Report - decisivewade.com/wynpzyna8i?adb=n&adb=n&bloclqt=23&dev=r&key=c45f12193c544105ae2fa175a7362064&kw=["pmvhaven","watch","pmv","and","hmv","porn"]&psid=pmvhaven.com,pmvhaven.com&refer=https://pmvhaven.com/&res=14.31&scrHeight=864&scrWidth=1536&ship=&sub3=invoke_layer&tz=-5&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1&v=24.5.6485

Report Overview

Submitted URL
decisivewade.com/wynpzyna8i?adb=n&adb=n&bloclqt=23&dev=r&key=c45f12193c544105ae2fa175a7362064&kw=["pmvhaven","watch","pmv","and","hmv","porn"]&psid=pmvhaven.com,pmvhaven.com&refer=https://pmvhaven.com/&res=14.31&scrHeight=864&scrWidth=1536&ship=&sub3=invoke_layer&tz=-5&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1&v=24.5.6485
IP
172.240.108.68
ASN
#7979 SERVERS-COM
Submitted
2024-05-04 02:18:17
Access
public
Website Title
SEX DATING!
Final URL
dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
decisivewade.com	unknown	2024-04-29	2024-04-30	2024-05-03	4.7 kB	4.9 kB	192.243.59.12
flyingadvert.com	unknown	2016-11-11	2017-04-05	2024-04-17	476 B	1.2 kB	104.21.5.98
dateguys.online	unknown	2018-09-08	2019-07-14	2024-03-03	11 kB	669 kB	104.21.2.111
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-02	419 B	71 kB	142.250.74.136
tsyndicate.com	13042	2017-03-08	2017-03-16	2024-05-03	972 B	1.3 kB	78.46.40.103
ads.traffichunt.com	68632	2003-11-10	2014-02-19	2024-05-02	465 B	757 B	52.0.10.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-03	medium	decisivewade.com	Sinkholed
2024-05-03	medium	decisivewade.com	Sinkholed
2024-05-03	medium	decisivewade.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483	282 B	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483 IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:18:44 Last Seen2024-05-20 01:45:53 Times Seen676 Hash fc6d88580399436c7982d85867b5626d 1a534fca040fd9ea27cc378bfdaa842c4351f02a 4215d621eefa5c805c853b12b4f6bd69a8ed583130f372507a64128ff05d7785 Loading...

	dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483	3.3 kB	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483 IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:18:44 Last Seen2024-05-20 01:45:53 Times Seen684 Hash 395e7a55cb02d8c58aeaa6854639bfcd 95f166c5bab7ddca8714505091d238ac5e675775 bf5f5dbb24973305dddf3514ebad216607114d15bf0682d3e9e2eece25745dd9 Loading...

	dateguys.online/andy/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js	439 B	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:18:44 Last Seen2024-05-20 01:45:53 Times Seen939 Hash 214043f54f832678850fca8c5e01f3a6 30a66237b506392e073971e55aff32b53367354c b4460c164ed593fcd7f1abc940c60890bccdf25cb31761e68cef2370f4ea6416 Loading...

	dateguys.online/andy/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js	656 B	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:18:44 Last Seen2024-05-20 01:45:53 Times Seen885 Hash a61d704122db565646eb89e6f96e2f2b 03730a50625daef938a880ae4bb90a2c79def1e5 7d38f99686fefc6855ad62b4827d3724d08c4e77744638b5a9ab2ca1609e71db Loading...

	dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483	19 B	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483 IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:11:37 Last Seen2024-05-20 01:45:53 Times Seen1066 Hash 8c224cde3b7d658749aeb97930395f6a 8c967cf6f32bcc87a44a1dbee74fc8b75f3d1a9b 76b420fe98146a6f6647792a8cf2bbc4ead5c4a33cc7bfdf1403abc7787c9edf Loading...

	dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483	334 B	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483 IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:18:44 Last Seen2024-05-20 01:45:53 Times Seen674 Hash 27d31884a6866c7c46de6993ef6c4252 cf66cd1517520a7aa49e821c289024c501555b7d 23715e820b1d021e8ddae0e8de03bb79b9ab5d701e7898c30b83db3ce4c14e97 Loading...

	www.googletagmanager.com/gtm.js?id=GTM-TMR4NP	208 kB	2024-05-04	2024-05-04
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-TMR4NP IP 142.250.74.136 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:18:17 Last Seen2024-05-04 04:18:17 Times Seen2 Hash bd03e752faa12356d5dadbe346cd0e72 e04fcd726ae8888213c8f3060e30b5aa88cb9c05 8198d43c6e798eef47265904760dd541d099de4029b984bd6445fb23816a2b7f Loading...

	dateguys.online/andy/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js	96 kB	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:18:44 Last Seen2024-05-20 01:45:53 Times Seen1348 Hash 60710551d19f77e6496b01207365a0e4 837fcb824626afc559093c2c835f8fa064b72010 cb28bc8f8098b56206d0af5cda644951777e8d8fbc053c8ee3b88eca2bca4e3a Loading...

	dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483	25 B	2023-03-07	2024-05-20
Pretty URL dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483 IP 104.21.2.111 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:18:44 Last Seen2024-05-20 01:45:53 Times Seen676 Hash 527c16542dff022aade0b1d236538c2a 80050264540010ac514ee5e03d30f1b7dad020ca 4e64345f573a3e2a800ab5b7cd892c22f87a2090e26bb91e8dffc0ad8ddedb34 Loading...

