cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
200 OK 591 B URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1132253
expires: Sun, 15 Sep 2024 18:45:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4nd5CW6wsjAE%2F6xTXnIXgJt54J3rCXFekzVzRCEAYfz7ivTMc2cseRt1zsD%2Fe%2FO1Oq46DVS8oZ6s%2Bn4fb4n6e2Dc3IxnGECl3daO%2BsJAwkj6HrIX0yppfiRq%2BPMjFHvdZbfSTqqp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80cdaa49cf431c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/img/no_video_3.svg
200 OK 2.8 kB URL GET HTTP/3 i.doodcdn.co/img/no_video_3.svg
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (2789)
Hash 077bfdaa49ae4877a42611b739ec4752
a2f9e1222b7af9abc05122411ab8902efcc08ead
70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Wed, 25 Oct 2023 20:23:45 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 80418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GsKBPD6YGWLkZg93R1SfbhAkJfpO11%2B53AQMdrjCpDkUrEUEW1D2KFwIWduamXGfV%2Fo7to4X9OLYKjW4bivXB6ouluikrPUTYmWHq0UZ8zjaScwTccdTUVEvpxLpDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa4a0febb52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 27755
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942b1e-6c6b"
last-modified: Thu, 22 Jun 2023 11:06:06 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2266536
expires: Sun, 15 Sep 2024 18:45:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aE4tY6GzSEbGo2KgM88UoFnZjvct4B0KDSLX8k3k7cuoVEgY%2FqbMODFBkexpttDchTW7DKYIklTi6kBE6TlitBDa8MPQrIAQ2ns5DDfvG684vCIaEn59w%2BCfM%2FGzsAgujBrODsYg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80cdaa4a0f721c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash ca3afb7df10c01fb4a7514ea3f1493e1
7b234d99c8683384c389995c31d4b60b65ae8c53
d2c2bf4568670b4bce7bb07cdc36f0df66139b5eef889b07519607556dab1a53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 18:45:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.buypass.com/
1.7 kB IP
ASN #20940 Akamai International B.V.
Hash 7a87d128b7414f367dad3bc43a9fda9e
7b1f3c467b4cb44c50ebd5212650d484234017ff
ec23180fa6ea6a958f0675ed0522ac0af72a34ba68b1b3823d9fb9671a70089b
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: b5d281e3-ca2f-4930-b931-e769f532ebc1
Content-Length: 1701
Date: Tue, 26 Sep 2023 18:45:39 GMT
Connection: keep-alive
ocsp.buypass.com/
1.7 kB IP
ASN #20940 Akamai International B.V.
Hash 7a87d128b7414f367dad3bc43a9fda9e
7b1f3c467b4cb44c50ebd5212650d484234017ff
ec23180fa6ea6a958f0675ed0522ac0af72a34ba68b1b3823d9fb9671a70089b
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: bf0bb0b1-75e4-4665-bf0d-57f6cf9d6153
Content-Length: 1701
Date: Tue, 26 Sep 2023 18:45:39 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
471 B IP
Hash ca3afb7df10c01fb4a7514ea3f1493e1
7b234d99c8683384c389995c31d4b60b65ae8c53
d2c2bf4568670b4bce7bb07cdc36f0df66139b5eef889b07519607556dab1a53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 18:45:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524\012- data
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Wed, 25 Oct 2023 20:38:10 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 70626
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0sN%2Ba0CdbIPtDGPggZUMi2im%2FrJnfDJ5To1vGauRlK1h8usir8G3cty%2BW9CfvzoWlY4ymItRfLBGOLxr2nnihdd%2F9W%2BUlyIw8XN16d2%2Bu8808NlGL2Ld0ez6uhesVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4cfa5f56bb-OSL
alt-svc: h3=":443"; ma=86400
alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js
200 OK 227 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/lv/esnk/1841674/code.js
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type gzip compressed data, max speed, from Unix\012- data
Size 227 kB (227197 bytes)
Hash cf801b9c385ae336f65141b41060d0be
c75dcb11250db055898327a0e3df645810d3e4a7
dbc430ac133ba4eedec623f1ba7baa6eea502236052da82681e1a841bbb7f7f0
GET /lv/esnk/1841674/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: application/javascript
last-modified: Tue, 26 Sep 2023 09:56:43 GMT
vary: Accept-Encoding
etag: W/"6512aadb-1bac0"
x-js-ab2: var364
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/fonts/avertastd-bold-webfont.woff2
200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/theme_2/fonts/avertastd-bold-webfont.woff2
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23604, version 1.0\012- data
Hash e9133fd11f14c09a2e4556c395a0ef7d
00fad09605f3342df5c9aeba130156fe19ade8b0
06244cc9cd0c998581b1bf93f5222deee7d2d0b09299190e163961afa973ba91
GET /theme_2/fonts/avertastd-bold-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: font/woff2
content-length: 23604
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Wed, 25 Oct 2023 20:53:54 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 4100
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jFB43l2SoHcvYNI70PXqSLtniLhRJUXRFiWdnP%2F%2FNYbKc8Y9uufk3QRU1SA7Q3wThFvKiq13huNfPUAjViGbKH49Q99zaN%2BS4arQf5n1RLZeslbkcmwLf5PfuyvzkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4cfa6556bb-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 28007
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942b1e-6d67"
last-modified: Thu, 22 Jun 2023 11:06:06 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1723403
expires: Sun, 15 Sep 2024 18:45:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w2x%2BXh8%2BGuhLmjwQklitDIphrcDld96mNiIvZp19nrJwn%2BwyfqMvT%2BGAFbxTYKPbLpFiyP5%2Fy4%2BATNKM4%2FdZb6kZWPdPbnCAGZuoBrLYGKwnboz8PVdFpMvPmZehh2mHHCA1LaFt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80cdaa4ef87b56c6-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
200 OK 591 B URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1132254
expires: Sun, 15 Sep 2024 18:45:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DQHV2qjcAdMHC5PZzaxNRa2cpCD7gMjQUaFQY5aZm4IixL1upPRG1C2j0WhQzHahqDmd8F877K49tw4ybbB8JcTUFUrvXyxRSwFbLxE1N1tpCIg95hO6gqwR7vDc5SSaFvnQQmxz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80cdaa4ef87c56c6-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/ads/ad.js
200 OK 18 B IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 071c641b229d2bfadd243b8fa2a9c88d
4048ed3ad506f9bb9052c23283912d0cfea8bcc6
3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Tue, 24 Sep 2024 20:23:45 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 80454
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iosobtVyUCEqbY9JsaQ11z4YpRutXVfh4OvzmEpPvrTa1khtKKLDPutHKYfun9s7JHPvdSd3NmD5fKsAedyRuYM5n8QD3W4tOGnN28DRNZ4rjQ%2BReKdftxPUfApr6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4f088956c3-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/css/embed.css
200 OK 80 kB URL GET HTTP/3 i.doodcdn.co/css/embed.css
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 010e9740f2148647b93ae896d452119c
888e44accbd7e78a0654fd4eaf7541269d95e4e9
d33d9d5fc2eef77dd7cda0770e9bc8213f058f2ead19b7d9b7ed731bcd081a47
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: text/css
content-length: 79720
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: "61d3187c-13812"
expires: Wed, 25 Oct 2023 20:23:45 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 80454
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eoWuQPLjEhS%2B2h71bRr1%2BzCGraUMti3K%2BMLAjw2LD28iwJOjaOeSv55%2FiD7kEJLrfnr1D0JuscWAlWtrBXRfqd0oftBMqN%2B0meo33k%2FGshUbLqg38Pmd9mX50ftGIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa4f089556c3-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/js/embed2.js
200 OK 339 kB URL GET HTTP/3 i.doodcdn.co/js/embed2.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size 339 kB (339271 bytes)
Hash cac27d72c22014f70500e507a7a82231
edcac36287bfc654b2ee6c0fe0727cdc725a9fe5
01c49e02b98bc8a4275650b65787cdd100c362abc7e54e8b9e99396b6117c2c6
GET /js/embed2.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/javascript
content-length: 339271
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=339527
etag: "61d3187c-52e47"
expires: Wed, 25 Oct 2023 20:23:45 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 80450
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kPblktQGFzgjN8LexfJV7mYrbZ08rwUld412apLgVNS%2B7dG3cPDNc1em6k1MvCZe0c2OTOBzYAV3WJYnLid0pweuw%2BXzuzNGLmj2EKsVsR7P%2FCMRcFVgerAjteNebg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa4f089a56c3-OSL
alt-svc: h3=":443"; ma=86400
img.doodcdn.co/splash/5u1p378i0xm23u0s.jpg
200 OK 143 kB URL GET HTTP/3 img.doodcdn.co/splash/5u1p378i0xm23u0s.jpg
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3\012- data
Size 143 kB (143081 bytes)
Hash 17c5738dcd33a1b5d4afb493bd9bad47
6afbfcbf6a404ac69a016064dc846c1a67709d54
8ed4ba29d5af69e6299d5c8bdc0ac2d9f39892150a41a918fbab71f640feb22c
GET /splash/5u1p378i0xm23u0s.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: image/jpeg
content-length: 143081
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=146243
etag: "64bff3e8-23b43"
expires: Tue, 10 Oct 2023 17:15:55 GMT
last-modified: Tue, 25 Jul 2023 16:10:16 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WT9v%2F%2BhmCwvzCt%2FdNDqGbWVg3Q%2F2Zo6qmSyiF8ggklyqp9lceuUmXmfP8c8eFkEp5%2FURMEuAEcwHk%2FlQnJgh8FnyDQgCIkp2YUBe2HcPh%2FS0Wt1mx176NFeltrrHWys%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa4f18a756c3-OSL
alt-svc: h3=":443"; ma=86400
dood.to/favicon.ico
