b53; expires=Sat, 23 Aug 2025 12:19:59 GMT; path=/; secure; SameSite=None
oaidts=1724415599; expires=Sat, 23 Aug 2025 12:19:59 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js | 94.242.247.30 | 200 OK | 132 kB |
URL GET HTTP/2blurbreimbursetrombone.com/aas/r45d/vki/1999414/126a6d05.js IP94.242.247.30:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65010) Size132 kB (131988 bytes) Hash36d23fda45375854c5a348cbd57685ab 242bf3eaae0ad9bfe98e3e8636d0437eca4a5308 f43914f154147131777247d2d3e8ded058641629edf287d1c44c7f325315531b
GET /aas/r45d/vki/1999414/126a6d05.js HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Aug 2024 10:01:38 GMT
vary: Accept-Encoding
etag: W/"66c46982-2043a"
x-js-ab2: var535
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/jquery.min.js | 188.114.96.1 | 200 OK | 84 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/jquery.min.js IP188.114.96.1:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerGoogle Trust Services Subjectcreative-bars1.com FingerprintEB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46 ValiditySun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
File typeJavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators Hash6326c600df01e3bfb9b40e1aa08176f8 6b4fb754d29b297b539bf62ba9b4eaf0f33f314a df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3
GET /sb/ssp/interstitial/center_banner/2/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 12:20:01 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:45 GMT
etag: W/"65aa8501-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6138836
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h0dDWBGKo%2BCj4OynNkd2XrxXUxgX4zYNRsWAAwerpL%2B%2BOT4lLaHqNvcxipk%2BSTGAns9n%2B30oB8N5Zty%2BpHJDZboJkr3qkGcvnlr%2BwXc70M2Fa9h3VZmD%2BVz598IdkByFqiLR%2FdXbl9hu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7b0de3e9f756a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| blurbreimbursetrombone.com/check.html | 94.242.247.30 | 200 OK | 916 B |
URL GET HTTP/2blurbreimbursetrombone.com/check.html IP94.242.247.30:443
Requested byhttps://dood.li/e/2acf7ajdrlaw CertificateIssuerBuypass AS-983163327 Subject Fingerprint30:64:28:4B:E2:70:2E:EA:86:A8:8D:A8:BF:DC:18:79:D1:B4:0E:1A ValidityFri, 17 May 2024 16:59:31 GMT - Tue, 12 Nov 2024 22:59:00 GMT
File typeHTML document, ASCII text, with very long lines (956), with no line terminators Hash95b931540a96c4d45344472f87f81036 7f1c2eae3c09448aa6f8d85f66484439623c520a 2ecb5d3152a38f9abb6f14dac557682756b243462770f69a14c4c2b8cf0726d1
GET /check.html HTTP/1.1
Host: blurbreimbursetrombone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.li/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 12:19:59 GMT
content-type: text/html; charset=utf-8
last-modified: Tue, 30 Jul 2024 10:01:33 GMT
vary: Accept-Encoding
etag: W/"66a8b9fd-394"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|