| lookthewomen.online/fav/lw/img/tt/02/user3.jpg |  188.114.97.1 | 200 OK | 5.0 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/user3.jpg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 51x51, components 3 Hash2bdcf5776af605ee57b666d0a62df377 e1b2e815a94791e42330e6fdfd758bd5c5de5ee6 bbc1a8c1b822ab5b61c57fe533a10e5c6f380b80163a7d7558f9bc61fbf60d58
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/user3.jpg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: image/jpeg
content-length: 4964
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: "6615136d-1364"
expires: Wed, 23 Apr 2025 16:31:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 135033
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V67qYTtPNqVZE3vgK7tRLebnuojJQlK%2Fj3rI07I%2BKgspDJwlQEhu7w3fAI8BkUMzsvzCm16olIu7%2B1%2BDwr2o5Qo72FOkSudF%2Fm4W8rqX20hP8Z5%2BoyqD8hwLBHa%2BmOpep9wTkIwY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f957a5eb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/user4.jpg | 188.114.97.1 | 200 OK | 5.3 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/user4.jpg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 51x51, components 3 Hash37d21055516c4361a79e356ac609f605 8e2275eecbc0e5aa8c2707785db621adbe2ba49c 9282463fcf1257751ed14adcc2ddc0c091afda35f6eaa3e61ab90f03ef06c4dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/user4.jpg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: image/jpeg
content-length: 5295
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: "6615136d-14af"
expires: Wed, 23 Apr 2025 16:31:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 135033
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pJdy0ro6hOKC1s3IcMmkQ538BA92ONSpnKnKhQP9nA3weEWmnUePxuQlw8tL1jyZCONdbUdFEy%2Bd%2FZDIU4LP83IMrekki%2F5QRve9J%2FNaQxbon5cmKMWBmrJBNK0hYtqYocjFSIXo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f957a5fb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/user2.jpg | 188.114.97.1 | 200 OK | 5.4 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/user2.jpg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 51x51, components 3 Hasheb3ecb85bcde94be358871b23d15c147 428e7e9e175f4f10b662e3d02a6c4a3704335469 2a23e15019f8b419389a42c9007c534a6638c215354a9856b155ba3d54f3d1f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/user2.jpg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: image/jpeg
content-length: 5362
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: "6615136d-14f2"
expires: Fri, 25 Apr 2025 06:02:17 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F2k7uR5dZVk%2F6B%2BDMCiihOO1bSLc6e6rSJJt4cimLrTXGwpoZCtpBuVp19IcLwNxgRBVXCqZNQ8ZzbwsG77Y5EKLPPCjRNhCcN%2Fjuf%2BZ0HA8ilrbvZmD524BtJtxVsPIIt6vANUc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f957a5db51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=UA-166266073-1 |  142.250.74.72 | 200 OK | 73 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-166266073-1 IP142.250.74.72:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash11478ecd34a0423d88211cd22757026d ace6233d960c379340e77a52f43237f8da90e8a5 9f824461006728b90291566f9f9d1defcfd0e48db2b2163d07dc3daa8fb178c8
GET /gtag/js?id=UA-166266073-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:02:17 GMT
expires: Thu, 25 Apr 2024 06:02:17 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73317
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/@growthbook/growthbook/dist/bundles/index.js | 151.101.193.229 | 200 OK | 22 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/@growthbook/growthbook/dist/bundles/index.js IP151.101.193.229:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text Hash6cd500fe2d5c8b62a8636327abb3e94e e4588028412a77ff545ac40c1f18c818159879d3 b4e4fc55b35bf48042ea2d8b5937e0a99f74c97601ca1c435a0ebd6c8d2b8673
GET /npm/@growthbook/growthbook/dist/bundles/index.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.36.0
x-jsd-version-type: version
etag: W/"1644e-5FiAKEEqd/9UWsQMHxjIGBWYedM"
content-encoding: br
accept-ranges: bytes
date: Thu, 25 Apr 2024 06:02:17 GMT
age: 24408
x-served-by: cache-fra-eddf8230076-FRA, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22503
X-Firefox-Spdy: h2
|
|
| icalendar.datingtopgirls.com/icalendar.js | 31.220.24.141 | 200 OK | 2.2 kB |
URL GET HTTP/1.1icalendar.datingtopgirls.com/icalendar.js IP31.220.24.141:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerLet's Encrypt Subjectdatingtopgirls.com Fingerprint4F:DD:97:E6:8E:2E:C6:BB:13:0F:08:4F:85:1E:AF:8B:F9:A0:F1:62 ValidityTue, 27 Feb 2024 22:01:39 GMT - Mon, 27 May 2024 22:01:38 GMT