200 OK 15 kB IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/d/91go1hcauqzg
Cookie: dref_url=none
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: image/x-icon
content-length: 15406
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Sat, 30 Sep 2023 13:00:35 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 2267105
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EVlSC9QdSLkXJlP6rYnG6p%2FW92F9Da9aS%2BZq2DZkh%2BM1yZ0txC9n6FL%2F7N9RS0XITbA6W6VqzdIOzj24S%2BpJhRdZUitNMtVuROvb4byhtg2kClQQSAF25tc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa507b7bb503-OSL
alt-svc: h3=":443"; ma=86400
cdn.pncloudfl.com/pn/3aa/330/fa0/3aa330fa01b1cdde2523678140afbed65227b0b1.jpg
200 OK 41 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/3aa/330/fa0/3aa330fa01b1cdde2523678140afbed65227b0b1.jpg
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8009ca0580ceec1a31dbd5ee0eb1af11
b940e536288dac3196e5405f553773d3dc50d0f3
c4f8b08fc63a6475c2bf7791abda14919706bd4ce0967debc0ff2c06b24bd8f7
GET /pn/3aa/330/fa0/3aa330fa01b1cdde2523678140afbed65227b0b1.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: image/webp
content-length: 40632
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=70333
content-disposition: inline; filename="3aa330fa01b1cdde2523678140afbed65227b0b1.webp"
etag: 5aa542ad53c43840c0dd72e8ff6e26a3
expires: Tue, 26 Sep 2023 21:21:30 GMT
last-modified: Wed, 26 Apr 2023 07:18:40 GMT
vary: Accept
x-openstack-request-id: tx192a3665985540ef93594-0064923e4a
x-proxy-cache: MISS
x-timestamp: 1682493519.90840
x-trans-id: tx192a3665985540ef93594-0064923e4a
cf-cache-status: HIT
age: 163450
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 80cdaa518a79b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/b1d/2a3/c16/b1d2a3c161bb5453005127f3187f7c4a5a4f41f5.webp
200 OK 41 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/b1d/2a3/c16/b1d2a3c161bb5453005127f3187f7c4a5a4f41f5.webp
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash e19ccdab86ab495e70c4eeaec76223e8
b1d2a3c161bb5453005127f3187f7c4a5a4f41f5
60465664373ab3977dff154f630741217379e775288f008e3dbb28b6521190ab
GET /pn/b1d/2a3/c16/b1d2a3c161bb5453005127f3187f7c4a5a4f41f5.webp HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/octet-stream
content-length: 40836
etag: e19ccdab86ab495e70c4eeaec76223e8
last-modified: Fri, 28 Apr 2023 11:45:47 GMT
x-timestamp: 1682682346.02182
x-trans-id: txcf3093132d71438e84b35-00644e8286
x-openstack-request-id: txcf3093132d71438e84b35-00644e8286
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
expires: Thu, 28 Sep 2023 08:56:06 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 35374
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80cdaa51eae1b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/bd8/2e2/499/bd82e249990637dadf8f1ea7d7aabd9363df5a04.webp
200 OK 43 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/bd8/2e2/499/bd82e249990637dadf8f1ea7d7aabd9363df5a04.webp
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash cb208d3925e510fe83c48be3eaf33bff
bd82e249990637dadf8f1ea7d7aabd9363df5a04
6fb7577fd58dacdf5835e214c14d3eca60a2d26263a412060a9c521e604254ba
GET /pn/bd8/2e2/499/bd82e249990637dadf8f1ea7d7aabd9363df5a04.webp HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/octet-stream
content-length: 42896
etag: cb208d3925e510fe83c48be3eaf33bff
last-modified: Fri, 28 Apr 2023 11:45:44 GMT
x-timestamp: 1682682343.57018
x-trans-id: txd887446be44043c49ba9a-00645b606d
x-openstack-request-id: txd887446be44043c49ba9a-00645b606d
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 28 Sep 2023 13:29:07 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
cf-cache-status: HIT
age: 18993
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80cdaa521b20b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/css/bootstrap.min.css
200 OK 30 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/bootstrap.min.css
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65324)
Hash 7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6
GET /theme_2/css/bootstrap.min.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: text/css
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: public, max-age=2592000
expires: Tue, 24 Sep 2024 20:23:46 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
cf-cache-status: HIT
age: 80253
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xWaLyew4PlSEfS4WJo4WXgr%2BHPvU1gU1Pp9jSmGbx07GZWEkhVFWjubZXbzJq00bvnQ5IzfQtFXRXn1%2BlYN%2B1VWX0oO%2BX1AWr2X%2BYYdB9TqioNZxLEPeA7SOn3BpQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4a2812b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/3aa/330/fa0/3aa330fa01b1cdde2523678140afbed65227b0b1.jpg
200 OK 41 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/3aa/330/fa0/3aa330fa01b1cdde2523678140afbed65227b0b1.jpg
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8009ca0580ceec1a31dbd5ee0eb1af11
b940e536288dac3196e5405f553773d3dc50d0f3
c4f8b08fc63a6475c2bf7791abda14919706bd4ce0967debc0ff2c06b24bd8f7
GET /pn/3aa/330/fa0/3aa330fa01b1cdde2523678140afbed65227b0b1.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: image/webp
content-length: 40632
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=70333
content-disposition: inline; filename="3aa330fa01b1cdde2523678140afbed65227b0b1.webp"
etag: 5aa542ad53c43840c0dd72e8ff6e26a3
expires: Tue, 26 Sep 2023 21:21:30 GMT
last-modified: Wed, 26 Apr 2023 07:18:40 GMT
vary: Accept
x-openstack-request-id: tx192a3665985540ef93594-0064923e4a
x-proxy-cache: MISS
x-timestamp: 1682493519.90840
x-trans-id: tx192a3665985540ef93594-0064923e4a
cf-cache-status: HIT
age: 163450
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 80cdaa521b23b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
deductionkeepingbabysitter.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js
200 OK 11 kB URL GET HTTP/1.1 deductionkeepingbabysitter.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectdeductionkeepingbabysitter.com
Fingerprint8A:00:E0:6E:03:D4:04:2A:14:DB:B5:DE:2A:7A:59:9F:E1:F3:16:13
ValidityWed, 23 Aug 2023 06:19:06 GMT - Tue, 21 Nov 2023 06:19:05 GMT
File type ASCII text, with very long lines (32097), with no line terminators
Hash 11b3f92ca728455db6a3db9d534e9055
12a989c107d17db3b2b2fde305ab26cd0b05070b
f7b97f67f67b4c70a4bb004066d4e9ac38ec420ddcef186b6e035ec8d2595f5e
GET /2c/03/60/2c0360ed33b0b4736859081c701f9a91.js HTTP/1.1
Host: deductionkeepingbabysitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 26 Sep 2023 18:45:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 24460996df9394d13786d69acca84eb4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
deductionkeepingbabysitter.com/06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js
200 OK 17 kB URL GET HTTP/1.1 deductionkeepingbabysitter.com/06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectdeductionkeepingbabysitter.com
Fingerprint8A:00:E0:6E:03:D4:04:2A:14:DB:B5:DE:2A:7A:59:9F:E1:F3:16:13
ValidityWed, 23 Aug 2023 06:19:06 GMT - Tue, 21 Nov 2023 06:19:05 GMT
File type ASCII text, with very long lines (40495), with no line terminators
Hash 5eb5bb27944c2f691014f7e651c9165e
2fad9ce18b7ef01147cd65bac18ff660264f828b
5d19e27b75a44695712371fd6978d8fbe6a9c40d57aa840b4e2b6a51f6cf631d
GET /06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js HTTP/1.1
Host: deductionkeepingbabysitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 26 Sep 2023 18:45:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 10de9ce727aa844f8f270856e8f22f7c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=x92x_uvf3tWLinRTSs2VxZDccmJrpw7hNTRiZ5pEX0VnI9Tqe1xKshfbMQNeObiFJ-7krlzXvvudAAm4nHBC2C0iy8x1kUjUQc9TNL_shGzts9GTUNd_8My433wopf2Fz7I5FZ6oYiBHiuRv8lLxrPrhiHS32Igomnc3acwEHxUXs_inwSMBUMrtwUSQo7q_OlmHKmrJrh-kwxm6_yEjS6J6Bm7eM4rNHBAigbzErqcCoNHJGUMxcjkzcNSrHh_-9GRNoeLnfvS7H96UCQeLZTAJRkgt2w0JDMMO0mGq78u7jMZngA6-g4nG-YYPPdVHHlP1AmMhtQRSV4uozHiaWHx9iKe93eXLLYyCqcJWCMu0F03m_Y-sWNfHwhD0Je6356JysDyuYUDdq5dnB1cm_kdlMxZFpjxZ2jNA0vNt45VGk6BNx2WeUt4iotVapP7bQfq1hSpfMjIpbWlLpihLStnncyCEteNxdTJ5Whgca0NXV9oeySHwnymhT0Nwxd_7jJZYkSDKG6S3JPmG0pS-xkwZk61ZUslaINjq-T1m49eI48pH8rPzNOH68-wH2eRG6kqv5_MuHRZdzUsumKsrXvD7sFgC1B3RNgEcVqqLNYlOjpOYy38eJtfVESGDa13Mfs_1bVL7QOC9ztxE5PrMJNO2KZCkL4i-f8wXDSARwrCGiPOlMmDafGCksg_-F2Tn8fOM43vgltXvEHma6qpU6IJh8zsdOd4gjRv1WhLTfdOjlABJ7oMIE7V6wplKIKK8y6lTZnHysmME2LcNDR4l6qLYMTwCq-yvqTViOE4G96UlBZVSBIAp3m0p_nbWDzD00lFbdpJ8un_gDBN7AebA4ZKbXinGg973aZPxqRshWzZY5ULo9DGIUG2v_xRD6Zw2zpgwNWyvXwdWB7xKpJ-G1UmyrcITOyHXzQOPCAIgYYRICyQIkd0htsPKlLgm-k37TU3EXLQkPZpX472lxU4LKsnWFiZPNx4VrjEQ&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=374
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=x92x_uvf3tWLinRTSs2VxZDccmJrpw7hNTRiZ5pEX0VnI9Tqe1xKshfbMQNeObiFJ-7krlzXvvudAAm4nHBC2C0iy8x1kUjUQc9TNL_shGzts9GTUNd_8My433wopf2Fz7I5FZ6oYiBHiuRv8lLxrPrhiHS32Igomnc3acwEHxUXs_inwSMBUMrtwUSQo7q_OlmHKmrJrh-kwxm6_yEjS6J6Bm7eM4rNHBAigbzErqcCoNHJGUMxcjkzcNSrHh_-9GRNoeLnfvS7H96UCQeLZTAJRkgt2w0JDMMO0mGq78u7jMZngA6-g4nG-YYPPdVHHlP1AmMhtQRSV4uozHiaWHx9iKe93eXLLYyCqcJWCMu0F03m_Y-sWNfHwhD0Je6356JysDyuYUDdq5dnB1cm_kdlMxZFpjxZ2jNA0vNt45VGk6BNx2WeUt4iotVapP7bQfq1hSpfMjIpbWlLpihLStnncyCEteNxdTJ5Whgca0NXV9oeySHwnymhT0Nwxd_7jJZYkSDKG6S3JPmG0pS-xkwZk61ZUslaINjq-T1m49eI48pH8rPzNOH68-wH2eRG6kqv5_MuHRZdzUsumKsrXvD7sFgC1B3RNgEcVqqLNYlOjpOYy38eJtfVESGDa13Mfs_1bVL7QOC9ztxE5PrMJNO2KZCkL4i-f8wXDSARwrCGiPOlMmDafGCksg_-F2Tn8fOM43vgltXvEHma6qpU6IJh8zsdOd4gjRv1WhLTfdOjlABJ7oMIE7V6wplKIKK8y6lTZnHysmME2LcNDR4l6qLYMTwCq-yvqTViOE4G96UlBZVSBIAp3m0p_nbWDzD00lFbdpJ8un_gDBN7AebA4ZKbXinGg973aZPxqRshWzZY5ULo9DGIUG2v_xRD6Zw2zpgwNWyvXwdWB7xKpJ-G1UmyrcITOyHXzQOPCAIgYYRICyQIkd0htsPKlLgm-k37TU3EXLQkPZpX472lxU4LKsnWFiZPNx4VrjEQ&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=374
