theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
185.155.186.20200 OK 7.2 kB URL User Request GET HTTP/1.1 theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (531), with CRLF line terminators
Hash 4be74da9a2a65480cf249a153260ffee
b395a26eb57a3956e957944c7ce938a3f6f08fc8
45f879e67fc4d915ddc559d30f8150dc0cd2580a34c8b2d615d3588709d097c5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=e89p605&o=7yukbz8&m=1&t=74 HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: text/html
Content-Length: 7215
Connection: keep-alive
set-cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx; path=/
cache-control: private, no-transform
theflirtatingwoman.life/media/dating/toon2/css/animate.min.css
185.155.186.20200 OK 53 kB URL GET HTTP/1.1 theflirtatingwoman.life/media/dating/toon2/css/animate.min.css
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type ASCII text, with very long lines (52592)
Hash 178b651958ceff556cbc5f355e08bbf1
97afa151569f046b2e01f27c1871646e9cd87caf
8fe3fa119255adb5e0c12479331f9e092e85bcff56ab6ecc0510bfa2056b898d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/css/animate.min.css HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: text/css
Content-Length: 52789
Connection: keep-alive
ETag: "178b651958ceff556cbc5f355e08bbf1"
Last-Modified: Wed, 20 Sep 2023 15:22:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179EE57E856488B9
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134506#144014750/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/media/exit-new/exit1.js
185.155.186.20200 OK 3.5 kB URL GET HTTP/1.1 theflirtatingwoman.life/media/exit-new/exit1.js
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 625e5e2950612f771e246beb33c9ea61
e4fc251c6c000496c285f8dc3fa097040b031681
618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/exit-new/exit1.js HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: text/javascript
Content-Length: 3473
Connection: keep-alive
ETag: "625e5e2950612f771e246beb33c9ea61"
Last-Modified: Tue, 21 Nov 2023 12:30:04 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179EE56F1BAC0B65
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223389#507714946/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/media/dating/toon2/css/style.css
185.155.186.20200 OK 8.6 kB URL GET HTTP/1.1 theflirtatingwoman.life/media/dating/toon2/css/style.css
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type ASCII text, with CRLF line terminators
Hash 549edaff59c582a6a3ca91f95c60ea71
a9edcba7d667efcfd812bcd413ccbdcb2b67cc88
b28722475035fc8fdc751034c2df8f49d66eb25cf28cf031c4e7357414a131da
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/css/style.css HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: text/css
Content-Length: 8608
Connection: keep-alive
ETag: "549edaff59c582a6a3ca91f95c60ea71"
Last-Modified: Tue, 21 Nov 2023 12:30:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179EE57E86F430C5
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223378#43689163/gid:0/gname:root/mode:33279/mtime:1655387458#962597414/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.962597414Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/cookie/js.cookie.js
185.155.186.20200 OK 4.3 kB URL GET HTTP/1.1 theflirtatingwoman.life/cookie/js.cookie.js
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type ASCII text, with very long lines (1709), with CRLF line terminators
Hash a7e9883924072f15259de6888d5ef515
7f4f6e5938e68f55aef81e0cd0145f008cd28382
985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cookie/js.cookie.js HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: text/javascript
Content-Length: 4264
Connection: keep-alive
ETag: "a7e9883924072f15259de6888d5ef515"
Last-Modified: Tue, 21 Nov 2023 12:29:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179EE55435C08AFC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1699191628#679657031/gid:0/gname:root/mode:33188/mtime:1658397637#354375000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-21T10:00:37.354375Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/util/utils.js
185.155.186.20200 OK 7.5 kB URL GET HTTP/1.1 theflirtatingwoman.life/util/utils.js
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 01816d15ca03032751161a746e2fb7c3
dcc72ea5fa1356490ba473288159df9786b4a3c3
8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/utils.js HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: application/javascript
Content-Length: 7512
Connection: keep-alive
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Wed, 20 Sep 2023 15:26:19 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179EE56460595AC4
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#320037197/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/media/bb.js
185.155.186.20200 OK 639 B URL GET HTTP/1.1 theflirtatingwoman.life/media/bb.js
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type ASCII text, with very long lines (639), with no line terminators
Hash 0d553e4bac91c74bfee2dbabba61e99e
5af71e2377c9c012a7826a695f2724901941b19b
1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/bb.js HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: application/javascript
Content-Length: 639
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "0d553e4bac91c74bfee2dbabba61e99e"
Last-Modified: Mon, 20 Feb 2023 09:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179EE5623310EBF6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676832256#258761277/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/media/dating/toon2/js/jquery-2.2.4.min.js
185.155.186.20200 OK 86 kB URL GET HTTP/1.1 theflirtatingwoman.life/media/dating/toon2/js/jquery-2.2.4.min.js