File typeJavaScript source, ASCII text Hash6305e17ce1f228a52ae7bb5293323418 0e2b4ddddb1197b8f3f1bd6adfe2840ffc0182f3 7e6613a50eaf24e896aa9b18eec7158ce12fd40cbe02a1d3f4af355fd553a28b
GET /icalendar.js HTTP/1.1
Host: icalendar.datingtopgirls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 25 Apr 2024 06:02:17 GMT
Content-Type: application/javascript
Last-Modified: Tue, 19 Dec 2023 15:13:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6581b305-1d8c"
Content-Encoding: gzip
|
|
| law.datingtopgirls.com/util/1-small.jpg | 31.220.24.141 | 200 OK | 63 kB |
URL GET HTTP/1.1law.datingtopgirls.com/util/1-small.jpg IP31.220.24.141:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerLet's Encrypt Subjectdatingtopgirls.com Fingerprint4F:DD:97:E6:8E:2E:C6:BB:13:0F:08:4F:85:1E:AF:8B:F9:A0:F1:62 ValidityTue, 27 Feb 2024 22:01:39 GMT - Mon, 27 May 2024 22:01:38 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2021:02:02 15:44:59], baseline, precision 8, 240x240, components 3 Hash30737574deb1bfc2fbe5ccb5ced7b656 12f02e651c9d3ac340c23aede3b2d9409194d6f5 711fa4742db0c2a94c5e7d87c3f7a0c8208418d49f93aad353f8b6a0aba7fb29
GET /util/1-small.jpg HTTP/1.1
Host: law.datingtopgirls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 25 Apr 2024 06:02:17 GMT
Content-Type: image/jpeg
Content-Length: 62808
Last-Modified: Wed, 10 Feb 2021 13:16:58 GMT
Connection: keep-alive
ETag: "6023dcca-f558"
Accept-Ranges: bytes
|
|
| lookthewomen.online/fav/lw/img/tt/02/user.jpg | 188.114.97.1 | 200 OK | 7.8 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/user.jpg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 70x70, components 3 Hashfadcdeb1782de10ecdd2d4aa05c946a6 bf3b767b61cd0c2083a9a4631a22c65641096b9d 73639e9a02a35bb2449dfd83d19cfd4d58760ce6dbdf7867676449d6d6687aac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/user.jpg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/jpeg
content-length: 7793
last-modified: Tue, 09 Apr 2024 14:19:20 GMT
etag: "66154e68-1e71"
expires: Sun, 13 Apr 2025 03:55:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1044412
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFvhwCdJdO9m%2Bz3Zr%2F7FahtnBtAR56dO%2BGrFUbga5WDl7G4lirf%2FB%2B%2BQG4UAJx5Sb3MhkjHH9UadBnNfMJ0HU%2FxWc5z4n8fB%2BtVuFL38%2B5PR%2Fr2m5BMKwXQ%2F86AJdJOqgnfFsp3r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f972bd5b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookthewomen.online
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 135280
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-T76Q9QX | 142.250.74.72 | 200 OK | 72 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-T76Q9QX IP142.250.74.72:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (3870) Hash9fbe5162f8e64a9f9016eda526348770 9bf7fb86d89f18acaf1260b42a6cab0aa9245506 1333a23c27de31a9ad33fbdb60d415d38612b28c4a3c4cc13324b11e4261bcbd
GET /gtm.js?id=GTM-T76Q9QX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:02:18 GMT
expires: Thu, 25 Apr 2024 06:02:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72448
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookthewomen.online
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 187667
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lookthewomen.online/fav/lw/css/tt/06/style.css | 188.114.97.1 | 200 OK | 3.8 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/css/tt/06/style.css IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
Hash966ddff1d74450cefc64d8b56622eff6 8a163361f8f8643f82f43a02314c806082ebbe39 34c43f82c396ef556bc20d639e7be0c71022c964f348c251d44c684a396cab5f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/css/tt/06/style.css HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-36eb"
expires: Fri, 25 Apr 2025 06:02:17 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XXR9Dt938bIjsfuiocjGBk2OjpsCv1vIwDgteA1FFYLIrdS8BJq1kLRFVT1dkXjzV9Ph97MHEK6pSL1ROEmYfrcixSotHiQuFLJSv7yK9zoIdq1aNk%2FdM%2Fkud5XBpyjiNx3CTMEg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f957a5cb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-1008R4LXMB&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 87 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-1008R4LXMB&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashdbe162d60929969b95b45583b45279f7 41bdd7c27442acc828e58d0d24d17509500d25b8 57c9706321fa5981fdc99357f1f2e9e2b41aca601a1c6d7dab6445cf139073b9
GET /gtag/js?id=G-1008R4LXMB&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:02:18 GMT
expires: Thu, 25 Apr 2024 06:02:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86966