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=x92x_uvf3tWLinRTSs2VxZDccmJrpw7hNTRiZ5pEX0VnI9Tqe1xKshfbMQNeObiFJ-7krlzXvvudAAm4nHBC2C0iy8x1kUjUQc9TNL_shGzts9GTUNd_8My433wopf2Fz7I5FZ6oYiBHiuRv8lLxrPrhiHS32Igomnc3acwEHxUXs_inwSMBUMrtwUSQo7q_OlmHKmrJrh-kwxm6_yEjS6J6Bm7eM4rNHBAigbzErqcCoNHJGUMxcjkzcNSrHh_-9GRNoeLnfvS7H96UCQeLZTAJRkgt2w0JDMMO0mGq78u7jMZngA6-g4nG-YYPPdVHHlP1AmMhtQRSV4uozHiaWHx9iKe93eXLLYyCqcJWCMu0F03m_Y-sWNfHwhD0Je6356JysDyuYUDdq5dnB1cm_kdlMxZFpjxZ2jNA0vNt45VGk6BNx2WeUt4iotVapP7bQfq1hSpfMjIpbWlLpihLStnncyCEteNxdTJ5Whgca0NXV9oeySHwnymhT0Nwxd_7jJZYkSDKG6S3JPmG0pS-xkwZk61ZUslaINjq-T1m49eI48pH8rPzNOH68-wH2eRG6kqv5_MuHRZdzUsumKsrXvD7sFgC1B3RNgEcVqqLNYlOjpOYy38eJtfVESGDa13Mfs_1bVL7QOC9ztxE5PrMJNO2KZCkL4i-f8wXDSARwrCGiPOlMmDafGCksg_-F2Tn8fOM43vgltXvEHma6qpU6IJh8zsdOd4gjRv1WhLTfdOjlABJ7oMIE7V6wplKIKK8y6lTZnHysmME2LcNDR4l6qLYMTwCq-yvqTViOE4G96UlBZVSBIAp3m0p_nbWDzD00lFbdpJ8un_gDBN7AebA4ZKbXinGg973aZPxqRshWzZY5ULo9DGIUG2v_xRD6Zw2zpgwNWyvXwdWB7xKpJ-G1UmyrcITOyHXzQOPCAIgYYRICyQIkd0htsPKlLgm-k37TU3EXLQkPZpX472lxU4LKsnWFiZPNx4VrjEQ&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=374 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACf90gAAAAAAAAAB; Path=/; Expires=Thu, 26 Oct 2023 18:45:41 GMT; Secure; SameSite=None
OACIBLOCK=ACf90gAAAABlEmVQ; Path=/; Expires=Thu, 26 Oct 2023 18:45:41 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
dood.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
200 OK 3.4 kB URL GET HTTP/3 dood.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (7308), with no line terminators
Hash 494214d691967891ea4c1aa5d03e9ce5
92b5505c8763a3d1578392bb5c06ab2510614750
423e3a1c5acd3e59396254e17f97a82c467a3114a6e7396b6c1aad38305faf49
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: dref_url=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Uw76DziFL%2BY7bea1CXBSq%2B%2FUvBdJPXmot6WuXxBypWiUjHYBQoM4FETPRkpSAERFEz8AVbi2qsxJSQUS8Wcc5MZMPAWy1pddS%2F7IvxgKnqfuz8TGn6ARYQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4e18a1b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
emumuendaku.info/utx?tid=926820&top=dood.to&cb=nrkLGaoUs3mG
204 No Content 0 B URL GET HTTP/2 emumuendaku.info/utx?tid=926820&top=dood.to&cb=nrkLGaoUs3mG
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerAmazon
Subjectemumuendaku.info
FingerprintC6:28:BB:D1:7E:2D:44:64:FA:1D:E3:25:DE:80:6B:7E:5B:B8:6A:A4
ValidityThu, 21 Sep 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=926820&top=dood.to&cb=nrkLGaoUs3mG HTTP/1.1
Host: emumuendaku.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 26 Sep 2023 18:45:41 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://dood.to
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Tue, 26 Sep 2023 18:46:41 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jH79-NMzl9amy7t9PfgpdiiFOLBKm0oLw9HXaV8Lv1oDah9PrfTDbg==
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=maDfWzuGak8-y8yR1MM4P9C1Q_de1CltjkXCckmStzpjuW10VLUewA8QOBRMnmpYYcvxjb4xm_wqswt003hNjPXCg84aNieiGVc4CY7ydco9sCHyAiCn1HSY1Ku6Gwwyi93dxUf4zC5UPMtd4smSWPc7S-zTU7HRZAlt8f2Zw7lzdeNhF_CyucoZSjCxSei60-Fg7-t_q3qB3-f5f2ohOHcmsQ1vujPoWL4m-8BbU9Pvzfvi76a7WeBB909KqkX51OXG6O44Jb2NXWIb1mcJ1xD2Gtv0yZkK8R79k--5nnTJg0CT6Y7A_gzGFCGeBTXaTorsRcoSk1JudLPoyLx7ZwpTJ50p2DXgAz8lFMR-ZQ4DTWowatFkTiVr_d-XWQW5pJRanLXuhqaINaNltOtQwhNW8AY55t_55kUP-Zgn5kYj24jgbwQ8_7S-4gfnHkerhUQhx5zgeRvUJYZdhMw82GdsfkxE3_KtOW_j1WUilirSZK-EP81BQHJyunuPjR4UXvOcFPIC7STyqrzw2rVJji-L0xWtJRJDEW2LwAONwhMCaL0wh9raDUfLbMDdiF0gRTBgsgXO0AVX0-2Hamyr0whGQ15eXOBZZwdXo_2qBbr2cAU88qAiRAzPGNxson9shpNW9dYYSZuMjhPTamfzzB0ldzjeaz2mR62tMlMLX0sMTYatMn16NduRVmcK5B-EEnaztprbQrvMotFJzaSOrKiOxpEl0vecJSku5B4JV_fX5hrgO_1krSBdD81lvtG8kwt_AJZf8MhS1yLLS492vlIvoPyGsgp91fCKglB1OQY2dLGE9XnTlubPQuJ_adCwnkQCWxQH4o1bxGL0dTZQzibScUScAVEKCVfpxL3D3NH_ySNt6dfZx4fQ4UyjVg2AESWOOvDw7Y8GeS68eTkigm7n_OdMGZOaC8gUX3YSItVbkJe2oINKQZiMWGo3BkZeBXjqLxI-QoyGgbQJp1O7S2imtJIxAGENOUWLxKK-J8wSxf24i4166_2b6elItWhNG04MWQ==&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=535
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=maDfWzuGak8-y8yR1MM4P9C1Q_de1CltjkXCckmStzpjuW10VLUewA8QOBRMnmpYYcvxjb4xm_wqswt003hNjPXCg84aNieiGVc4CY7ydco9sCHyAiCn1HSY1Ku6Gwwyi93dxUf4zC5UPMtd4smSWPc7S-zTU7HRZAlt8f2Zw7lzdeNhF_CyucoZSjCxSei60-Fg7-t_q3qB3-f5f2ohOHcmsQ1vujPoWL4m-8BbU9Pvzfvi76a7WeBB909KqkX51OXG6O44Jb2NXWIb1mcJ1xD2Gtv0yZkK8R79k--5nnTJg0CT6Y7A_gzGFCGeBTXaTorsRcoSk1JudLPoyLx7ZwpTJ50p2DXgAz8lFMR-ZQ4DTWowatFkTiVr_d-XWQW5pJRanLXuhqaINaNltOtQwhNW8AY55t_55kUP-Zgn5kYj24jgbwQ8_7S-4gfnHkerhUQhx5zgeRvUJYZdhMw82GdsfkxE3_KtOW_j1WUilirSZK-EP81BQHJyunuPjR4UXvOcFPIC7STyqrzw2rVJji-L0xWtJRJDEW2LwAONwhMCaL0wh9raDUfLbMDdiF0gRTBgsgXO0AVX0-2Hamyr0whGQ15eXOBZZwdXo_2qBbr2cAU88qAiRAzPGNxson9shpNW9dYYSZuMjhPTamfzzB0ldzjeaz2mR62tMlMLX0sMTYatMn16NduRVmcK5B-EEnaztprbQrvMotFJzaSOrKiOxpEl0vecJSku5B4JV_fX5hrgO_1krSBdD81lvtG8kwt_AJZf8MhS1yLLS492vlIvoPyGsgp91fCKglB1OQY2dLGE9XnTlubPQuJ_adCwnkQCWxQH4o1bxGL0dTZQzibScUScAVEKCVfpxL3D3NH_ySNt6dfZx4fQ4UyjVg2AESWOOvDw7Y8GeS68eTkigm7n_OdMGZOaC8gUX3YSItVbkJe2oINKQZiMWGo3BkZeBXjqLxI-QoyGgbQJp1O7S2imtJIxAGENOUWLxKK-J8wSxf24i4166_2b6elItWhNG04MWQ==&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=535
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=maDfWzuGak8-y8yR1MM4P9C1Q_de1CltjkXCckmStzpjuW10VLUewA8QOBRMnmpYYcvxjb4xm_wqswt003hNjPXCg84aNieiGVc4CY7ydco9sCHyAiCn1HSY1Ku6Gwwyi93dxUf4zC5UPMtd4smSWPc7S-zTU7HRZAlt8f2Zw7lzdeNhF_CyucoZSjCxSei60-Fg7-t_q3qB3-f5f2ohOHcmsQ1vujPoWL4m-8BbU9Pvzfvi76a7WeBB909KqkX51OXG6O44Jb2NXWIb1mcJ1xD2Gtv0yZkK8R79k--5nnTJg0CT6Y7A_gzGFCGeBTXaTorsRcoSk1JudLPoyLx7ZwpTJ50p2DXgAz8lFMR-ZQ4DTWowatFkTiVr_d-XWQW5pJRanLXuhqaINaNltOtQwhNW8AY55t_55kUP-Zgn5kYj24jgbwQ8_7S-4gfnHkerhUQhx5zgeRvUJYZdhMw82GdsfkxE3_KtOW_j1WUilirSZK-EP81BQHJyunuPjR4UXvOcFPIC7STyqrzw2rVJji-L0xWtJRJDEW2LwAONwhMCaL0wh9raDUfLbMDdiF0gRTBgsgXO0AVX0-2Hamyr0whGQ15eXOBZZwdXo_2qBbr2cAU88qAiRAzPGNxson9shpNW9dYYSZuMjhPTamfzzB0ldzjeaz2mR62tMlMLX0sMTYatMn16NduRVmcK5B-EEnaztprbQrvMotFJzaSOrKiOxpEl0vecJSku5B4JV_fX5hrgO_1krSBdD81lvtG8kwt_AJZf8MhS1yLLS492vlIvoPyGsgp91fCKglB1OQY2dLGE9XnTlubPQuJ_adCwnkQCWxQH4o1bxGL0dTZQzibScUScAVEKCVfpxL3D3NH_ySNt6dfZx4fQ4UyjVg2AESWOOvDw7Y8GeS68eTkigm7n_OdMGZOaC8gUX3YSItVbkJe2oINKQZiMWGo3BkZeBXjqLxI-QoyGgbQJp1O7S2imtJIxAGENOUWLxKK-J8wSxf24i4166_2b6elItWhNG04MWQ==&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=535 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222; OACICAP=ACf90gAAAAAAAAAB; OACIBLOCK=ACf90gAAAABlEmVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
200 OK 24 kB URL GET HTTP/3 i.doodcdn.co/fonts/avertastd-regular-webfont.woff2
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 23812, version 1.524\012- data
Hash eb586e5a1b86dbf1c866e3ed80f9d18e
280ee78d19c017ab9335f769595e5157d3c4a343
714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Wed, 25 Oct 2023 20:28:23 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 77605
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CFCipPTdVlhfgQchjSnud9h%2BxcbRDHdzumpXb7oeVTtCRq8tnwMCdkr0ZU%2FsfJGPDgSYpGF3I5k8JuemFXNJBElP5ujhIMU0sISaHxg9HvgobRmt2HlsppiGyfyLgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa553d1f56bb-OSL
alt-svc: h3=":443"; ma=86400
alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=olfpoZ-SFtRC3hei4P-qaSs82MrnGkmorxmzaj-6HF7AfEROfHAE13LrdPkvwSWd9cv84eXUfnusQwUn_CJ0V50owghWDTd4ILXkAt9KV8Spx3JFeJxRRHGCJLwqgwAo0f90C5aZzMgryMoJDw-sQoIBNj7AJaqsBOOlYH3mkXq3xDnH7cxsQO41zg6BZwEwzicAXz7DcT7l09kEaTVH7lqv8vFRyezz-wq7ecH8-UqlPtqBDYcJ1iUh8wYzsVm6ZMTRbTNOuhGQEkJkb45TQIoTxtcTTu0Or0DJAqt9KO703OX7-xEHGddxGQ-29LYsdSGjN_ETL9ndLy6l5o8XTfHRN2wEGn_9LaEkEO042PLVlhamf5BQ4zmSEsTC7e5VT0Pz5fnSFWdFYY7gSlLK61iN31lhRq8thzXLs8I3RSg1KQD1GqBP-MpgMduapFhqF3Xk83SXHUIvm6QKf3KvV99G4m3TvvJxA-a_Mw2xImX27DLosPDlLAXQgCSjIfxzSfmzbSU9Wz5q7GbhpL5oeQYSRJGc9NnoMmkSqZbIraLnSk1cxn_l26jPzglVqdob9zN7GPqU6z7f3AGhA6hl0-n8K9lMAEV2Eu3UPQ-h2wCXJZ6NUqHbnRJq20qmMN_T38zGHIQGtz9UDzKVpwmSRz-BKFz3cPPEoUBr_VIPcfofm3dNyrpeWRolU35FEKoa-ME5oq300lpsQmaRA1xS-tgcNvBO5jbKCeQS7mpBkZjPzNJL7beD324GhSzkWgK3JuwwkIIogN-pNPbh92tvNvD2uwLBv6IggvOmj7ksMqR3k7Vw0WTkbgQN2ZYhuUlh44snlejmr1ohSCaVliQjD6qq8mFCgXkwZKR963IvN_DLR2A_cQDwjAfqlgHY38B4zKKu44SLOZRLAhP1sWAAE0gfe1a5mvw9-DUu6QgMmq1uhfbKTxUoPV5L6eJK-MbpSooIomt3cO-L1EqYKzCD7RfaN71buLp7aTCX&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=533