HTTP Transactions (29)

URL IP Response Size

decisivewade.com/wynpzyna8i?adb=n&adb=n&bloclqt=23&dev=r&key=c45f12193c544105ae2fa175a7362064&kw=[%22pmvhaven%22,%22watch%22,%22pmv%22,%22and%22,%22hmv%22,%22porn%22]&psid=pmvhaven.com,pmvhaven.com&refer=https://pmvhaven.com/&res=14.31&scrHeight=864&scrWidth=1536&ship=&sub3=invoke_layer&tz=-5&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1&v=24.5.6485

192.243.59.12

1.6 kB

URL
decisivewade.com/wynpzyna8i?adb=n&adb=n&bloclqt=23&dev=r&key=c45f12193c544105ae2fa175a7362064&kw=[%22pmvhaven%22,%22watch%22,%22pmv%22,%22and%22,%22hmv%22,%22porn%22]&psid=pmvhaven.com,pmvhaven.com&refer=https://pmvhaven.com/&res=14.31&scrHeight=864&scrWidth=1536&ship=&sub3=invoke_layer&tz=-5&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1&v=24.5.6485
IP
192.243.59.12:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document, ASCII text, with very long lines (816)
Size
1.6 kB (1639 bytes)
Hash
0d37edb180c01a6e3aba954ab3068612
7f18f62128caff8db58a95fc7652a11de8fba98e
bc04ab207fc5120b65e30a650e8b061a8198fe400f37fca436a61918f1ff5b03

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wynpzyna8i?adb=n&adb=n&bloclqt=23&dev=r&key=c45f12193c544105ae2fa175a7362064&kw=[%22pmvhaven%22,%22watch%22,%22pmv%22,%22and%22,%22hmv%22,%22porn%22]&psid=pmvhaven.com,pmvhaven.com&refer=https://pmvhaven.com/&res=14.31&scrHeight=864&scrWidth=1536&ship=&sub3=invoke_layer&tz=-5&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1&v=24.5.6485 HTTP/1.1
Host: decisivewade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 02:17:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=23117823; expires=Sun, 05 May 2024 02:17:50 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.KBDnUPSI0SuqzyqXSSC_neAzDVbf-V_RoiCdjs1o1Mg; expires=Sat, 04 May 2024 02:18:50 GMT
uid_id2=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1; expires=Sat, 11 May 2024 02:17:50 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9bfe76f012dbc0df8c6e3fee64e0aedd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

decisivewade.com/favicon.ico

192.243.59.20

0 B

URL
decisivewade.com/favicon.ico
IP
192.243.59.20:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: decisivewade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://decisivewade.com/api/users?token=L3d5bnB6eW5hOGk_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0yMzExNzgyMw
Cookie: u_pl=23117823; ain=eyJhbGciOiJIUzI1NiJ9.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.KBDnUPSI0SuqzyqXSSC_neAzDVbf-V_RoiCdjs1o1Mg; uid_id2=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 04 May 2024 02:17:51 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a2fd29d8a5d57aa672eae949700982b9
Strict-Transport-Security: max-age=0; includeSubdomains

