| cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js | 104.17.25.14 | 200 OK | 4.6 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js IP 104.17.25.14:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4505) Hashf2ecb2bd8a424c8e8cf507ce8bd933c2 3cbc08ca052ea25c3b0834b9291a3ca1e9122e26 4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099
GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 1571
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93d637d509c056c6-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630ad3e5-623"
last-modified: Sun, 28 Aug 2022 02:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 106494
expires: Thu, 30 Apr 2026 03:05:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rRf%2FzkJ6MotWgJ9GKLy5atNVOO6Eyan5QNK4wa1kDq2RV42B%2BfHEhbpYlcUNkB6VXwfUqH4HR6ELA71Cq1vR%2BMKvASblPykvTCvxDTGWA9SgtNdHn73Uev6g1a3fkzsGw6Fpljun"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.doodcdn.io/splash/pfcdzk234uga9b1i.jpg | 104.26.14.102 | 200 OK | 94 kB |
URL GET img.doodcdn.io/splash/pfcdzk234uga9b1i.jpg IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3 Hash03b7fdb50849d61d92a13e965857355a e22d380d03681c0fb6097daf2c6033f4b0a79aaf 32818d91e484979ab3a3ebbf9597cce5aae82798571093db59cf5a1fe9b02147
GET /splash/pfcdzk234uga9b1i.jpg HTTP/1.1
Host: img.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: image/jpeg
content-length: 94346
cf-bgj: imgq:100,h2pri
cf-polished: origSize=95399
access-control-allow-origin: *
cache-control: max-age=1209600
etag: "66bf2c97-174a7"
expires: Sat, 24 May 2025 03:05:39 GMT
last-modified: Fri, 16 Aug 2024 10:40:23 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OF1MpMTURHlC0G2Y%2FoNw6uccDwM81TljtcEylv4yRvdTGqbaQdlf3B9Gz1xHRiipVmfMHOYY8GyEJrQT%2Bk2aUVrH58PUXAYcGXTHRk05C9kyKsLrraoa1VEWVWDy988c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d478c1b4fd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1200&min_rtt=441&rtt_var=116&sent=118&recv=51&lost=0&retrans=1&sent_bytes=141498&recv_bytes=1453&delivery_rate=38655122&cwnd=257&unsent_bytes=0&cid=03683ee883e22064&ts=346&x=0"
X-Firefox-Spdy: h2
|
|
| d3eub2e21dc6h0.cloudfront.net/?ebued=1004075 | 54.230.245.95 | 200 OK | 232 kB |
URL GET d3eub2e21dc6h0.cloudfront.net/?ebued=1004075 IP 54.230.245.95:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size232 kB (232488 bytes) Hash58ec1727f9a5abdb581161291b487e11 03b890755fe388c4801f117e2505f9d3b95bde2b 62241d38c05cbf73032b0aec7f81fa3d1c610df4533e7fec5d9d8c247a14cfe3
GET /?ebued=1004075 HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 79241
date: Sat, 10 May 2025 03:06:00 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9y2Evg5HbBqQJoTjsW0EWcIYtRYEMR20HFZULn5S0ID012APVRO8zA==
X-Firefox-Spdy: h2
|
|
| img.doodcdn.io/splash/pfcdzk234uga9b1i.jpg | 104.26.15.102 | 200 OK | 95 kB |
URL GET img.doodcdn.io/splash/pfcdzk234uga9b1i.jpg IP 104.26.15.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1264x715, components 3 Hashdbf2234cbf3c53ac0970af3954f2d561 48d879bc2de75d1d1060a114f625ce10511d4e33 650ca1d9a4492d31a45d65ca20e654ed866c827e836e45ffda56e5d3b7027c21
GET /splash/pfcdzk234uga9b1i.jpg HTTP/1.1
Host: img.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 03:06:01 GMT
content-type: image/jpeg
content-length: 95399
last-modified: Fri, 16 Aug 2024 10:40:23 GMT
etag: "66bf2c97-174a7"
expires: Sat, 24 May 2025 03:06:00 GMT
cache-control: max-age=1209600
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bQ0cEq9kjIFwcBAoa7fkVgAnQAJSWdCHkT3fH9FJ98Dt7AbmOX%2Bdjwku7IKImMd07S7dd4GYoEhon6H8FJvVe8XbkiiVyJbMO8q7A5j5IPyCv96XsOqLYD1t51h7d4Zn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637da4ad2b4fd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5844&min_rtt=4764&rtt_var=2558&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4188&recv_bytes=1189&delivery_rate=134745&cwnd=12000&unsent_bytes=0&cid=e1414ff6bdec050f&ts=511&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| jl1009cq.cloudatacdn.com/favicon.ico?i | 158.69.53.231 | 200 OK | 15 kB |
URL GET jl1009cq.cloudatacdn.com/favicon.ico?i IP 158.69.53.231:443
Requested bymoz-nullprincipal:{887401aa-dc7a-4b3a-9ad5-4118deba4050}?https://do7go.com CertificateIssuerSectigo Limited Subject*.cloudatacdn.com FingerprintD9:CB:D6:1F:B4:DA:36:1F:52:6C:5B:2E:68:48:4B:77:51:76:16:5B ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash30d3656f43c817e38c3e7d70b2bfbdad 1aa43b43755e7cba5e145d0978517f7bedad7da6 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico?i HTTP/1.1
Host: jl1009cq.cloudatacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 May 2025 03:06:02 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Sat, 29 Feb 2020 09:26:04 GMT
ETag: "3c2e-59fb38b06e300"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
|
|
| vidply.com/e/jrgb0mq57v9l | 172.67.69.216 | 301 Moved Permanently | 31 kB |
URL User Request GET vidply.com/e/jrgb0mq57v9l IP 172.67.69.216:443
CertificateIssuerGoogle Trust Services Subjectvidply.com FingerprintA3:C6:73:95:3B:43:91:98:80:58:FF:8C:55:F7:2C:09:23:C0:CD:04 ValiditySat, 03 May 2025 16:20:03 GMT - Fri, 01 Aug 2025 17:20:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/jrgb0mq57v9l HTTP/1.1
Host: vidply.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 10 May 2025 03:05:59 GMT
content-type: text/html
content-length: 167
location: https://do7go.com/e/jrgb0mq57v9l
cache-control: max-age=3600
expires: Sat, 10 May 2025 04:05:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MsZ31e%2FGuUmqCeIb4G7OzywlNlX04ud%2B4NfcCtc6DMcNHDsOH9kii%2FDwjOWdHirsWYzIrTEVN8GI%2B3GcQ%2Bn3FUZ0thU49GekuZKlK2QKr8tntagyCOxnFb1bJ9s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93d637cfbedc56b7-OSL
X-Firefox-Spdy: h2
|
|
| i.doodcdn.io/img/no_video_3.svg | 104.26.14.102 | 200 OK | 2.8 kB |
URL GET i.doodcdn.io/img/no_video_3.svg IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeSVG Scalable Vector Graphics image Hash077bfdaa49ae4877a42611b739ec4752 a2f9e1222b7af9abc05122411ab8902efcc08ead 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Sun, 08 Jun 2025 04:07:03 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 75955
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x59xRWevm5jQhh5MgUSV1nzJlpOEm1NQeWpT3zjBHJkAdd%2F%2F1s0fGUHccqXUPRCyYiLtRIS7cZZPzlu7J9e1KJYAQ%2B3REgZD8qVklcMAkjOunCWcfRzTXvIJ1ac%2FcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d468b8b4fd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1012&min_rtt=441&rtt_var=1096&sent=10&recv=13&lost=0&retrans=0&sent_bytes=4001&recv_bytes=1166&delivery_rate=8500978&cwnd=257&unsent_bytes=0&cid=03683ee883e22064&ts=168&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.16.1 | 200 OK | 26 B |
IP 104.21.16.1:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hash992918eed9966dc11234fde88f72c3f3 1fa4cad7bd6aab6cbcc4d58fcbe7c5fd8babc086 a3f936ddddd11b318af87a5ce17652d81376f87a676b5ac857c2959ea4e365a7
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://do7go.com/
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:06:00 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://do7go.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2Bn7b9m1DD7QcehAU7qbB8ZBXdkdqm9Rg1Uf5wJt4uk6MK11JJW1Fm%2B0WLQQ6zHlcFJohCXOK8PQqkU7%2FTPJx5%2F0NPREyZDdVGWymXvmnGGpx1R30v8tzxsDyRG%2FQh5lRLPOmSwg%3D"}]}
content-encoding: br
set-cookie: csu=883615557273236@1@1746846360; SameSite=None; Secure; Max-Age=31104000
cf-ray: 93d637db3c89569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP 64.233.164.84:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:zVhMofeWIuUydjUtyvmZILxmD9O2ug:KTBghAxLAP8Lfyie; Expires=Mon, 10-May-2027 03:06:01 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 May 2025 03:06:01 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MgMsSaP2wKzewHOvMCI0nYcNFS91c7giFNCQoGEG8TDEzqOzMlRpmruO7jRmJH6G-MXpvqPIg
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-PYkIPCOF6HlWV88oGxXsVA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| hisisathlle.com/eVZTaG9WaTAbUioANwU6FwB2Wi0gOhUAOyEuOD04HRA2LykfDxYlSQ0/N1VeSWZnWFhMcCMBC0RndRsbGCImG1JIcDoGCRZrdR5SSHhgXEFKYH1cSQxrYk4bCTc0VV5fJiccA0RnZFxZQWJlW1lJYGFb | 104.21.5.222 | 204 No Content | 0 B |
URL GET hisisathlle.com/eVZTaG9WaTAbUioANwU6FwB2Wi0gOhUAOyEuOD04HRA2LykfDxYlSQ0/N1VeSWZnWFhMcCMBC0RndRsbGCImG1JIcDoGCRZrdR5SSHhgXEFKYH1cSQxrYk4bCTc0VV5fJiccA0RnZFxZQWJlW1lJYGFb IP 104.21.5.222:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjecthisisathlle.com Fingerprint40:C0:64:59:1B:32:4B:E4:26:2F:19:50:5C:00:45:B6:E3:F2:46:14 ValidityFri, 04 Apr 2025 10:40:36 GMT - Thu, 03 Jul 2025 11:39:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eVZTaG9WaTAbUioANwU6FwB2Wi0gOhUAOyEuOD04HRA2LykfDxYlSQ0/N1VeSWZnWFhMcCMBC0RndRsbGCImG1JIcDoGCRZrdR5SSHhgXEFKYH1cSQxrYk4bCTc0VV5fJiccA0RnZFxZQWJlW1lJYGFb HTTP/1.1
Host: hisisathlle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 10 May 2025 03:06:00 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=M1P3gEj8%2BNxjQmLtUAtqxUXWTswxDMrWrNqTwLDI5bnMMAX4g5p%2F9lDpJP3rjbb2wWQb2jM0%2F8qfHmdQ1lJ2eidjCR7SYSCIOfUSYpG22PF4v2J9cSwi0RS6vzQoX3ugCpk%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93d637db6d857131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| segarkojiri.top/cuid/?f=https%3A%2F%2Fdo7go.com | 23.109.170.88 | 200 OK | 0 B |
URL OPTIONS segarkojiri.top/cuid/?f=https%3A%2F%2Fdo7go.com IP 23.109.170.88:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerZeroSSL Subjectsegarkojiri.top FingerprintB1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7 ValidityTue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
OPTIONS /cuid/?f=https%3A%2F%2Fdo7go.com HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://do7go.com/
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 May 2025 03:06:01 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://do7go.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| hoptreeperrie.shop/gd/70849?md=eyJhIjo2NzQ2LCJzIjoiMTI4MHgxMDI0IiwiYiI6IjEyODB4MTAyNCIsInIiOiIiLCJxIjoiaHR0cHM6Ly9kbzdnby5jb20vZS9qcmdiMG1xNTd2OWwiLCJoIjo3NDkyLCJsIjoiZW4tVVMiLCJ0IjowLCJ6Ijo5MTEyLCJrIjowLCJ1IjoiIiwiZiI6ZmFsc2UsIndoIjoibm90IGluIGlmcmFtZSIsImloIjoiMTI4MHgxMDI0IiwiZSI6InUwenc5cnBueWwyOGozeCIsIm8iOnRydWUsIm0iOjE3NDY4NDYzNjA3ODUsInciOiIlN0IlMjJ0aXRsZSUyMiUzQSUyMk9ubHklMjBGYW5zJTIwLSUyME1hcmtpbiUyMFdvbGYlMjBNYXJjZWxvJTIwQ2FpYXp6byUyMC0lMjBEb29kU3RyZSUyMiUyQyUyMmtleXdvcmRzJTIyJTNBJTVCJTVEJTJDJTIydG9wd29yZHMlMjIlM0ElNUIlMjJ3aW5kb3clM0E1JTIyJTJDJTIybGl2ZSUzQTQlMjIlMkMlMjJ5b3UlM0E0JTIyJTVEJTdEIiwidHMiOjAsInByIjoxLCJoYyI6NDgsImJsIjotMSwiYmMiOjMsInZ2IjoiTWVzYSIsInZyIjoibGx2bXBpcGUiLCJhYyI6MCwiY3QiOiJ1bmtub3duIiwiY2V0IjoidW5rbm93biIsImNkbG0iOi0xLCJjZGwiOi0xLCJjcnR0IjotMSwidG1zIjoxMjAsImNlIjp0cnVlLCJjZCI6MjQsIm9yIjoibGFuZHNjYXBlLXByaW1hcnkiLCJmcyI6bnVsbCwiZnNvIjpudWxsfQ&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A | 188.42.108.76 | 200 OK | 669 B |
URL POST hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A IP 188.42.108.76:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerLet's Encrypt Subjecthoptreeperrie.shop FingerprintC6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85 ValidityTue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
Hash4e053961c52dfd0b6e3934b8c340175f e9b7e0f3da7dab8d192648f3e2fcaa992a1a5b92 eb1002a650022a2f1fd54067836c10607e5df4ceba2a4d25565ba0af7ef9e491
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://do7go.com/
Content-Type: application/json
Content-Length: 82
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 May 2025 03:06:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://do7go.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sun, 11-May-2025 03:06:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 11-May-2025 03:06:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| | 104.26.9.147 | 200 OK | 31 kB |
IP 104.26.9.147:443
CertificateIssuerGoogle Trust Services Subjectdo7go.com Fingerprint62:14:72:A9:A1:C9:E5:FE:80:F8:A6:E1:89:21:66:B4:38:8B:DF:5B ValidityThu, 20 Mar 2025 08:57:50 GMT - Wed, 18 Jun 2025 09:56:23 GMT
File typeHTML document, ASCII text, with very long lines (31172), with no line terminators Hashcad1a7546964078f23cfd7eee75c0ef5 cc7e96b52267984b35059e6066433f1a30b74dff f9bc907f18ce76331c5a019139e33ef6895cc46e9186cdeb2d6f2438b2d7c9cf
GET /e/jrgb0mq57v9l HTTP/1.1
Host: do7go.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Fri, 09 May 2025 03:05:59 GMT
set-cookie: lang=1; domain=.do7go.com; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0Zjy1n%2BTL3CylSQEra%2Fo%2F1sFJSQB8PUYOKUWiqa4uGQNsd3woJgXhcpttLAS7tV7xBE%2FxwtdEw1pEiySAhX8IuP2xHPutug%2FPe7HHnYSXyf59SnXp3sZGhijg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d008da56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5677&min_rtt=430&rtt_var=10520&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3268&recv_bytes=1254&delivery_rate=7898181&cwnd=254&unsent_bytes=0&cid=6e8a53908894f35c&ts=106&x=0"
X-Firefox-Spdy: h2
|
|
| i.doodcdn.io/fonts/avertastd-regular-webfont.woff2 | 104.26.14.102 | 200 OK | 24 kB |
URL GET i.doodcdn.io/fonts/avertastd-regular-webfont.woff2 IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23812, version 1.524 Hasheb586e5a1b86dbf1c866e3ed80f9d18e 280ee78d19c017ab9335f769595e5157d3c4a343 714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 03:06:00 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Sun, 08 Jun 2025 03:47:29 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 6573
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oO3fYYbgBBUMRGKh9opX%2FQkMi6Jvm5B6d7%2BuWKZ1tAMWyM9nXapR839qbuRMsVimAqothJdVFCCO%2Fh1ZYxlL0%2BVFj1GZnoDUCCpr4m4BBKeIzsKB06tn9PiRSQtm%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d9f9c25695-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4765&min_rtt=3926&rtt_var=3149&sent=13&recv=8&lost=0&retrans=0&sent_bytes=5288&recv_bytes=1522&delivery_rate=60268&cwnd=12000&unsent_bytes=0&cid=845bb684fcc403ef&ts=799&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fungifysinal.shop/r681e970156dbd/70849 | 23.109.170.19 | 200 OK | 62 kB |
URL GET fungifysinal.shop/r681e970156dbd/70849 IP 23.109.170.19:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerLet's Encrypt Subjectfungifysinal.shop Fingerprint11:47:3F:41:BC:AE:AC:2C:C2:04:99:DC:F2:0D:DD:BA:32:C5:AB:FE ValidityFri, 09 May 2025 13:29:45 GMT - Thu, 07 Aug 2025 13:29:44 GMT
File typeJavaScript source, ASCII text, with very long lines (61941), with no line terminators Hash1bbe849b926e0cf56133b7e2581a31f3 e1f1621936e35837c733b7a7212e46a5c772db68 d5ca3973cb43cf1198701055e88744f3cfdd9dad8abbce39b856c72bb8d96298
GET /r681e970156dbd/70849 HTTP/1.1
Host: fungifysinal.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 May 2025 03:05:59 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://do7go.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sun, 11-May-2025 03:05:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 11-May-2025 03:05:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| hisisathlle.com/T2VmV3BgWgUkTS1VM2URGlw+MwcJPAARAHYkMBVIFwsvESgHBkAjGStYV2dAe1VRYFY/DAJqQXdDFSMROxAVakFpDAgxH3JDEGpBYVVIZV56QxNqQWkRFjYXclRAJwQ7CVtmR3tTXmNGfFNWYUR8 | 104.21.5.222 | 204 No Content | 0 B |
URL GET hisisathlle.com/T2VmV3BgWgUkTS1VM2URGlw+MwcJPAARAHYkMBVIFwsvESgHBkAjGStYV2dAe1VRYFY/DAJqQXdDFSMROxAVakFpDAgxH3JDEGpBYVVIZV56QxNqQWkRFjYXclRAJwQ7CVtmR3tTXmNGfFNWYUR8 IP 104.21.5.222:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjecthisisathlle.com Fingerprint40:C0:64:59:1B:32:4B:E4:26:2F:19:50:5C:00:45:B6:E3:F2:46:14 ValidityFri, 04 Apr 2025 10:40:36 GMT - Thu, 03 Jul 2025 11:39:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /T2VmV3BgWgUkTS1VM2URGlw+MwcJPAARAHYkMBVIFwsvESgHBkAjGStYV2dAe1VRYFY/DAJqQXdDFSMROxAVakFpDAgxH3JDEGpBYVVIZV56QxNqQWkRFjYXclRAJwQ7CVtmR3tTXmNGfFNWYUR8 HTTP/1.1
Host: hisisathlle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 10 May 2025 03:06:01 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=r7VfyY0My3vdMUb6m6NGR1c6%2Bu3%2FjtBeKlTv8E8hKREEnx0JR2wNtqTuc1rtZYtIaG6tSUg3e6u0WHK5EtrrUDdlHm5QrWDVf4bch2ww6xxWEghHvQxy5OCrsx1EEPS6toI%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93d637db8d917131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MgMsSaP2wKzewHOvMCI0nYcNFS91c7giFNCQoGEG8TDEzqOzMlRpmruO7jRmJH6G-MXpvqPIg | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MgMsSaP2wKzewHOvMCI0nYcNFS91c7giFNCQoGEG8TDEzqOzMlRpmruO7jRmJH6G-MXpvqPIg IP 64.233.164.84:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MgMsSaP2wKzewHOvMCI0nYcNFS91c7giFNCQoGEG8TDEzqOzMlRpmruO7jRmJH6G-MXpvqPIg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://do7go.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:bZ2P0d9fCyvQablVPPZE5LiZPQJ2ng:EUPWRQGXzKY541Vt;Path=/;Expires=Mon, 10-May-2027 03:06:01 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 May 2025 03:06:01 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhExNduKn1O8ZiQ_wGx3k9JbcYiU4mUQYZ817k_Tv0bUoYYXdl9d8AUTQ4ibnxdL0LJDQtWpA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1242039749%3A1746846361866778
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-6cx6faTv2KTyrIrljG26BQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| i.doodcdn.io/ads/ad.js | 104.26.14.102 | 200 OK | 20 B |
IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeASCII text, with no line terminators Hash69a305bcdc8e061bbd43294a477a3678 506582a1d912d546f5942d95ffae95ec7f4c37ce 8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: application/javascript
content-length: 20
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: public, max-age=2592000
expires: Fri, 08 May 2026 23:56:28 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 82845
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5G%2FDRmMnMQ2PbkHvLQz7QMkTWKJSm3k0kpuOH%2BTwEM4MferfopqA9sg7qyLLUsOsNKWyqCi3vbedbRJMIv%2F7yiTH%2FZSRaZMdGz7UJjGpD0yCPBJ8QVYl0zB05Gz%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d458b6b4fd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=580&min_rtt=441&rtt_var=309&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3194&recv_bytes=1135&delivery_rate=8500978&cwnd=254&unsent_bytes=0&cid=03683ee883e22064&ts=162&x=0"
X-Firefox-Spdy: h2
|
|
| static.doodcdn.io/js/embed3.js | 104.26.14.102 | 200 OK | 113 kB |
URL GET static.doodcdn.io/js/embed3.js IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (27236) Size113 kB (112942 bytes) Hash2cdc3aa1ffb8ca7b629675d83b2862dc be0a9072b9559c544d1c852c4559f5a64833c888 f23168d2b1910ff6e49bab3debce5786f7859e9e65ceda07a5554b66fd60f876
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: application/javascript
content-length: 112942
last-modified: Wed, 05 Mar 2025 20:27:01 GMT
etag: "67c8b395-1b92e"
expires: Sun, 08 Jun 2025 04:30:21 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 7189
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=af8W%2F0t8YeNOEYmx8FUXnX0q%2FfWabdetDOLdgIEkaq33VlTZVwWojH7hefGfhtiiQgbpIL07eLy6lAvph7jWfGF8cRWZuzsyyodYb6sO%2FSuWEtc86Fm0af1qsXTpfTaYUjK%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d518f5b4fd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1056&min_rtt=441&rtt_var=884&sent=33&recv=19&lost=0&retrans=0&sent_bytes=26845&recv_bytes=1453&delivery_rate=11165301&cwnd=257&unsent_bytes=0&cid=03683ee883e22064&ts=276&x=0"
X-Firefox-Spdy: h2
|
|
| i.doodcdn.io/img/logo-s.png | 104.26.14.102 | 200 OK | 1.9 kB |
URL GET i.doodcdn.io/img/logo-s.png IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeRIFF (little-endian) data, Web/P image Hashf0c6bed8c2b7297aab801aa1c449dd14 f44f3ee770d099eedc8ecc32fe5d5a2be9d6bd16 0c591bf4d1b3bd51127f30c9c1f4a727bdf146a60d1a8106bfd575f2bf68c9f3
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 03:06:01 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Sat, 07 Jun 2025 18:55:09 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 83511
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbtFkTn%2BIdKBiEGxvkZAJzDq3Pwvc04bmF4HFqznMJtbriD6Kf3wraWzD9lV31w46zlgSkTyXb6oIw6QCDZLmVnkrkRBDX9e4dEbOhh%2FDurib6N5YW88hZ75nh3jiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637dcbaca5695-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6292&min_rtt=3926&rtt_var=4462&sent=36&recv=11&lost=0&retrans=0&sent_bytes=30468&recv_bytes=2119&delivery_rate=637985&cwnd=24000&unsent_bytes=0&cid=845bb684fcc403ef&ts=1242&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| segarkojiri.top/cuid/?f=https%3A%2F%2Fdo7go.com | 23.109.170.88 | 200 OK | 32 B |
URL POST segarkojiri.top/cuid/?f=https%3A%2F%2Fdo7go.com IP 23.109.170.88:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerZeroSSL Subjectsegarkojiri.top FingerprintB1:D1:99:D4:6E:8F:E8:95:E2:D6:F3:32:5C:83:EB:8C:7C:23:2A:D7 ValidityTue, 22 Apr 2025 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT
Hash5e7e1aade360fc63100e886a6692500f 8daad4553554f030ed30c777bd7a27a463d03efb 6004b90081918b7f303118f47552b91b5eddd9ee6b0e4697be8af6d5e85f1313
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /cuid/?f=https%3A%2F%2Fdo7go.com HTTP/1.1
Host: segarkojiri.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://do7go.com/
Content-Type: application/json
Content-Length: 10
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 May 2025 03:06:01 GMT
Content-Type: application/json
Content-Length: 32
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://do7go.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: a97fa794a0f9=67ba3f7d7d242decb1061b; expires=Sun, 08 Sep 2052 11:24:11 GMT; domain=segarkojiri.top; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhAg4O8jgTQgO218lZ3nsAR_CPLt-YCgzAymfFy0Kj0ZNn3rTOtGnrTsx4MV3wFwaurQSAZTA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2079695010%3A1746846361890186 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhAg4O8jgTQgO218lZ3nsAR_CPLt-YCgzAymfFy0Kj0ZNn3rTOtGnrTsx4MV3wFwaurQSAZTA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2079695010%3A1746846361890186 IP 64.233.164.84:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhAg4O8jgTQgO218lZ3nsAR_CPLt-YCgzAymfFy0Kj0ZNn3rTOtGnrTsx4MV3wFwaurQSAZTA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2079695010%3A1746846361890186 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://do7go.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 May 2025 03:06:02 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-d6YeodapoifW12WThQwwJg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.8x8cbXFxqmQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP 64.233.164.84:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:O8KtgdSTaNHQZCdvq0Ts-mqEkdcByg:3SMnG5DVwMUWiRQE; Expires=Mon, 10-May-2027 03:06:01 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 May 2025 03:06:01 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mja0ZqKaTylZti_Blup2ojgQD8FudfPutgD-NFPUNOEpPVxuL-qtr78vmaAAepouS0nJWYSVg
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-pvW8xHRlWWG6Lrp2emmcVw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stethathehadsto.com/bUV5cEMMJxodfAx4G1Y2HylEVXErYEs2J14gDBJxCHdIFCBbLUleIAEqDBQlHyoXBG0DIA1VcSt1KxwNHiAsHy89BDAWJzkMTzMGP3IdHQ00FiFBOQkXDjwPFAcMMwE3fDAkOy4CECUxCRQgOwk+IhMlFzhxM0IwBgsTHzMlMixVcSsEOAMkPiJJBwoAcBooOjQrKSE3KCc6PXopdStHGikMMDdwCTwdIiQnDypBNioXKEkPPiYgNQBVKjY1LCAOSgNmXwc4Bw4HDhNIDTUNHjEZBg8zEnA/LysxdwcOPRMHKS8VGho7MiEgLiMtITUrWyQ+Pgk+IhEaGjtoDj8KFC0VJwUVcDs4GQgWLTo0N3UVOwAqCxEoAh59IEICGRYxHDoLEwEhIV4XEzM7GjU1JDsnFg4IczR0SDomAyETKBUVcR0aFisGAEgkPQcrEyYsBxAoc1wuHR4WNxcxA2UHNhYeM1AJCxF7JQoJHw8EAzM9MA | 3.164.240.2 | 200 OK | 3.1 kB |
URL GET stethathehadsto.com/bUV5cEMMJxodfAx4G1Y2HylEVXErYEs2J14gDBJxCHdIFCBbLUleIAEqDBQlHyoXBG0DIA1VcSt1KxwNHiAsHy89BDAWJzkMTzMGP3IdHQ00FiFBOQkXDjwPFAcMMwE3fDAkOy4CECUxCRQgOwk+IhMlFzhxM0IwBgsTHzMlMixVcSsEOAMkPiJJBwoAcBooOjQrKSE3KCc6PXopdStHGikMMDdwCTwdIiQnDypBNioXKEkPPiYgNQBVKjY1LCAOSgNmXwc4Bw4HDhNIDTUNHjEZBg8zEnA/LysxdwcOPRMHKS8VGho7MiEgLiMtITUrWyQ+Pgk+IhEaGjtoDj8KFC0VJwUVcDs4GQgWLTo0N3UVOwAqCxEoAh59IEICGRYxHDoLEwEhIV4XEzM7GjU1JDsnFg4IczR0SDomAyETKBUVcR0aFisGAEgkPQcrEyYsBxAoc1wuHR4WNxcxA2UHNhYeM1AJCxF7JQoJHw8EAzM9MA IP 3.164.240.2:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerAmazon Subjectstethathehadsto.com Fingerprint25:AA:56:0C:CC:9C:72:7D:5E:AE:85:33:34:42:27:03:DC:4B:DA:EE ValidityMon, 21 Apr 2025 00:00:00 GMT - Wed, 20 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3068), with no line terminators Hash7119b49db2afbb6a2aa1a1859b7c7bb3 01744c8e5a011db095bc61c5cf325c9f1b29febf 69816341dd5fc763bdac9c801815d6c0930f7de492c5187ef515615f0d5843f6
GET /bUV5cEMMJxodfAx4G1Y2HylEVXErYEs2J14gDBJxCHdIFCBbLUleIAEqDBQlHyoXBG0DIA1VcSt1KxwNHiAsHy89BDAWJzkMTzMGP3IdHQ00FiFBOQkXDjwPFAcMMwE3fDAkOy4CECUxCRQgOwk+IhMlFzhxM0IwBgsTHzMlMixVcSsEOAMkPiJJBwoAcBooOjQrKSE3KCc6PXopdStHGikMMDdwCTwdIiQnDypBNioXKEkPPiYgNQBVKjY1LCAOSgNmXwc4Bw4HDhNIDTUNHjEZBg8zEnA/LysxdwcOPRMHKS8VGho7MiEgLiMtITUrWyQ+Pgk+IhEaGjtoDj8KFC0VJwUVcDs4GQgWLTo0N3UVOwAqCxEoAh59IEICGRYxHDoLEwEhIV4XEzM7GjU1JDsnFg4IczR0SDomAyETKBUVcR0aFisGAEgkPQcrEyYsBxAoc1wuHR4WNxcxA2UHNhYeM1AJCxF7JQoJHw8EAzM9MA HTTP/1.1
Host: stethathehadsto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1215
date: Sat, 10 May 2025 03:06:00 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=avsXe3xb9ZdHKCGqrZaAF9smzJEiO2WRtjNdqvo3NUZ5HyT6FbbEtPjyTcSB5yh3FafMFhXyckSgb09kkTCKeCY/0Wl2fjaARjUjontHP4WVUXVHOB+Jp5/s59oR; Expires=Sat, 17 May 2025 03:06:00 GMT; Path=/
AWSALBCORS=avsXe3xb9ZdHKCGqrZaAF9smzJEiO2WRtjNdqvo3NUZ5HyT6FbbEtPjyTcSB5yh3FafMFhXyckSgb09kkTCKeCY/0Wl2fjaARjUjontHP4WVUXVHOB+Jp5/s59oR; Expires=Sat, 17 May 2025 03:06:00 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a015763506a36624e56a8a469e3484c4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: MPLwVOybIwNZRN5qQvJ2mZly16XWAtgELwyYq6nECOo5WTMhNTTJcA==
X-Firefox-Spdy: h2
|
|
| i.doodcdn.io/css/embed.css | 104.26.14.102 | 200 OK | 80 kB |
URL GET i.doodcdn.io/css/embed.css IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeUnicode text, UTF-8 text, with very long lines (40048) Hashc4907b4a84bd80e4ccec940bf9d7f1ec d36c11083cb2f86b99e2380d8c22cf13e74dbb29 f9535c07a6c50f5094b5a0caf5475823b3b32e9998a72cf6ad6d811dc7985d3d
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: text/css
last-modified: Wed, 05 Mar 2025 20:32:18 GMT
vary: Accept-Encoding
etag: W/"67c8b4d2-13811"
expires: Sat, 07 Jun 2025 07:38:21 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 75714
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KFhO7wLfRLYLZ6SlRwdCFypdm4pC6LyOKutA9izNCIHk5FCUahmmSy1acTC21mlHo2kdq63NbMy4XB5E3OdvFN%2BBDwcTDXCYVaALdo6uubfKjaMTFAxvKR4U2BPAhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d508efb4fd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=910&min_rtt=441&rtt_var=791&sent=17&recv=17&lost=0&retrans=0&sent_bytes=7444&recv_bytes=1363&delivery_rate=11019786&cwnd=257&unsent_bytes=0&cid=03683ee883e22064&ts=261&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mja0ZqKaTylZti_Blup2ojgQD8FudfPutgD-NFPUNOEpPVxuL-qtr78vmaAAepouS0nJWYSVg | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mja0ZqKaTylZti_Blup2ojgQD8FudfPutgD-NFPUNOEpPVxuL-qtr78vmaAAepouS0nJWYSVg IP 64.233.164.84:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mja0ZqKaTylZti_Blup2ojgQD8FudfPutgD-NFPUNOEpPVxuL-qtr78vmaAAepouS0nJWYSVg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://do7go.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:HEb6XDLoWiPDWysxNnHtQaEvM3UolQ:YcMeXodzYN-IQzXD;Path=/;Expires=Mon, 10-May-2027 03:06:01 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 May 2025 03:06:01 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhAg4O8jgTQgO218lZ3nsAR_CPLt-YCgzAymfFy0Kj0ZNn3rTOtGnrTsx4MV3wFwaurQSAZTA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2079695010%3A1746846361890186
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-SfnlvGICp7r9LHuVfWTtRQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp | 31.13.72.36 | 400 Bad Request | 0 B |
URL GET www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp IP 31.13.72.36:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerDigiCert Inc Subject*.facebook.com FingerprintE6:DB:F2:01:F5:EB:47:06:59:BC:88:87:FF:94:8F:C5:49:10:62:E8 ValiditySun, 16 Feb 2025 00:00:00 GMT - Sat, 17 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-lZes7q10' blob: data: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.fb.com *.oculuscdn.com https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7502647992675263290&cpp=C3&cv=1022711428&st=1746846361312"
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7502647992675263290&cpp=C3&cv=1022711428&st=1746846361312"}]}
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
origin-agent-cluster: ?1
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 9WL52ZPqGhMdFhbrfpQjnoeiavZwnC++gUGVHv7QPhVok/wGD9REQnOezHN8Nl8iFtqbWpbQIyMe6e9g4rWtJw==
content-length: 742
date: Sat, 10 May 2025 03:06:01 GMT
x-slb-proxy-status: http_request_error; e_fb_configversion="4915"; e_fb_binaryversion="8c4eb62f1f2c478d0fc129d590ac6298"
proxy-status: http_request_error; e_proxy="AcN4e5-rhWTLERIpO_hgjM060gyM1VswpjlI-jxfx0zloPr6xm-8yXSMeWsgBgXblOadiq0GODzTe88DyGIL"; e_fb_twtaskhandle="AcM70-7PcT2-QTX1EkdDQGMZZrtOlSG-Tlh4FJYHd7y-KmnUm68keDYZCbtPgJxEA8TghHmiKUe0Vx2bJcektW34Um2GHzgrKmGSmjvQ4qn9lNs"; e_fb_binaryversion="AcP7RFmG3K4Dia6xvXj-XknjU-32chGumF89_-n2qgYNH8778PTJtxz_tRmtD9JdZ4ifeEPhbrhsPDF-eM_TRmTs2cKLPcdvHyI"; e_fb_zone="AcMd_k6G1Guu8mW5d37gqlaimfq4_JJYj9amnhdK2Exn7tduqsAPSftUXV6ru5Mp"; e_fb_requestsequencenumber="AcPVIKfO0nBeJ8Gxxwh7VhBa-DdpBS7WtXiQuLftBiGrE1_UU3IrksuiHLl3"; e_upip="AcNNuW4WbWqqDzRE40qHENOPP51sjphO1xY_9ZsxiCDoc_xniNjVECVUDVQNIU1YnLSozI04y6QNe6SbwLamlLENzX9K7JZ8qp3fkg"; e_fb_responsebytes="AcOE6s3-HF1DHe5QZe0fiLXZkWIkUX0KTazlXqaw_ek_6HZJHGboPwJu0XuA"; e_fb_requesttime="AcM2xr33ouzTTJ3U2CwLNcdlWeNpZpd5jImyxSJ0IaX01jC3SrKylOvybDFkBQcrsDXgqgJ6rQ"; e_fb_requesthandler="AcOADqP24X2ha4qr96lCWVr5XlPvZOmt17QLR9tYNNrE0pP9fwwNVjJOzbDCqoNN5dbEw2MQ"; e_fb_configversion="AcNgN0KoLjiY0Wr6pb8CIHdbJUeby9NRRFT1Za42rVLjn0ze9z0hpjLt80RgrQ"; e_fb_vipaddr="AcNPH2MqUxoEqrvY2bx2dx-7UYr7aZCXnHpExC6HdaAlD9fPCUVPnen5gwknjF_l4GbSot-cTFAMvpVWjFBe6stn8gO4fPQfIQ"; e_fb_hostheader="AcO8X05nQ35rfoB01mGx7n-aJwhc_Pa3EaEOzZTen0nyI273g1Ujvo6-wBNECspDWiigAPPjZKhW6g"; e_fb_httpversion="AcPayF3ern_9m08Ee26FaGNh4k-axlFjPbkABglH12Ba5hBxkvP-64-POqjf"; e_fb_builduser="AcP8oWo2gUErRo6Fx7ERsFQuwUxo0d-QmjvkGphiQd3I2649vdi_p5JdUNtidC0ZPQ8"; e_fb_vipport="AcMfYmN4U6Ow3o9TkPAp18ctyf3WgY40vkDJdGt54XrmARmAcqScUrIA46rk"; e_clientaddr="AcMVSaUI-ZYlieFjT8RVB77scWkphw2KXUe-f2_wJRnBGJ2plJ1k4C1YQadmrMSYVFydxghhnzO4vZ4bwth4CAqmCmJOMZ1-QFwDgcSROqzi91k", http_request_error; e_fb_responsebytes="AcMcyxpRfeyaMrUT038KQNyZNcjoKrEH9ePnek9wv4jisYqWT85OuTb4x23V"; e_fb_requesttime="AcMn2J70zMGctjn6WzHooRE9JY-QdDrkOK91rAlwLyzjDB_LODxX6O-GtNUBUdwE2thEGK2T3A"; e_proxy="AcONp7CelJpfgdqHaXjnq7GxEkzWGTlytZWJMiFHpahtPdQ06Jfv8MFDwXn4bdZBbbEV5Vu1jHCD9SE"; e_fb_twtaskhandle="AcNUdgiSn53am3IaZ0C8li84H07Xx4pgv0f_m8esaYIzWZgfC6wBcrrzKbyeczL7Ks-4kaXNUxhZkYtiNGfMdeMI9CZ4z8Lu_Iyl"; e_fb_requestsequencenumber="AcNEwA8MFFkea-3KsXEWf_AnO3gtSYuGdelW92SfNkHMatnu4AvBf_432Q"; e_upip="AcO1ajrab0VlZyzR8JPVk0pEuGA9SOoiN_vSjf5P4htjeZ2d2cpAr5iF59HYmc9pOHp4yeOpuL7GF0MdhfllrCW2fYXNXro7fw"; e_fb_zone="AcPPnuXtvRqnUJu7nNHtx_X34Wikv-mfpXBSwIFl5XC6jM15kApyhdsKQaDMcg"; e_fb_binaryversion="AcO7iX9zmBC9TppLx_Vu1ak9a8YPh4mlDdc2wgIB-6RCqsr9Am97WxdBP8SAMScarZTfmMjLtsC5esSjiF9X81XpDtVmK62cv48"; e_fb_httpversion="AcNptJCq8MacluRbsLcokp0pSQWKNwNALAE6Jt1YXw3moqwQlGBGkWgtVS9q"; e_fb_requesthandler="AcPqXcXgroKOtJ0qDEFJqB6_qMQRvpwM8Ui0jw_KNvaPQ3t9mzENTTKjqNuzHRalnOZf3mjE"; e_fb_configversion="AcPQSLFrNoCKz5Ey5cmbSlH-heNzw58UZVYNIlOT40Q1VNxW1_Zt6cHXE7eIAA"; e_fb_vipaddr="AcPhxK7Vs2wfS2_h7nl3YvwvjACf_mqK_UG7z5AfjVoiHs90t0r-CjerWX-iY-_iu8iFtl4"; e_fb_hostheader="AcPlPpxunCJw621e3Pj1QGoqMy4onyhDSEJHFQHzrZ_dgsoKELoqTkP9SW8hJGUS5_nR6mKDbb_l9A"; e_fb_builduser="AcNxEkazoxpPLEqnT2HyFlTxp0iQkIzRg6B-QxnLFxlopXlY_LnWWDnaxFDgkVCHoQE"; e_fb_vipport="AcO2voIXTZVgX88M0NUYK5-32wq66D7MoGw1Gne9Lnkd_dhx6GLL5uxQ7Tqh"; e_clientaddr="AcMTUot0dsYHxCLXpAaJA3T4g0zQ8VGZA9A0XPDEv-ZjBI1qHlHlrmkjJmY8StuphMwPBtV02L4fI3I"
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=22, rtx=0, c=10, mss=1380, tbw=3384, tp=-1, tpl=-1, uplat=47, ullat=0
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.doodcdn.io/get_slides/1666/pfcdzk234uga9b1i.jpg | 104.26.14.102 | 200 OK | 3.2 kB |
URL GET i.doodcdn.io/get_slides/1666/pfcdzk234uga9b1i.jpg IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
Hashbd509667f445d19c1b6f40713158c497 856f51a564031a0ebd69d76efe170309e84ca0a2 f364f81a31c96e6096987919485d8c63014970d4fc277dc14eb03cf4a585d155
GET /get_slides/1666/pfcdzk234uga9b1i.jpg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 03:06:01 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Sat, 10 May 2025 03:05:42 GMT
cache-control: max-age=86400
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E2qyd6btI6uXsOD5Q9j%2F6ELeJfwkKr3ICZYn%2BMO3mvOs%2FYhDIQxs3NUhZQ3ynPHkURv3JpOUPBrhexB7MWhff5utIPFyf527255K859TT9m7ea3WC9mzI77Cdq%2B2hA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637dcbacd5695-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7095&min_rtt=3926&rtt_var=4952&sent=39&recv=12&lost=0&retrans=0&sent_bytes=33310&recv_bytes=2163&delivery_rate=118888&cwnd=24000&unsent_bytes=0&cid=845bb684fcc403ef&ts=1367&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js | 104.17.25.14 | 200 OK | 589 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js IP 104.17.25.14:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (48459) Size589 kB (589278 bytes) Hashd7fdaaab43bc993b85290c713fd2d289 46bf3d27b2cf38b0e999d3b0a7613011181c87f9 c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93d637d519cf56c6-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 221740
expires: Thu, 30 Apr 2026 03:05:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aNOrbs1tLULEKNSS23rb0cX1okl0J2duQQy5IsSGJAleCCtTwatdG1ZOjvMXAm0RXGMI930hpHXVtapRCAK%2F6GBsyIG88mCYf%2BSHEJfeMShmkRvihfr4WwnaoR%2Fg%2BzNg2quFPQeS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| do7go.com/pass_md5/163514959-91-90-1746846359-b8aa8bcb839b1dd9747bd56fd3e81aba/0uo5rlulgmzvkwwrkct7idnr | 104.26.9.147 | 200 OK | 105 B |
URL GET do7go.com/pass_md5/163514959-91-90-1746846359-b8aa8bcb839b1dd9747bd56fd3e81aba/0uo5rlulgmzvkwwrkct7idnr IP 104.26.9.147:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdo7go.com Fingerprint62:14:72:A9:A1:C9:E5:FE:80:F8:A6:E1:89:21:66:B4:38:8B:DF:5B ValidityThu, 20 Mar 2025 08:57:50 GMT - Wed, 18 Jun 2025 09:56:23 GMT
File typeASCII text, with no line terminators Hash9c936dde1e63c6540d8bdf3f5ea3d450 9ddfcdcf286147824106e1a33b8a070a0398f1b8 3edb8727f7cef303287490917b89276dfc88c7457e8487d45b399396569cdaa4
GET /pass_md5/163514959-91-90-1746846359-b8aa8bcb839b1dd9747bd56fd3e81aba/0uo5rlulgmzvkwwrkct7idnr HTTP/1.1
Host: do7go.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/e/jrgb0mq57v9l
Cookie: lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 03:06:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hVpNEpiwoL5LQjgspb5ko97AiHQqeAmMQdlVuxYSWlvr1edKGTpf5d7988aGyEzBCuiZSNstLQzeApveJMDbMAahixFfZF%2Fy0EffMBfWwMSMnFWu7MK0O%2FpW%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d9d98bb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4976&min_rtt=3897&rtt_var=2232&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4190&recv_bytes=1260&delivery_rate=164730&cwnd=12000&unsent_bytes=0&cid=166cf5e485a937ba&ts=1582&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| do7go.com/favicon.ico | 104.26.9.147 | 200 OK | 15 kB |
IP 104.26.9.147:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdo7go.com Fingerprint62:14:72:A9:A1:C9:E5:FE:80:F8:A6:E1:89:21:66:B4:38:8B:DF:5B ValidityThu, 20 Mar 2025 08:57:50 GMT - Wed, 18 Jun 2025 09:56:23 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash30d3656f43c817e38c3e7d70b2bfbdad 1aa43b43755e7cba5e145d0978517f7bedad7da6 a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555
GET /favicon.ico HTTP/1.1
Host: do7go.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/e/jrgb0mq57v9l
Cookie: lang=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 03:06:01 GMT
content-type: image/x-icon
content-length: 15406
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-3c2e"
expires: Fri, 16 May 2025 13:23:15 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 2036530
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i3oQn3x7wXKCJReg5ar4WOSnL%2Bz2MFbEls0fBriF01Twae7y0qQYg2r%2BWFl1w1Lqt4nGC%2FDLjv9qFnxmmeM0aG5Mr3r1rah2jSkg8yl8kIct12BPXI1S%2Fpg7Eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637e1cd11b517-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8628&min_rtt=3897&rtt_var=7478&sent=16&recv=11&lost=0&retrans=1&sent_bytes=5861&recv_bytes=1637&delivery_rate=1024&cwnd=12000&unsent_bytes=0&cid=166cf5e485a937ba&ts=2755&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| i.doodcdn.io/theme_2/img/loader.svg | 104.26.14.102 | 200 OK | 694 B |
URL GET i.doodcdn.io/theme_2/img/loader.svg IP 104.26.14.102:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectdoodcdn.io FingerprintD7:74:16:AE:C7:53:36:51:22:9F:FC:25:D0:8F:92:65:94:13:9E:8B ValiditySat, 03 May 2025 19:51:57 GMT - Fri, 01 Aug 2025 20:51:51 GMT
File typeexported SGML document, ASCII text Hashbe00fc4a29d03016e78b28c9943e3f51 10f2025f5aa96706cc81e050eadfcaa9bcc55af5 eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.io/css/embed.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 03:06:00 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Sat, 07 Jun 2025 05:36:47 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 81669
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EVAhobDUgnQLqBzmlPSw9vmxP%2BjmHzeGIu3X80Dh22VLMMKE2omSj%2BwrEXZiOHW%2Bf%2BZn3XeUfCGfnAA5EX9kiUNhiZSNV%2BcHowIWipdFfnfuPtRrxL3x2qBBxMZCzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 93d637d9f9c15695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4765&min_rtt=3926&rtt_var=3149&sent=12&recv=8&lost=0&retrans=0&sent_bytes=4141&recv_bytes=1522&delivery_rate=60268&cwnd=12000&unsent_bytes=0&cid=845bb684fcc403ef&ts=798&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| undefined/Ynk5QTADG1osDwNEW2dFEBUEZAIkXAsHVFEcTCMCB0sIJVNUEQlvUw4WTCVWEBZXNR4MHE1kAiQKahZcDRpvKkEgHmAZaghJeAV1GhZcF1wBKG50FVA7bTlXJil6eGUmOww0fAUjfgRaOxJtNnkhN1AiajQtDTF0MxoADFoFH2kSX1EfQ3FkJjxBMVIVLHMJSldJbTYABDZXE2k2EXh4e1MrWhdJFRZvAGUHMEAAdiA7e3lVG0BdGQIOCm5wWDg1UAB4JjsNNH8JAVgQZAFAbQdAIBhxLXg1P2swc1IBWBBjVh57cAUkH3EuQjYsdzF9NEBaF3cNNW0HHRI7cjsJLy5DA18HFQgGYTo7ShYBBS5pAl8hOwgTQiZITRhhJRUMFnYKOF8JRDg9USZCLjgBCXM6AQ4NAQ46WxZUOC1eE1sHOB8rQw0XSXx/Ej1XFHMDL20Ddg | 0.0.0.0 | | 0 B |
URL GET undefined/Ynk5QTADG1osDwNEW2dFEBUEZAIkXAsHVFEcTCMCB0sIJVNUEQlvUw4WTCVWEBZXNR4MHE1kAiQKahZcDRpvKkEgHmAZaghJeAV1GhZcF1wBKG50FVA7bTlXJil6eGUmOww0fAUjfgRaOxJtNnkhN1AiajQtDTF0MxoADFoFH2kSX1EfQ3FkJjxBMVIVLHMJSldJbTYABDZXE2k2EXh4e1MrWhdJFRZvAGUHMEAAdiA7e3lVG0BdGQIOCm5wWDg1UAB4JjsNNH8JAVgQZAFAbQdAIBhxLXg1P2swc1IBWBBjVh57cAUkH3EuQjYsdzF9NEBaF3cNNW0HHRI7cjsJLy5DA18HFQgGYTo7ShYBBS5pAl8hOwgTQiZITRhhJRUMFnYKOF8JRDg9USZCLjgBCXM6AQ4NAQ46WxZUOC1eE1sHOB8rQw0XSXx/Ej1XFHMDL20Ddg IP 0.0.0.0:0
Requested byhttps://do7go.com/e/jrgb0mq57v9l
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /Ynk5QTADG1osDwNEW2dFEBUEZAIkXAsHVFEcTCMCB0sIJVNUEQlvUw4WTCVWEBZXNR4MHE1kAiQKahZcDRpvKkEgHmAZaghJeAV1GhZcF1wBKG50FVA7bTlXJil6eGUmOww0fAUjfgRaOxJtNnkhN1AiajQtDTF0MxoADFoFH2kSX1EfQ3FkJjxBMVIVLHMJSldJbTYABDZXE2k2EXh4e1MrWhdJFRZvAGUHMEAAdiA7e3lVG0BdGQIOCm5wWDg1UAB4JjsNNH8JAVgQZAFAbQdAIBhxLXg1P2swc1IBWBBjVh57cAUkH3EuQjYsdzF9NEBaF3cNNW0HHRI7cjsJLy5DA18HFQgGYTo7ShYBBS5pAl8hOwgTQiZITRhhJRUMFnYKOF8JRDg9USZCLjgBCXM6AQ4NAQ46WxZUOC1eE1sHOB8rQw0XSXx/Ej1XFHMDL20Ddg HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| hoptreeperrie.shop/gd/70849?md=eyJhIjo2NzQ2LCJzIjoiMTI4MHgxMDI0IiwiYiI6IjEyODB4MTAyNCIsInIiOiIiLCJxIjoiaHR0cHM6Ly9kbzdnby5jb20vZS9qcmdiMG1xNTd2OWwiLCJoIjo3NDkyLCJsIjoiZW4tVVMiLCJ0IjowLCJ6Ijo5MTEyLCJrIjowLCJ1IjoiIiwiZiI6ZmFsc2UsIndoIjoibm90IGluIGlmcmFtZSIsImloIjoiMTI4MHgxMDI0IiwiZSI6InUwenc5cnBueWwyOGozeCIsIm8iOnRydWUsIm0iOjE3NDY4NDYzNjA3ODUsInciOiIlN0IlMjJ0aXRsZSUyMiUzQSUyMk9ubHklMjBGYW5zJTIwLSUyME1hcmtpbiUyMFdvbGYlMjBNYXJjZWxvJTIwQ2FpYXp6byUyMC0lMjBEb29kU3RyZSUyMiUyQyUyMmtleXdvcmRzJTIyJTNBJTVCJTVEJTJDJTIydG9wd29yZHMlMjIlM0ElNUIlMjJ3aW5kb3clM0E1JTIyJTJDJTIybGl2ZSUzQTQlMjIlMkMlMjJ5b3UlM0E0JTIyJTVEJTdEIiwidHMiOjAsInByIjoxLCJoYyI6NDgsImJsIjotMSwiYmMiOjMsInZ2IjoiTWVzYSIsInZyIjoibGx2bXBpcGUiLCJhYyI6MCwiY3QiOiJ1bmtub3duIiwiY2V0IjoidW5rbm93biIsImNkbG0iOi0xLCJjZGwiOi0xLCJjcnR0IjotMSwidG1zIjoxMjAsImNlIjp0cnVlLCJjZCI6MjQsIm9yIjoibGFuZHNjYXBlLXByaW1hcnkiLCJmcyI6bnVsbCwiZnNvIjpudWxsfQ&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A | 188.42.108.76 | 200 OK | 0 B |
URL OPTIONS hoptreeperrie.shop/gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A IP 188.42.108.76:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerLet's Encrypt Subjecthoptreeperrie.shop FingerprintC6:93:EA:0D:2E:33:EB:CD:93:C7:EA:53:6D:B5:0C:7B:CC:38:E5:85 ValidityTue, 22 Apr 2025 20:48:41 GMT - Mon, 21 Jul 2025 20:48:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
OPTIONS /gd/70849?md=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&fc=h7q5T8idLKWMMrmW6iTG0g&pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1
Host: hoptreeperrie.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://do7go.com/
Origin: https://do7go.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 May 2025 03:06:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://do7go.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhExNduKn1O8ZiQ_wGx3k9JbcYiU4mUQYZ817k_Tv0bUoYYXdl9d8AUTQ4ibnxdL0LJDQtWpA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1242039749%3A1746846361866778 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhExNduKn1O8ZiQ_wGx3k9JbcYiU4mUQYZ817k_Tv0bUoYYXdl9d8AUTQ4ibnxdL0LJDQtWpA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1242039749%3A1746846361866778 IP 64.233.164.84:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhExNduKn1O8ZiQ_wGx3k9JbcYiU4mUQYZ817k_Tv0bUoYYXdl9d8AUTQ4ibnxdL0LJDQtWpA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1242039749%3A1746846361866778 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://do7go.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 May 2025 03:06:01 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-BEeXyzGt3_wbjfqpOuvMrQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.8x8cbXFxqmQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js | 104.17.25.14 | 200 OK | 90 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 104.17.25.14:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93d637d3e93556c6-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 108443
expires: Thu, 30 Apr 2026 03:05:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HUPR4OXjFtgfxJRMwbGbHBLcOrSWdvpSiO45TEqWHpZ%2BGrom%2BT9%2Fmc6vSFGBAmi2Y2vQOBYEDXEa%2B%2FONZdspeoBbvHR0IKnUCT%2BXbLFrZFxpRp%2FYzpT0j2pKRgRKd5F1sOMgWFPZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js | 104.17.25.14 | 200 OK | 1.3 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js IP 104.17.25.14:443
Requested byhttps://do7go.com/e/jrgb0mq57v9l CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (1266) Hash4412bf8023109ee9eb1f1f226d391329 c273960aa874a87dd022b5e597887142f1b8e34f d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://do7go.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 03:05:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93d637d4797d56c6-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 228672
expires: Thu, 30 Apr 2026 03:05:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2FxlhDaNy7U%2BGvBVpgu2zMZvECQr4B03dwaDOTVc4cureSxAUtW4nveVlE1ZPu65DA0lFtgrIDfO%2Fu94CfhqYqRA7uxaoucvbBNRQBaAIWS6X0xlPZkwG90uTSQb4JYAcV%2BUIXbZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|