ww1.perfectpeople.net/celebrity-star/589/img.sedoparking.com/images/js_preloader.gif
0 B URL ww1.perfectpeople.net/celebrity-star/589/img.sedoparking.com/images/js_preloader.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /celebrity-star/589/img.sedoparking.com/images/js_preloader.gif HTTP/1.1
Host: ww1.perfectpeople.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.perfectpeople.net/celebrity-star/589/adriana-lima.htm?usid=25&utid=6638750392
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 441 No Reason Phrase
date: Sun, 05 May 2024 02:59:14 GMT
server: NginX
content-length: 0
X-Firefox-Spdy: h2
ww1.perfectpeople.net/search/tsc.php?200=MzMzNTc4NzM0&21=OTEuOTAuNDIuMTU0&681=MTcxNDg3Nzk1M2QwOWJkMzQxMDhmZTVhNzA4ZmRiZWZkMDU3MjY3MTI1&crc=8522dd302c6e75446462298fbfd344ec6676072b&cv=1
0 B URL ww1.perfectpeople.net/search/tsc.php?200=MzMzNTc4NzM0&21=OTEuOTAuNDIuMTU0&681=MTcxNDg3Nzk1M2QwOWJkMzQxMDhmZTVhNzA4ZmRiZWZkMDU3MjY3MTI1&crc=8522dd302c6e75446462298fbfd344ec6676072b&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/tsc.php?200=MzMzNTc4NzM0&21=OTEuOTAuNDIuMTU0&681=MTcxNDg3Nzk1M2QwOWJkMzQxMDhmZTVhNzA4ZmRiZWZkMDU3MjY3MTI1&crc=8522dd302c6e75446462298fbfd344ec6676072b&cv=1 HTTP/1.1
Host: ww1.perfectpeople.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.perfectpeople.net/celebrity-star/589/adriana-lima.htm?usid=25&utid=6638750392
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 05 May 2024 02:59:14 GMT
server: NginX
x-cache-miss-from: parking-7cbf88ff6b-w8ldc
x-powered-by: PHP/8.1.17
content-length: 0
X-Firefox-Spdy: h2
ww1.perfectpeople.net/search/redirect.php?f=https%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DsM7vTaIGD08_0&v=MmUxZDYzMjczYzdmYmEwM2NhODVjMDFjMGU5ZDMwZWMJMQl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZWQzNi45NzIxMjM0OAl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZjE3OS4zNDQzOTE4NAkxNzE0ODc3OTUzCWFkXzYzXzA%3D&l=OAlmNDIwNjg5ZTNiOWFiYWUxZTliNjVlOGE2ZDQwNjdhNQkwCTM1CTAJOTA0OGMyNzA0OGRmZjg2MTllNTM4OTEzZDlmYWNlODkJMzMzNTc4NzM0CXBlcmZlY3RwZW9wbGUJMAk2Mwk2CTIJMTcxNDg3Nzk1MwkwLjAwMDUzMwlOCTAJMAkwCTEyMDUJOTA3ODc2MzIJOTEuOTAuNDIuMTU0CTE%253D
0 B URL ww1.perfectpeople.net/search/redirect.php?f=https%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DsM7vTaIGD08_0&v=MmUxZDYzMjczYzdmYmEwM2NhODVjMDFjMGU5ZDMwZWMJMQl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZWQzNi45NzIxMjM0OAl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZjE3OS4zNDQzOTE4NAkxNzE0ODc3OTUzCWFkXzYzXzA%3D&l=OAlmNDIwNjg5ZTNiOWFiYWUxZTliNjVlOGE2ZDQwNjdhNQkwCTM1CTAJOTA0OGMyNzA0OGRmZjg2MTllNTM4OTEzZDlmYWNlODkJMzMzNTc4NzM0CXBlcmZlY3RwZW9wbGUJMAk2Mwk2CTIJMTcxNDg3Nzk1MwkwLjAwMDUzMwlOCTAJMAkwCTEyMDUJOTA3ODc2MzIJOTEuOTAuNDIuMTU0CTE%253D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/redirect.php?f=https%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DsM7vTaIGD08_0&v=MmUxZDYzMjczYzdmYmEwM2NhODVjMDFjMGU5ZDMwZWMJMQl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZWQzNi45NzIxMjM0OAl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZjE3OS4zNDQzOTE4NAkxNzE0ODc3OTUzCWFkXzYzXzA%3D&l=OAlmNDIwNjg5ZTNiOWFiYWUxZTliNjVlOGE2ZDQwNjdhNQkwCTM1CTAJOTA0OGMyNzA0OGRmZjg2MTllNTM4OTEzZDlmYWNlODkJMzMzNTc4NzM0CXBlcmZlY3RwZW9wbGUJMAk2Mwk2CTIJMTcxNDg3Nzk1MwkwLjAwMDUzMwlOCTAJMAkwCTEyMDUJOTA3ODc2MzIJOTEuOTAuNDIuMTU0CTE%253D HTTP/1.1
Host: ww1.perfectpeople.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.perfectpeople.net/celebrity-star/589/adriana-lima.htm?usid=25&utid=6638750392
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-type: text/html; charset=UTF-8
date: Sun, 05 May 2024 02:59:14 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sun, 05 May 2024 02:59:14 GMT
location: /search/tcerider.php?f=https%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DsM7vTaIGD08_0&v=MmUxZDYzMjczYzdmYmEwM2NhODVjMDFjMGU5ZDMwZWMJMQl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZWQzNi45NzIxMjM0OAl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZjE3OS4zNDQzOTE4NAkxNzE0ODc3OTUzCWFkXzYzXzA%3D&l=OAlmNDIwNjg5ZTNiOWFiYWUxZTliNjVlOGE2ZDQwNjdhNQkwCTM1CTAJOTA0OGMyNzA0OGRmZjg2MTllNTM4OTEzZDlmYWNlODkJMzMzNTc4NzM0CXBlcmZlY3RwZW9wbGUJMAk2Mwk2CTIJMTcxNDg3Nzk1MwkwLjAwMDUzMwlOCTAJMAkwCTEyMDUJOTA3ODc2MzIJOTEuOTAuNDIuMTU0CTE%253D
pragma: no-cache
server: NginX
x-cache-miss-from: parking-7cbf88ff6b-w8ldc
x-powered-by: PHP/8.1.17
content-length: 0
X-Firefox-Spdy: h2
ww1.perfectpeople.net/search/tcerider.php?f=https%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DsM7vTaIGD08_0&v=MmUxZDYzMjczYzdmYmEwM2NhODVjMDFjMGU5ZDMwZWMJMQl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZWQzNi45NzIxMjM0OAl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZjE3OS4zNDQzOTE4NAkxNzE0ODc3OTUzCWFkXzYzXzA%3D&l=OAlmNDIwNjg5ZTNiOWFiYWUxZTliNjVlOGE2ZDQwNjdhNQkwCTM1CTAJOTA0OGMyNzA0OGRmZjg2MTllNTM4OTEzZDlmYWNlODkJMzMzNTc4NzM0CXBlcmZlY3RwZW9wbGUJMAk2Mwk2CTIJMTcxNDg3Nzk1MwkwLjAwMDUzMwlOCTAJMAkwCTEyMDUJOTA3ODc2MzIJOTEuOTAuNDIuMTU0CTE%253D
313 B URL ww1.perfectpeople.net/search/tcerider.php?f=https%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DsM7vTaIGD08_0&v=MmUxZDYzMjczYzdmYmEwM2NhODVjMDFjMGU5ZDMwZWMJMQl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZWQzNi45NzIxMjM0OAl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZjE3OS4zNDQzOTE4NAkxNzE0ODc3OTUzCWFkXzYzXzA%3D&l=OAlmNDIwNjg5ZTNiOWFiYWUxZTliNjVlOGE2ZDQwNjdhNQkwCTM1CTAJOTA0OGMyNzA0OGRmZjg2MTllNTM4OTEzZDlmYWNlODkJMzMzNTc4NzM0CXBlcmZlY3RwZW9wbGUJMAk2Mwk2CTIJMTcxNDg3Nzk1MwkwLjAwMDUzMwlOCTAJMAkwCTEyMDUJOTA3ODc2MzIJOTEuOTAuNDIuMTU0CTE%253D
IP
File type HTML document, ASCII text
Hash 54006ee23092dfe01894d33d3adbef80
18b4887421b0292d522589c5351b900bdb40253e
106466181bae8a2ef4d1918d77199aaefbda249c19379b759d973ad85049d8cb
GET /search/tcerider.php?f=https%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DsM7vTaIGD08_0&v=MmUxZDYzMjczYzdmYmEwM2NhODVjMDFjMGU5ZDMwZWMJMQl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZWQzNi45NzIxMjM0OAl3dzEucGVyZmVjdHBlb3BsZS5uZXQ2NjM2ZjYwMTNkZjE3OS4zNDQzOTE4NAkxNzE0ODc3OTUzCWFkXzYzXzA%3D&l=OAlmNDIwNjg5ZTNiOWFiYWUxZTliNjVlOGE2ZDQwNjdhNQkwCTM1CTAJOTA0OGMyNzA0OGRmZjg2MTllNTM4OTEzZDlmYWNlODkJMzMzNTc4NzM0CXBlcmZlY3RwZW9wbGUJMAk2Mwk2CTIJMTcxNDg3Nzk1MwkwLjAwMDUzMwlOCTAJMAkwCTEyMDUJOTA3ODc2MzIJOTEuOTAuNDIuMTU0CTE%253D HTTP/1.1
Host: ww1.perfectpeople.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ww1.perfectpeople.net/celebrity-star/589/adriana-lima.htm?usid=25&utid=6638750392
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-type: text/html; charset=UTF-8
date: Sun, 05 May 2024 02:59:14 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sun, 05 May 2024 02:59:14 GMT
location: https://xml.sedodna.com/click?i=sM7vTaIGD08_0
pragma: no-cache
server: NginX
x-cache-miss-from: parking-7cbf88ff6b-tlmzd
x-powered-by: PHP/8.1.17
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash dd33c3252fb60ef2108ef0e6d4c6ff11
aab659fad16922a4a3ebc92c5d3edd3f34c47ce7
5d026e68748949d73e325ba4baafe3c2e909359c5ad4ff2771e35cb3fb32e8aa
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 05 May 2024 02:59:14 GMT
Last-Modified: Sun, 05 May 2024 01:23:35 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fQaYeosq9DgErHIzxnGAe-FCIknxLRRXL715yO6tFT-OmWkZpJuosw==
Age: 5739
iuven-ojr.com/zclkvisitor/73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
2.7 kB URL iuven-ojr.com/zclkvisitor/73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
IP
File type HTML document, ASCII text, with very long lines (401)
Hash cff2ea0d7f94c01f366d344adacf8115
60bcbb61ad977ce427fcb941e91846593908b629
e2729fafc108c84ae8c1e5b976f57540d692de6ed138a208fa7197cb48aee585
GET /zclkvisitor/73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 HTTP/1.1
Host: iuven-ojr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ww1.perfectpeople.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 02:59:15 GMT
content-type: text/html;charset=UTF-8
content-length: 2732
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
X-Firefox-Spdy: h2
iuven-ojr.com/zclkredirect?visitid=73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC
412 B URL iuven-ojr.com/zclkredirect?visitid=73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC
IP
File type HTML document, ASCII text
Hash 954684542ce1892a5b33006875e6705f
82f3704c02f0e89ffd7641d6c06c7520e88bee0d
daf41b4bfa35582aca8d48229948a7f16bc53ad2758acd7dddebdb04a51c9284
GET /zclkredirect?visitid=73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC HTTP/1.1
Host: iuven-ojr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iuven-ojr.com/zclkvisitor/73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 02:59:15 GMT
content-type: text/html;charset=UTF-8
content-length: 412
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
redirected: JS
X-Firefox-Spdy: h2
iuven-ojr.com/favicon.ico
653 B URL iuven-ojr.com/favicon.ico
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: iuven-ojr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iuven-ojr.com/zclkredirect?visitid=73f6a2d0-0a8b-11ef-a1fd-0afff63d57c1&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Sun, 05 May 2024 02:59:15 GMT
content-type: text/html;charset=utf-8
content-length: 653
content-language: en
X-Firefox-Spdy: h2
go.proffering.xyz/15GRtg?zoneid=porraceous-llama&campaignid=2020224&target=mike-hoy-fle9qcnv2&cost=0.001200
302 Found 252 B URL User Request GET HTTP/1.1 go.proffering.xyz/15GRtg?zoneid=porraceous-llama&campaignid=2020224&target=mike-hoy-fle9qcnv2&cost=0.001200
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectgo.proffering.xyz
Fingerprint72:AF:D3:5A:0F:1F:E6:66:87:42:85:43:67:9D:90:A2:B8:E5:26:B5
ValidityTue, 19 Mar 2024 07:19:09 GMT - Mon, 17 Jun 2024 07:19:08 GMT
File type HTML document, ASCII text, with no line terminators
Hash ef78fec1fe49d31e5ffce14a520068bd
f43bddd3286c49c9c64db9460f9ad1856c3bffeb
27e83d90aac9579d93fe4b40280276cb661dd8e5e56a099e40a84e52c8bc8f18
GET /15GRtg?zoneid=porraceous-llama&campaignid=2020224&target=mike-hoy-fle9qcnv2&cost=0.001200 HTTP/1.1
Host: go.proffering.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iuven-ojr.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.25.3
Date: Sun, 05 May 2024 02:59:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 252
Connection: keep-alive
X-Powered-By: Express
Set-Cookie: 15GRtgo=20240505051714878840406; domain=.go.proffering.xyz; path=/;expires=Mon, 06 May 2024 02:59:15 GMT; httpOnly=true;SameSite=None; Secure;
_pc_lc_id=15GRtg; domain=.go.proffering.xyz; path=/;expires=Mon, 06 May 2024 02:59:15 GMT; httpOnly=true;SameSite=None; Secure;
peerclickcid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505; domain=.go.proffering.xyz; path=/;expires=Mon, 06 May 2024 02:59:15 GMT; httpOnly=true;SameSite=None; Secure;
_norg=1; domain=.go.proffering.xyz; path=/;expires=Mon, 06 May 2024 02:59:15 GMT; httpOnly=true;SameSite=None; Secure;
Location: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Vary: Accept
girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
200 OK 6.8 kB URL User Request GET HTTP/1.1 girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
IP
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (533), with CRLF line terminators
Hash bb7f33d3dd9b13e889c4bd645b38c7d8
7dd453330ce287518be2158ade193c4d6dcd21aa
8e03c85233c2aa7901c5467a9dfd7797927c029bcd524418f8afd0c563dbde90
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iuven-ojr.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/html
Content-Length: 6813
Connection: keep-alive
set-cookie: sid=t3~oikdjxcg2wczzawugwupegty; path=/
cache-control: private, no-transform
girlsflirthere.life/media/dating/sinderv2/css/bootstrap.min.css
200 OK 110 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/bootstrap.min.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with very long lines (65367), with CRLF line terminators
Size 110 kB (109540 bytes)
Hash 03d06426a30f77095d7511e1ca74d225
d1a349294f6fe94ffb17a50097b37bd81e9ba56a
3f7e6f3cb6ba8e2effbdd260131ce0d2f332fb00ba3feca1a5bc9c3ee7f9e2a6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/bootstrap.min.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/css
Content-Length: 109540
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "03d06426a30f77095d7511e1ca74d225"
Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CC7834D39926E6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/vegas.js
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/vegas.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text
Hash 85310f0fc6d54ab6c4aa2a2efa1e8514
dbd124ed40a22170b23709711d4572ff93c9fe6f
17d0a5e4e45104aec83860cf51f19bb232747a586a74fc841b9771a9aa9e42b2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/vegas.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: application/javascript
Content-Length: 21792
Connection: keep-alive
ETag: "85310f0fc6d54ab6c4aa2a2efa1e8514"
Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC78351B59FC5E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#328018459/gid:0/gname:root/mode:33188/mtime:1659086506#637908000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:46.637908Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/cookie/js.cookie.js
200 OK 4.3 kB URL GET HTTP/1.1 girlsflirthere.life/cookie/js.cookie.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (1709), with CRLF line terminators
Hash a7e9883924072f15259de6888d5ef515
7f4f6e5938e68f55aef81e0cd0145f008cd28382
985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cookie/js.cookie.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/javascript
Content-Length: 4264
Connection: keep-alive
ETag: "a7e9883924072f15259de6888d5ef515"
Last-Modified: Tue, 21 Nov 2023 12:29:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC7723F9D15F84
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1699191628#679657031/gid:0/gname:root/mode:33188/mtime:1658397637#354375000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-21T10:00:37.354375Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/css/style.css
200 OK 20 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/style.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with CRLF line terminators
Hash 7157a53ffb9afb73513901e9cb9b8b91
9e2049684cd1a83e699b11dfae35214acae2cc09
dac025579246852dcb348c61372b66879a24b28ff78c43220c4655a1c7a62671
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/style.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/css
Content-Length: 20007
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "7157a53ffb9afb73513901e9cb9b8b91"
Last-Modified: Thu, 30 Nov 2023 15:24:54 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CC7741617941E7
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357885#739948373/gid:0/gname:root/mode:33279/mtime:1701357894#743961887/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:24:54.798Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/css/vegas.css
200 OK 20 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/vegas.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with CRLF line terminators
Hash 357c7befa8bdef911f02f48f49e10628
47972e3c4591058dce82dd3b08bed8e0b8ae5c8f
47f3bef4746b798892c7beff212618616b0950f33f416f03db243578f89135e3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/vegas.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/css
Content-Length: 19822
Connection: keep-alive
ETag: "357c7befa8bdef911f02f48f49e10628"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC7835081B4574
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/util/flag-icon/css/flag-icon.css
200 OK 41 kB URL GET HTTP/1.1 girlsflirthere.life/util/flag-icon/css/flag-icon.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with CRLF line terminators
Hash 0a47b937981e7389e3ebe63e4a503066
01b395ad016a1d9d15016d765f7d2c51a6e2809b
d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/flag-icon/css/flag-icon.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/css
Content-Length: 40627
Connection: keep-alive
ETag: "0a47b937981e7389e3ebe63e4a503066"
Last-Modified: Tue, 21 Nov 2023 12:30:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC77BE505A7E24
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223575#888122023/gid:0/gname:root/mode:33188/mtime:1655386274#684017000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:31:14.684017Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/util/utils.js
200 OK 7.5 kB URL GET HTTP/1.1 girlsflirthere.life/util/utils.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators
Hash 01816d15ca03032751161a746e2fb7c3
dcc72ea5fa1356490ba473288159df9786b4a3c3
8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/utils.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/javascript
Content-Length: 7512
Connection: keep-alive
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Tue, 21 Nov 2023 12:30:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC76C874484618
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223579#380129542/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/timer.js
200 OK 621 B URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/timer.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text
Hash 40fe503eb84093a37b15e39365ffc587
911128043c901314d283fe478477d26e2b3d821a
60b0f0de4c72c1ce9c05b36ba776f12538b1d9b80858b7099068a3e7e0415bc1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/timer.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: application/javascript
Content-Length: 621
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "40fe503eb84093a37b15e39365ffc587"
Last-Modified: Mon, 20 Feb 2023 09:32:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CC78352FE7FBF5
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676801713#1186412/gid:0/gname:root/mode:33188/mtime:1659086506#89907000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:46.089907Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/css/animate.css
200 OK 61 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/animate.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with very long lines (460), with CRLF line terminators
Hash 1cbfbb2c4ef85880799a74ab2f290f2a
9b6366d6c7ad05010f7070db70fba10754be6e9c
bfdad6766b12a3826bf32024f0fc13fffbcee84f102034b9270da7e538451031
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/animate.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/css
Content-Length: 61188
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "1cbfbb2c4ef85880799a74ab2f290f2a"
Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CC770C7FEF3208
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/trls_loveme_casual.js
200 OK 16 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/trls_loveme_casual.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash bba2d28791accbb75b5b0c6edd241c9e
c82d5711a31efaa6ba7e3bbf6cb5edac89ef65b4
bce59258d0085ddd7fdc338cc7a96b32cf01198aefde34adc336e6c0208f9b4c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/trls_loveme_casual.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: text/javascript
Content-Length: 15966
Connection: keep-alive
ETag: "bba2d28791accbb75b5b0c6edd241c9e"
Last-Modified: Sun, 10 Dec 2023 22:36:24 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC786A6A11755A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357944#300036177/gid:0/gname:root/mode:33188/mtime:1702247784#625610336/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-12-10T22:36:24.852Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/bb.js
200 OK 639 B URL GET HTTP/1.1 girlsflirthere.life/media/bb.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with very long lines (639), with no line terminators
Hash 0d553e4bac91c74bfee2dbabba61e99e
5af71e2377c9c012a7826a695f2724901941b19b
1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/bb.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: application/javascript
Content-Length: 639
Connection: keep-alive
ETag: "0d553e4bac91c74bfee2dbabba61e99e"
Last-Modified: Wed, 20 Sep 2023 15:21:05 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC776492441D94
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134512#756035434/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic
200 OK 1.3 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type gzip compressed data, max compression
Hash 675595526e25e7ce72d1581195f36c5d
8e1deaa49211561c5b0e50b217178ad089ff8c0f
66d4c1c3bdec1cbffeac4d22e08f0de0531f4982dcfaf93adeb7ca35f7909147
GET /css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 02:59:16 GMT
date: Sun, 05 May 2024 02:59:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
girlsflirthere.life/media/exit-new/exit1.js
200 OK 3.5 kB URL GET HTTP/1.1 girlsflirthere.life/media/exit-new/exit1.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators
Hash 625e5e2950612f771e246beb33c9ea61
e4fc251c6c000496c285f8dc3fa097040b031681
618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/exit-new/exit1.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: application/javascript
Content-Length: 3473
Connection: keep-alive
ETag: "625e5e2950612f771e246beb33c9ea61"
Last-Modified: Wed, 20 Sep 2023 15:23:09 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC7735AB02D047
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134511#160030446/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/jquery.js
200 OK 93 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/jquery.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (32072)
Hash df6173bad69801a82b84701789ab16c5
94908755cae039762ad53086b858eac553e3f56e
cd8f413e39247d48ea354b8fb11c227e72f641403bd8d4dd81cd7473d60daafb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/jquery.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: application/javascript
Content-Length: 93064
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "df6173bad69801a82b84701789ab16c5"
Last-Modified: Mon, 20 Feb 2023 09:32:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CC78350D23F91B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676801713#1186412/gid:0/gname:root/mode:33188/mtime:1659086505#825907000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:45.825907Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/logo-loveme_white1.svg
200 OK 4.6 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/logo-loveme_white1.svg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type SVG Scalable Vector Graphics image
Hash 896592d7f2fa3d761c0b767e9399b010
ed1c0502263392938f4cbdd72afb1a8704bf840e
3417f549b6a1018ee687dd84aec136cb7fba2bb5b4c83cf269f9f8e958cc48de
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/logo-loveme_white1.svg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: image/svg+xml
Content-Length: 4564
Connection: keep-alive
ETag: "896592d7f2fa3d761c0b767e9399b010"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC7835440196CD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223363#695657344/gid:0/gname:root/mode:33188/mtime:1655387527#38754000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:52:07.038754Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 22284, version 3.786
Hash 5c92d5d3e39a260d5dd06ced7eca070d
64df09fd462e6bb76890b7782578777b901f2003
2a99c11dd137ef8b515b3a95d2bdb38ec99bf745b2865196aa910628bcb144b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: font/woff2
Content-Length: 22284
Connection: keep-alive
ETag: "5c92d5d3e39a260d5dd06ced7eca070d"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC786A7309DBBF
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 21796, version 3.786
Hash b796339b324ec08006ca04dca90284cf
4283d779705f09e68939572df76c52cb41a3ec68
d65bbca022f8953936d6e60b9a59fc27f9bfd74ba96257ffe14df83b3d8eb0e3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: font/woff2
Content-Length: 21796
Connection: keep-alive
ETag: "b796339b324ec08006ca04dca90284cf"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC786A736610E8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223362#791655448/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/util/flag-icon/flags/4x3/no.svg
200 OK 331 B URL GET HTTP/1.1 girlsflirthere.life/util/flag-icon/flags/4x3/no.svg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type SVG Scalable Vector Graphics image
Hash c7ecfe59439b5fd23924fd206cf2fded
056fbd2b17c7f08bfb480d21973a96bf86fbd72a
4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/util/flag-icon/css/flag-icon.css
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: image/svg+xml
Content-Length: 331
Connection: keep-alive
ETag: "c7ecfe59439b5fd23924fd206cf2fded"
Last-Modified: Tue, 21 Nov 2023 12:30:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC77C7EEEF76A8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223577#340125150/gid:0/gname:root/mode:33188/mtime:1655386305#848080000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:31:45.84808Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 21908, version 3.786
Hash 2e5fca371696cab9fb5a9fe214c1319c
4bd3fe039b2f65d10d1b8c1b30c7962bdc313b7a
f8b1a05998ba7e93e5c9f41b004496a3576b8d10d9fafc2f7014894ebc3e72e9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: font/woff2
Content-Length: 21908
Connection: keep-alive
ETag: "2e5fca371696cab9fb5a9fe214c1319c"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC76D5FED1AEFC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223362#783655432/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2
200 OK 15 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 14772, version 3.327
Hash bcf3bb1b7f7a3436181788e748bae013
8ee24d38f618f070a43619f1d471d90f17d666f1
42e50c76c1bf569cb8b597ffc8cdd18a6f4a311832f46fdc1489145027550781
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: font/woff2
Content-Length: 14772
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "bcf3bb1b7f7a3436181788e748bae013"
Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT
No-Gzip-Compression: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CC786A75386AC2
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/scandinavia6_alt.jpg
200 OK 164 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia6_alt.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3
Size 164 kB (164464 bytes)
Hash d3a0904ff1e85ac9203f192477ccea32
3dc2eb88095e93448fd627cc53e78bda983ce2a3
96884c8509dee0360a0d7e39156b38f067bf977bceb6524a189fe21872dfda1d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia6_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Content-Type: image/jpeg
Content-Length: 164464
Connection: keep-alive
ETag: "d3a0904ff1e85ac9203f192477ccea32"
Last-Modified: Thu, 30 Nov 2023 15:25:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC786A750CABE9
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357925#680008258/gid:0/gname:root/mode:33188/mtime:1701357925#928008629/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:25.98Z
Expires: Mon, 05 May 2025 02:59:16 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/favicon.ico
204 No Content 0 B URL GET HTTP/1.1 girlsflirthere.life/favicon.ico
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Sun, 05 May 2024 02:59:16 GMT
Connection: keep-alive
Cache-Control: no-transform
girlsflirthere.life/media/dating/sinderv2/images/scandinavia1_alt.jpg
200 OK 133 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia1_alt.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3
Size 133 kB (132802 bytes)
Hash 19b66b80d93b12a4f00f18a467d9e6be
226d6a060f76324be719be6317828f1547208bb0
6b7139ccbab356327e683edfde4cc7d9f75654dc6162a0970b31543f73d0ca17
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia1_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:21 GMT
Content-Type: image/jpeg
Content-Length: 132802
Connection: keep-alive
ETag: "19b66b80d93b12a4f00f18a467d9e6be"
Last-Modified: Thu, 30 Nov 2023 15:25:28 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC786BAE41C20A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357928#132011931/gid:0/gname:root/mode:33188/mtime:1701357928#332012232/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:28.388Z
Expires: Mon, 05 May 2025 02:59:21 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/scandinavia4_alt.jpg
200 OK 172 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia4_alt.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3
Size 172 kB (171781 bytes)
Hash e23a20555d1a9fd6f5f7a988dcf84a46
42c966cbbd9e6bec41ceef39e437066acc74295c
f042e79c205194be5f3bfe06e3f51f94dd9565ebf2d49a38249b374348c78f64
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia4_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:27 GMT
Content-Type: image/jpeg
Content-Length: 171781
Connection: keep-alive
ETag: "e23a20555d1a9fd6f5f7a988dcf84a46"
Last-Modified: Thu, 30 Nov 2023 15:25:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC786CE6C41737
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357926#636009690/gid:0/gname:root/mode:33188/mtime:1701357926#888010067/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:26.945Z
Expires: Mon, 05 May 2025 02:59:27 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/scandinavia3_alt.jpg
200 OK 170 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia3_alt.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3
Size 170 kB (170472 bytes)
Hash 54e56c85dd6db91ed3618f1e762aba17
1f3970b0dc03ffdf765972273fb4d4f267885e62
615e0e68e832666367cf03143faeb1106d064bf65b04cf547b6e85fa4b69bf33
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia3_alt.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Cookie: sid=t3~oikdjxcg2wczzawugwupegty
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 02:59:32 GMT
Content-Type: image/jpeg
Content-Length: 170472
Connection: keep-alive
ETag: "54e56c85dd6db91ed3618f1e762aba17"
Last-Modified: Thu, 30 Nov 2023 15:25:27 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CC786E1FC07F75
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357927#160010476/gid:0/gname:root/mode:33188/mtime:1701357927#404010841/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:25:27.458Z
Expires: Mon, 05 May 2025 02:59:32 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
data-jsext.com/ExtService.svc/getextparams
200 OK 537 B URL GET HTTP/2 data-jsext.com/ExtService.svc/getextparams
IP
ASN #24940 Hetzner Online GmbH
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=94eb35ba94662f6b8546cecf08f3b4ea-11246-0505
Certificate IssuerLet's Encrypt
Subjectdata-jsext.com
FingerprintC1:16:89:38:64:89:7A:27:73:30:A1:1D:1B:A0:78:99:8D:61:2F:69
ValidityMon, 25 Mar 2024 00:20:03 GMT - Sun, 23 Jun 2024 00:20:02 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (628), with no line terminators
Hash f0ff9519ad22b8b518b843ffb173ccc7
2a756d59ca73ebca175cfe427486b7c2b7c18b2f
bfc8dedb9d5109a40b1efa76f59438c1e54993399d2a8a01aff0c1a46d7574a5
GET /ExtService.svc/getextparams HTTP/1.1
Host: data-jsext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://girlsflirthere.life
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:59:16 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
64.190.63.136
185.155.184.85
142.250.74.106