decisivewade.com/api/users?token=L3d5bnB6eW5hOGk_YWRiPW4mYmxvY2xxdD0yMyZkZXY9ciZrZXk9YzQ1ZjEyMTkzYzU0NDEwNWFlMmZhMTc1YTczNjIwNjQma3c9JTVCJTIycG12aGF2ZW4lMjIlMkMlMjJ3YXRjaCUyMiUyQyUyMnBtdiUyMiUyQyUyMmFuZCUyMiUyQyUyMmhtdiUyMiUyQyUyMnBvcm4lMjIlNUQmcHNpZD1wbXZoYXZlbi5jb20lMkNwbXZoYXZlbi5jb20mcHN0PTE3MTQ3ODkxMzAmcmVmZXI9aHR0cHMlM0ElMkYlMkZwbXZoYXZlbi5jb20lMkYmcmVzPTE0LjMxJnJtdGM9dCZzY3JIZWlnaHQ9ODY0JnNjcldpZHRoPTE1MzYmc2hpcD0mc2h1PTE0ZWE0NmY0ZDNmYzJiYjdhNTdiOGQyZWM4OGNmYjE4NWJlMDUzZmQ4MDZiN2JhZWRmOThiODFmNWIzMmYwM2JiMjJjMDViYjQyNzlmMzM1ODlhNTkyYmIyMmFjMjlhY2JlMGVjZjVhYzZlODQ1NWRmMTBjYmRmMzg2YzY3ZjI5M2QwNTIwODhmOWNiNjBhODk1YzE1M2YwNzY3ZDI0YmQ3Y2YwNjQzZjU2NGU1MjJkNDM2NzgzOTA5YyZzdWIzPWludm9rZV9sYXllciZ0ej0tNSZ1dWlkPTk3NGMyZmVmLTI1MjMtNGEzNy04ZjcyLTViNDBmNDNhMjdlYSUzQTElM0ExJnY9MjQuNS42NDg1&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea%3A1%3A1&pii=&in=false

192.243.59.12

302 Found

0 B

URL User Request GET HTTP/1.1
decisivewade.com/api/users?token=L3d5bnB6eW5hOGk_YWRiPW4mYmxvY2xxdD0yMyZkZXY9ciZrZXk9YzQ1ZjEyMTkzYzU0NDEwNWFlMmZhMTc1YTczNjIwNjQma3c9JTVCJTIycG12aGF2ZW4lMjIlMkMlMjJ3YXRjaCUyMiUyQyUyMnBtdiUyMiUyQyUyMmFuZCUyMiUyQyUyMmhtdiUyMiUyQyUyMnBvcm4lMjIlNUQmcHNpZD1wbXZoYXZlbi5jb20lMkNwbXZoYXZlbi5jb20mcHN0PTE3MTQ3ODkxMzAmcmVmZXI9aHR0cHMlM0ElMkYlMkZwbXZoYXZlbi5jb20lMkYmcmVzPTE0LjMxJnJtdGM9dCZzY3JIZWlnaHQ9ODY0JnNjcldpZHRoPTE1MzYmc2hpcD0mc2h1PTE0ZWE0NmY0ZDNmYzJiYjdhNTdiOGQyZWM4OGNmYjE4NWJlMDUzZmQ4MDZiN2JhZWRmOThiODFmNWIzMmYwM2JiMjJjMDViYjQyNzlmMzM1ODlhNTkyYmIyMmFjMjlhY2JlMGVjZjVhYzZlODQ1NWRmMTBjYmRmMzg2YzY3ZjI5M2QwNTIwODhmOWNiNjBhODk1YzE1M2YwNzY3ZDI0YmQ3Y2YwNjQzZjU2NGU1MjJkNDM2NzgzOTA5YyZzdWIzPWludm9rZV9sYXllciZ0ej0tNSZ1dWlkPTk3NGMyZmVmLTI1MjMtNGEzNy04ZjcyLTViNDBmNDNhMjdlYSUzQTElM0ExJnY9MjQuNS42NDg1&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea%3A1%3A1&pii=&in=false
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Certificate
IssuerLet's Encrypt
Subjectdecisivewade.com
Fingerprint97:80:1A:96:16:58:D9:94:6D:24:84:45:32:59:8C:44:59:0F:B7:8C
ValidityMon, 29 Apr 2024 12:47:45 GMT - Sun, 28 Jul 2024 12:47:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=L3d5bnB6eW5hOGk_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&uuid=974c2fef-2523-4a37-8f72-5b40f43a27ea%3A1%3A1&pii=&in=false HTTP/1.1
Host: decisivewade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://decisivewade.com/api/users?token=L3d5bnB6eW5hOGk_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0yMzExNzgyMw
Cookie: u_pl=23117823; ain=eyJhbGciOiJIUzI1NiJ9.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.KBDnUPSI0SuqzyqXSSC_neAzDVbf-V_RoiCdjs1o1Mg; uid_id2=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Sat, 04 May 2024 02:17:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: http://flyingadvert.com/base.php?c=627&key=b1635585b2f5b27150d44321ac4dc3e1&placementid=23117823&bannerid=2667483
Set-Cookie: uid_id2=974c2fef-2523-4a37-8f72-5b40f43a27ea:1:1; expires=Sat, 11 May 2024 02:17:50 GMT
iprcb4f93c350e53e0d903bccdf61050f3a8=4802654; expires=Sun, 05 May 2024 02:17:52 GMT
pdhtkv=true; expires=Sun, 05 May 2024 02:17:52 GMT
uncs=1; expires=Sun, 05 May 2024 02:17:52 GMT
pdhtkv28=true; expires=Sun, 05 May 2024 02:17:52 GMT
uncs28=1; expires=Sun, 05 May 2024 02:17:52 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6189c9e5fb46f8b9a72a4940550e6f3e
Strict-Transport-Security: max-age=0; includeSubdomains

flyingadvert.com/base.php?c=627&key=b1635585b2f5b27150d44321ac4dc3e1&placementid=23117823&bannerid=2667483