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=olfpoZ-SFtRC3hei4P-qaSs82MrnGkmorxmzaj-6HF7AfEROfHAE13LrdPkvwSWd9cv84eXUfnusQwUn_CJ0V50owghWDTd4ILXkAt9KV8Spx3JFeJxRRHGCJLwqgwAo0f90C5aZzMgryMoJDw-sQoIBNj7AJaqsBOOlYH3mkXq3xDnH7cxsQO41zg6BZwEwzicAXz7DcT7l09kEaTVH7lqv8vFRyezz-wq7ecH8-UqlPtqBDYcJ1iUh8wYzsVm6ZMTRbTNOuhGQEkJkb45TQIoTxtcTTu0Or0DJAqt9KO703OX7-xEHGddxGQ-29LYsdSGjN_ETL9ndLy6l5o8XTfHRN2wEGn_9LaEkEO042PLVlhamf5BQ4zmSEsTC7e5VT0Pz5fnSFWdFYY7gSlLK61iN31lhRq8thzXLs8I3RSg1KQD1GqBP-MpgMduapFhqF3Xk83SXHUIvm6QKf3KvV99G4m3TvvJxA-a_Mw2xImX27DLosPDlLAXQgCSjIfxzSfmzbSU9Wz5q7GbhpL5oeQYSRJGc9NnoMmkSqZbIraLnSk1cxn_l26jPzglVqdob9zN7GPqU6z7f3AGhA6hl0-n8K9lMAEV2Eu3UPQ-h2wCXJZ6NUqHbnRJq20qmMN_T38zGHIQGtz9UDzKVpwmSRz-BKFz3cPPEoUBr_VIPcfofm3dNyrpeWRolU35FEKoa-ME5oq300lpsQmaRA1xS-tgcNvBO5jbKCeQS7mpBkZjPzNJL7beD324GhSzkWgK3JuwwkIIogN-pNPbh92tvNvD2uwLBv6IggvOmj7ksMqR3k7Vw0WTkbgQN2ZYhuUlh44snlejmr1ohSCaVliQjD6qq8mFCgXkwZKR963IvN_DLR2A_cQDwjAfqlgHY38B4zKKu44SLOZRLAhP1sWAAE0gfe1a5mvw9-DUu6QgMmq1uhfbKTxUoPV5L6eJK-MbpSooIomt3cO-L1EqYKzCD7RfaN71buLp7aTCX&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=533
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=olfpoZ-SFtRC3hei4P-qaSs82MrnGkmorxmzaj-6HF7AfEROfHAE13LrdPkvwSWd9cv84eXUfnusQwUn_CJ0V50owghWDTd4ILXkAt9KV8Spx3JFeJxRRHGCJLwqgwAo0f90C5aZzMgryMoJDw-sQoIBNj7AJaqsBOOlYH3mkXq3xDnH7cxsQO41zg6BZwEwzicAXz7DcT7l09kEaTVH7lqv8vFRyezz-wq7ecH8-UqlPtqBDYcJ1iUh8wYzsVm6ZMTRbTNOuhGQEkJkb45TQIoTxtcTTu0Or0DJAqt9KO703OX7-xEHGddxGQ-29LYsdSGjN_ETL9ndLy6l5o8XTfHRN2wEGn_9LaEkEO042PLVlhamf5BQ4zmSEsTC7e5VT0Pz5fnSFWdFYY7gSlLK61iN31lhRq8thzXLs8I3RSg1KQD1GqBP-MpgMduapFhqF3Xk83SXHUIvm6QKf3KvV99G4m3TvvJxA-a_Mw2xImX27DLosPDlLAXQgCSjIfxzSfmzbSU9Wz5q7GbhpL5oeQYSRJGc9NnoMmkSqZbIraLnSk1cxn_l26jPzglVqdob9zN7GPqU6z7f3AGhA6hl0-n8K9lMAEV2Eu3UPQ-h2wCXJZ6NUqHbnRJq20qmMN_T38zGHIQGtz9UDzKVpwmSRz-BKFz3cPPEoUBr_VIPcfofm3dNyrpeWRolU35FEKoa-ME5oq300lpsQmaRA1xS-tgcNvBO5jbKCeQS7mpBkZjPzNJL7beD324GhSzkWgK3JuwwkIIogN-pNPbh92tvNvD2uwLBv6IggvOmj7ksMqR3k7Vw0WTkbgQN2ZYhuUlh44snlejmr1ohSCaVliQjD6qq8mFCgXkwZKR963IvN_DLR2A_cQDwjAfqlgHY38B4zKKu44SLOZRLAhP1sWAAE0gfe1a5mvw9-DUu6QgMmq1uhfbKTxUoPV5L6eJK-MbpSooIomt3cO-L1EqYKzCD7RfaN71buLp7aTCX&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=533 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222; OACICAP=ACf90gAAAAAAAAAB; OACIBLOCK=ACf90gAAAABlEmVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACf90gAAAAAAAAAC; Path=/; Expires=Thu, 26 Oct 2023 18:45:41 GMT; Secure; SameSite=None
OACIBLOCK=ACf90gAAAABlEmVQ; Path=/; Expires=Thu, 26 Oct 2023 18:45:41 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
img.doodcdn.co/splash/5u1p378i0xm23u0s.jpg
200 OK 143 kB URL GET HTTP/3 img.doodcdn.co/splash/5u1p378i0xm23u0s.jpg
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3\012- data
Size 143 kB (143081 bytes)
Hash 17c5738dcd33a1b5d4afb493bd9bad47
6afbfcbf6a404ac69a016064dc846c1a67709d54
8ed4ba29d5af69e6299d5c8bdc0ac2d9f39892150a41a918fbab71f640feb22c
GET /splash/5u1p378i0xm23u0s.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: image/jpeg
content-length: 143081
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=146243
etag: "64bff3e8-23b43"
expires: Mon, 09 Oct 2023 19:42:38 GMT
last-modified: Tue, 25 Jul 2023 16:10:16 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wxuF%2BtDRYfVREj7pN%2Bywg4g7nmQCar2%2BLd0nMhlbB1WAtJowpAykqfl9loEH9hJN7cfJVhQ3V%2BzAGYKe%2FcQPunSNCtH1iLl%2FqHB5eoTpk7llYqbCB2RKzWLA1292i6fi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa55182a56c3-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/img/logo-s.png
200 OK 1.9 kB URL GET HTTP/3 i.doodcdn.co/img/logo-s.png
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8211fb3cc137d3e1c1e399b86476f951
136d8ef228959aa0cee12e5ed463b6e6a4fcf720
2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Wed, 25 Oct 2023 17:39:31 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 80422
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TWHwjWxfw6YbuM6bsKng%2BBbuYMuCM54kM7hEfCovpoxSfycoeqa%2F8tKGRe14xcDASPfxkHLNWLpoJ%2FZRC5hHE5CBV815QXCrzBiypz%2Bs%2BLhwSd6CLUQ8WUoYwHBuAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa5689b856c3-OSL
alt-svc: h3=":443"; ma=86400
dood.to/e/91go1hcauqzg
200 OK 0 B IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/91go1hcauqzg HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/e/91go1hcauqzg
Cookie: file_id=98349267; aff=666; ref_url=https%3A%2F%2Fdood.to%2Fd%2F91go1hcauqzg; dref_url=none; cf_clearance=Ly6s2VpdktIGVdtoLFMFg9QnATx5itYg.cxHrf.Hb98-1695753940-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695753940
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 25 Sep 2023 18:45:41 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p3gP78aMRJ3YGBx79fvpGChzJ7Gadkr6RMtlOFALOP5%2F9yWSYwcVL53%2BIdFgxB3cxpITBS3hFpMogbPixtPrbz8CKtaflHSQcB28XG7bfQUZvu7lbTcQcQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa563ac5b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cagothie.net/tag.min.js
200 OK 25 kB IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectcagothie.net
FingerprintF1:84:8A:BC:01:51:5E:41:A2:7B:C7:D5:CC:0D:FA:CD:91:BE:98:07
ValiditySun, 17 Sep 2023 05:37:34 GMT - Sat, 16 Dec 2023 05:37:33 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 21e7e3669127751c52060404e6edd126
900891ff1f269cf116d2b067c876f85f2bf202f5
1f425f1787950db4b13fd578d0f18da420150403a83dc653b627bc66910d0106
GET /tag.min.js HTTP/1.1
Host: cagothie.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: text/javascript; charset=utf-8
content-length: 25332
content-encoding: br
x-trace-id: 8fa3a26496f171f051e40219295408e6
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Tue, 26 Sep 2023 15:05:31 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_cldc14ax2jf6w806dz0kl8&nojs=0&ix=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&frq=0&cid=955557860352000&sp=1&im=1
200 OK 2.8 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/get/1841674?zoneid=1841674&jp=_cldc14ax2jf6w806dz0kl8&nojs=0&ix=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&frq=0&cid=955557860352000&sp=1&im=1
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type gzip compressed data, from Unix\012- data
Hash d30fc44c4175819493cf43dfa97e60d7
154e919a546789dbcc9b7a04a762d1a604bc2b0f
e76acbe195a72bb79fe8df4785b4590f8c27cd0cb514612b093b728aae574a0c
GET /get/1841674?zoneid=1841674&jp=_cldc14ax2jf6w806dz0kl8&nojs=0&ix=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&t=0&x=1280&y=1024&wcks=1&wgl=0&cnvs=1&os=0&md=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&frq=0&cid=955557860352000&sp=1&im=1 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Tue, 29 Oct 2024 18:45:40 GMT; HttpOnly; Secure; SameSite=None
UID=2309261345a2128784d4ce49b781bc9ca222; Path=/; Expires=Tue, 29 Oct 2024 18:45:40 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 8302acca5afd8db90f9523f236d8bf88
eaa4c88ac91684e33bb02372fedddd1399fc598f
b7b735f88a9329aa05e1315187c41a3b8a967f1c6e119717f6c60cb4e18d57f7
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 26 Sep 2023 18:45:41 GMT
Last-Modified: Tue, 26 Sep 2023 18:17:09 GMT
Server: ECAcc (ska/F69C)
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JqjOeHkTHqGMZnCncwPsjwR2AHr0RiF7IjgeUKVhAfaInxMLIEGsIQ==
Age: 1712
i.doodcdn.co/get_slides/1746/5u1p378i0xm23u0s.jpg
200 OK 3.2 kB URL GET HTTP/3 i.doodcdn.co/get_slides/1746/5u1p378i0xm23u0s.jpg
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
Hash 609991a4f571ce8154415bd98761e613
88ed610f01e93a67d2682a47133de33d06cdd01c
82a7f01115785189deff5040ae607b2ea8df31d83ecf0de3199f0adb4202b852
GET /get_slides/1746/5u1p378i0xm23u0s.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Tue, 26 Sep 2023 18:45:41 GMT
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FN4yVrjz7euDsXr2dzZMbLa6C52sz%2FXpwVXsNagclbdd0UtMM9UQ%2FU2KagxU%2FEuQo%2Bbue3g31qVTfYjVCTD4P8%2Bf055NRfuy%2Bx%2BlwzdborksvQ%2FMeNKjp6e6T3emYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa568eae56bb-OSL
alt-svc: h3=":443"; ma=86400
professionalswebcheck.com/stats
200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 45d74a31b3be9cb36166dbdf00c07c32
6224d1dd836a9dada610952239f39bf63dbde111
258a96600f21c5ba328a76fc1d1ab2b558d4ad6ca447388354d1a5578d01aa9c
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dood.to
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=a2a2084d-f9d0-4240-95c1-34fbfd5720f9:1:1; expires=Fri, 23 Sep 2033 18:45:41 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=bd43a1cab61e4d7095776be3fbee30ce
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=bd43a1cab61e4d7095776be3fbee30ce
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintB4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1
ValidityTue, 25 Jul 2023 06:29:27 GMT - Mon, 23 Oct 2023 06:29:26 GMT
File type JSON data\012- , ASCII text
Hash ba9a35a3705e27a76e92bf552d42dae0
79231b57d4b2d5457d2701ebbc144563fbdf34cf
3a46e8d2db6b0e0d97825ef81b589c1926a0fd0f6534f602c1ad5dc7f3e95904
GET /gid.js?userId=bd43a1cab61e4d7095776be3fbee30ce HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:42 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dood.to
