| bxt2.shaperal.com/?utm_medium=f2a0c4f3fbe2823ee80dc4ba2e1e_834b8d892f53&utm_campaign=Push&cid=M2024032904-62200db55d5a8b9491439f6a45999299&kw1=195724 |  50.28.56.190 | | 7.9 kB |
URL bxt2.shaperal.com/?utm_medium=f2a0c4f3fbe2823ee80dc4ba2e1e_834b8d892f53&utm_campaign=Push&cid=M2024032904-62200db55d5a8b9491439f6a45999299&kw1=195724 IP50.28.56.190:0
File typeHTML document, ASCII text, with very long lines (2500) Hash86c74f92efcc75b90b904bdf2b1bfb67 62d96f7af2b67ff0d46444aa3bffd9dbc975f762 5a7c8b4398c4044a092d094fd3b9e7cb4e73c577bda1af59a0e1249000e31162
GET /?utm_medium=f2a0c4f3fbe2823ee80dc4ba2e1e_834b8d892f53&utm_campaign=Push&cid=M2024032904-62200db55d5a8b9491439f6a45999299&kw1=195724 HTTP/1.1
Host: bxt2.shaperal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 04:32:41 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| bxt2.shaperal.com/page/bouncy.php?&bpae=GbhGcL0GAqVmj3NXiuQH%2BuOuGHIsULRhsTnHN0Xxy1r7oj1lmAy0FcyrCFBYbaVas%2FKBHFY1x1m2pJqItfDRnYEX4%2F6hwMa7RMxVWsUPyfi6Ne%2F97uskSm2v0Ar8R1fgNY6SRZkF21adujg1chsxKYPOrZ3Ez%2F7b1ZuOjIySSDavMIuLbSrOyZYLBuKAGTuUqo%2BEnZh5jbs%2B94g127CPRoZWpnuCWSK8GM6tLvGThvPf5sLxXkXsaDDSORd8GXSlusbIM%2BPYPeRQ1KS6c%2FOqDMl%2BH%2F%2BbmBwK2S8pZewBUriCMp3xyRFUy6ZV67kX9X0GsLx045wVT%2B0ipdr92m9GR5Tre3PYdhwSJir52IL%2BQT%2FvINwDJogKUz7SzYCi51eo6568fWrN0PacrhQjdWJQbYwxE9gRkq3oRwqxkRHj%2BN144qbIlT23ujzJYt31zmr0MH8VwteCUYHbq2T742qiOa8Ikygm%2FKKjL1p7Ho9KQSblY04PF0P7yZH7xliQcX8sbumTyR17u%2FHU%2BJWafMWRuzo37SaYV4mxMgT4%2FrgTdM2vQq38EfIW4A0eaESrSD%2B0%2BSBrMA57fQIqnYpPMNvLjy0Qwd9fmwFupgIX60JIujXhUwO2tw7S0%2B4CDudQUuVMrIM%2BgUH%2FPHK%2FF8FPpBHuWz4oAdVF4XXIadHgRxQGTuEFpB7Ewn%2BR70Td8cgJ1c2SsK4G9SBaDSFbKbb%2FT3UUelAAao24WLzXY%2BUrT482y%2BXpCAHukZ%2Bc2WlqbyMM6OeAs%2FoBc0sJ2%2FwyblNieYaXlgU8PHi0QwP20y5YRmdpIOoYChfe%2FVwGlY1Lh0NKVosebShS8j8nLFBlkdFtj0TshtV1Jucmiau4ZR%2BOUeLV3xzWJR84RwtLLipNpjLrjHwqW8G7Nk1nFRo4JOR%2Bs0uRqEwab8YUJv0F6l9fsQk7EwPA%2B81zsmPAjkig7pASGziJ5hYTH2NiVoNz8qhNoo5MoVdWTsZ53PdVmaGx%2BzSrmJ8UE%2Blze0m%2F0zRpiJHbo%2BxDD0pfBohrs3jWvezFfX0fKS%2B8bFFM6i8fFqSiXygYgaB7W5%2FFy0RdV9uuKPux39IkfjLN4Kb9UaH6Gm9qwZBT9I96XGDe87J4fGRIIek%2Fs2lTSE7wI%2BEbFILAcmJ7ul9dN%2B2ZB0EvrpPluRfgcqOzxHySj2AITXHFO0Gi1HPFKzO4MvqltKKIEHRjruCP7zBfNClJ%2F7zYKngdV4xFMGLRe%2B3BhkJmswdrjMmqbjQKoIE%2FtgpYF2tbqoYf7HB0NrRmjlvm7TMmiHA5O%2BgxEdKa88EwUjdKkylsUA2JBkquMVeZAkVTXyGQyYH0QWhlOasfsWRncUlH4hbRgGVXy3igaqxSn5EtIL1kNDoQM6wEveaTZfL%2BfcTl6WNOLNdiGaVzg%2BpOmFEmWiy8LP9BXvrFBauWBBBvq5X9Z%2FV%2B7XW7tW2lNZLZFqcbMjIgC1wDS3jCsKdyt8LhA61Xk03JHG3WeCspPze4O0VmcIeUiiu9NZO%2FVVbXGKomjSxlVxT%2Fz21gituWhIAkIIVC6u%2FnKVblNKx9Xq00GXdlpDsFYwjLl%2FmEWxvYBH1vOtjlqQF4AzkykSk662dpYTxIc%2BvSltpITZSYrIjTh1juWEtmZO%2FO7tnuehyxpbNUsWGXZakyYz4JuSPjfgfSWx2K7vXX%2BIN7iYeAOa6NGM4WxmnRio9W52sha502Shrfv%2B7SdTR7ay9t4iQWIlDSo3O9pR%2BkBVlzqsrejCpQ7h%2BRpiPkAzK6vFtY8IZoL%2BuiwjGLbORNSYtE%2FH8QlJhH6Gsd4h27LgRbeVUkd0W3H6d1D1B3xFAnjTMVsKINYf0C928atbBbPwqgXa1L%2F3xHuGTVWXFGawNpsrdk2WswopAsdnaQnoUtpDBDeLxA4wS25VFTR4cxOgBOd9TDJCSy7SJzRp2%2BZtauJ56r%2BSNELnqkcFC7KYEgsIMVXdr1jY12YD88WzyiOxg2HADQkeiEAI4m45pAUB3tpUcW0gapoWXKS8eDxNy9yUdOWNqY131U6gV4XgOUN5KWk6h7l7NItxH5RAaM1S4YilyWnrfBi5x6pdi4W2SjN1y5F9iRnoqW3Sk%2BsPSCRV6nXheb7Wzm2i8WhBmIC1nFempS3uq0y8ncK%2Fmey%2F6Z3lUEcFCbxXmelt%2BXe7YbaMNWzsrAK0vZV56ADQhuRF5mc8t9P8bf2qYk3ni9WZ%2F3Fvx2FUSTPqKwxrC1EdTD2oXy%2BNHGCdZmSzpZeg%3D%3D&redirectType=js&inIframe=false&inPopUp=false | 50.28.56.190 | | 7.6 kB |
URL bxt2.shaperal.com/page/bouncy.php?&bpae=GbhGcL0GAqVmj3NXiuQH%2BuOuGHIsULRhsTnHN0Xxy1r7oj1lmAy0FcyrCFBYbaVas%2FKBHFY1x1m2pJqItfDRnYEX4%2F6hwMa7RMxVWsUPyfi6Ne%2F97uskSm2v0Ar8R1fgNY6SRZkF21adujg1chsxKYPOrZ3Ez%2F7b1ZuOjIySSDavMIuLbSrOyZYLBuKAGTuUqo%2BEnZh5jbs%2B94g127CPRoZWpnuCWSK8GM6tLvGThvPf5sLxXkXsaDDSORd8GXSlusbIM%2BPYPeRQ1KS6c%2FOqDMl%2BH%2F%2BbmBwK2S8pZewBUriCMp3xyRFUy6ZV67kX9X0GsLx045wVT%2B0ipdr92m9GR5Tre3PYdhwSJir52IL%2BQT%2FvINwDJogKUz7SzYCi51eo6568fWrN0PacrhQjdWJQbYwxE9gRkq3oRwqxkRHj%2BN144qbIlT23ujzJYt31zmr0MH8VwteCUYHbq2T742qiOa8Ikygm%2FKKjL1p7Ho9KQSblY04PF0P7yZH7xliQcX8sbumTyR17u%2FHU%2BJWafMWRuzo37SaYV4mxMgT4%2FrgTdM2vQq38EfIW4A0eaESrSD%2B0%2BSBrMA57fQIqnYpPMNvLjy0Qwd9fmwFupgIX60JIujXhUwO2tw7S0%2B4CDudQUuVMrIM%2BgUH%2FPHK%2FF8FPpBHuWz4oAdVF4XXIadHgRxQGTuEFpB7Ewn%2BR70Td8cgJ1c2SsK4G9SBaDSFbKbb%2FT3UUelAAao24WLzXY%2BUrT482y%2BXpCAHukZ%2Bc2WlqbyMM6OeAs%2FoBc0sJ2%2FwyblNieYaXlgU8PHi0QwP20y5YRmdpIOoYChfe%2FVwGlY1Lh0NKVosebShS8j8nLFBlkdFtj0TshtV1Jucmiau4ZR%2BOUeLV3xzWJR84RwtLLipNpjLrjHwqW8G7Nk1nFRo4JOR%2Bs0uRqEwab8YUJv0F6l9fsQk7EwPA%2B81zsmPAjkig7pASGziJ5hYTH2NiVoNz8qhNoo5MoVdWTsZ53PdVmaGx%2BzSrmJ8UE%2Blze0m%2F0zRpiJHbo%2BxDD0pfBohrs3jWvezFfX0fKS%2B8bFFM6i8fFqSiXygYgaB7W5%2FFy0RdV9uuKPux39IkfjLN4Kb9UaH6Gm9qwZBT9I96XGDe87J4fGRIIek%2Fs2lTSE7wI%2BEbFILAcmJ7ul9dN%2B2ZB0EvrpPluRfgcqOzxHySj2AITXHFO0Gi1HPFKzO4MvqltKKIEHRjruCP7zBfNClJ%2F7zYKngdV4xFMGLRe%2B3BhkJmswdrjMmqbjQKoIE%2FtgpYF2tbqoYf7HB0NrRmjlvm7TMmiHA5O%2BgxEdKa88EwUjdKkylsUA2JBkquMVeZAkVTXyGQyYH0QWhlOasfsWRncUlH4hbRgGVXy3igaqxSn5EtIL1kNDoQM6wEveaTZfL%2BfcTl6WNOLNdiGaVzg%2BpOmFEmWiy8LP9BXvrFBauWBBBvq5X9Z%2FV%2B7XW7tW2lNZLZFqcbMjIgC1wDS3jCsKdyt8LhA61Xk03JHG3WeCspPze4O0VmcIeUiiu9NZO%2FVVbXGKomjSxlVxT%2Fz21gituWhIAkIIVC6u%2FnKVblNKx9Xq00GXdlpDsFYwjLl%2FmEWxvYBH1vOtjlqQF4AzkykSk662dpYTxIc%2BvSltpITZSYrIjTh1juWEtmZO%2FO7tnuehyxpbNUsWGXZakyYz4JuSPjfgfSWx2K7vXX%2BIN7iYeAOa6NGM4WxmnRio9W52sha502Shrfv%2B7SdTR7ay9t4iQWIlDSo3O9pR%2BkBVlzqsrejCpQ7h%2BRpiPkAzK6vFtY8IZoL%2BuiwjGLbORNSYtE%2FH8QlJhH6Gsd4h27LgRbeVUkd0W3H6d1D1B3xFAnjTMVsKINYf0C928atbBbPwqgXa1L%2F3xHuGTVWXFGawNpsrdk2WswopAsdnaQnoUtpDBDeLxA4wS25VFTR4cxOgBOd9TDJCSy7SJzRp2%2BZtauJ56r%2BSNELnqkcFC7KYEgsIMVXdr1jY12YD88WzyiOxg2HADQkeiEAI4m45pAUB3tpUcW0gapoWXKS8eDxNy9yUdOWNqY131U6gV4XgOUN5KWk6h7l7NItxH5RAaM1S4YilyWnrfBi5x6pdi4W2SjN1y5F9iRnoqW3Sk%2BsPSCRV6nXheb7Wzm2i8WhBmIC1nFempS3uq0y8ncK%2Fmey%2F6Z3lUEcFCbxXmelt%2BXe7YbaMNWzsrAK0vZV56ADQhuRF5mc8t9P8bf2qYk3ni9WZ%2F3Fvx2FUSTPqKwxrC1EdTD2oXy%2BNHGCdZmSzpZeg%3D%3D&redirectType=js&inIframe=false&inPopUp=false IP50.28.56.190:0
File typeHTML document, ASCII text, with very long lines (2403) Hash0bde0c184bd5204263e0ce59d464229b 02c025d74e06a4f54ce9b6c7df60b293fefaf6b9 92e3fe3d793b8767ecf326b6c3b3d45808398f9cec27e9aac834bd7852d9c764
GET /page/bouncy.php?&bpae=GbhGcL0GAqVmj3NXiuQH%2BuOuGHIsULRhsTnHN0Xxy1r7oj1lmAy0FcyrCFBYbaVas%2FKBHFY1x1m2pJqItfDRnYEX4%2F6hwMa7RMxVWsUPyfi6Ne%2F97uskSm2v0Ar8R1fgNY6SRZkF21adujg1chsxKYPOrZ3Ez%2F7b1ZuOjIySSDavMIuLbSrOyZYLBuKAGTuUqo%2BEnZh5jbs%2B94g127CPRoZWpnuCWSK8GM6tLvGThvPf5sLxXkXsaDDSORd8GXSlusbIM%2BPYPeRQ1KS6c%2FOqDMl%2BH%2F%2BbmBwK2S8pZewBUriCMp3xyRFUy6ZV67kX9X0GsLx045wVT%2B0ipdr92m9GR5Tre3PYdhwSJir52IL%2BQT%2FvINwDJogKUz7SzYCi51eo6568fWrN0PacrhQjdWJQbYwxE9gRkq3oRwqxkRHj%2BN144qbIlT23ujzJYt31zmr0MH8VwteCUYHbq2T742qiOa8Ikygm%2FKKjL1p7Ho9KQSblY04PF0P7yZH7xliQcX8sbumTyR17u%2FHU%2BJWafMWRuzo37SaYV4mxMgT4%2FrgTdM2vQq38EfIW4A0eaESrSD%2B0%2BSBrMA57fQIqnYpPMNvLjy0Qwd9fmwFupgIX60JIujXhUwO2tw7S0%2B4CDudQUuVMrIM%2BgUH%2FPHK%2FF8FPpBHuWz4oAdVF4XXIadHgRxQGTuEFpB7Ewn%2BR70Td8cgJ1c2SsK4G9SBaDSFbKbb%2FT3UUelAAao24WLzXY%2BUrT482y%2BXpCAHukZ%2Bc2WlqbyMM6OeAs%2FoBc0sJ2%2FwyblNieYaXlgU8PHi0QwP20y5YRmdpIOoYChfe%2FVwGlY1Lh0NKVosebShS8j8nLFBlkdFtj0TshtV1Jucmiau4ZR%2BOUeLV3xzWJR84RwtLLipNpjLrjHwqW8G7Nk1nFRo4JOR%2Bs0uRqEwab8YUJv0F6l9fsQk7EwPA%2B81zsmPAjkig7pASGziJ5hYTH2NiVoNz8qhNoo5MoVdWTsZ53PdVmaGx%2BzSrmJ8UE%2Blze0m%2F0zRpiJHbo%2BxDD0pfBohrs3jWvezFfX0fKS%2B8bFFM6i8fFqSiXygYgaB7W5%2FFy0RdV9uuKPux39IkfjLN4Kb9UaH6Gm9qwZBT9I96XGDe87J4fGRIIek%2Fs2lTSE7wI%2BEbFILAcmJ7ul9dN%2B2ZB0EvrpPluRfgcqOzxHySj2AITXHFO0Gi1HPFKzO4MvqltKKIEHRjruCP7zBfNClJ%2F7zYKngdV4xFMGLRe%2B3BhkJmswdrjMmqbjQKoIE%2FtgpYF2tbqoYf7HB0NrRmjlvm7TMmiHA5O%2BgxEdKa88EwUjdKkylsUA2JBkquMVeZAkVTXyGQyYH0QWhlOasfsWRncUlH4hbRgGVXy3igaqxSn5EtIL1kNDoQM6wEveaTZfL%2BfcTl6WNOLNdiGaVzg%2BpOmFEmWiy8LP9BXvrFBauWBBBvq5X9Z%2FV%2B7XW7tW2lNZLZFqcbMjIgC1wDS3jCsKdyt8LhA61Xk03JHG3WeCspPze4O0VmcIeUiiu9NZO%2FVVbXGKomjSxlVxT%2Fz21gituWhIAkIIVC6u%2FnKVblNKx9Xq00GXdlpDsFYwjLl%2FmEWxvYBH1vOtjlqQF4AzkykSk662dpYTxIc%2BvSltpITZSYrIjTh1juWEtmZO%2FO7tnuehyxpbNUsWGXZakyYz4JuSPjfgfSWx2K7vXX%2BIN7iYeAOa6NGM4WxmnRio9W52sha502Shrfv%2B7SdTR7ay9t4iQWIlDSo3O9pR%2BkBVlzqsrejCpQ7h%2BRpiPkAzK6vFtY8IZoL%2BuiwjGLbORNSYtE%2FH8QlJhH6Gsd4h27LgRbeVUkd0W3H6d1D1B3xFAnjTMVsKINYf0C928atbBbPwqgXa1L%2F3xHuGTVWXFGawNpsrdk2WswopAsdnaQnoUtpDBDeLxA4wS25VFTR4cxOgBOd9TDJCSy7SJzRp2%2BZtauJ56r%2BSNELnqkcFC7KYEgsIMVXdr1jY12YD88WzyiOxg2HADQkeiEAI4m45pAUB3tpUcW0gapoWXKS8eDxNy9yUdOWNqY131U6gV4XgOUN5KWk6h7l7NItxH5RAaM1S4YilyWnrfBi5x6pdi4W2SjN1y5F9iRnoqW3Sk%2BsPSCRV6nXheb7Wzm2i8WhBmIC1nFempS3uq0y8ncK%2Fmey%2F6Z3lUEcFCbxXmelt%2BXe7YbaMNWzsrAK0vZV56ADQhuRF5mc8t9P8bf2qYk3ni9WZ%2F3Fvx2FUSTPqKwxrC1EdTD2oXy%2BNHGCdZmSzpZeg%3D%3D&redirectType=js&inIframe=false&inPopUp=false HTTP/1.1
Host: bxt2.shaperal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bxt2.shaperal.com/?utm_medium=f2a0c4f3fbe2823ee80dc4ba2e1e_834b8d892f53&utm_campaign=Push&cid=M2024032904-62200db55d5a8b9491439f6a45999299&kw1=195724
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 04:32:42 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| www.clktoro.com/feed/click/?t1=128&tid=760&uid=192&subid=shaperal.com&id=1aa86cd3dd3fb7d7501422e7693b8426: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 | 142.93.240.225 | | 1.9 kB |
URL www.clktoro.com/feed/click/?t1=128&tid=760&uid=192&subid=shaperal.com&id=1aa86cd3dd3fb7d7501422e7693b8426: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 IP142.93.240.225:0 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, ASCII text, with very long lines (1856), with no line terminators Hashb4e0741062215e0b028b9a246399918c 6dd3dc7918b24ff946c0dc688f686aca1effcffd 16325e68420255e863dfcd442b43df99d6ffc5eb5eb0c1c314cf32578353e575