104.21.5.98

302 Found

0 B

URL User Request GET HTTP/1.1
flyingadvert.com/base.php?c=627&key=b1635585b2f5b27150d44321ac4dc3e1&placementid=23117823&bannerid=2667483
IP
104.21.5.98:80
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /base.php?c=627&key=b1635585b2f5b27150d44321ac4dc3e1&placementid=23117823&bannerid=2667483 HTTP/1.1
Host: flyingadvert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Sat, 04 May 2024 02:17:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.36
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=rm6mh5req5frqr98ceo5rksqj2; path=/
cpvlabclick=ZWttd3BkdHlfNjI3XzEwNTU0XzEwNTU1XzI4Mzg0NjA1Nl84; expires=Mon, 03-Jun-2024 02:17:52 GMT; Max-Age=2592000
cpvlablevel=1; expires=Mon, 03-Jun-2024 02:17:52 GMT; Max-Age=2592000
cpvlabclicks=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZmeWV7QCoRI43preczATX5bTgGvo7TbtpVgmG0K9zraGH6XyS%2FOzXFaFlBlCUVrXk44UtPEhWV3Cc%2BIqRjSXHu2LgAOKnL0uM8sWOXCc2txEu5BSXvcmH6IJEKQC0D%2F6Bpux"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e4ff370d255693-OSL
alt-svc: h2=":443"; ma=60

dateguys.online/andy/Image/1.jpg

104.21.2.111

200 OK

41 kB

URL GET HTTP/3
dateguys.online/andy/Image/1.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
41 kB (40611 bytes)
Hash
2406e5669cb75853b085400248d1622f
d84da06636acf5c3597bd6a62e8ce8ef1ee3287a
f0657a5cc4a40ab3b76d476f91bce56eddaa44dc15db329a9bad4f9cb1da8787

HTTP Headers

GET /andy/Image/1.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 40611
last-modified: Fri, 24 Nov 2023 03:37:13 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2198
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=smWB%2F%2FXFi%2BxPC7hSUpyR8TornvpYPtxzBb9npAqJv3AKQvLGE2PypUPaD%2BIMoaliwExn8FK1xrl6K%2FjCLtqxfFFYK40oxujOCPFDCsFJugb6X6xZlihOvls7%2B%2B1A90YImzU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2ddcb4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/2.jpg

104.21.2.111

200 OK

36 kB

URL GET HTTP/3
dateguys.online/andy/Image/2.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
36 kB (35642 bytes)
Hash
b490e64057d91560a26ef1859d686c44
441c31172d9a1be51b4ad54105425ea43ed42e6b
baaa35534fcaddf5df3795c853ea4ed5a4c62f91ea4ec7651edc393226fb0dd6

HTTP Headers

GET /andy/Image/2.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 35642
last-modified: Fri, 24 Nov 2023 03:37:14 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3137
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=64svwRWypigQel8Xd6CnMAxTgQzJyGwgeeVe8gAwhcMsc6zomVNCg8D9WpLyo4qRPrcf%2FM2KgjeBdRRepJsh6CrBO3tyjQfGoLLr6ZakHdHvXw6e8SRAdiEHzLIp9h2U5C0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2dddb4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/3.jpg

104.21.2.111

200 OK

34 kB

URL GET HTTP/3
dateguys.online/andy/Image/3.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
34 kB (34231 bytes)
Hash
11372c3024d634aeb250b4fffee6fdea
7639871286a3fec088f3691deda160ad3a06efec
aa61f4fcde676ac24703d6562718ddfce6f0850568191896d9c3ce71ed630be2

HTTP Headers

GET /andy/Image/3.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 34231
last-modified: Fri, 24 Nov 2023 03:37:16 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3137
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B2l9yf7TMY%2FzsfPlF6Xxw3wJJhrdKuIxXFEN%2B5%2BEwkQ1zRmbaXewCFVh1kuvra7U4c8fdujmXpP2jUoaTWx5wwKYIn8RILvRdo7q7kftZ0BdIM0Loedyj14ijRj8yGoavBs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2ddfb4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/4.jpg

104.21.2.111

200 OK

31 kB

URL GET HTTP/3
dateguys.online/andy/Image/4.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
31 kB (30880 bytes)
Hash
e1f82bfeab8524a292791a371ce1e7da
3ee31756c99cb0f69178a9445c1ff9a923a9c4f7
fab876713c58292214ad938d37340e59c89c4cdc38625a4c44b368777706a337