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=bd43a1cab61e4d7095776be3fbee30ce; expires=Wed, 25 Sep 2024 18:45:42 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/whob.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=3e2Jcu0XiMNYwteNfGmy_DUrZzOrSifeJ8Ob3e0h0Xza3xUW3g9KEAuZodvTEyJymsO_xyKgPZN_0v_T5Ip3bR4UKZLwZD9W6lWTnleQej_BHSR7cZ6So_g8iKWlQFfEB_ESd5k5wERW6aj5w1rt-UleA11UXIMROCYyLj5u8k6afGlePLqZ-ZnSXYf-lb93caD58BZWkf0o1brCyGzFZVqhQQ2qvQRj59657SZZREvhuQNpBGuAEp0Y9mEwZBoQ47SOg-ym6Qf7oOOQ9m6zpwyTISIcgfIALnBGWeLO_HkGD7RFxUfSKTC-h_1KGJaGNMylgB6gFV95vGJjjVYPSXAWz3-ALaXPMfK7LheaP0B3Y7OZG9KtlcnBlG7HhuROhm4mEJQTm9MIueO_nCz_SkT3yiisvBn0SDQcP8_EMtgbjJOCSVz0TY4i5zmY8AD9cu_EjkCzqOfDq8ogoqQU10Qwo4kVovYof91pjiDuPmHL5eo1KZqCz4xU-hEsl79-1w6am6srK1Lq-0ioJpa-vC4lvkNUo6LNPPBVpWMwSQ2tIYzsepefLZO1u-5hN-ATQno6-XAP31Tvta_hm0RGSjGa7an-WDBBmSRlVLsT5tuSrVbJuyr3PhWV0pdl-MI9TQRClqcmJRChSdi4HlNYfy01fl7KUIodY9y2XyU5RtAYNuEX_Xz9cP5Vtaz3ZdBbIgNIqm4qgYOgINR0jdzf9XP9pxx3b3Lt3jYXZaAfRTNvhgrfDhLJxOfRkioih3ymmppFRrHgw17r4Hmc_FrkL2raVx8Wzj5xLeInMpTzMQfG0ll_ePeW8sCmXwxifllOlYjrZ2dQawlk7E52opoSKfl8OtmRymNeV5SgLxh-EQy4lcc-zTxY7RE6XO2CDc9rCsihceHFYNTTREXOVluunDRK5X8iY5MS-wu5de7qOdrXZjJEl6eAVjJxSa-kbYu9c_F6l4AxuXRv1rur0LaSfOJVOBfOUGIC-0ZodzJFa7U6mQg8q9m3j6OkIPpYUR04HIT4ag==&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=410
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/whob.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=3e2Jcu0XiMNYwteNfGmy_DUrZzOrSifeJ8Ob3e0h0Xza3xUW3g9KEAuZodvTEyJymsO_xyKgPZN_0v_T5Ip3bR4UKZLwZD9W6lWTnleQej_BHSR7cZ6So_g8iKWlQFfEB_ESd5k5wERW6aj5w1rt-UleA11UXIMROCYyLj5u8k6afGlePLqZ-ZnSXYf-lb93caD58BZWkf0o1brCyGzFZVqhQQ2qvQRj59657SZZREvhuQNpBGuAEp0Y9mEwZBoQ47SOg-ym6Qf7oOOQ9m6zpwyTISIcgfIALnBGWeLO_HkGD7RFxUfSKTC-h_1KGJaGNMylgB6gFV95vGJjjVYPSXAWz3-ALaXPMfK7LheaP0B3Y7OZG9KtlcnBlG7HhuROhm4mEJQTm9MIueO_nCz_SkT3yiisvBn0SDQcP8_EMtgbjJOCSVz0TY4i5zmY8AD9cu_EjkCzqOfDq8ogoqQU10Qwo4kVovYof91pjiDuPmHL5eo1KZqCz4xU-hEsl79-1w6am6srK1Lq-0ioJpa-vC4lvkNUo6LNPPBVpWMwSQ2tIYzsepefLZO1u-5hN-ATQno6-XAP31Tvta_hm0RGSjGa7an-WDBBmSRlVLsT5tuSrVbJuyr3PhWV0pdl-MI9TQRClqcmJRChSdi4HlNYfy01fl7KUIodY9y2XyU5RtAYNuEX_Xz9cP5Vtaz3ZdBbIgNIqm4qgYOgINR0jdzf9XP9pxx3b3Lt3jYXZaAfRTNvhgrfDhLJxOfRkioih3ymmppFRrHgw17r4Hmc_FrkL2raVx8Wzj5xLeInMpTzMQfG0ll_ePeW8sCmXwxifllOlYjrZ2dQawlk7E52opoSKfl8OtmRymNeV5SgLxh-EQy4lcc-zTxY7RE6XO2CDc9rCsihceHFYNTTREXOVluunDRK5X8iY5MS-wu5de7qOdrXZjJEl6eAVjJxSa-kbYu9c_F6l4AxuXRv1rur0LaSfOJVOBfOUGIC-0ZodzJFa7U6mQg8q9m3j6OkIPpYUR04HIT4ag==&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=410
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=3e2Jcu0XiMNYwteNfGmy_DUrZzOrSifeJ8Ob3e0h0Xza3xUW3g9KEAuZodvTEyJymsO_xyKgPZN_0v_T5Ip3bR4UKZLwZD9W6lWTnleQej_BHSR7cZ6So_g8iKWlQFfEB_ESd5k5wERW6aj5w1rt-UleA11UXIMROCYyLj5u8k6afGlePLqZ-ZnSXYf-lb93caD58BZWkf0o1brCyGzFZVqhQQ2qvQRj59657SZZREvhuQNpBGuAEp0Y9mEwZBoQ47SOg-ym6Qf7oOOQ9m6zpwyTISIcgfIALnBGWeLO_HkGD7RFxUfSKTC-h_1KGJaGNMylgB6gFV95vGJjjVYPSXAWz3-ALaXPMfK7LheaP0B3Y7OZG9KtlcnBlG7HhuROhm4mEJQTm9MIueO_nCz_SkT3yiisvBn0SDQcP8_EMtgbjJOCSVz0TY4i5zmY8AD9cu_EjkCzqOfDq8ogoqQU10Qwo4kVovYof91pjiDuPmHL5eo1KZqCz4xU-hEsl79-1w6am6srK1Lq-0ioJpa-vC4lvkNUo6LNPPBVpWMwSQ2tIYzsepefLZO1u-5hN-ATQno6-XAP31Tvta_hm0RGSjGa7an-WDBBmSRlVLsT5tuSrVbJuyr3PhWV0pdl-MI9TQRClqcmJRChSdi4HlNYfy01fl7KUIodY9y2XyU5RtAYNuEX_Xz9cP5Vtaz3ZdBbIgNIqm4qgYOgINR0jdzf9XP9pxx3b3Lt3jYXZaAfRTNvhgrfDhLJxOfRkioih3ymmppFRrHgw17r4Hmc_FrkL2raVx8Wzj5xLeInMpTzMQfG0ll_ePeW8sCmXwxifllOlYjrZ2dQawlk7E52opoSKfl8OtmRymNeV5SgLxh-EQy4lcc-zTxY7RE6XO2CDc9rCsihceHFYNTTREXOVluunDRK5X8iY5MS-wu5de7qOdrXZjJEl6eAVjJxSa-kbYu9c_F6l4AxuXRv1rur0LaSfOJVOBfOUGIC-0ZodzJFa7U6mQg8q9m3j6OkIPpYUR04HIT4ag==&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=410 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222; OACICAP=ACf90gAAAAAAAAAC; OACIBLOCK=ACf90gAAAABlEmVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:42 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/whob.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=x92x_uvf3tWLinRTSs2VxZDccmJrpw7hNTRiZ5pEX0VnI9Tqe1xKshfbMQNeObiFJ-7krlzXvvudAAm4nHBC2C0iy8x1kUjUQc9TNL_shGzts9GTUNd_8My433wopf2Fz7I5FZ6oYiBHiuRv8lLxrPrhiHS32Igomnc3acwEHxUXs_inwSMBUMrtwUSQo7q_OlmHKmrJrh-kwxm6_yEjS6J6Bm7eM4rNHBAigbzErqcCoNHJGUMxcjkzcNSrHh_-9GRNoeLnfvS7H96UCQeLZTAJRkgt2w0JDMMO0mGq78u7jMZngA6-g4nG-YYPPdVHHlP1AmMhtQRSV4uozHiaWHx9iKe93eXLLYyCqcJWCMu0F03m_Y-sWNfHwhD0Je6356JysDyuYUDdq5dnB1cm_kdlMxZFpjxZ2jNA0vNt45VGk6BNx2WeUt4iotVapP7bQfq1hSpfMjIpbWlLpihLStnncyCEteNxdTJ5Whgca0NXV9oeySHwnymhT0Nwxd_7jJZYkSDKG6S3JPmG0pS-xkwZk61ZUslaINjq-T1m49eI48pH8rPzNOH68-wH2eRG6kqv5_MuHRZdzUsumKsrXvD7sFgC1B3RNgEcVqqLNYlOjpOYy38eJtfVESGDa13Mfs_1bVL7QOC9ztxE5PrMJNO2KZCkL4i-f8wXDSARwrCGiPOlMmDafGCksg_-F2Tn8fOM43vgltXvEHma6qpU6IJh8zsdOd4gjRv1WhLTfdOjlABJ7oMIE7V6wplKIKK8y6lTZnHysmME2LcNDR4l6qLYMTwCq-yvqTViOE4G96UlBZVSBIAp3m0p_nbWDzD00lFbdpJ8un_gDBN7AebA4ZKbXinGg973aZPxqRshWzZY5ULo9DGIUG2v_xRD6Zw2zpgwNWyvXwdWB7xKpJ-G1UmyrcITOyHXzQOPCAIgYYRICyQIkd0htsPKlLgm-k37TU3EXLQkPZpX472lxU4LKsnWFiZPNx4VrjEQ&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=374
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/whob.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=x92x_uvf3tWLinRTSs2VxZDccmJrpw7hNTRiZ5pEX0VnI9Tqe1xKshfbMQNeObiFJ-7krlzXvvudAAm4nHBC2C0iy8x1kUjUQc9TNL_shGzts9GTUNd_8My433wopf2Fz7I5FZ6oYiBHiuRv8lLxrPrhiHS32Igomnc3acwEHxUXs_inwSMBUMrtwUSQo7q_OlmHKmrJrh-kwxm6_yEjS6J6Bm7eM4rNHBAigbzErqcCoNHJGUMxcjkzcNSrHh_-9GRNoeLnfvS7H96UCQeLZTAJRkgt2w0JDMMO0mGq78u7jMZngA6-g4nG-YYPPdVHHlP1AmMhtQRSV4uozHiaWHx9iKe93eXLLYyCqcJWCMu0F03m_Y-sWNfHwhD0Je6356JysDyuYUDdq5dnB1cm_kdlMxZFpjxZ2jNA0vNt45VGk6BNx2WeUt4iotVapP7bQfq1hSpfMjIpbWlLpihLStnncyCEteNxdTJ5Whgca0NXV9oeySHwnymhT0Nwxd_7jJZYkSDKG6S3JPmG0pS-xkwZk61ZUslaINjq-T1m49eI48pH8rPzNOH68-wH2eRG6kqv5_MuHRZdzUsumKsrXvD7sFgC1B3RNgEcVqqLNYlOjpOYy38eJtfVESGDa13Mfs_1bVL7QOC9ztxE5PrMJNO2KZCkL4i-f8wXDSARwrCGiPOlMmDafGCksg_-F2Tn8fOM43vgltXvEHma6qpU6IJh8zsdOd4gjRv1WhLTfdOjlABJ7oMIE7V6wplKIKK8y6lTZnHysmME2LcNDR4l6qLYMTwCq-yvqTViOE4G96UlBZVSBIAp3m0p_nbWDzD00lFbdpJ8un_gDBN7AebA4ZKbXinGg973aZPxqRshWzZY5ULo9DGIUG2v_xRD6Zw2zpgwNWyvXwdWB7xKpJ-G1UmyrcITOyHXzQOPCAIgYYRICyQIkd0htsPKlLgm-k37TU3EXLQkPZpX472lxU4LKsnWFiZPNx4VrjEQ&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=374
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=x92x_uvf3tWLinRTSs2VxZDccmJrpw7hNTRiZ5pEX0VnI9Tqe1xKshfbMQNeObiFJ-7krlzXvvudAAm4nHBC2C0iy8x1kUjUQc9TNL_shGzts9GTUNd_8My433wopf2Fz7I5FZ6oYiBHiuRv8lLxrPrhiHS32Igomnc3acwEHxUXs_inwSMBUMrtwUSQo7q_OlmHKmrJrh-kwxm6_yEjS6J6Bm7eM4rNHBAigbzErqcCoNHJGUMxcjkzcNSrHh_-9GRNoeLnfvS7H96UCQeLZTAJRkgt2w0JDMMO0mGq78u7jMZngA6-g4nG-YYPPdVHHlP1AmMhtQRSV4uozHiaWHx9iKe93eXLLYyCqcJWCMu0F03m_Y-sWNfHwhD0Je6356JysDyuYUDdq5dnB1cm_kdlMxZFpjxZ2jNA0vNt45VGk6BNx2WeUt4iotVapP7bQfq1hSpfMjIpbWlLpihLStnncyCEteNxdTJ5Whgca0NXV9oeySHwnymhT0Nwxd_7jJZYkSDKG6S3JPmG0pS-xkwZk61ZUslaINjq-T1m49eI48pH8rPzNOH68-wH2eRG6kqv5_MuHRZdzUsumKsrXvD7sFgC1B3RNgEcVqqLNYlOjpOYy38eJtfVESGDa13Mfs_1bVL7QOC9ztxE5PrMJNO2KZCkL4i-f8wXDSARwrCGiPOlMmDafGCksg_-F2Tn8fOM43vgltXvEHma6qpU6IJh8zsdOd4gjRv1WhLTfdOjlABJ7oMIE7V6wplKIKK8y6lTZnHysmME2LcNDR4l6qLYMTwCq-yvqTViOE4G96UlBZVSBIAp3m0p_nbWDzD00lFbdpJ8un_gDBN7AebA4ZKbXinGg973aZPxqRshWzZY5ULo9DGIUG2v_xRD6Zw2zpgwNWyvXwdWB7xKpJ-G1UmyrcITOyHXzQOPCAIgYYRICyQIkd0htsPKlLgm-k37TU3EXLQkPZpX472lxU4LKsnWFiZPNx4VrjEQ&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=374 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222; OACICAP=ACf90gAAAAAAAAAC; OACIBLOCK=ACf90gAAAABlEmVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:42 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/whob.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=olfpoZ-SFtRC3hei4P-qaSs82MrnGkmorxmzaj-6HF7AfEROfHAE13LrdPkvwSWd9cv84eXUfnusQwUn_CJ0V50owghWDTd4ILXkAt9KV8Spx3JFeJxRRHGCJLwqgwAo0f90C5aZzMgryMoJDw-sQoIBNj7AJaqsBOOlYH3mkXq3xDnH7cxsQO41zg6BZwEwzicAXz7DcT7l09kEaTVH7lqv8vFRyezz-wq7ecH8-UqlPtqBDYcJ1iUh8wYzsVm6ZMTRbTNOuhGQEkJkb45TQIoTxtcTTu0Or0DJAqt9KO703OX7-xEHGddxGQ-29LYsdSGjN_ETL9ndLy6l5o8XTfHRN2wEGn_9LaEkEO042PLVlhamf5BQ4zmSEsTC7e5VT0Pz5fnSFWdFYY7gSlLK61iN31lhRq8thzXLs8I3RSg1KQD1GqBP-MpgMduapFhqF3Xk83SXHUIvm6QKf3KvV99G4m3TvvJxA-a_Mw2xImX27DLosPDlLAXQgCSjIfxzSfmzbSU9Wz5q7GbhpL5oeQYSRJGc9NnoMmkSqZbIraLnSk1cxn_l26jPzglVqdob9zN7GPqU6z7f3AGhA6hl0-n8K9lMAEV2Eu3UPQ-h2wCXJZ6NUqHbnRJq20qmMN_T38zGHIQGtz9UDzKVpwmSRz-BKFz3cPPEoUBr_VIPcfofm3dNyrpeWRolU35FEKoa-ME5oq300lpsQmaRA1xS-tgcNvBO5jbKCeQS7mpBkZjPzNJL7beD324GhSzkWgK3JuwwkIIogN-pNPbh92tvNvD2uwLBv6IggvOmj7ksMqR3k7Vw0WTkbgQN2ZYhuUlh44snlejmr1ohSCaVliQjD6qq8mFCgXkwZKR963IvN_DLR2A_cQDwjAfqlgHY38B4zKKu44SLOZRLAhP1sWAAE0gfe1a5mvw9-DUu6QgMmq1uhfbKTxUoPV5L6eJK-MbpSooIomt3cO-L1EqYKzCD7RfaN71buLp7aTCX&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=533
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/whob.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=olfpoZ-SFtRC3hei4P-qaSs82MrnGkmorxmzaj-6HF7AfEROfHAE13LrdPkvwSWd9cv84eXUfnusQwUn_CJ0V50owghWDTd4ILXkAt9KV8Spx3JFeJxRRHGCJLwqgwAo0f90C5aZzMgryMoJDw-sQoIBNj7AJaqsBOOlYH3mkXq3xDnH7cxsQO41zg6BZwEwzicAXz7DcT7l09kEaTVH7lqv8vFRyezz-wq7ecH8-UqlPtqBDYcJ1iUh8wYzsVm6ZMTRbTNOuhGQEkJkb45TQIoTxtcTTu0Or0DJAqt9KO703OX7-xEHGddxGQ-29LYsdSGjN_ETL9ndLy6l5o8XTfHRN2wEGn_9LaEkEO042PLVlhamf5BQ4zmSEsTC7e5VT0Pz5fnSFWdFYY7gSlLK61iN31lhRq8thzXLs8I3RSg1KQD1GqBP-MpgMduapFhqF3Xk83SXHUIvm6QKf3KvV99G4m3TvvJxA-a_Mw2xImX27DLosPDlLAXQgCSjIfxzSfmzbSU9Wz5q7GbhpL5oeQYSRJGc9NnoMmkSqZbIraLnSk1cxn_l26jPzglVqdob9zN7GPqU6z7f3AGhA6hl0-n8K9lMAEV2Eu3UPQ-h2wCXJZ6NUqHbnRJq20qmMN_T38zGHIQGtz9UDzKVpwmSRz-BKFz3cPPEoUBr_VIPcfofm3dNyrpeWRolU35FEKoa-ME5oq300lpsQmaRA1xS-tgcNvBO5jbKCeQS7mpBkZjPzNJL7beD324GhSzkWgK3JuwwkIIogN-pNPbh92tvNvD2uwLBv6IggvOmj7ksMqR3k7Vw0WTkbgQN2ZYhuUlh44snlejmr1ohSCaVliQjD6qq8mFCgXkwZKR963IvN_DLR2A_cQDwjAfqlgHY38B4zKKu44SLOZRLAhP1sWAAE0gfe1a5mvw9-DUu6QgMmq1uhfbKTxUoPV5L6eJK-MbpSooIomt3cO-L1EqYKzCD7RfaN71buLp7aTCX&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=533
