Report - yessenia.paigestewart.online/_meetups/?click_id=party-doctor&network=TRAFEE&guid=e811c67c522d25ba3e7ddcf495a918e3

Report Overview

Submitted URL
yessenia.paigestewart.online/_meetups/?click_id=party-doctor&network=TRAFEE&guid=e811c67c522d25ba3e7ddcf495a918e3
IP
68.66.226.117
ASN
#55293 A2HOSTING
Submitted
2023-05-25 15:28:21
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bgaieic.naughtydatng.com	unknown	2021-01-19	2023-01-04	2023-05-21	37 kB	655 kB	178.162.199.80
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-25	2.0 kB	4.2 kB	142.250.74.3
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-05-25	1.1 kB	64 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-05-25	549 B	32 kB	142.250.74.106
yessenia.paigestewart.online	unknown	2023-03-11	2023-05-25	2023-05-25	982 B	1.4 kB	68.66.226.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-05-25	medium	bgaieic.naughtydatng.com/s/6397420b14694

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	bgaieic.naughtydatng.com/js/fp2.min.js	31 kB	2023-03-07	2024-05-07
Pretty URL bgaieic.naughtydatng.com/js/fp2.min.js IP 178.162.199.80 ASN #28753 Leaseweb Deutschland GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:35 Last Seen2024-05-07 01:17:37 Times Seen1351 Hash e7d6b85edb141824af8951e19333337c 76600b2cb1978ca24d9fe39b1412f052da855ddb 6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e Loading...

	bgaieic.naughtydatng.com/bundle/845/assets/js/jquery.min.js	90 kB	2023-03-07	2024-05-07
Pretty URL bgaieic.naughtydatng.com/bundle/845/assets/js/jquery.min.js IP 178.162.199.80 ASN #28753 Leaseweb Deutschland GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-07 18:10:34 Times Seen267428 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	bgaieic.naughtydatng.com/bundle/845/assets/js/functions.js	556 B	2023-03-14	2024-04-07
Pretty URL bgaieic.naughtydatng.com/bundle/845/assets/js/functions.js IP 178.162.199.80 ASN #28753 Leaseweb Deutschland GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 12:22:44 Last Seen2024-04-07 14:27:10 Times Seen73 Hash f4815c2a20151ac6069b03eb88d80292 3f951f963406e19aa509490deec23e3f44904c97 9ea1b5fed2553975afb17a55ef18dc5e715c3b2434c3b7229c8b16a089b4e346 Loading...

	bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk	800 B	2023-03-07	2023-07-04
Pretty URL bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk IP 178.162.199.80 ASN #28753 Leaseweb Deutschland GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:14:35 Last Seen2023-07-04 23:44:10 Times Seen218 Hash 95d0345d30a683b55552f88523905902 5c3b20ccc0817febdb27ee12d273c2021e4ba04c 06f49d481b230265f1c45b6e00bbe0a21181c79b2ceefee8b54202fa2ffc6055 Loading...

	bgaieic.naughtydatng.com/s/6397420b14694	0 B	2023-03-07	2024-05-07
Pretty URL bgaieic.naughtydatng.com/s/6397420b14694 IP 178.162.199.80 ASN #28753 Leaseweb Deutschland GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 18:19:12 Times Seen37414090 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	bgaieic.naughtydatng.com/js/click.js?10	6.9 kB	2023-03-26	2023-08-17
Pretty URL bgaieic.naughtydatng.com/js/click.js?10 IP 178.162.199.80 ASN #28753 Leaseweb Deutschland GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:33:48 Last Seen2023-08-17 02:42:10 Times Seen915 Hash 989df815be37d6f5735134d8688a2872 c6df13af20196018089650daea231bdcf0647f46 18505ac7b697920c4bf75c30355001f1c3947d739fc45ba8774de9a793da4d8b Loading...

