Report - weak3w6.aimrockgem.live/cnweljsp

Report Overview

Visitedpublic

2024-07-11 19:44:50

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
e5.o.lencr.org	unknown	2020-06-29	2024-06-07 07:39:25	2024-07-11 18:13:39	652 B	1.5 kB	23.33.119.27
weak3w6.aimrockgem.live	unknown	unknown	No data	No data	14 kB	1.3 MB	185.155.184.55
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-07-11 18:16:52	650 B	1.4 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-07-11 18:31:38	484 B	2.1 kB	142.250.74.106
bigdatajsext.com	unknown	unknown	No data	No data	508 B	752 B	136.243.216.252
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-11 18:12:19	2.3 kB	6.2 kB	23.33.119.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-07-11 19:44:23	high	Client IP	185.155.184.55	ThreatFox Unknown malware payload delivery (ip:port - confidence level: 50%)
2024-07-11 19:44:24	high	Client IP	185.155.186.25	ThreatFox Unknown malware payload delivery (ip:port - confidence level: 50%)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	From	Size	First Seen	Last Seen
	weak3w6.aimrockgem.live/media/dating/sinderv2/js/jquery.js	ScriptElement	93 kB	2023-03-07	2025-08-07
URL weak3w6.aimrockgem.live/media/dating/sinderv2/js/jquery.js IP / ASN 185.155.186.25 #203639 Teknology SA Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-07 Times Seen 4525 Size 93 kB (93064 bytes) MD5 df6173bad69801a82b84701789ab16c5 SHA1 94908755cae039762ad53086b858eac553e3f56e SHA256 cd8f413e39247d48ea354b8fb11c227e72f641403bd8d4dd81cd7473d60daafb Format Code Loading...

	weak3w6.aimrockgem.live/media/dating/sinderv2/js/vegas.js	ScriptElement	22 kB	2024-07-01	2025-03-12
URL weak3w6.aimrockgem.live/media/dating/sinderv2/js/vegas.js IP / ASN 185.155.186.25 #203639 Teknology SA Introduced by ScriptElement Embedded false Resource Info First Seen 2024-07-01 Last Seen 2025-03-12 Times Seen 1840 Size 22 kB (22473 bytes) MD5 ea8391e9e4f905102fef9737e225aba3 SHA1 2111929b9d64a20ecdeea04e3cf2a6633e09f428 SHA256 586607fdd9a798760719c89e72801e7f9f4af96a830fbbcee2889cffd521c239 Format Code Loading...

	weak3w6.aimrockgem.live/cookie/js.cookie.js	ScriptElement	4.3 kB	2023-03-07	2025-08-05
URL weak3w6.aimrockgem.live/cookie/js.cookie.js IP / ASN 185.155.184.55 #5398 AS5398 SA Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-05 Times Seen 5904 Size 4.3 kB (4264 bytes) MD5 a7e9883924072f15259de6888d5ef515 SHA1 7f4f6e5938e68f55aef81e0cd0145f008cd28382 SHA256 985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c Format Code Loading...

	weak3w6.aimrockgem.live/util/utils.js	ScriptElement	7.5 kB	2024-07-01	2025-07-27
URL weak3w6.aimrockgem.live/util/utils.js IP / ASN 185.155.186.25 #203639 Teknology SA Introduced by ScriptElement Embedded false Resource Info First Seen 2024-07-01 Last Seen 2025-07-27 Times Seen 6589 Size 7.5 kB (7514 bytes) MD5 85a42b1d6c8769fce99fb44aefb041b0 SHA1 2c6ba9c724ceec8ab80658429a031f2991eb930b SHA256 a487d76bb55539f230c127ef33550d5c455ac0b67ca2b78b87452345bb0dc718 Format Code Loading...

	weak3w6.aimrockgem.live/cnweljsp	ScriptElement	667 B	2024-08-19	2024-08-19
URL weak3w6.aimrockgem.live/cnweljsp IP / ASN 185.155.184.55 #5398 AS5398 SA Introduced by ScriptElement Embedded true Resource Info First Seen 2024-08-19 Last Seen 2024-08-19 Times Seen 1 Size 667 B (667 bytes) MD5 70325317bc2f780f07ccb13034263879 SHA1 52df5f1366f1a9564a077d71d3e795620dd1df5c SHA256 98eb45f4a3afa491bf4fe609901cebfa8f5b5774214bbc737e288ab80f334228 Format Code Loading...