HTTP Headers

GET /andy/Image/4.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 30880
last-modified: Fri, 24 Nov 2023 03:37:17 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4372
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BtpJcernRiLtffD2GZOsTOQ4NXxmBSn6qIpbzN9aBO%2BglGtvieCyQGR9WKRgGzq5ULGUDai%2BJmThL6vdAY8SJ8N%2BMYmOGIWJOuLbAKmX6nTJ83isYSgiOxy%2FtuemcC7Eng8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2de0b4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/5.jpg

104.21.2.111

200 OK

41 kB

URL GET HTTP/3
dateguys.online/andy/Image/5.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
41 kB (40915 bytes)
Hash
8d0120dfc6551dabddf905b0bef27492
132be39c10fc6e3d2e328b645d8d0b5427b579ba
c1a4d47f95b6d94a50cad10d99777976fcfeb25994873a59a2ab3b82e17e0672

HTTP Headers

GET /andy/Image/5.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 40915
last-modified: Fri, 24 Nov 2023 03:37:18 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6281
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7GP%2FfKAZ6pCL5Lap97J5QHGhwa5PRJ3VkTiliGuAf97OHDZUGELv%2FCxNBsDb5n%2BRFNA9Jtlm62e2mVW5XHRpGlb9UJ917G8nRjgJ2gxndVrelVVBWEgmwUW9k9HwcznDQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c3de1b4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/6.jpg

104.21.2.111

200 OK

38 kB

URL GET HTTP/3
dateguys.online/andy/Image/6.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
38 kB (37820 bytes)
Hash
a4536f4c32f28ab6e6f9ac04aced38de
2331e6dbf743443a67364aad506cce64cc601ae1
543a1e411f47632fe1fc3846d1e96f062be146e257ea5cc261f268fc0bd70517

HTTP Headers

GET /andy/Image/6.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 37820
last-modified: Fri, 24 Nov 2023 03:37:20 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3137
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SrpltrbPtbURtUa0b8vmijdIHOrXUmQ3mGbtUDxVvMC5jMcr1hQzJ9zK0aQG7z10LalYJXBJbRZAQdkxPdMA6nRiqP0bC7O6zDRfyFCvIPaW4ZskYTi35veQ80VFDVDPSQ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c3de2b4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/7.jpg

104.21.2.111

200 OK

48 kB

URL GET HTTP/3
dateguys.online/andy/Image/7.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
48 kB (47477 bytes)
Hash
2547737234a33da21fba2f88ec0f36b8
0d5a5fe88bb8a6f0f3727e7b65da97a167b16c04
d78652aa5afade543add0eb499ed831b2d06f556d120c440fb54de4f74eee4d7

HTTP Headers

GET /andy/Image/7.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 47477
last-modified: Fri, 24 Nov 2023 03:37:21 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3137
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xFw3CJDZbhzOHZDkEqCMWT0DrB9Rz6FTgXPDU1IG1WqpIDqqghptYdUzo8iGU%2BwVU8U6p8I%2BshDgxMCAn10u3QxGG%2FzkLy3LPTVzW3HG6XCaVoqdwLHb22qaF8%2B0cBih4Cw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c3de3b4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/8.jpg

104.21.2.111

200 OK

34 kB

URL GET HTTP/3
dateguys.online/andy/Image/8.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Size
34 kB (34489 bytes)
Hash
ad047e5458e605126d282fd4888f61f1
23c3c0c25957e8041e4a5726513d59a62a94a12c
f8614fba335c92e0e4ff4398b056a32bbd5ef8f91930bf9e81d3b5a7bc6f272d

HTTP Headers

GET /andy/Image/8.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 34489
last-modified: Fri, 24 Nov 2023 03:37:22 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2198
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nsU0oJGKgGjHNuREcsHKOCDtpBqBE2wnuhoZ71C%2FuPJJCASIrsDMDHq1yS%2BL9xq0temHbG5ilowBsE5NaUXB3dohqsN2aLv6Y1Mh9Dz27uoMjjyJbutEld4V7w9fvXuS58A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c3de4b4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js

104.21.2.111

200 OK

62 kB

URL GET HTTP/3
dateguys.online/andy/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JavaScript source, ASCII text, with very long lines (439), with no line terminators
Size
62 kB (61540 bytes)
Hash
214043f54f832678850fca8c5e01f3a6
30a66237b506392e073971e55aff32b53367354c
b4460c164ed593fcd7f1abc940c60890bccdf25cb31761e68cef2370f4ea6416

HTTP Headers

GET /andy/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: application/javascript
last-modified: Fri, 24 Nov 2023 03:37:49 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2198
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f3GFvYGSgPLKz2CpkGfWqc7ZCJczG5La99pFRKT%2Fpyq454rxvg0mSH28w80Hb6V8uNP%2BklpEj93%2B%2BRixZMhVs144jcE2%2Fji%2FALVY4i2KKTddxcMo54Z66PE8Cd7AyO7YmSo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c1dd6b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.googletagmanager.com/gtm.js?id=GTM-TMR4NP