GET /feed/click/?t1=128&tid=760&uid=192&subid=shaperal.com&id=1aa86cd3dd3fb7d7501422e7693b8426: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 HTTP/1.1
Host: www.clktoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bxt2.shaperal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Expires: 0
Location: https://redir.blowingwind.xyz/feed/click/?t1=128&tid=88&uid=59&subid=760_shaperal.com&id=72a3f475193cbc7d545e0c7e3dd7e445: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
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 1856
Date: Fri, 29 Mar 2024 04:32:43 GMT
Connection: keep-alive
Keep-Alive: timeout=5
|
|
| redir.blowingwind.xyz/feed/click/?t1=128&tid=88&uid=59&subid=760_shaperal.com&id=72a3f475193cbc7d545e0c7e3dd7e445:dd401ced8f6e1902c26a76894f0d9e43681688b1803f488d51d8f1a131d4536cd230f30afd464cd94bf66824cc723b877cbac961dadbb14d395913ddcac79ea7be44545dc0a6fc40df77959a27313352feb3554f90e76c44049f5e4823aa8a3bcaaa8e997dc963f26a1fdbdc7f01790585e3c88172794cbf621ab59755fd1bfa4592a7650eed34adc1a49a42f8d2029586832d2ecb3a5ec84d423e534fa4f3b14b47c4b66ac3333914ca6558cecbf6eefb2662ae35c36a60cd522f07aabd951e7d878f8b88403b979abac496f8cd3b9d517916a24c9148577e5c525fe8eb4cc27db88ff2a9a0a676376644b6c6392811db68775d64978ed66c13c7ce7cfe56ea403a3f48e1a43699c3a39c67a2db62215c38c34f4b2c308232d095a8c6f832c2983a7607f6658a3a0a99ea68303ed9e94f3235a2599a5ca74e7086c4b7ca301a53133591c15cb81fa61148c2c206095e90e056e4289e03cb6ec6ffccf12eeeadacc7ff6ffe20b33fb7cc5933872aec5b698c458ea49b4767f067bcb3dbf21a6c | 198.211.113.186 | | 352 B |
URL redir.blowingwind.xyz/feed/click/?t1=128&tid=88&uid=59&subid=760_shaperal.com&id=72a3f475193cbc7d545e0c7e3dd7e445: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 IP198.211.113.186:0 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, ASCII text, with very long lines (352), with no line terminators Hashb246c1ab4ee900487fb3a96d64fa31a3 485e346c1192646b2eab0c820744131f75eb5953 c08ab62d1772e048c70ef9a8d81dfe1286003f75656180053e47d8ee460c8c20
GET /feed/click/?t1=128&tid=88&uid=59&subid=760_shaperal.com&id=72a3f475193cbc7d545e0c7e3dd7e445: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 HTTP/1.1
Host: redir.blowingwind.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bxt2.shaperal.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Expires: 0
Location: http://sadbh-kye.com/zclkvisitor/61a65cb0-ed85-11ee-a83b-12c1731c357f/cfcdab84-dabd-11ed-962d-0ad412f815c1?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 352
Date: Fri, 29 Mar 2024 04:32:43 GMT
Connection: keep-alive
Keep-Alive: timeout=5
|
|
| sadbh-kye.com/zclkvisitor/61a65cb0-ed85-11ee-a83b-12c1731c357f/cfcdab84-dabd-11ed-962d-0ad412f815c1?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 | 34.227.55.10 | | 2.7 kB |
URL sadbh-kye.com/zclkvisitor/61a65cb0-ed85-11ee-a83b-12c1731c357f/cfcdab84-dabd-11ed-962d-0ad412f815c1?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 IP34.227.55.10:0
File typeHTML document, ASCII text, with very long lines (400) Hash08fc6b41fc208615a098b853cb8cc669 7bd5ae097f5447740cf33b5a581abb20be027fdc 27f9a0c409173a45fdb81617a524cf1a7ac4a9a531a3e9e714ed9e2b70b6618a
GET /zclkvisitor/61a65cb0-ed85-11ee-a83b-12c1731c357f/cfcdab84-dabd-11ed-962d-0ad412f815c1?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 HTTP/1.1
Host: sadbh-kye.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Fri, 29 Mar 2024 04:32:44 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
|
|
| sadbh-kye.com/zclkredirect?visitid=61a65cb0-ed85-11ee-a83b-12c1731c357f&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC | 34.227.55.10 | | 428 B |
URL sadbh-kye.com/zclkredirect?visitid=61a65cb0-ed85-11ee-a83b-12c1731c357f&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC IP34.227.55.10:0
File typeHTML document, ASCII text Hash45685f00efc5bce3b288da36d15275e2 f6a323dcdb030125b4191d339c757c1c1a7bbcab fccff8c34233812979a77db552588855e63f35066852a17b5c46bf467128c689
GET /zclkredirect?visitid=61a65cb0-ed85-11ee-a83b-12c1731c357f&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC HTTP/1.1
Host: sadbh-kye.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sadbh-kye.com/zclkvisitor/61a65cb0-ed85-11ee-a83b-12c1731c357f/cfcdab84-dabd-11ed-962d-0ad412f815c1?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Fri, 29 Mar 2024 04:32:45 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
redirected: JS
|
|
| sadbh-kye.com/favicon.ico | 34.227.55.10 | | 653 B |
URL sadbh-kye.com/favicon.ico IP34.227.55.10:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators Hashba2732b1b2fa2626ffaa15f62f9e7d66 203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe 879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: sadbh-kye.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://sadbh-kye.com/zclkredirect?visitid=61a65cb0-ed85-11ee-a83b-12c1731c357f&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Date: Fri, 29 Mar 2024 04:32:45 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Content-Language: en
|
|
| go.proffering.xyz/15GRtg?zoneid=zinnober-hippopotamuses&campaignid=2020224&target=kilo-law-1x26o5wl2m&cost=0.003310 |  159.89.109.183 | 302 Found | 252 B |
URL User Request GET HTTP/1.1go.proffering.xyz/15GRtg?zoneid=zinnober-hippopotamuses&campaignid=2020224&target=kilo-law-1x26o5wl2m&cost=0.003310 IP159.89.109.183:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgo.proffering.xyz Fingerprint72:AF:D3:5A:0F:1F:E6:66:87:42:85:43:67:9D:90:A2:B8:E5:26:B5 ValidityTue, 19 Mar 2024 07:19:09 GMT - Mon, 17 Jun 2024 07:19:08 GMT
File typeHTML document, ASCII text, with no line terminators Hashe2d3bd8fdea510bfa22691517b13e79a 14ab88ec322f00c087830fce81b87a55bf4ba16c 354476c6cc1aa70c6144b242393850bc0c88fddfae7419afdbc796842badffcf
GET /15GRtg?zoneid=zinnober-hippopotamuses&campaignid=2020224&target=kilo-law-1x26o5wl2m&cost=0.003310 HTTP/1.1
Host: go.proffering.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://sadbh-kye.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.25.3
Date: Fri, 29 Mar 2024 04:32:45 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 252
Connection: keep-alive
X-Powered-By: Express
Set-Cookie: 15GRtgo=20240329071711687441156; domain=.go.proffering.xyz; path=/;expires=Sat, 30 Mar 2024 04:32:45 GMT; httpOnly=true;SameSite=None; Secure;
_pc_lc_id=15GRtg; domain=.go.proffering.xyz; path=/;expires=Sat, 30 Mar 2024 04:32:45 GMT; httpOnly=true;SameSite=None; Secure;
peerclickcid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329; domain=.go.proffering.xyz; path=/;expires=Sat, 30 Mar 2024 04:32:45 GMT; httpOnly=true;SameSite=None; Secure;
_norg=1; domain=.go.proffering.xyz; path=/;expires=Sat, 30 Mar 2024 04:32:45 GMT; httpOnly=true;SameSite=None; Secure;
Location: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Vary: Accept
|
|
| girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 |  185.155.184.85 | 200 OK | 6.8 kB |
URL User Request GET HTTP/1.1girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 IP185.155.184.85:443
CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (533), with CRLF line terminators Hash809b37df75de6bdf72b5eec9275ffad7 abdce228d7cf36e3ffc27028b0f7e824eec7aee3 831fbe17f1a82a1238e0980a3cee8e36cb394418cb758d2d2d2357d495219ef8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sadbh-kye.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/html
Content-Length: 6813
Connection: keep-alive
set-cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs; path=/
cache-control: private, no-transform
|
|
| girlsflirthere.life/media/dating/sinderv2/css/bootstrap.min.css | 185.155.184.85 | 200 OK | 110 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/css/bootstrap.min.css IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeASCII text, with very long lines (65367), with CRLF line terminators Size110 kB (109540 bytes) Hash03d06426a30f77095d7511e1ca74d225 d1a349294f6fe94ffb17a50097b37bd81e9ba56a 3f7e6f3cb6ba8e2effbdd260131ce0d2f332fb00ba3feca1a5bc9c3ee7f9e2a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/css/bootstrap.min.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/css
Content-Length: 109540
Connection: keep-alive
ETag: "03d06426a30f77095d7511e1ca74d225"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C12153001025F5
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223362#755655374/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/js/vegas.js | 185.155.184.85 | 200 OK | 22 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/js/vegas.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJavaScript source, ASCII text Hash85310f0fc6d54ab6c4aa2a2efa1e8514 dbd124ed40a22170b23709711d4572ff93c9fe6f 17d0a5e4e45104aec83860cf51f19bb232747a586a74fc841b9771a9aa9e42b2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/js/vegas.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: application/javascript
Content-Length: 21792
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "85310f0fc6d54ab6c4aa2a2efa1e8514"
Last-Modified: Mon, 20 Feb 2023 09:32:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C12181A83935B4
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676801713#1186412/gid:0/gname:root/mode:33188/mtime:1659086506#637908000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:46.637908Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic | 142.250.74.106 | 200 OK | 1.3 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic IP142.250.74.106:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT
File typegzip compressed data, max compression Hashd579e720d10b48e1068a00d21ed0af7e 43e6632359e168bc8c8d916ca4476a1641d7639f fca0378f0f7c256ac6fa2416b53a2cbfa5a9b1749eec0087cb9bc147f1010047
GET /css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 29 Mar 2024 04:32:46 GMT
date: Fri, 29 Mar 2024 04:32:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| girlsflirthere.life/cookie/js.cookie.js | 185.155.184.85 | 200 OK | 4.3 kB |
URL GET HTTP/1.1girlsflirthere.life/cookie/js.cookie.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJavaScript source, ASCII text, with very long lines (1709), with CRLF line terminators Hasha7e9883924072f15259de6888d5ef515 7f4f6e5938e68f55aef81e0cd0145f008cd28382 985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cookie/js.cookie.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: application/javascript
Content-Length: 4264
Connection: keep-alive
ETag: "a7e9883924072f15259de6888d5ef515"
Last-Modified: Wed, 20 Sep 2023 15:19:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C12204D62A2A67
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#248036972/gid:0/gname:root/mode:33188/mtime:1658397637#354375000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-21T10:00:37.354375Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/css/style.css | 185.155.184.85 | 200 OK | 20 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/css/style.css IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeASCII text, with CRLF line terminators Hash7157a53ffb9afb73513901e9cb9b8b91 9e2049684cd1a83e699b11dfae35214acae2cc09 dac025579246852dcb348c61372b66879a24b28ff78c43220c4655a1c7a62671
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/css/style.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/css
Content-Length: 20007
Connection: keep-alive
ETag: "7157a53ffb9afb73513901e9cb9b8b91"
Last-Modified: Thu, 30 Nov 2023 15:24:54 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C121D20DEC69AF
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357885#739948373/gid:0/gname:root/mode:33279/mtime:1701357894#743961887/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:24:54.798Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/css/vegas.css | 185.155.184.85 | 200 OK | 20 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/css/vegas.css IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeASCII text, with CRLF line terminators Hash357c7befa8bdef911f02f48f49e10628 47972e3c4591058dce82dd3b08bed8e0b8ae5c8f 47f3bef4746b798892c7beff212618616b0950f33f416f03db243578f89135e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/css/vegas.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/css
Content-Length: 19822
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "357c7befa8bdef911f02f48f49e10628"
Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C12175AFFD6DC8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/util/utils.js | 185.155.184.85 | 200 OK | 7.5 kB |
URL GET HTTP/1.1girlsflirthere.life/util/utils.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJavaScript source, ASCII text, with very long lines (641), with CRLF line terminators Hash01816d15ca03032751161a746e2fb7c3 dcc72ea5fa1356490ba473288159df9786b4a3c3 8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /util/utils.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: application/javascript
Content-Length: 7512
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Mon, 20 Feb 2023 09:36:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C121F81EC9DA91
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676885559#334512232/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/css/animate.css | 185.155.184.85 | 200 OK | 61 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/css/animate.css IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeASCII text, with very long lines (460), with CRLF line terminators Hash1cbfbb2c4ef85880799a74ab2f290f2a 9b6366d6c7ad05010f7070db70fba10754be6e9c bfdad6766b12a3826bf32024f0fc13fffbcee84f102034b9270da7e538451031
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/css/animate.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/css
Content-Length: 61188
Connection: keep-alive
ETag: "1cbfbb2c4ef85880799a74ab2f290f2a"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C12073C7E918D6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223362#755655374/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/util/flag-icon/css/flag-icon.css | 185.155.184.85 | 200 OK | 41 kB |
URL GET HTTP/1.1girlsflirthere.life/util/flag-icon/css/flag-icon.css IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeASCII text, with CRLF line terminators Hash0a47b937981e7389e3ebe63e4a503066 01b395ad016a1d9d15016d765f7d2c51a6e2809b d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /util/flag-icon/css/flag-icon.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/css
Content-Length: 40627
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "0a47b937981e7389e3ebe63e4a503066"
Last-Modified: Mon, 20 Feb 2023 09:36:38 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C120A53B601472
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676841679#813157920/gid:0/gname:root/mode:33188/mtime:1655386274#684017000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:31:14.684017Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/js/timer.js | 185.155.184.85 | 200 OK | 621 B |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/js/timer.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJavaScript source, ASCII text Hash40fe503eb84093a37b15e39365ffc587 911128043c901314d283fe478477d26e2b3d821a 60b0f0de4c72c1ce9c05b36ba776f12538b1d9b80858b7099068a3e7e0415bc1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/js/timer.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: application/javascript
Content-Length: 621
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "40fe503eb84093a37b15e39365ffc587"
Last-Modified: Mon, 20 Feb 2023 09:32:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C1207060532C36
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676801713#1186412/gid:0/gname:root/mode:33188/mtime:1659086506#89907000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:46.089907Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/js/trls_loveme_casual.js | 185.155.184.85 | 200 OK | 16 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/js/trls_loveme_casual.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashbba2d28791accbb75b5b0c6edd241c9e c82d5711a31efaa6ba7e3bbf6cb5edac89ef65b4 bce59258d0085ddd7fdc338cc7a96b32cf01198aefde34adc336e6c0208f9b4c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/js/trls_loveme_casual.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/javascript
Content-Length: 15966
Connection: keep-alive
ETag: "bba2d28791accbb75b5b0c6edd241c9e"
Last-Modified: Sun, 10 Dec 2023 22:36:24 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C12094FC7D7C90
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357944#300036177/gid:0/gname:root/mode:33188/mtime:1702247784#625610336/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-12-10T22:36:24.852Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/js/jquery.js | 185.155.184.85 | 200 OK | 93 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/js/jquery.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJavaScript source, ASCII text, with very long lines (32072) Hashdf6173bad69801a82b84701789ab16c5 94908755cae039762ad53086b858eac553e3f56e cd8f413e39247d48ea354b8fb11c227e72f641403bd8d4dd81cd7473d60daafb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/js/jquery.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: application/javascript
Content-Length: 93064
Connection: keep-alive
ETag: "df6173bad69801a82b84701789ab16c5"
Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C12181A5C18053
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#328018459/gid:0/gname:root/mode:33188/mtime:1659086505#825907000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:45.825907Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/bb.js | 185.155.184.85 | 200 OK | 639 B |
URL GET HTTP/1.1girlsflirthere.life/media/bb.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeASCII text, with very long lines (639), with no line terminators Hash0d553e4bac91c74bfee2dbabba61e99e 5af71e2377c9c012a7826a695f2724901941b19b 1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/bb.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: application/javascript
Content-Length: 639
Connection: keep-alive
ETag: "0d553e4bac91c74bfee2dbabba61e99e"
Last-Modified: Wed, 20 Sep 2023 15:21:05 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C12078C4B77778
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#756035434/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/exit-new/exit1.js | 185.155.184.85 | 200 OK | 3.5 kB |
URL GET HTTP/1.1girlsflirthere.life/media/exit-new/exit1.js IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJavaScript source, ASCII text, with very long lines (641), with CRLF line terminators Hash625e5e2950612f771e246beb33c9ea61 e4fc251c6c000496c285f8dc3fa097040b031681 618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/exit-new/exit1.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: text/javascript
Content-Length: 3473
Connection: keep-alive
ETag: "625e5e2950612f771e246beb33c9ea61"
Last-Modified: Tue, 21 Nov 2023 12:30:04 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C12078D5DC8293
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223389#507714946/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/images/logo-loveme_white1.svg | 185.155.184.85 | 200 OK | 4.6 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/images/logo-loveme_white1.svg IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeSVG Scalable Vector Graphics image Hash896592d7f2fa3d761c0b767e9399b010 ed1c0502263392938f4cbdd72afb1a8704bf840e 3417f549b6a1018ee687dd84aec136cb7fba2bb5b4c83cf269f9f8e958cc48de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/images/logo-loveme_white1.svg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: image/svg+xml
Content-Length: 4564
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "896592d7f2fa3d761c0b767e9399b010"
Last-Modified: Mon, 20 Feb 2023 09:32:05 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C1218EEAA486FF
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#463665375/gid:0/gname:root/mode:33188/mtime:1655387527#38754000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:52:07.038754Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 | 185.155.184.85 | 200 OK | 22 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22284, version 3.786 Hash5c92d5d3e39a260d5dd06ced7eca070d 64df09fd462e6bb76890b7782578777b901f2003 2a99c11dd137ef8b515b3a95d2bdb38ec99bf745b2865196aa910628bcb144b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: font/woff2
Content-Length: 22284
Connection: keep-alive
ETag: "5c92d5d3e39a260d5dd06ced7eca070d"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C120C0B77FD1D8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 | 185.155.184.85 | 200 OK | 22 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 21796, version 3.786 Hashb796339b324ec08006ca04dca90284cf 4283d779705f09e68939572df76c52cb41a3ec68 d65bbca022f8953936d6e60b9a59fc27f9bfd74ba96257ffe14df83b3d8eb0e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: font/woff2
Content-Length: 21796
Connection: keep-alive
ETag: "b796339b324ec08006ca04dca90284cf"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C121AC0C27AC2E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 | 185.155.184.85 | 200 OK | 15 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14772, version 3.327 Hashbcf3bb1b7f7a3436181788e748bae013 8ee24d38f618f070a43619f1d471d90f17d666f1 42e50c76c1bf569cb8b597ffc8cdd18a6f4a311832f46fdc1489145027550781
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: font/woff2
Content-Length: 14772
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "bcf3bb1b7f7a3436181788e748bae013"
Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT
No-Gzip-Compression: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C120C0B7EFF3C3
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/util/flag-icon/flags/4x3/no.svg | 185.155.184.85 | 200 OK | 331 B |
URL GET HTTP/1.1girlsflirthere.life/util/flag-icon/flags/4x3/no.svg IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeSVG Scalable Vector Graphics image Hashc7ecfe59439b5fd23924fd206cf2fded 056fbd2b17c7f08bfb480d21973a96bf86fbd72a 4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/util/flag-icon/css/flag-icon.css
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: image/svg+xml
Content-Length: 331
Connection: keep-alive
ETag: "c7ecfe59439b5fd23924fd206cf2fded"
Last-Modified: Wed, 20 Sep 2023 15:26:17 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C120C7749C6997
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#304037147/gid:0/gname:root/mode:33188/mtime:1655386305#848080000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:31:45.84808Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 | 185.155.184.85 | 200 OK | 22 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 21908, version 3.786 Hash2e5fca371696cab9fb5a9fe214c1319c 4bd3fe039b2f65d10d1b8c1b30c7962bdc313b7a f8b1a05998ba7e93e5c9f41b004496a3576b8d10d9fafc2f7014894ebc3e72e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: font/woff2
Content-Length: 21908
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2e5fca371696cab9fb5a9fe214c1319c"
Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT
No-Gzip-Compression: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C1215D9A5A507F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/images/scandinavia5_alt.jpg | 185.155.184.85 | 200 OK | 127 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/images/scandinavia5_alt.jpg IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3 Size127 kB (126683 bytes) Hashbffdb574e3ab8f9d16a875f4b6198710 53c165f892c41cb5e9b16d2bc3e231dfc829b057 353ae5fbc61b5a9efe59e2047e9e0abeb454b5af1c286a93f12ce3890d458175
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/images/scandinavia5_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Content-Type: image/jpeg
Content-Length: 126683
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "bffdb574e3ab8f9d16a875f4b6198710"
Last-Modified: Thu, 30 Nov 2023 15:25:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C1220B9C382482
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357926#176009000/gid:0/gname:root/mode:33188/mtime:1701357926#376009299/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:26.432Z
Expires: Sat, 29 Mar 2025 04:32:46 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/favicon.ico | 185.155.184.85 | 204 No Content | 0 B |
URL GET HTTP/1.1girlsflirthere.life/favicon.ico IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 29 Mar 2024 04:32:46 GMT
Connection: keep-alive
Cache-Control: no-transform
|
|
| girlsflirthere.life/media/dating/sinderv2/images/scandinavia6_alt.jpg | 185.155.184.85 | 200 OK | 164 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/images/scandinavia6_alt.jpg IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3 Size164 kB (164464 bytes) Hashd3a0904ff1e85ac9203f192477ccea32 3dc2eb88095e93448fd627cc53e78bda983ce2a3 96884c8509dee0360a0d7e39156b38f067bf977bceb6524a189fe21872dfda1d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/images/scandinavia6_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:51 GMT
Content-Type: image/jpeg
Content-Length: 164464
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "d3a0904ff1e85ac9203f192477ccea32"
Last-Modified: Thu, 30 Nov 2023 15:25:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C1220CD75E76D0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357925#680008258/gid:0/gname:root/mode:33188/mtime:1701357925#928008629/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:25.98Z
Expires: Sat, 29 Mar 2025 04:32:51 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/images/scandinavia4_alt.jpg | 185.155.184.85 | 200 OK | 172 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/images/scandinavia4_alt.jpg IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3 Size172 kB (171781 bytes) Hashe23a20555d1a9fd6f5f7a988dcf84a46 42c966cbbd9e6bec41ceef39e437066acc74295c f042e79c205194be5f3bfe06e3f51f94dd9565ebf2d49a38249b374348c78f64
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/images/scandinavia4_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:32:57 GMT
Content-Type: image/jpeg
Content-Length: 171781
Connection: keep-alive
ETag: "e23a20555d1a9fd6f5f7a988dcf84a46"
Last-Modified: Thu, 30 Nov 2023 15:25:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17C1220E11E703B0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357926#636009690/gid:0/gname:root/mode:33188/mtime:1701357926#888010067/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:26.945Z
Expires: Sat, 29 Mar 2025 04:32:57 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| girlsflirthere.life/media/dating/sinderv2/images/scandinavia1_alt.jpg | 185.155.184.85 | 200 OK | 133 kB |
URL GET HTTP/1.1girlsflirthere.life/media/dating/sinderv2/images/scandinavia1_alt.jpg IP185.155.184.85:443
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectgirlsflirthere.life Fingerprint9E:9D:E5:E2:EF:40:9E:AB:1F:B0:6D:B9:C0:A1:C6:15:C3:9A:E4:6B ValidityThu, 08 Feb 2024 23:49:57 GMT - Wed, 08 May 2024 23:49:56 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3 Size133 kB (132802 bytes) Hash19b66b80d93b12a4f00f18a467d9e6be 226d6a060f76324be719be6317828f1547208bb0 6b7139ccbab356327e683edfde4cc7d9f75654dc6162a0970b31543f73d0ca17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dating/sinderv2/images/scandinavia1_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329
Cookie: sid=t2~bdrdafktyxtaqbntbvwvskjs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Mar 2024 04:33:02 GMT
Content-Type: image/jpeg
Content-Length: 132802
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "19b66b80d93b12a4f00f18a467d9e6be"
Last-Modified: Thu, 30 Nov 2023 15:25:28 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17C1220F4E3B302B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357928#132011931/gid:0/gname:root/mode:33188/mtime:1701357928#332012232/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:28.388Z
Expires: Sat, 29 Mar 2025 04:33:02 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
|
|
| data-jsext.com/ExtService.svc/getextparams | 136.243.216.252 | 200 OK | 537 B |
URL GET HTTP/2data-jsext.com/ExtService.svc/getextparams IP136.243.216.252:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=33e5b0d5b4333ad51bce027e73c4db47-11246-0329 CertificateIssuerLet's Encrypt Subjectdata-jsext.com FingerprintC1:16:89:38:64:89:7A:27:73:30:A1:1D:1B:A0:78:99:8D:61:2F:69 ValidityMon, 25 Mar 2024 00:20:03 GMT - Sun, 23 Jun 2024 00:20:02 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (628), with no line terminators Hash5ec97a4fc29753597cc70f645efcccdd d7b13fa52a32c29ba6c95b473f518945dcac66c4 3bd677f4fbc07ee31db8dd523d938a7e050640513aea2f98e53f35656d7f6804
GET /ExtService.svc/getextparams HTTP/1.1
Host: data-jsext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://girlsflirthere.life
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 29 Mar 2024 04:32:46 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|