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=olfpoZ-SFtRC3hei4P-qaSs82MrnGkmorxmzaj-6HF7AfEROfHAE13LrdPkvwSWd9cv84eXUfnusQwUn_CJ0V50owghWDTd4ILXkAt9KV8Spx3JFeJxRRHGCJLwqgwAo0f90C5aZzMgryMoJDw-sQoIBNj7AJaqsBOOlYH3mkXq3xDnH7cxsQO41zg6BZwEwzicAXz7DcT7l09kEaTVH7lqv8vFRyezz-wq7ecH8-UqlPtqBDYcJ1iUh8wYzsVm6ZMTRbTNOuhGQEkJkb45TQIoTxtcTTu0Or0DJAqt9KO703OX7-xEHGddxGQ-29LYsdSGjN_ETL9ndLy6l5o8XTfHRN2wEGn_9LaEkEO042PLVlhamf5BQ4zmSEsTC7e5VT0Pz5fnSFWdFYY7gSlLK61iN31lhRq8thzXLs8I3RSg1KQD1GqBP-MpgMduapFhqF3Xk83SXHUIvm6QKf3KvV99G4m3TvvJxA-a_Mw2xImX27DLosPDlLAXQgCSjIfxzSfmzbSU9Wz5q7GbhpL5oeQYSRJGc9NnoMmkSqZbIraLnSk1cxn_l26jPzglVqdob9zN7GPqU6z7f3AGhA6hl0-n8K9lMAEV2Eu3UPQ-h2wCXJZ6NUqHbnRJq20qmMN_T38zGHIQGtz9UDzKVpwmSRz-BKFz3cPPEoUBr_VIPcfofm3dNyrpeWRolU35FEKoa-ME5oq300lpsQmaRA1xS-tgcNvBO5jbKCeQS7mpBkZjPzNJL7beD324GhSzkWgK3JuwwkIIogN-pNPbh92tvNvD2uwLBv6IggvOmj7ksMqR3k7Vw0WTkbgQN2ZYhuUlh44snlejmr1ohSCaVliQjD6qq8mFCgXkwZKR963IvN_DLR2A_cQDwjAfqlgHY38B4zKKu44SLOZRLAhP1sWAAE0gfe1a5mvw9-DUu6QgMmq1uhfbKTxUoPV5L6eJK-MbpSooIomt3cO-L1EqYKzCD7RfaN71buLp7aTCX&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=533 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222; OACICAP=ACf90gAAAAAAAAAC; OACIBLOCK=ACf90gAAAABlEmVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:42 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/whob.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=maDfWzuGak8-y8yR1MM4P9C1Q_de1CltjkXCckmStzpjuW10VLUewA8QOBRMnmpYYcvxjb4xm_wqswt003hNjPXCg84aNieiGVc4CY7ydco9sCHyAiCn1HSY1Ku6Gwwyi93dxUf4zC5UPMtd4smSWPc7S-zTU7HRZAlt8f2Zw7lzdeNhF_CyucoZSjCxSei60-Fg7-t_q3qB3-f5f2ohOHcmsQ1vujPoWL4m-8BbU9Pvzfvi76a7WeBB909KqkX51OXG6O44Jb2NXWIb1mcJ1xD2Gtv0yZkK8R79k--5nnTJg0CT6Y7A_gzGFCGeBTXaTorsRcoSk1JudLPoyLx7ZwpTJ50p2DXgAz8lFMR-ZQ4DTWowatFkTiVr_d-XWQW5pJRanLXuhqaINaNltOtQwhNW8AY55t_55kUP-Zgn5kYj24jgbwQ8_7S-4gfnHkerhUQhx5zgeRvUJYZdhMw82GdsfkxE3_KtOW_j1WUilirSZK-EP81BQHJyunuPjR4UXvOcFPIC7STyqrzw2rVJji-L0xWtJRJDEW2LwAONwhMCaL0wh9raDUfLbMDdiF0gRTBgsgXO0AVX0-2Hamyr0whGQ15eXOBZZwdXo_2qBbr2cAU88qAiRAzPGNxson9shpNW9dYYSZuMjhPTamfzzB0ldzjeaz2mR62tMlMLX0sMTYatMn16NduRVmcK5B-EEnaztprbQrvMotFJzaSOrKiOxpEl0vecJSku5B4JV_fX5hrgO_1krSBdD81lvtG8kwt_AJZf8MhS1yLLS492vlIvoPyGsgp91fCKglB1OQY2dLGE9XnTlubPQuJ_adCwnkQCWxQH4o1bxGL0dTZQzibScUScAVEKCVfpxL3D3NH_ySNt6dfZx4fQ4UyjVg2AESWOOvDw7Y8GeS68eTkigm7n_OdMGZOaC8gUX3YSItVbkJe2oINKQZiMWGo3BkZeBXjqLxI-QoyGgbQJp1O7S2imtJIxAGENOUWLxKK-J8wSxf24i4166_2b6elItWhNG04MWQ==&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=535
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/whob.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=maDfWzuGak8-y8yR1MM4P9C1Q_de1CltjkXCckmStzpjuW10VLUewA8QOBRMnmpYYcvxjb4xm_wqswt003hNjPXCg84aNieiGVc4CY7ydco9sCHyAiCn1HSY1Ku6Gwwyi93dxUf4zC5UPMtd4smSWPc7S-zTU7HRZAlt8f2Zw7lzdeNhF_CyucoZSjCxSei60-Fg7-t_q3qB3-f5f2ohOHcmsQ1vujPoWL4m-8BbU9Pvzfvi76a7WeBB909KqkX51OXG6O44Jb2NXWIb1mcJ1xD2Gtv0yZkK8R79k--5nnTJg0CT6Y7A_gzGFCGeBTXaTorsRcoSk1JudLPoyLx7ZwpTJ50p2DXgAz8lFMR-ZQ4DTWowatFkTiVr_d-XWQW5pJRanLXuhqaINaNltOtQwhNW8AY55t_55kUP-Zgn5kYj24jgbwQ8_7S-4gfnHkerhUQhx5zgeRvUJYZdhMw82GdsfkxE3_KtOW_j1WUilirSZK-EP81BQHJyunuPjR4UXvOcFPIC7STyqrzw2rVJji-L0xWtJRJDEW2LwAONwhMCaL0wh9raDUfLbMDdiF0gRTBgsgXO0AVX0-2Hamyr0whGQ15eXOBZZwdXo_2qBbr2cAU88qAiRAzPGNxson9shpNW9dYYSZuMjhPTamfzzB0ldzjeaz2mR62tMlMLX0sMTYatMn16NduRVmcK5B-EEnaztprbQrvMotFJzaSOrKiOxpEl0vecJSku5B4JV_fX5hrgO_1krSBdD81lvtG8kwt_AJZf8MhS1yLLS492vlIvoPyGsgp91fCKglB1OQY2dLGE9XnTlubPQuJ_adCwnkQCWxQH4o1bxGL0dTZQzibScUScAVEKCVfpxL3D3NH_ySNt6dfZx4fQ4UyjVg2AESWOOvDw7Y8GeS68eTkigm7n_OdMGZOaC8gUX3YSItVbkJe2oINKQZiMWGo3BkZeBXjqLxI-QoyGgbQJp1O7S2imtJIxAGENOUWLxKK-J8wSxf24i4166_2b6elItWhNG04MWQ==&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=535
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1841674&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=maDfWzuGak8-y8yR1MM4P9C1Q_de1CltjkXCckmStzpjuW10VLUewA8QOBRMnmpYYcvxjb4xm_wqswt003hNjPXCg84aNieiGVc4CY7ydco9sCHyAiCn1HSY1Ku6Gwwyi93dxUf4zC5UPMtd4smSWPc7S-zTU7HRZAlt8f2Zw7lzdeNhF_CyucoZSjCxSei60-Fg7-t_q3qB3-f5f2ohOHcmsQ1vujPoWL4m-8BbU9Pvzfvi76a7WeBB909KqkX51OXG6O44Jb2NXWIb1mcJ1xD2Gtv0yZkK8R79k--5nnTJg0CT6Y7A_gzGFCGeBTXaTorsRcoSk1JudLPoyLx7ZwpTJ50p2DXgAz8lFMR-ZQ4DTWowatFkTiVr_d-XWQW5pJRanLXuhqaINaNltOtQwhNW8AY55t_55kUP-Zgn5kYj24jgbwQ8_7S-4gfnHkerhUQhx5zgeRvUJYZdhMw82GdsfkxE3_KtOW_j1WUilirSZK-EP81BQHJyunuPjR4UXvOcFPIC7STyqrzw2rVJji-L0xWtJRJDEW2LwAONwhMCaL0wh9raDUfLbMDdiF0gRTBgsgXO0AVX0-2Hamyr0whGQ15eXOBZZwdXo_2qBbr2cAU88qAiRAzPGNxson9shpNW9dYYSZuMjhPTamfzzB0ldzjeaz2mR62tMlMLX0sMTYatMn16NduRVmcK5B-EEnaztprbQrvMotFJzaSOrKiOxpEl0vecJSku5B4JV_fX5hrgO_1krSBdD81lvtG8kwt_AJZf8MhS1yLLS492vlIvoPyGsgp91fCKglB1OQY2dLGE9XnTlubPQuJ_adCwnkQCWxQH4o1bxGL0dTZQzibScUScAVEKCVfpxL3D3NH_ySNt6dfZx4fQ4UyjVg2AESWOOvDw7Y8GeS68eTkigm7n_OdMGZOaC8gUX3YSItVbkJe2oINKQZiMWGo3BkZeBXjqLxI-QoyGgbQJp1O7S2imtJIxAGENOUWLxKK-J8wSxf24i4166_2b6elItWhNG04MWQ==&im=1&frq=0&abvar=364&febuild=2197e0591923e9cf2e0b0599682a2051eb19c6d7&os=0&pload=535 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222; OACICAP=ACf90gAAAAAAAAAC; OACIBLOCK=ACf90gAAAABlEmVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:42 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash 412b95fd43f6d5ba279c30e9fa826196
a6943ea5dbf097920c466c78ae52a04740e349e3
bacbf67871c926f808fea7d53e909fb4b98df5271e55b40e5dcf0a8180221c7b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 18:45:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 24 Sep 2023 04:15:39 GMT
Expires: Sun, 01 Oct 2023 04:15:38 GMT
Etag: "a6943ea5dbf097920c466c78ae52a04740e349e3"
Cache-Control: max-age=380047,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80cdaa5ad93956af-OSL
friendshipmale.com/sfp.js
200 OK 27 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 2d0450888479d4ddda305bd96206b240
5b4595aab1cd3f854718e05db9be0c65a12ab2f6
44de073e74ff24c6b1c0fe1f3ac5b33d793560e85ef24fb6ce89e76c2cf90af6
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: db37973c4e12e1d76af79f3fad344c1b
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 26 Sep 2023 18:45:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gEmdbEQiTZHDzgi%2F5cmJlUmB8LM5iZhri61bg31dVDcVv3tX%2Ft6lPT05RVlApSer6to4tVN%2B8RkJaAlWm2r6dICBeYigp2aGOhF2tII6FAJNgSsQrK58kcgoHTpYZv76eQVyAJc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa58da2f71bd-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
y577uags.video-delivery.net/favicon.ico?i
200 OK 15 kB URL GET HTTP/1.1 y577uags.video-delivery.net/favicon.ico?i
IP
Requested by moz-nullprincipal:{8384bcff-ef9e-4948-8369-e90f91c708ed}?https://dood.to
Certificate IssuerSectigo Limited
Subject*.video-delivery.net
FingerprintB2:D2:20:85:E7:38:3D:67:F7:C4:52:00:66:6C:CD:FE:DD:6D:7E:74
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 30d3656f43c817e38c3e7d70b2bfbdad
1aa43b43755e7cba5e145d0978517f7bedad7da6
a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: y577uags.video-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 18:45:42 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
dood.to/sw.js
200 OK 101 kB IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 101 kB (100789 bytes)
Hash a3b19e0f1a400f3ba23056585d6b302b
479d1a856952c570a0f09065a95ea6b7bacb3548
1a38fa21b9f532624acc45112374c352cb1170099c76eea2b17a8a081dae3ac8
GET /sw.js HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/d/91go1hcauqzg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=102634
access-control-allow-origin: *
cache-control: public, max-age=2592000
expires: Fri, 30 Aug 2024 16:28:48 GMT
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 2254611
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bii6hIAAvFE4RxBhjSBPp3%2FPVxONir8ZLJnHmymXwg2XhK5NKh99hYEtPpMm4TBRVEXHUzdJ34eK3CEmwu%2Bz%2BCXmrMEGrpWEUTFWfuAuExqFhAJoX20X9o0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa49295bb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.doodcdn.com/theme_2/img/loader.svg
301 Moved Permanently 694 B URL GET HTTP/2 i.doodcdn.com/theme_2/img/loader.svg
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerGoogle Trust Services LLC
Subjectdoodcdn.com
FingerprintA5:72:B1:AC:76:C5:70:98:7F:AE:49:07:5B:72:E9:3B:FC:4E:0F:B8
ValidityWed, 16 Aug 2023 09:35:51 GMT - Tue, 14 Nov 2023 09:35:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 26 Sep 2023 18:45:41 GMT
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Tue, 26 Sep 2023 19:45:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TOMaYcGmkQiFCBUw8wEG5x8s1gLzerIEPXK7%2FsVSTt3cycLo9eEEnd0DPCjM78DsoX%2BLDirE6Q0ZM8fw3eCy4LMHBr5U0BRQUMXmfpBvp7jRwdMgC0KEfsCbwiTNz0M%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa55fb3e5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/get/1841679?zoneid=1841679&jp=_cl641kjnrmxn0b2p68i90t&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&freq=0
200 OK 10 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/get/1841679?zoneid=1841679&jp=_cl641kjnrmxn0b2p68i90t&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&freq=0
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/1841679?zoneid=1841679&jp=_cl641kjnrmxn0b2p68i90t&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&freq=0 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Tue, 29 Oct 2024 18:45:40 GMT; HttpOnly; Secure; SameSite=None
UID=2309261345e0ff5ae4916948698bd1a42c00; Path=/; Expires=Tue, 29 Oct 2024 18:45:40 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL POST HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerSectigo Limited
Subjectfleraprt.com
FingerprintA4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9
ValidityMon, 09 Jan 2023 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 6949f52318584a4b51c719a9b84a7287
9fbd870c6afd4bdd6fbbd87f52df2c81dd23e905
72603096ec3515dbc615ab8837fd1b15e91ee827bc7af41d71c9882b08699375
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1349
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 26 Sep 2023 18:47:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://dood.to
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=3e2Jcu0XiMNYwteNfGmy_DUrZzOrSifeJ8Ob3e0h0Xza3xUW3g9KEAuZodvTEyJymsO_xyKgPZN_0v_T5Ip3bR4UKZLwZD9W6lWTnleQej_BHSR7cZ6So_g8iKWlQFfEB_ESd5k5wERW6aj5w1rt-UleA11UXIMROCYyLj5u8k6afGlePLqZ-ZnSXYf-lb93caD58BZWkf0o1brCyGzFZVqhQQ2qvQRj59657SZZREvhuQNpBGuAEp0Y9mEwZBoQ47SOg-ym6Qf7oOOQ9m6zpwyTISIcgfIALnBGWeLO_HkGD7RFxUfSKTC-h_1KGJaGNMylgB6gFV95vGJjjVYPSXAWz3-ALaXPMfK7LheaP0B3Y7OZG9KtlcnBlG7HhuROhm4mEJQTm9MIueO_nCz_SkT3yiisvBn0SDQcP8_EMtgbjJOCSVz0TY4i5zmY8AD9cu_EjkCzqOfDq8ogoqQU10Qwo4kVovYof91pjiDuPmHL5eo1KZqCz4xU-hEsl79-1w6am6srK1Lq-0ioJpa-vC4lvkNUo6LNPPBVpWMwSQ2tIYzsepefLZO1u-5hN-ATQno6-XAP31Tvta_hm0RGSjGa7an-WDBBmSRlVLsT5tuSrVbJuyr3PhWV0pdl-MI9TQRClqcmJRChSdi4HlNYfy01fl7KUIodY9y2XyU5RtAYNuEX_Xz9cP5Vtaz3ZdBbIgNIqm4qgYOgINR0jdzf9XP9pxx3b3Lt3jYXZaAfRTNvhgrfDhLJxOfRkioih3ymmppFRrHgw17r4Hmc_FrkL2raVx8Wzj5xLeInMpTzMQfG0ll_ePeW8sCmXwxifllOlYjrZ2dQawlk7E52opoSKfl8OtmRymNeV5SgLxh-EQy4lcc-zTxY7RE6XO2CDc9rCsihceHFYNTTREXOVluunDRK5X8iY5MS-wu5de7qOdrXZjJEl6eAVjJxSa-kbYu9c_F6l4AxuXRv1rur0LaSfOJVOBfOUGIC-0ZodzJFa7U6mQg8q9m3j6OkIPpYUR04HIT4ag==&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=410
200 OK 43 B URL GET HTTP/2 alas4kanmfa6a4mubte.com/chicken.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=3e2Jcu0XiMNYwteNfGmy_DUrZzOrSifeJ8Ob3e0h0Xza3xUW3g9KEAuZodvTEyJymsO_xyKgPZN_0v_T5Ip3bR4UKZLwZD9W6lWTnleQej_BHSR7cZ6So_g8iKWlQFfEB_ESd5k5wERW6aj5w1rt-UleA11UXIMROCYyLj5u8k6afGlePLqZ-ZnSXYf-lb93caD58BZWkf0o1brCyGzFZVqhQQ2qvQRj59657SZZREvhuQNpBGuAEp0Y9mEwZBoQ47SOg-ym6Qf7oOOQ9m6zpwyTISIcgfIALnBGWeLO_HkGD7RFxUfSKTC-h_1KGJaGNMylgB6gFV95vGJjjVYPSXAWz3-ALaXPMfK7LheaP0B3Y7OZG9KtlcnBlG7HhuROhm4mEJQTm9MIueO_nCz_SkT3yiisvBn0SDQcP8_EMtgbjJOCSVz0TY4i5zmY8AD9cu_EjkCzqOfDq8ogoqQU10Qwo4kVovYof91pjiDuPmHL5eo1KZqCz4xU-hEsl79-1w6am6srK1Lq-0ioJpa-vC4lvkNUo6LNPPBVpWMwSQ2tIYzsepefLZO1u-5hN-ATQno6-XAP31Tvta_hm0RGSjGa7an-WDBBmSRlVLsT5tuSrVbJuyr3PhWV0pdl-MI9TQRClqcmJRChSdi4HlNYfy01fl7KUIodY9y2XyU5RtAYNuEX_Xz9cP5Vtaz3ZdBbIgNIqm4qgYOgINR0jdzf9XP9pxx3b3Lt3jYXZaAfRTNvhgrfDhLJxOfRkioih3ymmppFRrHgw17r4Hmc_FrkL2raVx8Wzj5xLeInMpTzMQfG0ll_ePeW8sCmXwxifllOlYjrZ2dQawlk7E52opoSKfl8OtmRymNeV5SgLxh-EQy4lcc-zTxY7RE6XO2CDc9rCsihceHFYNTTREXOVluunDRK5X8iY5MS-wu5de7qOdrXZjJEl6eAVjJxSa-kbYu9c_F6l4AxuXRv1rur0LaSfOJVOBfOUGIC-0ZodzJFa7U6mQg8q9m3j6OkIPpYUR04HIT4ag==&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=410
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1841679&pb=472ab409f927bf4164dde2aba323cb591695761140&psp=3e2Jcu0XiMNYwteNfGmy_DUrZzOrSifeJ8Ob3e0h0Xza3xUW3g9KEAuZodvTEyJymsO_xyKgPZN_0v_T5Ip3bR4UKZLwZD9W6lWTnleQej_BHSR7cZ6So_g8iKWlQFfEB_ESd5k5wERW6aj5w1rt-UleA11UXIMROCYyLj5u8k6afGlePLqZ-ZnSXYf-lb93caD58BZWkf0o1brCyGzFZVqhQQ2qvQRj59657SZZREvhuQNpBGuAEp0Y9mEwZBoQ47SOg-ym6Qf7oOOQ9m6zpwyTISIcgfIALnBGWeLO_HkGD7RFxUfSKTC-h_1KGJaGNMylgB6gFV95vGJjjVYPSXAWz3-ALaXPMfK7LheaP0B3Y7OZG9KtlcnBlG7HhuROhm4mEJQTm9MIueO_nCz_SkT3yiisvBn0SDQcP8_EMtgbjJOCSVz0TY4i5zmY8AD9cu_EjkCzqOfDq8ogoqQU10Qwo4kVovYof91pjiDuPmHL5eo1KZqCz4xU-hEsl79-1w6am6srK1Lq-0ioJpa-vC4lvkNUo6LNPPBVpWMwSQ2tIYzsepefLZO1u-5hN-ATQno6-XAP31Tvta_hm0RGSjGa7an-WDBBmSRlVLsT5tuSrVbJuyr3PhWV0pdl-MI9TQRClqcmJRChSdi4HlNYfy01fl7KUIodY9y2XyU5RtAYNuEX_Xz9cP5Vtaz3ZdBbIgNIqm4qgYOgINR0jdzf9XP9pxx3b3Lt3jYXZaAfRTNvhgrfDhLJxOfRkioih3ymmppFRrHgw17r4Hmc_FrkL2raVx8Wzj5xLeInMpTzMQfG0ll_ePeW8sCmXwxifllOlYjrZ2dQawlk7E52opoSKfl8OtmRymNeV5SgLxh-EQy4lcc-zTxY7RE6XO2CDc9rCsihceHFYNTTREXOVluunDRK5X8iY5MS-wu5de7qOdrXZjJEl6eAVjJxSa-kbYu9c_F6l4AxuXRv1rur0LaSfOJVOBfOUGIC-0ZodzJFa7U6mQg8q9m3j6OkIPpYUR04HIT4ag==&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.158&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&cid=2925882697334784&sp=1&im=1&pload=410 HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2309261345a2128784d4ce49b781bc9ca222
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
i.doodcdn.co/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
200 OK 184 kB URL GET HTTP/3 i.doodcdn.co/theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 184476, version 330.-16253\012- data
Size 184 kB (184476 bytes)
Hash 2a6dec1227f9970376f578270a642d06
150a6a7ffdec6e2e2ff4c712d7cee8bd9b930284
e228b909313044a18dec1a674cfd4935071c36eb3eb6a0cd38a45afac6ae3996
GET /theme_2/css/fontawesome/webfonts/fa-duotone-900.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: font/woff2
content-length: 184476
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Wed, 25 Oct 2023 20:56:37 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 4100
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JRzLDPGByY9%2BiTWwe7JvRKUXzpi3e%2BqGX%2FIMyF1EkKm8I5Xbwy7NfGuk%2FiOv%2BR7OgqVoo0jHiHLL7ahR1nMt%2F5kOo7Ed4DKtP0tJ0Pl47piuQCjUAVEw9H9JsoQQBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4cfa6356bb-OSL
alt-svc: h3=":443"; ma=86400
tzegilo.com/stattag.js
200 OK 19 kB IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerGoogle Trust Services LLC
Subjecttzegilo.com
Fingerprint42:15:A6:1F:C2:2C:D5:FF:32:2C:B9:6C:84:A6:86:63:B0:45:C5:20
ValidityMon, 07 Aug 2023 17:09:01 GMT - Sun, 05 Nov 2023 17:09:00 GMT
File type ASCII text, with very long lines (18369)
Hash 89e89aea544ea2785d49cc4cd9cf26f6
7d53437a89eb9861038ee27a8ff0e3bb70fa2a0b
86da38693fcea056d36588a4146e85392f784c457511de416fec32034aafa4f9
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:52 GMT
etag: W/"64f987a8-4a4b"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wKrJbVhcDFvtuhmZ3caJTYiPF4%2B%2FmWvHLBwszAIuR81CZ4PVKvK%2Fs1nntD55aW01DkMna%2F2A5HlKyqEIXOhDHoGr45WWJ5HyR6WtymfT0%2BF8ve5ZTCrBT8syI1JaqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa52aadeb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cagothie.net/5/5495238/?oo=1&aab=1
200 OK 2.9 kB URL GET HTTP/2 cagothie.net/5/5495238/?oo=1&aab=1
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectcagothie.net
FingerprintF1:84:8A:BC:01:51:5E:41:A2:7B:C7:D5:CC:0D:FA:CD:91:BE:98:07
ValiditySun, 17 Sep 2023 05:37:34 GMT - Sat, 16 Dec 2023 05:37:33 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3108), with no line terminators
Hash 3ed2256d9af6f4cd5a004c6639c070d0
3d0e7e2f09f5b3850fea61d00c585d8b79622766
795aeabceeb5fe04809cdf5de7bba8c348b7c305c1f37fa0a654ba975a0f0662
GET /5/5495238/?oo=1&aab=1 HTTP/1.1
Host: cagothie.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: application/json
x-trace-id: d6590c0cbccfe013535b22a5c252741a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://dood.to
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=e9b1dfd8456d41d9b6b454b06186b6b9; expires=Wed, 25 Sep 2024 18:45:41 GMT; path=/; secure; SameSite=None
oaidts=1695753941; expires=Wed, 25 Sep 2024 18:45:41 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
betotodilea.com/400/4857535
200 OK 90 kB URL GET HTTP/2 betotodilea.com/400/4857535
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectbetotodilea.com
FingerprintE6:43:29:5D:43:E3:1B:7A:9C:10:C4:40:DF:C9:6B:91:73:22:AE:E8
ValidityMon, 11 Sep 2023 03:28:47 GMT - Sun, 10 Dec 2023 03:28:46 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 09482bb47fbf89d169714bb5eafb8e75
3a22d9559b8d417c52583277ff8395d6b2866648
7b7a24ae8ffb751f9dd34c5e2037d33b775f0e535fa97faac27c5876f11b4453
GET /400/4857535 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: application/javascript
x-trace-id: f6dd30eba58a579754a251b7dbee4db8
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=4e534a4028ff4be9bc66b6f8ee10eae5; expires=Wed, 25 Sep 2024 18:45:40 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
dood.to/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.3 kB URL GET HTTP/3 dood.to/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: dref_url=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Tue, 26 Sep 2023 18:45:39 GMT
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
vary: accept-encoding
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RP5Lx7wfoL1lJdMRESuhaJxNazli7%2BwuMlENBtWbMuI49J15p3u2MyKcR%2BquseFRgofA3hXPAhzG76uT9mb%2FMwlftqZUQexvKeMPdVQ7xe8oBcyUW7voF4s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4ceefbb503-OSL
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/theme_2/css/style.css?v=0.1
200 OK 209 kB URL GET HTTP/2 i.doodcdn.co/theme_2/css/style.css?v=0.1
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65465)
Size 209 kB (208903 bytes)
Hash 6ff549c82309fe93cb6f38f8fcf60e49
c5621629b2a258c7fb572ab9d03517c7d60896fd
668326f298c9701a6422f5b7f229966fd87ae68940381a9c0c898197667a8c4c
GET /theme_2/css/style.css?v=0.1 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=249272