142.250.74.136

200 OK

70 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-TMR4NP
IP
142.250.74.136:443
ASN
#15169 GOOGLE

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (17349)
Size
70 kB (70206 bytes)
Hash
bd03e752faa12356d5dadbe346cd0e72
e04fcd726ae8888213c8f3060e30b5aa88cb9c05
8198d43c6e798eef47265904760dd541d099de4029b984bd6445fb23816a2b7f

HTTP Headers

GET /gtm.js?id=GTM-TMR4NP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 02:17:53 GMT
expires: Sat, 04 May 2024 02:17:53 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70206
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1919198973

78.46.40.103

200 OK

43 B

URL GET HTTP/2
tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1919198973
IP
78.46.40.103:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF5:9F:1F:89:8F:08:CD:46:43:4B:55:0A:42:66:52:21:16:57:43:31
ValidityFri, 12 Apr 2024 09:06:37 GMT - Thu, 11 Jul 2024 09:06:36 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb

HTTP Headers

GET /api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1919198973 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 34fee8ac588e18a1
set-cookie: ts_rt_06eb0705-463f-4b96-836b-64bf3cfa8631=AM_QaTNGTI8YORAixJHjxoyA; expires=Sun, 04 May 2025 02:17:53 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2

tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1610772229

78.46.40.103

200 OK

43 B

URL GET HTTP/2
tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1610772229
IP
78.46.40.103:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF5:9F:1F:89:8F:08:CD:46:43:4B:55:0A:42:66:52:21:16:57:43:31
ValidityFri, 12 Apr 2024 09:06:37 GMT - Thu, 11 Jul 2024 09:06:36 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb

HTTP Headers

GET /api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1610772229 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 622581d8c3f240c8
set-cookie: ts_rt_e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70=AM_QaTNGTI8YNmLAuHFDhsMcAQE=; expires=Sun, 04 May 2025 02:17:53 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2

dateguys.online/andy/CSS/bootstrap.47407f28f6b047490b60b0854c97a929.css

104.21.2.111

200 OK

113 kB

URL GET HTTP/3
dateguys.online/andy/CSS/bootstrap.47407f28f6b047490b60b0854c97a929.css
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
113 kB (113146 bytes)
Hash
7014b18fd53c1230fcac0d5a10bbc92e
e41f7322ac46299c2f444e0668b5a877c252f3fa
957ec84708a01f197df5ac2f01abf9b966afd696f711eb200ebafdd8fceaadd2

HTTP Headers

GET /andy/CSS/bootstrap.47407f28f6b047490b60b0854c97a929.css HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/css
last-modified: Fri, 24 Nov 2023 03:37:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3yLDfrKe4nl72t0rM0ZUO7IJFqNNmjN%2FBWyjR7yMHr8JznkroN2nmaBMjOEmlicOTfvxbza0nzDJC0FERetmKJDNIhQBDOumPlAtMTuwDBxPcXK05Jn3ipTx7IWdR2PYIQU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c1dd7b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js

104.21.2.111

200 OK

656 B

URL GET HTTP/3
dateguys.online/andy/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JavaScript source, ASCII text, with very long lines (659), with no line terminators
Size
656 B (656 bytes)
Hash
553653151691538ba5638ae536836742
0f339b674ead22ab107b5a9b4c980eab0d369adc
4dbbcf10a17424e0dcf6a2bcffee555989aba1ebac97f7cfb606ea80eecef896

HTTP Headers

GET /andy/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: application/javascript
last-modified: Fri, 24 Nov 2023 03:37:51 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2198
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCnnWV8LItaNiKXrSW8olxN6xBNPOJqP1nGafTHmgVJSIgbqweCKNyWXsfd0m1WcbkGD50nwOetLoHW58H2appf4eypucIt03vxF%2BiM6EMebpKgqHWA%2FIykOpqP2EERaNus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2ddbb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/CWB0XYA8bzo0kSThX0UTuA.woff2

104.21.2.111

404 Not Found

315 B

URL GET HTTP/3
dateguys.online/andy/Image/CWB0XYA8bzo0kSThX0UTuA.woff2
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /andy/Image/CWB0XYA8bzo0kSThX0UTuA.woff2 HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fkLtH3dLDfqbCvtt254EignJicPn46lT5iUWP5a1pPS%2B7Bro2Y129hbPPF4Kd18S6e6kJfUhzOaZLoaC6kCCgNXe%2Ft3HPsGQQuoNHs0bXyH7JKT2%2F9fmTs%2BxpeZ1YBsIAOA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3d2e31b4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/mnpfi9pxYH-Go5UiibESIj8E0i7KZn-EPnyo3HZu7kw.woff

