| nicegirls-4you.com/de/ms/1-030041/images/bg_07.jpg |  188.114.97.1 | 200 OK | 114 kB |
URL GET HTTP/3nicegirls-4you.com/de/ms/1-030041/images/bg_07.jpg IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x933, components 3 Size114 kB (113780 bytes) Hashe009cc6b1ad4980f17f3b22d79039db6 b0a84812acaac8b2465bd12f2eab931e9045b82d e12535a77a06f3f841ee749badfa607082d8f4fecf97b7231e4a6e73d3af825e
GET /de/ms/1-030041/images/bg_07.jpg HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 08:00:03 GMT
content-type: image/jpeg
content-length: 113780
last-modified: Fri, 26 Apr 2024 16:49:21 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6383
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2FUNOh8JW%2Fl22sKxyMTTW0ZdR4fihs3r5ANqdookFgsTMOXBFbH4xUiW5vNXMuS8P5NvI3XQLYRz9%2BtF%2B0upYgLTMtgFc%2FnttkgXYpW2crxXel%2FKqXeLbtXA50OJNZbjag4RX6E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881864b74994b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| nicegirls-4you.com/de/ms/1-030041/images/pattern.png | 188.114.97.1 | 200 OK | 101 B |
URL GET HTTP/3nicegirls-4you.com/de/ms/1-030041/images/pattern.png IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typePNG image data, 2 x 2, 1-bit colormap, non-interlaced Hash9c6625b25c9e2d605118e92aa5ccd2a3 d69b2737d673649b0a07ac2f4a7f351097e386b1 d86cd123dfccf95d8c400e7f779f25d8f9b3cf332c449f68107265e7573fd8c6
GET /de/ms/1-030041/images/pattern.png HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 08:00:03 GMT
content-type: image/png
content-length: 101
last-modified: Fri, 26 Apr 2024 16:49:21 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6383
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PadYrciIIFWfy31crWjce%2FQIg%2Bm4qpY4siQdcTMvzs4XHLkhA8yyfNoFhF80j7WnouWgU4HLbiOBDRpV1uxNyXe%2ByF1veWGuO2nkwzhW5dsnknJ3JYxmEjKYT15BSHdBJwqkLy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881864b74999b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| beevakum.net/zone?&pub=0&zone_id=5044092&is_mobile=false&domain=nicegirls-4you.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=d6e854f3-0338-4dbc-bde3-a55d545649ba&action=prerequest |  139.45.197.250 | 200 OK | 0 B |
URL POST HTTP/2beevakum.net/zone?&pub=0&zone_id=5044092&is_mobile=false&domain=nicegirls-4you.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=d6e854f3-0338-4dbc-bde3-a55d545649ba&action=prerequest IP139.45.197.250:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerLet's Encrypt Subjectbeevakum.net Fingerprint11:09:E5:37:89:FD:35:DC:C0:96:E5:E8:97:CB:6E:C1:50:68:C8:55 ValidityWed, 13 Mar 2024 12:20:07 GMT - Tue, 11 Jun 2024 12:20:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=5044092&is_mobile=false&domain=nicegirls-4you.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=d6e854f3-0338-4dbc-bde3-a55d545649ba&action=prerequest HTTP/1.1
Host: beevakum.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nicegirls-4you.com
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:00:03 GMT
content-length: 0
x-trace-id: 2fb7d22b72e01c8d3af77df99adf6639
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://nicegirls-4you.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 706
Origin: https://nicegirls-4you.com
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:00:04 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 8f00874c3cfc4cbaf15c03034310c894
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://nicegirls-4you.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 708
Origin: https://nicegirls-4you.com