expires: Tue, 24 Sep 2024 20:23:48 GMT
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 79776
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=loetEI7ZTK%2Fft9giEd3XzBix2G6b5eJDhzGCpjwacLbIznIzug5Y4UAzDP4Cb0NHuFx7jPPq0OunBqoGjP9iUzVbE8OvmtO30GUSupc7WcBdKgIBeDM76F9pN8tv2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa4a0feab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js
200 OK 100 kB URL GET HTTP/2 alas4kanmfa6a4mubte.com/lv/esnk/1841679/code.js
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerBuypass AS-983163327
Subject
FingerprintED:B9:EC:CE:41:67:3E:5C:94:1B:96:F4:D1:B9:7B:F3:39:50:35:EE
ValidityWed, 31 May 2023 12:01:56 GMT - Sun, 26 Nov 2023 22:59:00 GMT
File type ASCII text, with very long lines (65107)
Hash 9c65bc28259bc9a2c78c444ea20c9f5f
484986db5c2b65fb0d626935903c442efc47606d
cd9dce1c469f965f6fa74e7244c1f197e5b700c144fa56d61f5aff6148e75aa0
GET /lv/esnk/1841679/code.js HTTP/1.1
Host: alas4kanmfa6a4mubte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:39 GMT
content-type: application/javascript
last-modified: Tue, 26 Sep 2023 14:32:48 GMT
vary: Accept-Encoding
etag: W/"6512eb90-1853e"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
dood.to/pass_md5/98349267-91-90-1695753940-be874460c68565d0c43cf0028984a21f/zdvijiuq38tpgrckpn8erjpc
200 OK 108 B URL GET HTTP/3 dood.to/pass_md5/98349267-91-90-1695753940-be874460c68565d0c43cf0028984a21f/zdvijiuq38tpgrckpn8erjpc
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 54abcc9a4051042a4e0afc4a139c0b4a
424eba125f6fc987406c1e131fb9a40aae83a292
ed3f39f2f7c97c85ae21391e5528ff5a535b32b43ebc5bd68b84c002d296cb56
GET /pass_md5/98349267-91-90-1695753940-be874460c68565d0c43cf0028984a21f/zdvijiuq38tpgrckpn8erjpc HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://dood.to/e/91go1hcauqzg
Cookie: dref_url=none; cf_clearance=Ly6s2VpdktIGVdtoLFMFg9QnATx5itYg.cxHrf.Hb98-1695753940-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695753940
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bzziPZG76ZGy%2BHPFxHENPhueKdvEfRL0Frr7tmeVN9F7WNZUxAHivHTfeaqY9e4ttCbf1aVCSOD7b%2BkATV3UfSpgoZj%2FZEvCW3MBwt%2FbZnhSx%2Bvb4VSyfjk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa551977b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
200 OK 6.9 kB URL User Request GET HTTP/2 IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7177), with no line terminators
Hash a0ce73d67f6ecbf4c75b0139c57830e4
c511cf49624d64e0019a600a95f1ded966a9b30c
acd4520529864ae9c44218b43c973d822f2f58534b36495da7ce4b1588021732
GET /d/91go1hcauqzg HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:38 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 25 Sep 2023 18:45:38 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t9DBNZg2epD9XTRXY5Rh6k6FEbVxQfL95hF2CrnadG8tVfsg%2FmyPAiX7BuyM5EYdreECQJ%2FQKefZkoutm7d5UsIUshUjxh75a9Xlnp3BijMaUQA4CcwhBqY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa44b9ae067b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
200 OK 18 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
Hash 46da166e2af52022abead95ca5438c88
c05b711a3131289f7aa6e10e17d24517d6e6e7f4
f7c8ae9c7b18adee8a22a5368e7356c09303f88ad6bf59ca66d7bb206236c938
GET /css?family=Nunito:200,300,300i,400,600,600i,700,700i,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 26 Sep 2023 18:45:39 GMT
date: Tue, 26 Sep 2023 18:45:39 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.itskiddien.club/apu.php?zoneid=6220023
200 OK 84 kB URL GET HTTP/2 cdn.itskiddien.club/apu.php?zoneid=6220023
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectitskiddien.club
Fingerprint8D:B5:DA:15:12:BC:AA:BE:FD:76:AC:FF:10:B2:9D:BD:A7:94:51:0C
ValiditySun, 27 Aug 2023 06:43:43 GMT - Sat, 25 Nov 2023 06:43:42 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3d9c75416baba48e321cdf8e90386ca6
026c22081acfa602dfc11c0c345ece79db0ba3a9
59ef46a2eece8a30b6b3ae914257efd4caee0a7b82e82acba18a2530518383b1
GET /apu.php?zoneid=6220023 HTTP/1.1
Host: cdn.itskiddien.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: application/javascript
x-trace-id: ebd8bbe01bf7de534def005165a6c58a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=bd43a1cab61e4d7095776be3fbee30ce; expires=Wed, 25 Sep 2024 18:45:41 GMT; path=/; secure; SameSite=None
oaidts=1695753941; expires=Wed, 25 Sep 2024 18:45:41 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
0 B URL GET addresseepaper.com/sfp.js
IP
Requested by https://dood.to/e/91go1hcauqzg
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
dood.to/cdn-cgi/challenge-platform/h/g/jsd/r/80cdaa44b9ae067b
200 OK 0 B URL POST HTTP/3 dood.to/cdn-cgi/challenge-platform/h/g/jsd/r/80cdaa44b9ae067b
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint63:22:9A:3B:26:26:A8:51:53:D9:4E:44:E2:B2:75:F1:0D:AD:E5:18
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/80cdaa44b9ae067b HTTP/1.1
Host: dood.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12183
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/d/91go1hcauqzg
Cookie: dref_url=none
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:40 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=Ly6s2VpdktIGVdtoLFMFg9QnATx5itYg.cxHrf.Hb98-1695753940-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695753940; path=/; expires=Wed, 25-Sep-24 18:45:40 GMT; domain=.dood.to; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qeX870SMfVfmZrZGTeSSKKITYf8OIJiMaX%2BJMtr4ZmBtW17YDA8BGuIN%2BGHakZTyMcmHerJ5iJZHr5KwWmaB4%2FpLcpcayehrFpWoOhFLHBlm2DiDBEV9onw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdaa510c4eb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.doodcdn.co/theme_2/img/loader.svg
200 OK 694 B URL GET HTTP/3 i.doodcdn.co/theme_2/img/loader.svg
IP
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sun, 11 Feb 2024 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (750), with no line terminators
Hash e0c38124a46835a055de826afbf33d9b
255567da0faa3de6c4bcef1780e9990ba7c9c0ff
e186e235e7552b286f217c94c747abdd5a8df8279c2334a61202817f937ea960
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Wed, 25 Oct 2023 20:23:45 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 80451
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2FZXQQ3PZealgSgT%2FCXxGBIaQUWfgtVjg7U4bParo3wBcxxEVIZ56bhP5nvW8WBDYL%2BvjAfyUD33xWIEduZmMH9VM%2BqiC%2BREBAvuZxZozB7RV81J6b%2B6KjY4yD7JeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdaa58dc5656c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pringed.space/UjFLUFcpEzgnCCdDJ3JtcFk%2FJCchC2R%2FMz1eL34jPR44J3k4Qml8dSFcLXJtYx1pIzokE3FyY3wBaXx1JlAsDz42E3FybmAHc2JncB1pIyIwbiI0ZXALaTZiNgByY2AwHHljMzAcfzExYRxyNmZiHHpkM2IHcmBgMwcpYnUv
200 OK 57 kB URL GET HTTP/2 pringed.space/UjFLUFcpEzgnCCdDJ3JtcFk%2FJCchC2R%2FMz1eL34jPR44J3k4Qml8dSFcLXJtYx1pIzokE3FyY3wBaXx1JlAsDz42E3FybmAHc2JncB1pIyIwbiI0ZXALaTZiNgByY2AwHHljMzAcfzExYRxyNmZiHHpkM2IHcmBgMwcpYnUv
IP
Requested by https://dood.to/d/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subjectpringed.space
FingerprintA0:61:B7:91:DD:B7:21:4B:96:DC:2B:09:35:79:66:6F:F9:20:75:97
ValidityFri, 18 Aug 2023 04:57:30 GMT - Thu, 16 Nov 2023 04:57:29 GMT
File type ASCII text, with very long lines (56943), with no line terminators
Hash cc04c56657c481d6960bc9d8020d04ef
7b2cc29eeda4b507ecf17db8c4963f7bf1251247
b5269f2c82eb95c30f544e1afb832efc2649897b42b037aa366e12d3c9ebbf1d
GET /UjFLUFcpEzgnCCdDJ3JtcFk%2FJCchC2R%2FMz1eL34jPR44J3k4Qml8dSFcLXJtYx1pIzokE3FyY3wBaXx1JlAsDz42E3FybmAHc2JncB1pIyIwbiI0ZXALaTZiNgByY2AwHHljMzAcfzExYRxyNmZiHHpkM2IHcmBgMwcpYnUv HTTP/1.1
Host: pringed.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 7a45fd8e1c05b9bab746d1f70faf0793=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"de6f-eyzCnu2ktQfs8X24xJY/e/ElEkc"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.blockadsnot.com/angular-chart.min.js
200 OK 35 kB URL GET HTTP/2 www.blockadsnot.com/angular-chart.min.js
IP
ASN #60068 Datacamp Limited
Requested by https://dood.to/e/91go1hcauqzg
Certificate IssuerLet's Encrypt
Subject1158060716.rsc.cdn77.org
FingerprintDC:4D:77:2D:8C:4B:74:67:E3:16:36:48:44:AA:E0:7C:02:18:B9:16
ValidityMon, 24 Jul 2023 14:50:52 GMT - Sun, 22 Oct 2023 14:50:51 GMT
File type HTML document, ASCII text, with very long lines (1568)
Hash 3b7c2e54a204dc4b9c49b7f4319ad483
2b94cecffe9742189e6e2c3d16620b82244ab4c7
165d7a005010372bd198e3060e29cbc2986d9c68d24bb3766b1a54e009992c31
GET /angular-chart.min.js HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.to
DNT: 1
Connection: keep-alive
Referer: https://dood.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 18:45:41 GMT
content-type: application/x-javascript
expires: Sat, 30 Sep 2023 19:15:28 GMT
access-control-allow-origin: https://dood.to
link: <https://blockadsnot.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
server: CDN77-Turbo
vary: Accept-Encoding, Origin
x-77-nzt: AblMCQ28Lan/he0DAA
x-77-nzt-ray: c0a4cc28ee2065ead5261365607eb435
x-accel-expires: @1696101328
x-accel-date: 1695496528
x-cache: HIT
x-age: 257413
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 257413
content-encoding: gzip
X-Firefox-Spdy: h2
104.26.15.45
139.45.197.238
35.157.129.203
0.0.0.0
23.36.76.200
162.19.19.62
185.76.9.15
62.122.171.6