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-Q7W6GLM2DR&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 99 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-Q7W6GLM2DR&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Hash4bef74e82ee81920fa38bbe3e324087a 35fe2363452d74775f6bfda408e2060bc6f266c1 7a76cdd5abbf9e08ca543f2f7f31f2ab35fc3db3b1017541788266e37f5eb885
GET /gtag/js?id=G-Q7W6GLM2DR&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:02:18 GMT
expires: Thu, 25 Apr 2024 06:02:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 98657
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| sdk.pushify.co/v2/pushify.js |  45.131.147.149 | 200 OK | 7.2 kB |
URL GET HTTP/1.1sdk.pushify.co/v2/pushify.js IP45.131.147.149:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerLet's Encrypt Subject*.pushify.co Fingerprint10:01:F8:59:29:74:8B:D9:1C:7F:D5:46:0C:5C:15:37:99:81:69:01 ValidityFri, 16 Feb 2024 21:54:50 GMT - Thu, 16 May 2024 21:54:49 GMT
File typeJavaScript source, ASCII text, with very long lines (7245) Hash23bb31b71b50db454e839e40f03ba326 08a11d3de3b26601fa7689fc435742d1af364e5b 3b721faae605decb7b620bfd2798816a19377b3593c6d0fed64f9a3c90c48654
GET /v2/pushify.js HTTP/1.1
Host: sdk.pushify.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 25 Apr 2024 06:02:18 GMT
Content-Type: application/javascript
Content-Length: 7246
Connection: keep-alive
Last-Modified: Wed, 28 Feb 2024 12:38:16 GMT
ETag: "65df2938-1c4e"
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-Ranges: bytes
|
|
| pwrgrowthapi.com/api/features/sdk-KJYgHm9pSDpLfmzG | 31.220.24.142 | 200 OK | 31 kB |
URL GET HTTP/2pwrgrowthapi.com/api/features/sdk-KJYgHm9pSDpLfmzG IP31.220.24.142:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerLet's Encrypt Subjectpwrgrowthapi.com Fingerprint11:DD:E4:7C:A1:14:C8:D8:E3:B4:91:56:A8:C5:A1:F6:C2:1F:E5:C4 ValidityWed, 24 Apr 2024 09:05:54 GMT - Tue, 23 Jul 2024 09:05:53 GMT
Hash6f4b23628aa241f7ee3575c1c25c91b4 e19cf0152a3335b78f7783f3d45ca48e374db769 0b356f3fae063dfe33fb9aa8e5ecd2db4507fee52c297248a7b3f4cc30160cc2
GET /api/features/sdk-KJYgHm9pSDpLfmzG HTTP/1.1
Host: pwrgrowthapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookthewomen.online/
Origin: https://lookthewomen.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.22.1
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: application/json; charset=utf-8
content-length: 31294
x-powered-by: Express
access-control-allow-origin: *
x-sse-support: enabled
access-control-expose-headers: x-sse-support
etag: W/"7a3e-4ZzwFSozNbePd4Pz1FykjjdNt2k"
X-Firefox-Spdy: h2
|
|
| lookthewomen.online/fav/lw/img/tt/06/user.jpg | 188.114.97.1 | 200 OK | 7.8 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/06/user.jpg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 70x70, components 3 Hashfadcdeb1782de10ecdd2d4aa05c946a6 bf3b767b61cd0c2083a9a4631a22c65641096b9d 73639e9a02a35bb2449dfd83d19cfd4d58760ce6dbdf7867676449d6d6687aac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/06/user.jpg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937; _sp_ses.66c3=*; _sp_id.66c3=3ddcab38-7f9b-4bba-93bd-ced448e4875f.1714024938.1.1714024938..82f063a5-9e9d-4284-85f1-bd5dc5bdd2d0....0; _ga_1008R4LXMB=GS1.1.1714024938.1.0.1714024938.0.0.0; _ga=GA1.1.940460774.1714024938
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/jpeg
content-length: 7793
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: "6615136d-1e71"
expires: Fri, 25 Apr 2025 06:02:18 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Y7Sc2KYITZPR9ObIfOjw6dvuqR94rdS8%2BhGQAMawxociQWNsOePnQVs1wqqO4I%2Fccbt%2B69nkqUA1dNaN0brOTVNGf3BGhoGyuostg1syXLYOsej8yCfSUxsvAvNfvJx6KiPam7i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f99fde9b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/images.svg | 188.114.97.1 | 200 OK | 7.5 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/images.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hash80d26bc3f424d38fb435144d799ad9ee 302d66033510c1b0a4de78cbf5b5c56670e323ff 067706a7b13bcff219e39acc7376ea89e228de9aa326b93eb9342f4b7a88fc50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/images.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-27b5"
expires: Wed, 23 Apr 2025 16:31:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 135034