104.21.2.111

404 Not Found

315 B

URL GET HTTP/3
dateguys.online/andy/Image/mnpfi9pxYH-Go5UiibESIj8E0i7KZn-EPnyo3HZu7kw.woff
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /andy/Image/mnpfi9pxYH-Go5UiibESIj8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BBFqhenO0MJ7TodP0W8aPWcxLVkH%2F7TkalSPQGJUCBqY64rnTIkgbGfHOxz2zlcvsL2LekFmVKMzzUM0w87wpO9%2BJWy9V3F3%2FXYQYqv36Wq3FOl9X9IHuFAUdAYgOnQ0J3o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3d4e4cb4ee-OSL
alt-svc: h3=":443"; ma=86400

ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3&gtmcb=1394792304

52.0.10.233

200 OK

0 B

URL GET HTTP/2
ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3&gtmcb=1394792304
IP
52.0.10.233:443
ASN
#14618 AMAZON-AES

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerAmazon
Subjecttraffichunt.com
FingerprintD8:B4:A1:3D:85:21:45:F2:97:72:97:8D:E4:59:97:85:1C:48:8F:A0
ValidityWed, 28 Jun 2023 00:00:00 GMT - Sat, 27 Jul 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /adv_ret/?adv_pixel_id=861&nid=3&gtmcb=1394792304 HTTP/1.1
Host: ads.traffichunt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 02:17:54 GMT
server: nginx
p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
set-cookie: new_adx_profile_guid=c92b2b9b-f6fd-4125-8283-568afe881652;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_daily_rt_0=861;Max-Age=78125;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
3.adx_rt_0=861; Max-Age=7776000; Expires=Fri, 02 Aug 2024 02:17:54 GMT; Path=/
adx_profile_guid=c92b2b9b-f6fd-4125-8283-568afe881652; Max-Age=7776000; Expires=Fri, 02 Aug 2024 02:17:54 GMT; Path=/
3.adx_daily_rt_0=861; Max-Age=78125; Expires=Sat, 04 May 2024 23:59:59 GMT; Path=/
X-Firefox-Spdy: h2

dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483

104.21.2.111

200 OK

14 kB

URL User Request GET HTTP/2
dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type

Size
14 kB (13848 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /andy/index-no.htm?placementid=23117823&bannerid=2667483 HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/html
last-modified: Fri, 24 Nov 2023 03:37:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LWYHAoxoppCqS2o6Fd329bTM1f1N3395KwWH1YUIfWLsF6%2FdPTHi9xI%2FVEB%2Fr1vz5blmeT5ihx%2BvxZ7Q7xpIEqwpEVUixGqqErkWAKEGCTwCkeJwVY0WVKQ2mHkBjduYMwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4ff395e5656bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dateguys.online/andy/Image/2UX7WLTfW3W8TclTUvlFyQ.woff

104.21.2.111

404 Not Found

315 B

URL GET HTTP/3
dateguys.online/andy/Image/2UX7WLTfW3W8TclTUvlFyQ.woff
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /andy/Image/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETQmjmWZnjh5gEC4Ecoi%2B%2FkOY4oTczEfCFNjlrRztsh%2BvvNDtawHm6v13fxmzNf04dtEi3bIciZ7RJwlqNeksUghBl7gT2WvKPgIQEE7AZ5bOc33nghIxmPjdAc8ussqNgg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3d4e4ab4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/favicon.html

104.21.2.111

404 Not Found

315 B

URL GET HTTP/3
dateguys.online/andy/favicon.html
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /andy/favicon.html HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/html; charset=iso-8859-1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S99JRpcK%2BDgpmyhs3GluAEBNgE6wePTgje10rm51htNInwIerWBE57q7%2FTZSImVGfAXv1wfWxuRut8iDuwqL2VJ0ki2hOTHNQLQbYUVgkM4sKWjmfr3i2Eqv1uPEmcS9EzY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4ff3e5eb0b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js

104.21.2.111

200 OK

96 kB

URL GET HTTP/3
dateguys.online/andy/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
96 kB (95700 bytes)
Hash
60710551d19f77e6496b01207365a0e4
837fcb824626afc559093c2c835f8fa064b72010
cb28bc8f8098b56206d0af5cda644951777e8d8fbc053c8ee3b88eca2bca4e3a

HTTP Headers

GET /andy/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: application/javascript
last-modified: Fri, 24 Nov 2023 03:37:51 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4372
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mr%2BphapwS55DuF6sMltdK%2BKYmdAB3CG9FkTiMKCd768QwqnroOiQHSrLzzBCS16Xpa8OpnTiFYIlsoEWiSm7XUBX8GzQqbwUjH%2BLw0cVASHd9Dra4ThlCFzMkZMjqKqFPHw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2ddab4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/CSS/style.a699b1caf61e690ba1b00116d51c9269.css