HTTP Transactions (28)

URL IP Response Size

yessenia.paigestewart.online/_meetups/?click_id=party-doctor&network=TRAFEE&guid=e811c67c522d25ba3e7ddcf495a918e3

68.66.226.117

0 B

URL
yessenia.paigestewart.online/_meetups/?click_id=party-doctor&network=TRAFEE&guid=e811c67c522d25ba3e7ddcf495a918e3
IP
68.66.226.117:0
ASN
#55293 A2HOSTING

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /_meetups/?click_id=party-doctor&network=TRAFEE&guid=e811c67c522d25ba3e7ddcf495a918e3 HTTP/1.1
Host: yessenia.paigestewart.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
location: /_meetups/r.php?click_id=doctor&groups=party&network=TRAFEE&guid=7af74d2ccf3ce11bfd3a16bb3ebcfd5f
content-type: text/html; charset=UTF-8
content-length: 0
date: Thu, 25 May 2023 15:28:03 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff

yessenia.paigestewart.online/_meetups/r.php?click_id=doctor&groups=party&network=TRAFEE&guid=7af74d2ccf3ce11bfd3a16bb3ebcfd5f

68.66.226.117

406 B

URL
yessenia.paigestewart.online/_meetups/r.php?click_id=doctor&groups=party&network=TRAFEE&guid=7af74d2ccf3ce11bfd3a16bb3ebcfd5f
IP
68.66.226.117:0
ASN
#55293 A2HOSTING

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (741), with no line terminators
Size
406 B (406 bytes)
Hash
4dba5ff940dfa411ff56c2aa6ba73fbc
6118c7215ee83185b8b748dad7396782baf25a05
3d39d885668b76c48a3f7a627c04450b4ced383337f0e0c70f0d8e979295b01b

HTTP Headers

GET /_meetups/r.php?click_id=doctor&groups=party&network=TRAFEE&guid=7af74d2ccf3ce11bfd3a16bb3ebcfd5f HTTP/1.1
Host: yessenia.paigestewart.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 406
content-encoding: gzip
vary: Accept-Encoding
date: Thu, 25 May 2023 15:28:04 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff

bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk

178.162.199.80

200 OK

2.4 kB

URL User Request GET HTTP/1.1
bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
2.4 kB (2407 bytes)
Hash
4021bd6b41ce1fc9f086ee4d037c2c16
b92e83e5ce78add79202661ceb7c437b80847cfa
58513fd4f00227870c9902ee24f77f91eb7f7b4c137d566010144c194976a6d5

HTTP Headers

GET /s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B; expires=Fri, 26-May-2023 15:28:04 GMT; Max-Age=86400; path=/; domain=naughtydatng.com
SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=naughtydatng.com
ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=naughtydatng.com
Content-Encoding: gzip

bgaieic.naughtydatng.com/bundle/845/assets/css/style.css

178.162.199.80

200 OK

10 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/css/style.css
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
ASCII text, with CRLF line terminators
Size
10 kB (10474 bytes)
Hash
79cabe5d452870eaf328d1cff3da202f
ee7fcee91ede31f71563fd57c5ea7fc817e49336
15cfb5e05be56ca74614c00ab5fb94fe30dafb41b26cf3283883db868242fce7

HTTP Headers

GET /bundle/845/assets/css/style.css HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: text/css
Content-Length: 10474
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:22 GMT
Vary: Accept-Encoding
ETag: "63931906-28ea"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/js/jquery.min.js

178.162.199.80

200 OK

90 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/js/jquery.min.js
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
ASCII text, with very long lines (65447)
Size
90 kB (89501 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /bundle/845/assets/js/jquery.min.js HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: application/javascript
Content-Length: 89501
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:24 GMT
Vary: Accept-Encoding
ETag: "63931908-15d9d"
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
02441e71b96dfcb212dc26c6742966fa
893af98d5499b9838549a364494517859f99e38e
2cffe2846eca0320d66174334f55ba35bd299aff59b40c730f7f4b179d542c7b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 25 May 2023 15:28:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

bgaieic.naughtydatng.com/bundle/845/assets/js/functions.js

178.162.199.80

200 OK

556 B

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/js/functions.js
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
ASCII text, with CRLF line terminators
Size
556 B (556 bytes)
Hash
f4815c2a20151ac6069b03eb88d80292
3f951f963406e19aa509490deec23e3f44904c97
9ea1b5fed2553975afb17a55ef18dc5e715c3b2434c3b7229c8b16a089b4e346