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:00:04 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 218c9260b3aa01ccd02a57d6c98723b1
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://nicegirls-4you.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 709
Origin: https://nicegirls-4you.com
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:00:04 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 4b20ba8b34002bcdb6ff32336fae9ffc
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://nicegirls-4you.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://nicegirls-4you.com/
Origin: https://nicegirls-4you.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:00:04 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://nicegirls-4you.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashc30315e9ed27b4912680b71520c11494 ca169259c2f379cd49df69a983ac9c985bc473bc 841815a9d33da2bca40daac68be73432d5e8707473bfe70061a7b660613cfc63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1326
Origin: https://nicegirls-4you.com
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:00:04 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://nicegirls-4you.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| alexatracker.com/jscode/JAIA.js?sub1=nicegirls-4you.com&sub2=&sub3=&sub4=&sub5=&prid= |  104.21.85.99 | 200 OK | 0 B |
URL GET HTTP/2alexatracker.com/jscode/JAIA.js?sub1=nicegirls-4you.com&sub2=&sub3=&sub4=&sub5=&prid= IP104.21.85.99:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectalexatracker.com Fingerprint74:C4:C5:AB:F0:96:19:8D:55:C1:FC:49:6D:EF:28:5C:C0:A3:FD:48 ValidityThu, 21 Mar 2024 13:35:40 GMT - Wed, 19 Jun 2024 13:35:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jscode/JAIA.js?sub1=nicegirls-4you.com&sub2=&sub3=&sub4=&sub5=&prid= HTTP/1.1
Host: alexatracker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 08:00:04 GMT
content-type: application/json; charset=UTF-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
set-cookie: trbarid=960eb718428d5366fa4bf6398781ab6b1f4ac391f228dbdf51c8c46091dc6631a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22trbarid%22%3Bi%3A1%3Bi%3A1412239897804002308%3B%7D; expires=Fri, 15 May 2026 08:00:04 GMT; Max-Age=63504000; path=/; secure; HttpOnly; SameSite=None
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oAhpA6g0tkCE9FyU1K%2B%2FaR4lWgPxxHKa6gETK%2Fn0ehO0UMokVxAtEjB5Og6OGLoeFwVvCXOg5PWRXfiv4bLxzL5Y5Ygyup0ukftOpZ4%2BRKh7WUuvEVO8Yd3SV4Dfvvo7RgGg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881864b79cec0b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nicegirls-4you.com/de/ms/1-030041/images/love-letter_1f48c.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3nicegirls-4you.com/de/ms/1-030041/images/love-letter_1f48c.png IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typePNG image data, 108 x 108, 8-bit colormap, non-interlaced Hash97cec85cf8ff99ce9ada9a3eb986ff1a c0419225055d08e5dd870923753a192928edc117 b34e013ca142b2ebe20eb929e76e6595901c6fcdddbb7331c4cf4bc62c1c4a45
GET /de/ms/1-030041/images/love-letter_1f48c.png HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 08:00:04 GMT
content-type: image/png
content-length: 4327
last-modified: Fri, 26 Apr 2024 16:49:21 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6384
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OPMzq5KPLW1ED3rOuByAOSHUgkjIWN0xfM831NjQpGi%2FJZacG9uKkJczeUl2yohiO6kJsvlYP%2FyHxMKSmiBB9mUII68RmN7dHxcO8t%2BN4oA%2F0jjbwTezAqqQ3TyYAx%2BSYQm8lLE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881864ba9f8cb515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| nicegirls-4you.com/de/ms/1-030041/images/love-letter_1f48c.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3nicegirls-4you.com/de/ms/1-030041/images/love-letter_1f48c.png IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typePNG image data, 108 x 108, 8-bit colormap, non-interlaced Hash97cec85cf8ff99ce9ada9a3eb986ff1a c0419225055d08e5dd870923753a192928edc117 b34e013ca142b2ebe20eb929e76e6595901c6fcdddbb7331c4cf4bc62c1c4a45
GET /de/ms/1-030041/images/love-letter_1f48c.png HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 08:00:04 GMT
content-type: image/png
content-length: 4327
last-modified: Fri, 26 Apr 2024 16:49:21 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6384
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3RfxzhL27lkB0iZAgk2h08uQZb%2BeidPNimXs%2Bhy2fq8C8SmsrfIRyfGvVx1m4C2aHJ8yOw4USl4qepwlY44afNgyQ73wOoUx8tBwlZ2n0YyVCWCtFmbK8Py2shP6rGDQOKNP1JY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881864ba9f8ab515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| beevakum.net/pfe/current/micro.tag.min.js?z=5044092&sw=/sw-check-permissions-5e3a9.js | 139.45.197.250 | 200 OK | 37 kB |
URL GET HTTP/2beevakum.net/pfe/current/micro.tag.min.js?z=5044092&sw=/sw-check-permissions-5e3a9.js IP139.45.197.250:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerLet's Encrypt Subjectbeevakum.net Fingerprint11:09:E5:37:89:FD:35:DC:C0:96:E5:E8:97:CB:6E:C1:50:68:C8:55 ValidityWed, 13 Mar 2024 12:20:07 GMT - Tue, 11 Jun 2024 12:20:06 GMT
File typeJavaScript source, ASCII text, with very long lines (37142), with no line terminators Hash32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de
GET /pfe/current/micro.tag.min.js?z=5044092&sw=/sw-check-permissions-5e3a9.js HTTP/1.1
Host: beevakum.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:00:03 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:52 GMT
etag: W/"662a3514-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| zeniocloud.com/JAIA.js?sub1=nicegirls-4you.com | 104.21.25.245 | 200 OK | 0 B |
URL GET HTTP/2zeniocloud.com/JAIA.js?sub1=nicegirls-4you.com IP104.21.25.245:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectzeniocloud.com Fingerprint45:C9:6E:85:9E:A1:4E:DF:88:F4:5C:F0:A6:BC:B0:A3:77:02:3B:D0 ValidityThu, 09 May 2024 16:37:06 GMT - Wed, 07 Aug 2024 16:37:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /JAIA.js?sub1=nicegirls-4you.com HTTP/1.1
Host: zeniocloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 08:00:03 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 6384
last-modified: Fri, 10 May 2024 06:13:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PrmOeJQ%2BsyzeLruDNcCWw%2B%2FvkPjDnSFwILYrvKfNcXFyD1s1oBj7FCFhxhqkpXwJedR1KsZcHQsHN%2FuYvE0NvewTUCno0Fjq0QeNXV%2BQncjDWjJYcLLdHia5%2B5iqfmPzYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881864b578ba0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.production.push-sender.com/mng/channels/init.min.js?ver=1714142804 |  143.204.55.26 | 200 OK | 28 kB |
URL GET HTTP/2static.production.push-sender.com/mng/channels/init.min.js?ver=1714142804 IP143.204.55.26:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerAmazon Subjectproduction.push-sender.com FingerprintFF:F5:0A:96:D0:0D:81:D4:34:60:CB:E8:B6:BA:85:5B:40:30:38:AE ValidityMon, 18 Mar 2024 00:00:00 GMT - Thu, 17 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hash8853549c3d94b135cff7696e087dc08f 92ff4b057e92c46752e87b593677e960f80afb09 09c57ca60b3ff9fc47a5cf1b9c5eb52017bb130a3347af01be1d05ab1f7f91a0
GET /mng/channels/init.min.js?ver=1714142804 HTTP/1.1
Host: static.production.push-sender.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 08 Feb 2024 14:25:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Fri, 10 May 2024 06:26:35 GMT
etag: W/"8853549c3d94b135cff7696e087dc08f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pCLJQAfnuKCRsZLXxGreoZ2vb79uGfVCu_PXn96iP77lMr_650PA6A==
age: 7366
X-Firefox-Spdy: h2
|
|
| nicegirls-4you.com/de/ms/1-030041/js/backoffer.js | 188.114.97.1 | 200 OK | 430 B |
URL GET HTTP/3nicegirls-4you.com/de/ms/1-030041/js/backoffer.js IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (430), with no line terminators Hash6d5aa83d23ce0b9f72d3b87d000d8fae 034fb8768eb58ffc0b5849e2c162989741a6cbec 89266112a6c823b9c03dd5a32d8f1c5e9f4cbf4cf876b56c825781ea389d0800
GET /de/ms/1-030041/js/backoffer.js HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 08:00:03 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 26 Apr 2024 16:49:22 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DqgMeICNlzzuoux6%2FIYoVRMRKAOguye%2F5QaUk1XX%2B%2B7NEqmC6MdNh%2FTk0gdHSVOzvKCZvsjKOR6doUqsXxE%2BLaZVZekhnE7xgKuZUeeiz3F9ybMl0CTYWvK8%2BtGG9sgdS0T%2FZLE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881864b56ec7b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.production.push-sender.com/mng/subs_window.js?ver=1714142804 | 143.204.55.26 | 200 OK | 20 kB |
URL GET HTTP/2static.production.push-sender.com/mng/subs_window.js?ver=1714142804 IP143.204.55.26:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerAmazon Subjectproduction.push-sender.com FingerprintFF:F5:0A:96:D0:0D:81:D4:34:60:CB:E8:B6:BA:85:5B:40:30:38:AE ValidityMon, 18 Mar 2024 00:00:00 GMT - Thu, 17 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mng/subs_window.js?ver=1714142804 HTTP/1.1
Host: static.production.push-sender.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 08 Feb 2024 14:25:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Fri, 10 May 2024 02:20:26 GMT
etag: W/"2b3010e6d2440c83b9cfff48def5f0c1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HaMwA3WDbDG7a5z3jAwe7ce3PPOVkWa88jUoohG-ybmfeFKRe7i9RA==
age: 20412
X-Firefox-Spdy: h2
|
|
| nicegirls-4you.com/de/ms/1-030041/js/jquery.js | 188.114.97.1 | 200 OK | 88 kB |
URL GET HTTP/3nicegirls-4you.com/de/ms/1-030041/js/jquery.js IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (32042) Hash269aa59eab382fa3aaa418f21d22618f 5a8b67e7c78ea66096f3b404598d246c2aa8e617 5ced49ff396bdb0070d83727ff475375b53a843a8f446ee5041245ec81f6e98e
GET /de/ms/1-030041/js/jquery.js HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 08:00:03 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 26 Apr 2024 16:49:22 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BaQv%2FTzuyyDcNY5HtcP5gtpYGKLbNJhRuhGwkYa2FiiE4LqfPIjhDJjHlFJ2o6XUfM7kIwNd6qvTlhgMDHZCB71c6lfc1vW1nCP63FXgYclpZgjkjj81CcfYnPdNrtbGkX4wSj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881864b56ec0b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c | 188.114.97.1 | 200 OK | 7.1 kB |
URL User Request GET HTTP/2nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7534), with no line terminators Hashe1b569cd644cdb69fe7ecc64e34372e2 89b705bc782d3102f8d9e7e0bd66718dffcaa336 f081155b0fb2fdc67187f70efdf4b65b967a8190209f6074d2f45c9fc19b950f
GET /de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 08:00:03 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kTOCyINLjF3gJkYLFQEIhOjpZGEOWFQWtv8OPGlmZgmWd%2Bk89Vs53AcWJcLWqhnRHQLpf%2FhkXBGIlf1jNZ8UsOQxNuHzQoNsVB0%2BrhlojqDtEun80TIDcscOhy6mF%2Fa3GhII7QI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881864b318eeb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nicegirls-4you.com/de/ms/1-030041/css/style.css | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3nicegirls-4you.com/de/ms/1-030041/css/style.css IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