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KMizr6dOQikX7cg7uXiLqARSYCMOrmGW5v9ycfUeXbZqZfXRFSbNa%2FwrzyEnNGr%2BwwXDktN1Yrna%2BfmPNs1Ltg56MFwwhqMkoKTlQTMiPLyIEuoKCUufQ5fTKqmABO2nMMjBMRD9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f972bd2b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=45je44o0v888036880z8840511593za200&_p=1714024938054&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=940460774.1714024938&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714024938&sct=1&seg=0&dl=https%3A%2F%2Flookthewomen.online%2Ftt%2F06%3Fsub1%3D6629f1d48d822600011260b5%26sub2%3D%26sub3%3D%26sub4%3D%26affiliate_id%3D1698%26source%3D%26mst%3D2&dt=&en=page_view&_fv=1&_ss=1&tfd=1071 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=45je44o0v888036880z8840511593za200&_p=1714024938054&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=940460774.1714024938&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714024938&sct=1&seg=0&dl=https%3A%2F%2Flookthewomen.online%2Ftt%2F06%3Fsub1%3D6629f1d48d822600011260b5%26sub2%3D%26sub3%3D%26sub4%3D%26affiliate_id%3D1698%26source%3D%26mst%3D2&dt=&en=page_view&_fv=1&_ss=1&tfd=1071 IP216.239.34.36:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q7W6GLM2DR>m=45je44o0v888036880z8840511593za200&_p=1714024938054&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=940460774.1714024938&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714024938&sct=1&seg=0&dl=https%3A%2F%2Flookthewomen.online%2Ftt%2F06%3Fsub1%3D6629f1d48d822600011260b5%26sub2%3D%26sub3%3D%26sub4%3D%26affiliate_id%3D1698%26source%3D%26mst%3D2&dt=&en=page_view&_fv=1&_ss=1&tfd=1071 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookthewomen.online
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lookthewomen.online
date: Thu, 25 Apr 2024 06:02:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=45je44o0v888036880za200&_p=1714024938054&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=940460774.1714024938&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&sid=1714024938&sct=1&seg=0&dl=https%3A%2F%2Flookthewomen.online%2Ftt%2F06%3Fsub1%3D6629f1d48d822600011260b5%26sub2%3D%26sub3%3D%26sub4%3D%26affiliate_id%3D1698%26source%3D%26mst%3D2&dt=&_s=2&tfd=6103 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-Q7W6GLM2DR>m=45je44o0v888036880za200&_p=1714024938054&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=940460774.1714024938&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&sid=1714024938&sct=1&seg=0&dl=https%3A%2F%2Flookthewomen.online%2Ftt%2F06%3Fsub1%3D6629f1d48d822600011260b5%26sub2%3D%26sub3%3D%26sub4%3D%26affiliate_id%3D1698%26source%3D%26mst%3D2&dt=&_s=2&tfd=6103 IP216.239.34.36:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q7W6GLM2DR>m=45je44o0v888036880za200&_p=1714024938054&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=940460774.1714024938&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&sid=1714024938&sct=1&seg=0&dl=https%3A%2F%2Flookthewomen.online%2Ftt%2F06%3Fsub1%3D6629f1d48d822600011260b5%26sub2%3D%26sub3%3D%26sub4%3D%26affiliate_id%3D1698%26source%3D%26mst%3D2&dt=&_s=2&tfd=6103 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 255
Origin: https://lookthewomen.online
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://lookthewomen.online
date: Thu, 25 Apr 2024 06:02:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 | 188.114.97.1 | 200 OK | 15 kB |
URL User Request GET HTTP/2lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (920) Hash8494ddbeff5cbc1d818f560f471bade5 736a8452a336a87db707eff64faa73bf7548543e a23c8fa50893a8f8e8d492c5e13d6e2f8b42d73964441883bb8d8d5834866e7f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: text/html; charset=UTF-8
set-cookie: hashid=85fcaaac2ced83af21b6563b56342b75; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
country=Norway; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
region=Oslo+County; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
country_code=no; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
city=Oslo; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
latitude=59.9016; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
longitude=10.7343; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
tour=06; expires=Sun, 25-Apr-2027 06:02:17 GMT; Max-Age=94608000; path=/
affiliate_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
affiliate_id=1698; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub1=6629f1d48d822600011260b5; expires=Fri, 25-Apr-2025 06:02:17 GMT; Max-Age=31536000; path=/
sub2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub3=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub4=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub5=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub6=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub7=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
sub8=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
tour=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
oti=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
fs=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
st=1714024937; expires=Fri, 26-Apr-2024 06:02:17 GMT; Max-Age=86400; path=/
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FW5czuADdQQN3Pq58YSeCBfwrYjA1KqfOvmHmLtE%2B9vU7wTtJxOvC3x%2B9xjNm7m%2Bx%2BezBF6WurOzC6RAu7MABglVsotPFvhoCSUqFirx2Aj4dyt3HMAjOWTzVTHXIK4ljFUhlaOm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c1f93ec7656bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pwrgrowthapi.com/sub/sdk-KJYgHm9pSDpLfmzG |  0.0.0.0 | | 0 B |
URL GET pwrgrowthapi.com/sub/sdk-KJYgHm9pSDpLfmzG IP0.0.0.0:0
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerLet's Encrypt Subjectpwrgrowthapi.com Fingerprint11:DD:E4:7C:A1:14:C8:D8:E3:B4:91:56:A8:C5:A1:F6:C2:1F:E5:C4 ValidityWed, 24 Apr 2024 09:05:54 GMT - Tue, 23 Jul 2024 09:05:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sub/sdk-KJYgHm9pSDpLfmzG HTTP/1.1
Host: pwrgrowthapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/event-stream
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookthewomen.online
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| lookthewomen.online/js/sp.js | 188.114.97.1 | 200 OK | 74 kB |
URL GET HTTP/3lookthewomen.online/js/sp.js IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJavaScript source, ASCII text, with very long lines (65378) Hash3fb00dbb8acb3c68fd5ddb674f22bb88 cf7bc4f71f0ff66037ac2e564963ff4c2737e766 7d3d84e73da67922341950d1542a5a5da2420ea18026e314a9aec22f631e4246
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/sp.js HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 14:19:20 GMT
etag: W/"66154e68-12240"
expires: Sun, 13 Apr 2025 03:55:13 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1044425
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MSCXV%2FE1fEBRYzK1Dir9pRR%2B2L9ars9hoPujlmkl0xPweXu7TCLNuJ9GcH9V%2FdZWcG2dzLYQ9THLuRApDA9hQxw9sDG4U4RVJOtYNP%2FrpLmZ%2FVFD%2FaJHATTb2oh6KA%2FJmox5x865"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f971bbeb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/@growthbook/growthbook/dist/bundles/esm.min.js | 104.17.245.203 | 302 Found | 35 kB |
URL GET HTTP/2unpkg.com/@growthbook/growthbook/dist/bundles/esm.min.js IP104.17.245.203:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /@growthbook/growthbook/dist/bundles/esm.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookthewomen.online
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@growthbook/growthbook@0.36.0/dist/bundles/esm.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HW9XHYM9HVGHCM4ABANHKMS1-arn
cf-cache-status: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879c1f972e805687-OSL
X-Firefox-Spdy: h2
|
|
| lookthewomen.online/fav/lw/js/main-tour.js?91 | 188.114.97.1 | 200 OK | 8.6 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/js/main-tour.js?91 IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJavaScript source, ASCII text, with very long lines (8992), with no line terminators Hashe7d1259f6f1a775e616d6fed774f636e 8b4e5027fd4eb9304765e78bffeb5ae9e5ddd01a 2070b438e67b145191b7f1d636af77b94280b9e4c9e5631c04737c9b1d39b77f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/js/main-tour.js?91 HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 14:19:20 GMT
etag: W/"66154e68-21bf"
expires: Sun, 13 Apr 2025 03:55:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1044436
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2vJ0RZCbYq91rLx3p6fDLnmW00yhohVLBCRZERoZZpbC9Zjky%2FZuZZyYKoYHln%2FyHLt64XehLpNv3WguPPINGTJmLnGLqArnyOYSonBfO0NoeKsSKS3fMbOLKBySNpvhCLCNXZpc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f958a67b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/js/pushify.js | 188.114.97.1 | 200 OK | 5.1 kB |
URL GET HTTP/3lookthewomen.online/js/pushify.js IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJavaScript source, ASCII text, with very long lines (5267), with no line terminators Hashc3e3fe43441f444dd5a9d36ca8a2ca52 3e9e8245c075dee17168941a383ccd6742bc18ac b199734d5c5d273c6e11e389ab558e1dcadb47ac816deca5f90efc8a4cd82fcc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/pushify.js HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 10:07:42 GMT
etag: W/"6615136e-13e2"
expires: Fri, 25 Apr 2025 06:02:17 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMzEuxLo9SPO2jpQ5VN5LIL6MLgEHDPlhqax2eQO4yG8TML0MBoyjFTxWV1cZ92ejvPwabV6F2HC%2B%2B7WGXal1AhY5%2BtlTzD%2F0cNA1SnqfpetfgHjGP%2FpxN4X0FQ50DAOn2Qqqjei"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f958a60b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/js/main.js?91 | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3lookthewomen.online/js/main.js?91 IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJavaScript source, ASCII text, with very long lines (2858), with no line terminators Hashb50b09530fe88cdaf16922b7eabbef8e 4811a8515736e04270c81ef91f0bf831d4737c9f 294b273a16db1bd8bdb2801d69b8e62b22055bfb884569c43f732bdeb0714365