HTTP Headers

GET /bundle/845/assets/js/functions.js HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: application/javascript
Content-Length: 556
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:24 GMT
Vary: Accept-Encoding
ETag: "63931908-22c"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/logo1.png

178.162.199.80

200 OK

4.8 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/logo1.png
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
PNG image data, 251 x 84, 8-bit/color RGBA, non-interlaced\012- data
Size
4.8 kB (4828 bytes)
Hash
2af43c1e0f1833d17274eaf6f2f2b8b7
97f3d78023f9245d5fae2eaa218683d31df8bdb8
362623d1ebced266bdb56e19cff6a15f0e069b35ee9292fbdbe39afd90290838

HTTP Headers

GET /bundle/845/assets/images/logo1.png HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/png
Content-Length: 4828
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:24 GMT
ETag: "63931908-12dc"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/wow.png

178.162.199.80

200 OK

2.2 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/wow.png
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
PNG image data, 74 x 105, 8-bit colormap, non-interlaced\012- data
Size
2.2 kB (2209 bytes)
Hash
671c592a7c25cfa5a0670e404ed48a98
61dc3674ca4ab1daed0c7a8430087f69aa4c6610
22f4128f0e39e7b850ceb1b1ff465b48fe8ff33c257f40da4202ace7009fb0f3

HTTP Headers

GET /bundle/845/assets/images/wow.png HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/png
Content-Length: 2209
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:24 GMT
ETag: "63931908-8a1"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/03.jpg

178.162.199.80

200 OK

72 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/03.jpg
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x900, components 3\012- data
Size
72 kB (72491 bytes)
Hash
f4035c9bfbd4128e1b34a440bc8192aa
f7ac4f4e68577ed5f37195f566c0caee1d87b187
f2dfc3ce32ee814279f0043a16db4b0e7741ff2458f6c6669d7cbc860e0d6713

HTTP Headers

GET /bundle/845/assets/images/03.jpg HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/jpeg
Content-Length: 72491
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:23 GMT
ETag: "63931907-11b2b"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/1.jpg

178.162.199.80

200 OK

56 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/1.jpg
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x900, components 3\012- data
Size
56 kB (56430 bytes)
Hash
646733fef411ee523d6743aa7720b3db
ac00bb1b3e4059a00d3d0e28e8228d73a8fd2b48
b1dcca2e3077c6cf41d4774ec0eddb622ae465695c022748f09a078bae63e74d

HTTP Headers

GET /bundle/845/assets/images/1.jpg HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/jpeg
Content-Length: 56430
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:23 GMT
ETag: "63931907-dc6e"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/6.jpg

178.162.199.80

200 OK

88 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/6.jpg
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x900, components 3\012- data
Size
88 kB (88366 bytes)
Hash
5f6a7fb50c8d229042347b62da346872
7fbecb471b1d33d8f0dccbd50a8348c46fc5a46c
6b285f1c2e508c6baaa654c67225a9fa59cc06b9a1d02675ea25b88cf282fe48

HTTP Headers

GET /bundle/845/assets/images/6.jpg HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/jpeg
Content-Length: 88366
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:23 GMT
ETag: "63931907-1592e"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/4.jpg

178.162.199.80

200 OK

92 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/4.jpg
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x900, components 3\012- data
Size
92 kB (92004 bytes)
Hash
9c66eee03899881ef95b300ae5fb3afa
ec4f3a1167b1dce17df8747b06f736d09a47423e
94acf36de1d14ab3f4a68588a2913606b990024b2fc96f3f38014edb80182051

HTTP Headers

GET /bundle/845/assets/images/4.jpg HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/jpeg
Content-Length: 92004
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:23 GMT
ETag: "63931907-16764"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/js/click.js?10

178.162.199.80

200 OK

6.9 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/js/click.js?10
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
ASCII text
Size
6.9 kB (6919 bytes)
Hash
989df815be37d6f5735134d8688a2872
c6df13af20196018089650daea231bdcf0647f46
18505ac7b697920c4bf75c30355001f1c3947d739fc45ba8774de9a793da4d8b

HTTP Headers

GET /js/click.js?10 HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: application/javascript
Content-Length: 6919
Connection: keep-alive
Last-Modified: Wed, 24 May 2023 14:23:37 GMT
Vary: Accept-Encoding
ETag: "646e1de9-1b07"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/02.jpg

178.162.199.80

200 OK

80 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/02.jpg
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x900, components 3\012- data
Size
80 kB (80360 bytes)
Hash
74f65e4603d818ca67b3b8aa974c34d7
204d15357f8e82755408892812985e84194f24b4
dc3ec4e0eb2036e0825f10883b5bd7036f6dfbcc745427b9935c441e1bbd038c

HTTP Headers

GET /bundle/845/assets/images/02.jpg HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/jpeg
Content-Length: 80360
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:22 GMT
ETag: "63931906-139e8"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/bundle/845/assets/images/5.jpg

178.162.199.80

200 OK

102 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/5.jpg
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x900, components 3\012- data
Size
102 kB (102143 bytes)
Hash
de12c6c5be22dae2dea854da928132eb
e323d27ab0be86fc48d47d0768c96ad65a335826
7dd28ad105b31d48c3cf9250fe322b678ea32d2d1615c38a668903d6ddccd919

HTTP Headers

GET /bundle/845/assets/images/5.jpg HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: image/jpeg
Content-Length: 102143
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:23 GMT
ETag: "63931907-18eff"
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

142.250.74.3

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
02441e71b96dfcb212dc26c6742966fa
893af98d5499b9838549a364494517859f99e38e
2cffe2846eca0320d66174334f55ba35bd299aff59b40c730f7f4b179d542c7b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 25 May 2023 15:28:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
abec0b27117032d4b87c029a25e2ce98
4c80c24717da4be72fd100343c5e92c1724ccd74
bc6bffd934c5172ab19ec9a41808b5543016f109670947e16c7ba285a295f606

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 25 May 2023 15:28:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
abec0b27117032d4b87c029a25e2ce98
4c80c24717da4be72fd100343c5e92c1724ccd74
bc6bffd934c5172ab19ec9a41808b5543016f109670947e16c7ba285a295f606

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 25 May 2023 15:28:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

31 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size
31 kB (30928 bytes)
Hash
ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780

HTTP Headers

GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bgaieic.naughtydatng.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 00:25:28 GMT
expires: Thu, 23 May 2024 00:25:28 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
age: 140557
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
abec0b27117032d4b87c029a25e2ce98
4c80c24717da4be72fd100343c5e92c1724ccd74
bc6bffd934c5172ab19ec9a41808b5543016f109670947e16c7ba285a295f606

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 25 May 2023 15:28:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

31 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size
31 kB (30928 bytes)
Hash
ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780

HTTP Headers

GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bgaieic.naughtydatng.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 00:25:28 GMT
expires: Thu, 23 May 2024 00:25:28 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
age: 140557
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bgaieic.naughtydatng.com/js/fp2.min.js

178.162.199.80

200 OK

31 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/js/fp2.min.js
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
ASCII text, with very long lines (30507)
Size
31 kB (30685 bytes)
Hash
e7d6b85edb141824af8951e19333337c
76600b2cb1978ca24d9fe39b1412f052da855ddb
6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e

HTTP Headers

GET /js/fp2.min.js HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B; CF=1LOUTqDFWWkZShsS1OlfaQ__
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:05 GMT
Content-Type: application/javascript
Content-Length: 30685
Connection: keep-alive
Last-Modified: Wed, 24 May 2023 14:23:37 GMT
Vary: Accept-Encoding
ETag: "646e1de9-77dd"
Accept-Ranges: bytes

fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap

142.250.74.106

200 OK

32 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
gzip compressed data, max compression\012- data
Size
32 kB (31852 bytes)
Hash
e372229cc600d06865d0570627f9d1ac
f4f2bbf0a8fe61654cf174967549701e181c3412
8696ddef8abb9a17298c40b8bac507a68260b55e0ced932b40f771571f0683df

HTTP Headers

GET /css2?family=Montserrat:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 May 2023 15:28:05 GMT
date: Thu, 25 May 2023 15:28:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
abec0b27117032d4b87c029a25e2ce98
4c80c24717da4be72fd100343c5e92c1724ccd74
bc6bffd934c5172ab19ec9a41808b5543016f109670947e16c7ba285a295f606

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 25 May 2023 15:28:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

bgaieic.naughtydatng.com/bundle/845/assets/images/favicon.png

178.162.199.80

200 OK

4.4 kB

URL GET HTTP/1.1
bgaieic.naughtydatng.com/bundle/845/assets/images/favicon.png
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Size
4.4 kB (4423 bytes)
Hash
d09ad9338602ef288593fc56aa4c74a9
782504a27db2541fd11646409a95072ce1b14779
82b8c0e723a64925e67d314564c275c9b51e0ecf35c6d8557e9e862ef8bc3dcb

HTTP Headers

GET /bundle/845/assets/images/favicon.png HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B; CF=1LOUTqDFWWkZShsS1OlfaQ__
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:06 GMT
Content-Type: image/png
Content-Length: 4423
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 11:16:24 GMT
ETag: "63931908-1147"
Accept-Ranges: bytes

bgaieic.naughtydatng.com/track.php

178.162.199.80

200 OK

20 B

URL POST HTTP/1.1
bgaieic.naughtydatng.com/track.php
IP
178.162.199.80:443
ASN
#28753 Leaseweb Deutschland GmbH

Requested by
https://bgaieic.naughtydatng.com/s/6397420b14694?subsource=DOCTOR&click_id=RE9DVE9SLE5PLDkxLjkwLjQyLjE1NCxXRUIsUEFSVFk
Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
gzip compressed data, max speed, from Unix\012- data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