Hasha7dbb720fe5b90ba95cfcfbfebde7d86 762c305decdf4845c740af9bd1a04217999d1e67 4968d181d6fab5bbe8c44f3ee4d7291d67c63b6f7fcd17f1bc0be34dc6d7aafa
GET /de/ms/1-030041/css/style.css HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 08:00:03 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 26 Apr 2024 16:49:21 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hHd2zFBxv%2FM2gIQtMLjdkkzMbcFU%2BEM52kLv7WVOdQ4ft6XmVQiVyue2Z6QeBahBe5Q%2BsFPQIJQhDOX1cu77tUEWRPBiAilowUK4TW4OOmtHxbquD8iFlBoSCcFNRRBOg5VbE58%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881864b55ea1b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.production.push-sender.com/mng/subs_window.css?ver=1714142804 | 143.204.55.26 | 200 OK | 7.1 kB |
URL GET HTTP/2static.production.push-sender.com/mng/subs_window.css?ver=1714142804 IP143.204.55.26:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerAmazon Subjectproduction.push-sender.com FingerprintFF:F5:0A:96:D0:0D:81:D4:34:60:CB:E8:B6:BA:85:5B:40:30:38:AE ValidityMon, 18 Mar 2024 00:00:00 GMT - Thu, 17 Apr 2025 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (7434), with no line terminators Hash7edfc18d48d2641549d953ad7b35769d b57f256b8a85278ce3459c2aac1b517b40889f94 460354d6acce1e481e3f0a6436a6484f25f9a58e1c8540eaa61047573e72d968
GET /mng/subs_window.css?ver=1714142804 HTTP/1.1
Host: static.production.push-sender.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nicegirls-4you.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 08 Feb 2024 14:25:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Fri, 10 May 2024 06:55:14 GMT
etag: W/"adb85744f96b502ad68d63ede0adcd4e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ftkEb4QdJd-02mpVH6AiTWAOSASJzMuvHHI2wfxwvqpoJpmStFQdQg==
age: 7367
X-Firefox-Spdy: h2
|
|
| nicegirls-4you.com/sw-check-permissions-5e3a9.js?zoneId=5044092 | 188.114.97.1 | 404 Not Found | 315 B |
URL GET HTTP/3nicegirls-4you.com/sw-check-permissions-5e3a9.js?zoneId=5044092 IP188.114.97.1:443
Requested byhttps://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c CertificateIssuerGoogle Trust Services LLC Subjectnicegirls-4you.com Fingerprint8C:95:95:76:9D:38:95:FC:04:7A:85:82:C8:8D:DE:02:D3:85:C9:73 ValidityMon, 15 Apr 2024 09:34:19 GMT - Sun, 14 Jul 2024 09:34:18 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /sw-check-permissions-5e3a9.js?zoneId=5044092 HTTP/1.1
Host: nicegirls-4you.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nicegirls-4you.com/de/ms/1-030041/?cep=NMf2ojtsM43iUFVF2BIKG7bJXABwf5dWlf02-NaAYaHm7d8_m-8zpXGxMLdUm-pcdTR9McTO9taaiB5YHkYMcaRtKeX6pHiMXg6gwLInDYPz3bM_gmYeBD7AmM6mTkeueVSgc0nExHGDd5dhz-Xa1K6VB6SR_QJPTK9PtkMg2i_Qk6xigW4Mg_9xuxHWDPYyMM0DyHJIt1BikNYhpj1T1rK6FdT1zvclc22d5sPWszuSqXrAj7WMDPXFN9XGZ_U8DTrFRyjiPoulMOuSdeVrYyKFQvhZIAGdzYjQcUTAZsEF7axsUfTJuBDZnXyGJbjYleKNG5GHCgSvZtyuNaANc38l34zUJ651veF6mSbK4z4wbW_hya_WG94XX8fL8dnHT4XwMojVZxrLhcHmJ2OoIA&lptoken=172e15ee326c9778832c
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 10 May 2024 08:00:04 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9T5IkwqcQwunc0WRf7p9aJ7KcdZ8u90J0rT%2BNFAqhbcHerHft5iTAxbOaeW7uyeyW35pIYz1TSh9KZhuGX7mdxkXmYi9yFb1%2BRoE41RG%2BGk1KrZ%2Fd%2BvQKmIxB%2F23eHyFsYfTH1s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881864bb0837b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|