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/main.js?91 HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 10:07:42 GMT
etag: W/"6615136e-ab5"
expires: Wed, 23 Apr 2025 16:31:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 135033
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FYlvEAGTLAH7HMg7%2B1EMMOhkp8iAcOtXuAVWmFF3pzgIn7%2BmJ1lQ%2FOLlXVQT1nosaC6p0hwPi5ItvDEE0PpRzqL%2BJAJgIcWFSO2TtqHV8ZSaHUp1YUeVcm4zB94ON9j%2FB7F1K%2FJB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f958a66b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/emoji-chat.svg | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/emoji-chat.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hashd5fb164775303815ac175910f870d94e 7a0a47a10b73aec25944f8bbb4ef39beb9c46732 69eb6bf6434fd481fa6e0298d59901328beca91f13b9d69a48fb593fdd38fcd2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/emoji-chat.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-aa6"
expires: Fri, 25 Apr 2025 06:02:18 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WW1h41RlnbHNzItm9Q%2FKvlTol3mqN6%2FvL6HMBgpQ6MR5q9Cad94bHju5yxwAJTqEzd3tow1CnUnDYVAZGPkNx94AqU9q84WFY0gfbCl4mYO90jf0xmuxpf5hf%2B4uAjzn5ZgFfkG8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f971bc7b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@300;400;700&display=swap | 142.250.74.106 | 200 OK | 7.0 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:wght@300;400;700&display=swap IP142.250.74.106:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css2?family=Roboto:wght@300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 06:02:17 GMT
date: Thu, 25 Apr 2024 06:02:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lookthewomen.online/fav/lw/js/jquery-3.3.1.min.js | 188.114.97.1 | 200 OK | 87 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/js/jquery-3.3.1.min.js IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashaf4078402c5e090d3f81d1abd71e2250 9592732de681f4365e9b7016dc5cf76e2a55ee9b 8603b20b548270423fb03c2138c16f5f863ead4c48eb0999167df869e2eef8a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/js/jquery-3.3.1.min.js HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 14:19:20 GMT
etag: W/"66154e68-15339"
expires: Sun, 13 Apr 2025 03:55:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1044436
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kIm62TsdGJ8WZCbeOuqAzgz43zEBgVkDPu4qYFEBgrHMWuTq22EUowUM%2FJYEjGDklUgCMq5ydJeuJQbYbJHVIem2yarXho65DK1ej23IHecyoTXyhip7N2VylcnsBmw0MMn1ww1L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f958a65b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/js/tt/06/main.js?91 | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/js/tt/06/main.js?91 IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeJavaScript source, ASCII text, with very long lines (3139), with no line terminators Hash2a07107f7c43800abadf496947f9a118 8abc8c00fe21db6d6d91bfa971f31d2b21ee345b 9c3573f3df54213d211bd5ee177fe001bd382a0082e15d95ab15da592caa9f0e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/js/tt/06/main.js?91 HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:17 GMT
content-type: application/javascript
last-modified: Tue, 09 Apr 2024 10:07:42 GMT
etag: W/"6615136e-bb5"
expires: Fri, 25 Apr 2025 06:02:17 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vfXv84jQukXsxLTeuh6tzzeeaEzFt6GkNGKntjxEQHmIXI69WedO1Y89cKShovkXk%2F1G7kpS4nRgPoLuGzVppjBbDPqEJd3a2IXSYM0ZIf3HthKKoE86zNisBRy4p8IX7favd7xL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f958a68b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/@growthbook/growthbook@0.36.0/dist/bundles/esm.min.js | 104.17.245.203 | 200 OK | 35 kB |
URL GET HTTP/2unpkg.com/@growthbook/growthbook@0.36.0/dist/bundles/esm.min.js IP104.17.245.203:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File typeJavaScript source, ASCII text, with very long lines (35075) Hash55300e3da13d5504f63b0b92675f9743 0bb02b96f1b39d806ea329902df9f65387fdf891 cc82c8e8646c66cf8f2c377b8970cba082df33122c041c3d3605a94b8ed9428b
GET /@growthbook/growthbook@0.36.0/dist/bundles/esm.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookthewomen.online
Referer: https://lookthewomen.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "8928-C7ArlvGznYBuoymQLfn2U4f9+JE"
via: 1.1 fly.io
fly-request-id: 01HSHZGVJ7EQ9P5Q55BRNBKSN9-arn
cf-cache-status: HIT
age: 2950728
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879c1f980f185687-OSL
X-Firefox-Spdy: h2
|
|
| lookthewomen.online/fav/lw/img/tt/02/add.svg | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/add.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hash43510a8c289bba565363a9e1f6959c01 ebdc5fce3ff488866a89734261b832b498cf53d5 16882bde63eeba47d1f6f6c536bad2069a0c444e55710856c70c6405a26bc554
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/add.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-2a76"
expires: Wed, 23 Apr 2025 16:31:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 135034
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oTYw80PdykWR0NnoHVbQXY8zYnVLCm8yBD56iJckBr%2BIux0gaymvAGeLi0xilGaviSfEbrnOaXgI6EZMmzi7nt4sUnCqTQkp0nb5UHE6Ra3Abs2YdYIFLAROPV0Hdkd%2BgSQlaiXw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f971bc6b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/search.svg | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/search.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hash1c05aca93e1c383b993a35f347b86b6a 05257a4a961ec1f74e5ccd10bc02202348ac0427 30836e9c99dd2bc2dd8b73ee347b6b2bcf6ea3e8592968011a2455617f49bacb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/search.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-507"
expires: Fri, 25 Apr 2025 06:02:18 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aRY%2BdLNdtNi2xKGbKPLSpUGccN1WGOo1huzIy6j9VcXPjIrxwCn2XR64a%2BLrZzBlhySXgo5I%2FQAD8GXfTRgLlzz1%2Flh5xiVk%2B%2BimzJwXLEgWrJ2b8zzwDdfEJqxZpFtR4zWBx5M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f972bd4b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/cam.svg | 188.114.97.1 | 200 OK | 9.9 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/cam.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hash8ad50ea4fd6d1b09855000552c5108fc 314642bea4e05abf3d982ef22d8fddb29dc98773 5bcaa1109e580d6a9520fd3ef6ec10ec39afb3f9b30c53f58cd4ff0dcb84144f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/cam.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 14:19:20 GMT
etag: W/"66154e68-267a"
expires: Sun, 13 Apr 2025 03:55:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1044422
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9V9a7Yuq%2BbCqsJPnp4IsB4A%2Bck8pEqsuVnFLgeeGjREYyGEuqd2TS2sBRLZdf0qsiILcUyMcvxGNz%2BWGgXTTQrqIpohagE%2BiZQx7LjzEdneF45CoswjJnYUOXKXU4nF%2F2W2scRO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f971bc4b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=940460774.1714024938>m=45je44o0v888036880z8840511593za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=564848680 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=940460774.1714024938>m=45je44o0v888036880z8840511593za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=564848680 IP142.250.74.163:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q7W6GLM2DR&cid=940460774.1714024938>m=45je44o0v888036880z8840511593za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=564848680 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 25 Apr 2024 06:02:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lookthewomen.online/favicon.ico | 188.114.97.1 | 200 OK | 1.2 kB |
URL GET HTTP/3lookthewomen.online/favicon.ico IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash8868db355c0c3147adab230473be8c40 5dfe46461f416a547eded1665a8c55c6ed90e519 616c7bef93a6dba87aa67abf2d5e2ee58ad885f1d588ce451fea2f9e08255931
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937; _sp_ses.66c3=*; _sp_id.66c3=3ddcab38-7f9b-4bba-93bd-ced448e4875f.1714024938.1.1714024938..82f063a5-9e9d-4284-85f1-bd5dc5bdd2d0....0; _ga_1008R4LXMB=GS1.1.1714024938.1.0.1714024938.0.0.0; _ga=GA1.1.940460774.1714024938
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/x-icon
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-47e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E0i7bx%2BYetozH3CcggMpJzkZHqse5z0rQEbRyLl9xlNKPWi9B%2Fg9Q7eiddzSuHvGynnySnCDyk0y0s2kH27xIiu%2FqA6wKqFtPM0K8f0G44UNFL6nW3%2FNVRlsJBh4gq%2FRCCvT5M6p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f9b0ebbb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/more.svg | 188.114.97.1 | 200 OK | 9.2 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/more.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hashd1b303670a5e388235ee124aa7ce28d8 0b67feaf5839daddfb08631e6be9e979dc907e12 669d02d537e19bb9e1fe2135d35d636a390eb2512f35a681fa7d3ebeac92f1ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/more.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-23ef"
expires: Fri, 25 Apr 2025 06:02:18 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5vnipxh1GntoUH32TLpG2cViPkoDTGPr0OUZIN3nvtbruIhp0u0p4bwaBjM2ZCJgp3ZUSyquDYK4ma7eZczfz66xa0BUZij6XEujn5GbONo2%2BTTgqRkoZQ0fIaikV8C3RCZTWib%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f971bc8b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/voice.svg | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/voice.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hash86592d41cabaf1626afd985e9395cc70 43e0287647465a61d5c89d7766f4f975bde743e5 f4fa66d18b33d8aca345636df7c5c5ed26e864fdb23fcad8a96fc49a0cc3db70
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/voice.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-289c"
expires: Wed, 23 Apr 2025 16:31:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 135034
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wGJTziCoj6WOHFZLv3ZyhfGSig4JpWFBD60KzRBg9go6s%2F%2BNi43L6OqnokuNlclRYGIefniXp3tskmy21Bcu4zgXmO9CtqyQpk%2F%2Fz6VOkOMR4rLNuku4wP%2Fe4%2BoV2c58TdE%2FJ%2Fnc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f972bc9b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/phone.svg | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/phone.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hashd1628ddf31389304b8dc6eecc257ea81 cfab1c126350613639859ae9bad55535efa723e4 e0bceb539138f5c0811851e32f3ed18a53ed99ef4b0611d1a1304b6365c3bcb9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/phone.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-28f4"
expires: Wed, 23 Apr 2025 16:31:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 135034
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UHzXH%2Fctkcg1Hxd%2BZ%2FuC5DlTOaESe5VTuj44rM3KsuWevPsrswMjoOUgoHpjFmBV5g5t2MTLSkLc4gDPI%2FVYCX6fFM7gRf5ViIrypmD8PU4C1jiFiQyozpCaqT%2BxBCrA61AEHcfD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f971bc5b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/emoji.svg | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/emoji.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hashb40d71b00d390f21b93b8cdb259bcff3 5ba5bcfbfd0fe0436dff40d73a01301018f55ade 32575c392e37c620f10fea345f254698c42a835d4c856554d39482f5ce7a4751
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/emoji.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937; _sp_ses.66c3=*; _sp_id.66c3=3ddcab38-7f9b-4bba-93bd-ced448e4875f.1714024938.1.1714024938..82f063a5-9e9d-4284-85f1-bd5dc5bdd2d0....0; _ga_1008R4LXMB=GS1.1.1714024938.1.0.1714024938.0.0.0; _ga=GA1.1.940460774.1714024938; _ga_Q7W6GLM2DR=GS1.1.1714024938.1.1.1714024939.59.0.0; bo=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:20 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-ae8"
expires: Fri, 25 Apr 2025 06:02:20 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9EdzsKBpSVcokTTqd1IVYyZaKwJyjY5t%2BvH%2FNHzpvyuK2NCJ1GD5UZQcEFb6LLsZJAyStKsnrICtw%2FlShurfvNlVA7Sf81zTI7z5L%2B%2FZ%2Fi8wAPuCnnAxUpkC05mIfOmnta%2BlNqMV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1fa65f26b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lookthewomen.online/fav/lw/img/tt/02/user-card.svg | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3lookthewomen.online/fav/lw/img/tt/02/user-card.svg IP188.114.97.1:443
Requested byhttps://lookthewomen.online/tt/06?sub1=6629f1d48d822600011260b5&sub2=&sub3=&sub4=&affiliate_id=1698&source=&mst=2 CertificateIssuerGoogle Trust Services LLC Subjectlookthewomen.online Fingerprint6F:B7:A6:7E:E6:7D:48:EE:E2:F8:2C:AB:99:14:E2:6C:7E:19:85:B8 ValidityThu, 21 Mar 2024 12:17:04 GMT - Wed, 19 Jun 2024 12:17:03 GMT
File typeSVG Scalable Vector Graphics image Hashe39ee612d3c26bdb7907c94f48da6665 4229e04250da723c90fd875d013949a12ece1d3c 0c31965a628720b8f513759819aa640a68762dc7bf59f27e37cfbcd30e9faa05
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fav/lw/img/tt/02/user-card.svg HTTP/1.1
Host: lookthewomen.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookthewomen.online/fav/lw/css/tt/06/style.css
Cookie: hashid=85fcaaac2ced83af21b6563b56342b75; country=Norway; region=Oslo+County; country_code=no; city=Oslo; latitude=59.9016; longitude=10.7343; affiliate_id=1698; sub1=6629f1d48d822600011260b5; st=1714024937
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:02:18 GMT
content-type: image/svg+xml
last-modified: Tue, 09 Apr 2024 10:07:41 GMT
etag: W/"6615136d-26ec"
expires: Fri, 25 Apr 2025 06:02:18 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T%2BFbPSpfSGfBBX9U8d9PYtM2I86%2BCdSsc%2F4pbceHCu6YG37ysq6yA7tl2%2BQXfzwBaRG6OL2e%2FnMsQiCTruo%2B7mJ5a3apC1F%2F2DUG28cJV1jWFOp%2F3uoOHZt1gOUuStNjFHjs26XT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c1f972bd3b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0