HTTP Headers

POST /track.php HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 2516
Origin: https://bgaieic.naughtydatng.com
DNT: 1
Connection: keep-alive
Referer: https://bgaieic.naughtydatng.com/s/6397420b14694
Cookie: s=7tZ14e5Imw46O9jh%2Bcf%2FLBx0W0ckjnEYWQivyT%2BIfLh%2BZyZO01f082YsTk94K1d0Ps5Yh4ZoSD76Lrl5eFDyEyB%2BNvmXPqtb%2FR9Q5mR3DbDl3iIxJrUkM5qs%2FYdwu29SJ%2FcsEsqZiM5Q0Z0D7orEStgX6%2F%2BDQVdTsvHrIr2soLP%2FAoxzQqVQf5WWQYywEvJRCXo%2FQpc7uXywDNSe1eoMZ77ncXhgMDt7esn%2BcgZVc2TNBPbtwzbUSy%2BX0Ti4wwgbFlH3%2BFqgOPD%2Brgy0fyGZfeX%2Bn8Tka6u1mxUx%2F5zZzM4m0Q3v63rP%2F3%2FePtIJ%2BMuM3zf4SwkX7mcQ7lm3UkWrLibviO%2FXDRm9Caa9NS6qbmpY0194Jk6%2F2QWzBdByWvYLIep%2BtCU0dZ1hzNKOx38ldbcr5yAWMRtAof3Mx7gaAPQot9zee1ztYbmXWcxDuKt2Sp3EoE16OsSsIWYmSEmlfuHkjqJ2jUw%2BMktsASrNKKA4l7ZQz8rqAm0lVrOxc5NDNV50EtWyFrVjSlWTpWERCdry5nqp3mN8XqFBWAIiqx3h5ZcngfyvqZ9taL%2FCFlG2v4HuuI6BVV1m9lxIGrr0MPsueMk%2B6mr3PYFViE1BoVuyaByCy%2BZQJR3ud3UYxBZQ0L0avdxkbynhWgsBUhHcFXH1w6jzjhAazdHrFMqIyZgztCvORTLNMnnCtIOo9qEVYCG%2BWie4Tzf3QtzZA%2BU6ot%2B2giarzOzhNnjqgUhXKYA5SJr6gr1Lrtwsk0IgIuRrtBgk5h3LoBaUzKWJAgfjYCE4yUgtyO67GbGgqdtNNHlwXZHzMfRRYJD9hlQCbHFCpvBgbB0iebaFF4cU0Lza008PensLZY04XkgcBihyLlQ7odGGgvUdJxhDnMg%2FxOv5Oy%2BQ8X0XxZSTciKNZblagHyfcuNj0nF44vjmcjxKygHdd7ytSp6I2PPfaDcQ%2BHuoBF1%2FDEs1yGdqc1goBAeP%2BNwlYoOgAOXsxpVPEV8%2FaEcpliWaA8U22KmDbPUkrTukO4odIqouuYCKoQ3aPUk%2F0TOLeEo2Z%2BDvImkxyHCJzdmrLmfdv6Wg7w05dqtgQK5H0uQLc1L%2B1qOWOggJgch0LQ4DXynOfRwYH2ugDDgAuWREWk2u%2FPwfLpV9Xo15qRx4VxRvUjHXci4CSo9e8LaYy15K5yja%2BfVlBX6yguEVz4wkqBgvSMj%2BiFfI5PJH9rrLBKVBkhcoJjFZOfZN6FauDGDhn9UAolijnkkWVs1RRkYt9hl%2FSp3QcshZuknsxE8LudhQChRH%2Fv6EI7pTR8O2SORjMk%2FtuT5Jx3q4PlQz73YtZuCS80QSWs2BgJBY0XPhnpwFODQ%2BpmZkpRwjeLF5mf%2BTy924S6LMmvDn52ryQfan%2FD%2BBRKv32eBqhs3%2BsjBOsKV3sVL2XEV3ZBPBvNRgspBTZs6CEjRgeh7pvBOcjFOpiWK4vz2lPH4XojTHxbNrmNmpqRQPKl0n13dePPxhYR2nNVi33gNkqOpUYi3Nh%2FTGlMzvBdocVUK8GSSAnzbb4nTbP67SDg9i5aQ5rW1dFFvu2SM14Q11twAcuacSsMj%2FaGTQ9uU6BPDldMkLKSAanp5BS4BcESXMJXUF6h8vf2VOSLLiEVtK2Iyv0iPCwB6b2ZTYFSgbkXVKTZjq7KapXN8hIz9Tf%2B9uPrebyY6i37yRKBdGSNLgFE%2Fat%2BJ%2B; CF=1LOUTqDFWWkZShsS1OlfaQ__
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

bgaieic.naughtydatng.com/s/6397420b14694

178.162.199.80

2.3 kB

URL
bgaieic.naughtydatng.com/s/6397420b14694
IP
178.162.199.80:0
ASN
#28753 Leaseweb Deutschland GmbH

Certificate
IssuerLet's Encrypt
Subjectnaughtydatng.com
FingerprintE6:DB:44:81:7E:C5:AC:94:ED:73:E0:B1:23:E1:51:22:02:D6:13:1E
ValidityMon, 17 Apr 2023 09:05:12 GMT - Sun, 16 Jul 2023 09:05:11 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
2.3 kB (2342 bytes)
Hash
2b5b033254e679c56282d1697ee82136
4beaeeb7611d3d8e026356c39a2dd091e737e944
098bb3dee0ce17a49fca568c4b6e61aeafc151fe6a98858e562ffe663d273e47

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /s/6397420b14694 HTTP/1.1
Host: bgaieic.naughtydatng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Thu, 25 May 2023 15:28:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: s=hw%2BF%2BWCQDAKxrf5uzi63Kuwbe3%2BRwlrP1Wb3udTz6Jl8TCgrEMmULOa0WCyurDOKmuuz81%2F3Qnwsi03L071S0CB%2BNvkRH6NV%2FTdQQiJzDZ5Df59YbBSGdC4EbBNWo0EINcAjuTwySIxo5IeecM30qYVRZ4kOfImFqNF5IlmhwUCJAUpsFbC0epQU3ve7GoGufl%2F0GYL2M2%2Fb5sGr86F%2FcK35nK%2BSxq67UjTuLn3aygop0oyCDzZzNQ2AN4kaoCfdvbI%2B3TXMsD1FbdPxV5r416EqI766RhjyP2Pj8%2BT%2B%2FXi88Go8%2Btl%2BjUee027Hm7Dl1%2F25nHxC9Nd6eCAOzRUfjoLs99p6D%2B3YCFOFrwGlQKLWUtWAR3%2F%2FkvAwTW5eHweyJ3wq1ILy7uZBpEKnFAj95ZvabjK9RJB4au6zqyI8Iml4WEaBlO0iIxvyViln24v1uO3r6Fsa1R5XBOUfGVyapDXkpgPz%2Bv2MrGmks9MFkk76izr0gylQwWo7DfMeLiUVzsoUP149o95TkGfV9kDwcvgG4awXaIe97tje4kvZMsMsfuNumyCTMcv55X97tzeQz9MjiC5SAiYQ0ksR%2B1rNJ0DQ0V0yclk3B1XUKzqy8Vzjo7rKnSlqlXVb0Cv%2FxlXCdEgnrjsae7G1tKViGKzmQ2cpX0LI2Tt4ZdKQLmxQE1cv23TrxDsOZTl%2FKYFxcK5k9L9k%2BCoVxrzrp2nMETdq31K17Zhua9SMuij%2FuxFtVmv6GaSkEKi5O78GN27ck2F8r9a1TF7Ks%2FRmrmMgcv0C8EDir3cPmiuaauwjPSTIHZ0x2TQGt%2F1Hkw5q1OONfEzABSpCI1WAgRledMZjAFPbvW23c0eM5qny4q5madhUsc8Aj98oQTztrXfkb4LApr9ucXfVXPLYtpiet%2BtPR%2BlThB8jjuGm%2Bi2J4iW%2FawaPTeYWKwFxy0YXTJy3SoSU6ioNb879bFG7WJw378pQqKQ4YM81hMD3wQAMJ3irboryo76zGYZVpXUn5cn9ESoDT1GowVnOFeF331I3ycRZNKNVslM55SVPUPkByiPG2CBysAtzEva65b0RPKnNyQgliXnpg5gIM5ZJTG%2FZMCnf%2FKHVEUwuM0ldoVzaW78Ez80PnB86jjzPpTAIpwcxXlb9RpNqgwsXxNs%2FANRlYM74kzdHiMyLZ7AejdxDZnQ0QaJy8eKid2lBap6fApLZkSzlHcbA5iSRbuvnaLjEnx77vwBQtvWmYKWiE0Yaj%2BuQcx2DUPjaS0f11%2FnKC2wklBIKclvpw%2FjFvnIPZ3xDYZSVuItt6weFiEyHDAj0%2FmQIhvQoJW5mNE5z5%2BnvNQqOViNb7KKViPn%2FuLquUpQx6rb%2BgMULWk266yPCyeV%2BBBnkRz39%2BCrzRQ79csHkczWoOO9lqPXEE3xQ0WpjUhtmlRXDvJ%2FC7%2BoAQa6maVgFFTVWO14ZnH%2FU%2BfLlfQTZhP6G1f0JOG7bO8LuQL0jFCi8%2FKkxnwvcEOrRAeXkbPeyrlsoZQp25i6f%2BmZNFUhFgLRMvSwl3kNJqBrIv97L2hH6BiVwOdzZZPmDsT%2FOKgzYLud0gOmreDKKhuRaC4X5xo99DrJ%2BkmiWvu1bOfEpsTGdKtxL5NtHABcT5Ugc0w%3D%3D; expires=Fri, 26-May-2023 15:28:18 GMT; Max-Age=86400; path=/; domain=naughtydatng.com
SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=naughtydatng.com
ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=naughtydatng.com
Content-Encoding: gzip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (28)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type