104.21.2.111

200 OK

5.6 kB

URL GET HTTP/3
dateguys.online/andy/CSS/style.a699b1caf61e690ba1b00116d51c9269.css
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
ASCII text, with very long lines (5562), with no line terminators
Size
5.6 kB (5562 bytes)
Hash
42e60f03d305141c7c1c2c48637b7327
852ae2cfcb8a185bb3119c5bd9630f1ab7891d69
cc8c755fbcfe4a1bb14ee07b3f6fe5ccb4c51a5fc4e9b77642093fe3e7aadf5b

HTTP Headers

GET /andy/CSS/style.a699b1caf61e690ba1b00116d51c9269.css HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/css
last-modified: Fri, 24 Nov 2023 03:37:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6584
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yoQoNZbF2OKcaYCDLJ9Lf2zGzWqkKS69EczBbs%2FUDgUOcjc965jstS2OrXtDft0PAmUBOMTWG74AqKFb78dcY4XTA8cF%2FWD2noEsv9cmtUxJ8%2BqWemJJ1Y6kxXZfxq6bYDQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2dd9b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css

104.21.2.111

200 OK

500 B

URL GET HTTP/3
dateguys.online/andy/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
ASCII text, with very long lines (500), with no line terminators
Size
500 B (500 bytes)
Hash
d27807a5e380abceff57872d83c7c4e5
f166a734c87196ef7d87ff2c8b0c2ceca7eac271
d415bede567d42f1f937691235fcbd91cc80b2ef2d48bc238dd997ee1da130b8

HTTP Headers

GET /andy/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/css
last-modified: Fri, 24 Nov 2023 03:37:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=upqaNicXzzkiQ75YxHXW9tWfdIBgDPMTt6vs6tMMTdv93weQkWOSDhxXItQB3JmUaOnBkm2owhBemiZOohJYPBviohbY4pqG%2Fj%2BURUuMrSnLQ6b6KCLVksdsHUkfL6RhoCo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3c2dd8b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/maincontainerPicture1.jpg

104.21.2.111

200 OK

61 kB

URL GET HTTP/3
dateguys.online/andy/Image/maincontainerPicture1.jpg
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 792x1103, components 3
Size
61 kB (61278 bytes)
Hash
926894b12cfdf2cd3f04ebe2b25800c0
3b9a12994076ec004248e64f93a9d1697b07d98f
be01e5eafebe629f566093af14700274b908f7f4d572b2e3e5a1fa3b43bba6fe

HTTP Headers

GET /andy/Image/maincontainerPicture1.jpg HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/CSS/style.a699b1caf61e690ba1b00116d51c9269.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 02:17:53 GMT
content-type: image/jpeg
content-length: 61278
last-modified: Fri, 24 Nov 2023 03:37:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3137
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gtgaPaaF2fAbisqDVsmUAg%2FRTi37ojY0E0mhX5O3u4CgowxS5572%2FghyKHoWLFb0bfPSGF8zxde7yDPLEgKdfc36c1qPUrljLU5O8j5HE2jIyxdXIYeKekAuOPULSyGXgI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3d1e27b4ee-OSL
alt-svc: h3=":443"; ma=86400

dateguys.online/andy/Image/mnpfi9pxYH-Go5UiibESIltXRa8TVwTICgirnJhmVJw.woff2

104.21.2.111

404 Not Found

315 B

URL GET HTTP/3
dateguys.online/andy/Image/mnpfi9pxYH-Go5UiibESIltXRa8TVwTICgirnJhmVJw.woff2
IP
104.21.2.111:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dateguys.online/andy/index-no.htm?placementid=23117823&bannerid=2667483
Certificate
IssuerGoogle Trust Services LLC
Subjectdateguys.online
Fingerprint92:5E:44:A8:EC:76:D3:5D:4A:D3:D3:67:30:B3:00:AE:DE:EF:BA:CF
ValidityFri, 29 Mar 2024 13:16:19 GMT - Thu, 27 Jun 2024 13:16:18 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /andy/Image/mnpfi9pxYH-Go5UiibESIltXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
Host: dateguys.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dateguys.online/andy/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 04 May 2024 02:17:53 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LeX1LLOu3qEGKjXQXG0%2FAZ4WtYM6ItOcSyeMhP%2BSoVhefWBsM2ed8CB2tQx%2BPadjcX6O3pFt75ibL8OZoBdSRc5H0hYXz%2BwpYvzOsHTVctmz0dsQ80fKzKD0OiuGvnSCZvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4ff3d2e34b4ee-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML