https://poopvip.com/e/ogm5onkzdu9e

Scan ID:: a3797cab-86ea-4714-ad61-15c52112fa78Finished
Submitted URL:: https://dood.im/e/ogm5onkzdu9eRedirected
Report Finished:: Jan 11, 2025, 23:18:22

HTTP transactions · 39 detected

A list of all the HTTP requests and responses made by the resource during the current session


GETh2	200	Primary Requestogm5onkzdu9eDownloadhttps://poopvip.com/e Redirect chain https://dood.im/e/ogm5onkzdu9e301 https://poopvip.com/e/ogm5onkzdu9e	Documenttext/html	10.92kB4.76kB	104.21.96.1AS13335 (US)
General Full URL https://poopvip.com/e/ogm5onkzdu9e Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 104.21.96.1AS13335 (US) Server Software cloudflare Resource Hash aa2f13b459ae1de5d39dde3596ccf5f9b70bc6b915ca0d8f0e5a9263a6ff3fac Request Headers Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority poopvip.com :method GET :path /e/ogm5onkzdu9e :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site none sec-fetch-user ?1 upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers alt-svc h3=":443"; ma=86400 cache-control public, max-age=3600, must-revalidate cf-ray 9008a06a69c52159-MAD content-encoding br content-type text/html;charset=UTF-8 date Sat, 11 Jan 2025 23:18:33 GMT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WUSPL4KlKSu5Z3sMB7Up4rMXrPCPr9wI3knsik6Zqew%2B%2FY1R%2B7jlwkpeqBptrCaMoJxkhgGQRP9X2J9U0zmjpMTDDxHxIZ4Sy1vUl7n2j4KUPX02j76BUhS2N39T2y7E%2FCIX5tyoYLgiMA%3D%3D"}],"group":"cf-nel","max_age":604800} server cloudflare server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=7c206b3050286858&ts=210&x=0" vary Accept-Encoding Redirect Headers https://dood.im/e/ogm5onkzdu9e301 location https://poopvip.com/e/ogm5onkzdu9e cache-control max-age=3600 cf-ray 9008a06938e12159-MAD content-length 167 content-type text/html date Sat, 11 Jan 2025 23:18:33 GMT expires Sun, 12 Jan 2025 00:18:33 GMT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kDuWZi8FrrN%2BEOqo9pnANq2p0aZAElHlq7%2FG%2FTEySBOne8HPOu%2BZi63PHLWdL%2Bctjq2MSyDKJRt8wEkmRMVeDfIUXDrVSo0UIizf5QJY73smHJMhJV%2BAgNgTHwby%2FKJjuIJKxn90"}],"group":"cf-nel","max_age":604800} server cloudflare vary Accept-Encoding
GETh2	200	5RPxPwrM6.jpgDownloadhttps://dx4.poopstream.co	Imageimage/jpeg	9.86kB10.53kB	104.21.58.50AS13335 (US)
General Full URL https://dx4.poopstream.co/5RPxPwrM6.jpg Requested by URL https://poopvip.com/e/ogm5onkzdu9e Host poopvip.com Type parser Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 104.21.58.50AS13335 (US) Server Software cloudflare Resource Hash a3f9ab36207ce626801f9d9d7b08d594d60b640900300f816baba5682d91dd60 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://poopvip.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority dx4.poopstream.co :method GET :path /5RPxPwrM6.jpg :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 referer https://poopvip.com/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Sat, 11 Jan 2025 23:18:34 GMT cf-cache-status HIT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=7c66917bf92e7837&ts=784&x=0" alt-svc h3=":443"; ma=86400 content-length 10096 cf-bgj h2pri,csam-hash last-modified Mon, 23 Dec 2024 16:18:15 GMT server cloudflare etag "fa5275009e6929ffc1b5a7dd5d901170" vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mM0fDvl7CySOiD2JGCRmE5iUpOCIyi1pfodbLUIjoBNF3i7iU4FVlt1vDnflrkEnDhoFQzD%2FD%2BNejv4NOWokVdn%2F9IUOrLVOSt125LYf5t8KEuzZCe9L7d%2FTfYGoRJsdVhIBB9mPjoW4LDPp7O6JBA%3D%3D"}],"group":"cf-nel","max_age":604800} content-type image/jpeg cache-control max-age=1200 accept-ranges bytes cf-ray 9008a06c3b942159-MAD
GETh2	200	jshttps://www.googletagmanager.com/gtag	Scriptapplication/javascript	327.9kB109.62kB	142.250.207.104AS15169 (US)
General Full URL https://www.googletagmanager.com/gtag/js?id=G-RRBBHD087X Requested by URL https://poopvip.com/e/ogm5onkzdu9e Host poopvip.com Type parser Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 142.250.207.104AS15169 (US) Server Software Google Tag Manager Resource Hash f3df70ec2b4ef0def3a4b24c2d00f06201f07549ce4d45a2d132992c339582ba Security Headers strict-transport-security max-age=31536000; includeSubDomains cross-origin-resource-policy cross-origin x-xss-protection 0 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://poopvip.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority www.googletagmanager.com :method GET :path /gtag/js?id=G-RRBBHD087X :scheme https accept / accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 referer https://poopvip.com/ sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Sat, 11 Jan 2025 23:18:33 GMT content-encoding br strict-transport-security max-age=31536000; includeSubDomains content-security-policy-report-only script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0 cross-origin-resource-policy cross-origin alt-svc h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 content-length 111552 x-xss-protection 0 server Google Tag Manager vary Accept-Encoding report-to {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],} content-type application/javascript; charset=UTF-8 access-control-allow-origin * cache-control private, max-age=900 access-control-allow-credentials true access-control-allow-headers Cache-Control cross-origin-opener-policy-report-only same-origin; report-to=coop_reporting expires Sat, 11 Jan 2025 23:18:33 GMT
GETh2	200	play.svgDownloadhttps://ax4.poopstream.co	Imageimage/svg+xml	633B998B	172.67.200.123AS13335 (US)
General Full URL https://ax4.poopstream.co/play.svg Requested by URL https://poopvip.com/e/ogm5onkzdu9e Host poopvip.com Type parser Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 172.67.200.123AS13335 (US) Server Software cloudflare Resource Hash b6280b025f54d1e117f8515da139cc3d7c64955a5342fd81498431578336dd08 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://poopvip.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority ax4.poopstream.co :method GET :path /play.svg :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 referer https://poopvip.com/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Sat, 11 Jan 2025 23:18:33 GMT content-encoding br cf-cache-status HIT last-modified Thu, 14 Mar 2024 17:17:30 GMT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server cloudflare age 4571 etag W/"85f08506e5a64050719e7e18a26cd9c4" vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETRTxMLUBJ3eGX2fPA6%2F0Iwwt4d2pV9ga09e63ghSwGzGlgP3K0MHad7Dwt%2By7xgXniQcoukwM6mdSpQ8HfJz2vDvruhtAXWjHUH0Xp8isiUvvyQABH%2BP%2FxJCkKpMJxAZ6BEYayvc3e0eThfuG7XFA%3D%3D"}],"group":"cf-nel","max_age":604800} content-type image/svg+xml cache-control max-age=1200 server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=25f4d468470c8b7c&ts=42&x=0" cf-ray 9008a06c3b982159-MAD alt-svc h3=":443"; ma=86400
GETh2	200	653975647a6b6e6f356d676fhttps://berlagu.com/jembud	Documenttext/html	0B-1B	172.67.222.46AS13335 (US)
General Full URL https://berlagu.com/jembud/653975647a6b6e6f356d676f Requested by URL https://poopvip.com/e/ogm5onkzdu9e Host poopvip.com Type script Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 172.67.222.46AS13335 (US) Server Software cloudflare Request Headers Referer https://poopvip.com/ Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority berlagu.com :method GET :path /jembud/653975647a6b6e6f356d676f :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 referer https://poopvip.com/ sec-fetch-dest iframe sec-fetch-mode navigate sec-fetch-site cross-site upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers alt-svc h3=":443"; ma=86400 cache-control max-age=14400 cf-cache-status MISS cf-ray 9008a06ccc872159-MAD content-encoding br content-type text/html; charset=UTF-8 date Sat, 11 Jan 2025 23:18:34 GMT last-modified Sat, 11 Jan 2025 23:18:34 GMT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMPvUwkLvjOycfa9PJ1AP2Ay8VeeKsqJ6ImsrcNSEA7FmV4pv94EGrkgRfGPMdsVDJvsC%2BxE1DR7zf7iojZyymnKSyWJXRshN4NF4Lq5nUvqaJtTQ%2F1qGOl%2BefBdybKklv4jzSih62srLg%3D%3D"}],"group":"cf-nel","max_age":604800} server cloudflare server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=e1dfb1bcd44e5eb3&ts=355&x=0" vary Accept-Encoding
GETh2	200	adc611cb7744b8f814a28397f47217a1.jshttps://7311700270.f53d954cc5.com	Scriptapplication/javascript	119.16kB37.44kB	45.133.44.53AS39572 (NL)
General Full URL https://7311700270.f53d954cc5.com/adc611cb7744b8f814a28397f47217a1.js Requested by URL https://poopvip.com/e/ogm5onkzdu9e Host poopvip.com Type script Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 45.133.44.53AS39572 (NL) Server Software nginx/1.18.0 Resource Hash 78c30b418896961856ee26e09ac3990b9e790852ad1333a0d30e8ede9f771a6f Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://poopvip.com/ Origin https://poopvip.com User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority 7311700270.f53d954cc5.com :method GET :path /adc611cb7744b8f814a28397f47217a1.js :scheme https accept / accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 origin https://poopvip.com referer https://poopvip.com/ sec-fetch-dest script sec-fetch-mode cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers expires Sat, 11 Jan 2025 23:23:33 GMT date Sat, 11 Jan 2025 23:18:33 GMT content-encoding gzip last-modified Thu, 05 Dec 2024 14:47:03 GMT server nginx/1.18.0 etag W/"6751bce7-1dc9f" x-cdn-host-id ds9890 content-type application/javascript; charset=utf-8 access-control-allow-origin * cache-control max-age=300 x-proxy-cache HIT
POSTh2	204	collecthttps://region1.google-analytics.com/g	Fetchtext/plain	0B-1B	216.239.34.36AS15169 (US)
General Full URL https://region1.google-analytics.com/g/collect?v=2&tid=G-RRBBHD087X&gtm=45je5190v9167878827za200&_p=1736637513584&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=688253044.1736637514&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_s=1&sid=1736637513&sct=1&seg=0&dl=https%3A%2F%2Fpoopvip.com%2Fe%2Fogm5onkzdu9e&dt=Smp%20imut%20lagi%20tresome%20sama%20satu%20om%20om%20-%20PoopHD%20-%20PoopHD.mp4%20-%20PoopHD%20-%20PoopHD&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=809 Requested by URL https://www.googletagmanager.com/gtag/js?id=G-RRBBHD087X Host www.googletagmanager.com Type script Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 216.239.34.36AS15169 (US) Server Software Golfe2 Security Headers cross-origin-resource-policy cross-origin Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://poopvip.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority region1.google-analytics.com :method POST :path /g/collect?v=2&tid=G-RRBBHD087X&gtm=45je5190v9167878827za200&_p=1736637513584&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=688253044.1736637514&ul=en-us&sr=1x1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_s=1&sid=1736637513&sct=1&seg=0&dl=https%3A%2F%2Fpoopvip.com%2Fe%2Fogm5onkzdu9e&dt=Smp%20imut%20lagi%20tresome%20sama%20satu%20om%20om%20-%20PoopHD%20-%20PoopHD.mp4%20-%20PoopHD%20-%20PoopHD&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=809 :scheme https accept / accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 content-length 0 origin https://poopvip.com referer https://poopvip.com/ sec-fetch-dest empty sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers pragma no-cache date Sat, 11 Jan 2025 23:18:33 GMT server Golfe2 content-security-policy-report-only script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:86:0 report-to {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:86:0"}],} content-type text/plain access-control-allow-origin https://poopvip.com cache-control no-cache, no-store, must-revalidate access-control-allow-credentials true cross-origin-resource-policy cross-origin alt-svc h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 content-length 0 cross-origin-opener-policy-report-only same-origin; report-to=coop_reporting expires Fri, 01 Jan 1990 00:00:00 GMT
GETh2	200	114039https://7311700270.f53d954cc5.com/98c5d2a3145949b3dbafce12709095b4	XHRapplication/json	3.64kB3.82kB	45.133.44.53AS39572 (NL)
General Full URL https://7311700270.f53d954cc5.com/98c5d2a3145949b3dbafce12709095b4/114039?version_name=c&domain=poopvip.com Requested by URL https://7311700270.f53d954cc5.com/adc611cb7744b8f814a28397f47217a1.js Host 7311700270.f53d954cc5.com Type script Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 45.133.44.53AS39572 (NL) Server Software nginx/1.18.0 Resource Hash c7181d6a62501f72fa7ede9ddc24a309b6b06afd67e4996cec5253768f8a1b94 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://poopvip.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 Response Headers expires Sat, 11 Jan 2025 23:23:33 GMT date Sat, 11 Jan 2025 23:18:33 GMT server nginx/1.18.0 x-cdn-host-id ds9890 content-type application/json access-control-allow-origin * cache-control max-age=300 x-proxy-cache HIT
GETh2	200	count.htmlhttps://storage.multstorage.com/log	Documenttext/html	0B-1B	104.21.30.242AS13335 (US)
General Full URL https://storage.multstorage.com/log/count.html Requested by URL https://7311700270.f53d954cc5.com/adc611cb7744b8f814a28397f47217a1.js Host 7311700270.f53d954cc5.com Type script Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 104.21.30.242AS13335 (US) Server Software cloudflare Request Headers Referer https://poopvip.com/ Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority storage.multstorage.com :method GET :path /log/count.html :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 referer https://poopvip.com/ sec-fetch-dest iframe sec-fetch-mode navigate sec-fetch-site cross-site upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers alt-svc h3=":443"; ma=86400 cf-cache-status DYNAMIC cf-ray 9008a06efeaa2159-MAD content-encoding br content-type text/html date Sat, 11 Jan 2025 23:18:34 GMT last-modified Mon, 18 Sep 2023 14:39:06 GMT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DJg7jEioH5FOF2MBrhPbfIu8dzugMeI5oqjQSrCeaSlDaTaYNeVnX%2FJhYpQLTR6yevXg2WqI2KwStXm86ewZ6jbIEmy00BolCnRKq38yOAQZPYl9J014P%2BGVQ35%2BBLgIrGRwNr4f6PXY%2FT3YDH0caX15c57WSA%3D%3D"}],"group":"cf-nel","max_age":604800} server cloudflare server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=10217ebea0d5e313&ts=90&x=0" vary Accept-Encoding x-request-id ee5a7afb764a925c13d8c52c69c1b693
GETh2	200	trackhttps://4057e4e100.d0a2e8bccf.com/in	XHRtext/plain	0B225B	45.133.44.53AS39572 (NL)
General Full URL https://4057e4e100.d0a2e8bccf.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIyNzk1MjcxMTM2MTQ4NjUyMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjAiLCJ0YWdfaWQiOjExNDAzOSwic2NyZWVuX3Jlc29sdXRpb24iOiIxeDEiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjE0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 Requested by URL https://7311700270.f53d954cc5.com/adc611cb7744b8f814a28397f47217a1.js Host 7311700270.f53d954cc5.com Type script Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 45.133.44.53AS39572 (NL) Server Software nginx/1.18.0 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://poopvip.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority 4057e4e100.d0a2e8bccf.com :method GET :path /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIyNzk1MjcxMTM2MTQ4NjUyMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjAiLCJ0YWdfaWQiOjExNDAzOSwic2NyZWVuX3Jlc29sdXRpb24iOiIxeDEiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjE0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 :scheme https accept / accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id f50d4621-9281-486e-93e5-58ebff09fe33 origin https://poopvip.com referer https://poopvip.com/ sec-fetch-dest empty sec-fetch-mode cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers pragma no-cache date Sat, 11 Jan 2025 23:18:34 GMT server nginx/1.18.0 vary Origin access-control-allow-methods * x-cdn-host-id ds9890 access-control-allow-origin * cache-control no-transform, no-cache, no-store, must-revalidate access-control-allow-headers Content-Type content-length 0

Page history · 2 entries found

HTTP, JavaScript or Meta tag redirects

https://dood.im/e/ogm5onkzdu9e301
https://poopvip.com/e/ogm5onkzdu9e200

Redirect chains · 3 found

Redirects that were detected on the HTTP transactions

Redirect chain for transaction #1

https://dood.im/e/ogm5onkzdu9e301
https://poopvip.com/e/ogm5onkzdu9e

Redirect chain for transaction #21

https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube302
https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AVdkyDn7SUEOVmFRn64YSE6G8ER0ZReNKgaHAzYKSNrPChK-BubWW7gMgWEkFB7vvQl3h4cdV8QI302
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AVdkyDlDdJ5CWMFSGoTcWY5CaRktc8tpeuimkyJmXDzVmMlmj8XvqjQbEgPMcR9K28Sa42UMZn1Sgg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S758257976%3A1736637514346826&ddm=1

Redirect chain for transaction #37

https://nwwrtbbit.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.estcvEWbV5Eckrt9uV4b6emDRUKTJBYMj2UfYLISeXU&sp=0.003906452192915842302
https://assets.ahmybid.net/5d20a3cf-ae07-4947-9d92-eb9dec9c55ec.jpg

DNS records · 14 found

DNS records provide information about a domain including what IP address it's associated with

Type	Name	Content	DNSSEC
A	poopvip.com	104.21.96.1	Disabled
A	poopvip.com	104.21.32.1	Disabled
A	poopvip.com	104.21.80.1	Disabled
A	poopvip.com	104.21.64.1	Disabled
A	poopvip.com	104.21.112.1	Disabled
A	poopvip.com	104.21.48.1	Disabled
A	poopvip.com	104.21.16.1	Disabled
AAAA	poopvip.com	2606:4700:3030::6815:4001	Disabled
AAAA	poopvip.com	2606:4700:3030::6815:7001	Disabled
AAAA	poopvip.com	2606:4700:3030::6815:3001	Disabled