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/js/jquery-2.2.4.min.js HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: application/javascript
Content-Length: 85578
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2f6b11a7e914718e0290410e85366fe9"
Last-Modified: Mon, 20 Feb 2023 09:32:28 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179EE57EB66F32F9
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843394#515755084/gid:0/gname:root/mode:33279/mtime:1655387458#954597395/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.954597395Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/media/dating/toon2/images/123.jpg
185.155.186.20200 OK 179 kB URL GET HTTP/1.1 theflirtatingwoman.life/media/dating/toon2/images/123.jpg
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1069, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=620], progressive, precision 8, 620x1032, components 3\012- data
Size 179 kB (179176 bytes)
Hash a2d245e1c43c61ca34bea001510dd6d9
7a7e0dbf8bb132958fecd093e6741ffe49d060b5
f6113b1f6bdd279404fd53c920f6ba411b66a897db4c67e16d2129af22370a57
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/images/123.jpg HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:29 GMT
Content-Type: image/jpeg
Content-Length: 179176
Connection: keep-alive
ETag: "a2d245e1c43c61ca34bea001510dd6d9"
Last-Modified: Tue, 21 Nov 2023 12:30:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179EE57EE945B0B6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223378#75689235/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Sat, 07 Dec 2024 15:59:29 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
theflirtatingwoman.life/media/dating/toon2/images/bg.jpg
185.155.186.20200 OK 120 kB URL GET HTTP/1.1 theflirtatingwoman.life/media/dating/toon2/images/bg.jpg
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=660, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1279], progressive, precision 8, 1279x660, components 3\012- data
Size 120 kB (119754 bytes)
Hash 842a5629f17ec8342230aa12ea32291a
0f2390a3eda1a71d676f1cd1866956fef8e77090
1c7361fcec43aecb4c517914dde9ecbf1fe1aaa0969411a7a383391236f335f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/images/bg.jpg HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/media/dating/toon2/css/style.css
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 15:59:30 GMT
Content-Type: image/jpeg
Content-Length: 119754
Connection: keep-alive
ETag: "842a5629f17ec8342230aa12ea32291a"
Last-Modified: Wed, 20 Sep 2023 15:22:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179EE57F15D014A2
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134506#144014750/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Sat, 07 Dec 2024 15:59:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext
142.250.74.106200 OK 24 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext
IP 142.250.74.106:443
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 77eef6f3123eda3a26da7dd43dd1f8c2
629a3e0548e4d57d30c24ee129d876eb9f2873c8
5a75b4e59ac0ccb1d6b2102fe3363814795ac537a46a4170135b7a5e93fcd034
GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 08 Dec 2023 15:59:29 GMT
date: Fri, 08 Dec 2023 15:59:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
142.250.74.163200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP 142.250.74.163:443
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theflirtatingwoman.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:05:30 GMT
expires: Fri, 06 Dec 2024 05:05:30 GMT
cache-control: public, max-age=31536000
age: 125640
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
theflirtatingwoman.life/favicon.ico
185.155.186.20204 No Content 0 B URL GET HTTP/1.1 theflirtatingwoman.life/favicon.ico
IP 185.155.186.20:443
ASN #203639 Tekka Digital SA
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerLet's Encrypt
Subjecttheflirtatingwoman.life
Fingerprint45:7F:6A:45:55:8D:CB:8E:EA:3B:EB:D1:60:59:FC:21:D7:6D:99:EC
ValiditySun, 26 Nov 2023 19:56:34 GMT - Sat, 24 Feb 2024 19:56:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: theflirtatingwoman.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Cookie: sid=t5~0kv0ytgbabgnmppsc0k5nupx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 08 Dec 2023 15:59:30 GMT
Connection: keep-alive
Cache-Control: no-transform
hookup-hq.xyz/?Chat=Michelle_C
172.67.214.134302 Found 7.2 kB URL User Request GET HTTP/2 hookup-hq.xyz/?Chat=Michelle_C
IP 172.67.214.134:443
Certificate IssuerGoogle Trust Services LLC
Subjecthookup-hq.xyz
Fingerprint83:0E:D5:60:30:6A:43:76:6E:47:CC:1B:9A:B6:68:15:E3:B7:6C:C9
ValidityTue, 10 Oct 2023 13:56:55 GMT - Mon, 08 Jan 2024 13:56:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?Chat=Michelle_C HTTP/1.1
Host: hookup-hq.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 08 Dec 2023 15:59:29 GMT
content-type: text/html; charset=UTF-8
location: https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
x-powered-by: PHP/5.3.3
set-cookie: visited=1; expires=Sun, 07-Jan-2024 15:59:33 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cV%2F6Hdo%2F%2FjDgN0tGY7u6ytseP%2B2w2u8eq%2Bo6vKU6pRSD%2BkFrGEqxoO7DV%2BOpRM8jxbPsVC6OpDl633dIaGFYw87fHLltGoImY1eL4TWi5bBldLXiooxvfedc6%2FNOtrzr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8326373d4e7bb52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
142.250.74.163200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP 142.250.74.163:443
Requested by https://theflirtatingwoman.life/?u=e89p605&o=7yukbz8&m=1&t=74
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theflirtatingwoman.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 21:36:52 GMT
expires: Wed, 04 Dec 2024 21:36:52 GMT
cache-control: public, max-age=31536000
age: 238958
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2