	weak3w6.aimrockgem.live/cnweljsp	ScriptElement	0 B	0001-01-01	2025-08-07
URL weak3w6.aimrockgem.live/cnweljsp IP / ASN 185.155.184.55 #5398 AS5398 SA Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-07 Times Seen 5706962 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

	weak3w6.aimrockgem.live/media/dating/sinderv2/js/timer.js	ScriptElement	639 B	2024-07-01	2025-03-12
URL weak3w6.aimrockgem.live/media/dating/sinderv2/js/timer.js IP / ASN 185.155.186.25 #203639 Teknology SA Introduced by ScriptElement Embedded false Resource Info First Seen 2024-07-01 Last Seen 2025-03-12 Times Seen 2550 Size 639 B (639 bytes) MD5 db12eacb17d6d147e21495e2f8787fff SHA1 32c7f9200e989eeb54df98b8ee70331a3b22789b SHA256 b18fa00e948ce4a17e7cfa703c82e27fc8e1bababa97327ead9562c2281aff0f Format Code Loading...

	weak3w6.aimrockgem.live/media/dating/sinderv2/js/trls.js	ScriptElement	18 kB	2024-07-01	2024-08-19
URL weak3w6.aimrockgem.live/media/dating/sinderv2/js/trls.js IP / ASN 185.155.184.55 #5398 AS5398 SA Introduced by ScriptElement Embedded false Resource Info First Seen 2024-07-01 Last Seen 2024-08-19 Times Seen 59 Size 18 kB (17710 bytes) MD5 bf40ace34782ab7d0fc835338b58ff04 SHA1 b8c0c2e81718f7b4f380dd7e5022a7ea64bbafc9 SHA256 04253ca3822766257f351312ab60f6031e13f7c843901f6ce62a4e5c199e4271 Format Code Loading...

	weak3w6.aimrockgem.live/media/bb.js	ScriptElement	639 B	2023-03-07	2025-03-17
URL weak3w6.aimrockgem.live/media/bb.js IP / ASN 185.155.186.25 #203639 Teknology SA Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-03-17 Times Seen 12939 Size 639 B (639 bytes) MD5 0d553e4bac91c74bfee2dbabba61e99e SHA1 5af71e2377c9c012a7826a695f2724901941b19b SHA256 1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68 Format Code Loading...

	weak3w6.aimrockgem.live/media/exit-new/exit1.js	ScriptElement	3.5 kB	2023-03-07	2025-03-17
URL weak3w6.aimrockgem.live/media/exit-new/exit1.js IP / ASN 185.155.186.25 #203639 Teknology SA Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-03-17 Times Seen 12781 Size 3.5 kB (3473 bytes) MD5 625e5e2950612f771e246beb33c9ea61 SHA1 e4fc251c6c000496c285f8dc3fa097040b031681 SHA256 618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46 Format Code Loading...

HTTP Transactions (40)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.33.119.27		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.33.119.27 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen34251 Size504 B (504 bytes) MD5ee5b6dc3e7ab972df60b36582e3eaaf4 SHA12a5185acc539fcddac9c33895ec74faf552b62dd SHA256be84262bbb3f3aabae368745bc3e85b816e372b16bc37327a1887d3a19992df6 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BE84262BBB3F3AABAE368745BC3E85B816E372B16BC37327A1887D3A19992DF6" Last-Modified: Wed, 10 Jul 2024 13:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12944 Expires: Thu, 11 Jul 2024 23:20:07 GMT Date: Thu, 11 Jul 2024 19:44:23 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.27		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.33.119.27 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-09 Last Seen2024-08-19 Times Seen18846 Size504 B (504 bytes) MD5c2f3e4e1f94efa7a80f9deeb3d459176 SHA17a8f013a3d13ffe4241b8e2a8b9ca63daeeace53 SHA2565f9feb641b1e74a7c14eee1104953d1e9faa0341d1f27fdbd50fa8207e6c0ac8 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5F9FEB641B1E74A7C14EEE1104953D1E9FAA0341D1F27FDBD50FA8207E6C0AC8" Last-Modified: Tue, 09 Jul 2024 15:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9230 Expires: Thu, 11 Jul 2024 22:18:13 GMT Date: Thu, 11 Jul 2024 19:44:23 GMT Connection: keep-alive`

	e5.o.lencr.org/	23.33.119.27		344 B
URL HTTP e5.o.lencr.org/ IP / ASN 23.33.119.27 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-08-19 Last Seen2024-08-19 Times Seen1 Size344 B (344 bytes) MD5bce1ae216ed6e63fadbffd22f9ea1db9 SHA1eb844e2b0c7ceddface327c2b5e3bcc05afa0633 SHA25610817ba7cda1f578b4d9f950a792d53904c0981842f7cdab8a43cae54372a990 HTTP Headers `POST / HTTP/1.1 Host: e5.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 344 ETag: "10817BA7CDA1F578B4D9F950A792D53904C0981842F7CDAB8A43CAE54372A990" Last-Modified: Thu, 11 Jul 2024 13:20:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20059 Expires: Fri, 12 Jul 2024 01:18:42 GMT Date: Thu, 11 Jul 2024 19:44:23 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.27		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.33.119.27 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen39709 Size504 B (504 bytes) MD5e7492695b5254a3a63fcffb4f1ee8cec SHA10361713c6d8129210245347284c7c6babfd28fb7 SHA2565d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F" Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14008 Expires: Thu, 11 Jul 2024 23:37:51 GMT Date: Thu, 11 Jul 2024 19:44:23 GMT Connection: keep-alive`

	GET weak3w6.aimrockgem.live/cnweljsp	185.155.184.55	200 OK	6.6 kB
URL User Request GET HTTPS weak3w6.aimrockgem.live/cnweljsp IP / ASN 185.155.184.55 #5398 AS5398 SA Requested byN/A Resource Info File typeHTML document, Unicode text, UTF-8 text, with very long lines (533), with CRLF line terminators First Seen2024-08-19 Last Seen2024-08-19 Times Seen1 Size6.6 kB (6642 bytes) MD589325f8d7ea6017f57ca646e9c1bdf7e SHA10ef8edc987acaf8f780583151a3defc421ce6e6a SHA2560db80afe59da959f5a9393218a5e85b952dcaf0813a3557dda7bda15726b3036 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /cnweljsp HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:23 GMT Content-Type: text/html Content-Length: 6642 Connection: keep-alive cache-control: private set-cookie: sid=t1~avmwzk0y32hrah3w2jega21z; path=/`

	r10.o.lencr.org/	23.33.119.27		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.33.119.27 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-09 Last Seen2024-08-19 Times Seen23416 Size504 B (504 bytes) MD5fc076d7a99abd74b9da6b35304bb93e9 SHA19d541501d5141dcf7b4d839d6fcffabec81e1a14 SHA256c86804eff01a7bb9ff866508bfdb1b071cfa4a26617d11094b9f5226e1a4b970 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C86804EFF01A7BB9FF866508BFDB1B071CFA4A26617D11094B9F5226E1A4B970" Last-Modified: Tue, 09 Jul 2024 16:18:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15302 Expires: Thu, 11 Jul 2024 23:59:26 GMT Date: Thu, 11 Jul 2024 19:44:24 GMT Connection: keep-alive`

	o.pki.goog/wr2	142.250.74.131		472 B
URL HTTP o.pki.goog/wr2 IP / ASN 142.250.74.131 #15169 GOOGLE Requested byN/A Resource Info File typedata First Seen2024-07-11 Last Seen2024-08-19 Times Seen1782 Size472 B (472 bytes) MD5cf5f998662d89641cd26fce7d82fbb3f SHA1de82deeab46ba1426f319d40a231f4d69c49f816 SHA25636ddc7588dfb4f426d9541f160727f68bda693b75bcf6f2efc10ffce03274f3c HTTP Headers `POST /wr2 HTTP/1.1 Host: o.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 11 Jul 2024 19:44:24 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/css/vegas.css	185.155.186.25	200 OK	20 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/css/vegas.css IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeASCII text, with CRLF line terminators First Seen2023-04-05 Last Seen2025-03-12 Times Seen3912 Size20 kB (19822 bytes) MD5357c7befa8bdef911f02f48f49e10628 SHA147972e3c4591058dce82dd3b08bed8e0b8ae5c8f SHA25647f3bef4746b798892c7beff212618616b0950f33f416f03db243578f89135e3 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/css/vegas.css HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/css Content-Length: 19822 Connection: keep-alive ETag: "357c7befa8bdef911f02f48f49e10628" Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E14025FA0B0F67 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/css/bootstrap.min.css	185.155.184.55	200 OK	110 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/css/bootstrap.min.css IP / ASN 185.155.184.55 #5398 AS5398 SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeASCII text, with very long lines (65367), with CRLF line terminators First Seen2023-04-05 Last Seen2025-03-12 Times Seen3934 Size110 kB (109540 bytes) MD503d06426a30f77095d7511e1ca74d225 SHA1d1a349294f6fe94ffb17a50097b37bd81e9ba56a SHA2563f7e6f3cb6ba8e2effbdd260131ce0d2f332fb00ba3feca1a5bc9c3ee7f9e2a6 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/css/bootstrap.min.css HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/css Content-Length: 109540 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "03d06426a30f77095d7511e1ca74d225" Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 17E14025F5240CBF X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/css/animate.css	185.155.186.25	200 OK	61 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/css/animate.css IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeASCII text, with very long lines (460), with CRLF line terminators First Seen2023-04-05 Last Seen2025-05-07 Times Seen5081 Size61 kB (61188 bytes) MD51cbfbb2c4ef85880799a74ab2f290f2a SHA19b6366d6c7ad05010f7070db70fba10754be6e9c SHA256bfdad6766b12a3826bf32024f0fc13fffbcee84f102034b9270da7e538451031 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/css/animate.css HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/css Content-Length: 61188 Connection: keep-alive ETag: "1cbfbb2c4ef85880799a74ab2f290f2a" Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E14025F9A7C057 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/css/style.css	185.155.186.25	200 OK	20 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/css/style.css IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeASCII text, with CRLF line terminators First Seen2024-01-15 Last Seen2024-11-20 Times Seen1875 Size20 kB (20007 bytes) MD57157a53ffb9afb73513901e9cb9b8b91 SHA19e2049684cd1a83e699b11dfae35214acae2cc09 SHA256dac025579246852dcb348c61372b66879a24b28ff78c43220c4655a1c7a62671 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/css/style.css HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/css Content-Length: 20007 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "7157a53ffb9afb73513901e9cb9b8b91" Last-Modified: Thu, 30 Nov 2023 15:24:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 17E14025FBF6D912 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1701357885#739948373/gid:0/gname:root/mode:33279/mtime:1701357894#743961887/uid:0/uname:root x-amz-meta-mm-source-mtime: 2023-11-30T15:24:54.798Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/cookie/js.cookie.js	185.155.184.55	200 OK	4.3 kB
URL GET HTTPS weak3w6.aimrockgem.live/cookie/js.cookie.js IP / ASN 185.155.184.55 #5398 AS5398 SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJavaScript source, ASCII text, with very long lines (1709), with CRLF line terminators First Seen2023-03-07 Last Seen2025-08-05 Times Seen5904 Size4.3 kB (4264 bytes) MD5a7e9883924072f15259de6888d5ef515 SHA17f4f6e5938e68f55aef81e0cd0145f008cd28382 SHA256985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /cookie/js.cookie.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: application/javascript Content-Length: 4264 Connection: keep-alive ETag: "a7e9883924072f15259de6888d5ef515" Last-Modified: Wed, 20 Sep 2023 15:19:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402600200A39 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134513#248036972/gid:0/gname:root/mode:33188/mtime:1658397637#354375000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-07-21T10:00:37.354375Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/util/flag-icon/css/flag-icon.css	185.155.186.25	200 OK	41 kB
URL GET HTTPS weak3w6.aimrockgem.live/util/flag-icon/css/flag-icon.css IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeASCII text, with CRLF line terminators First Seen2023-04-05 Last Seen2025-07-27 Times Seen6662 Size41 kB (40627 bytes) MD50a47b937981e7389e3ebe63e4a503066 SHA101b395ad016a1d9d15016d765f7d2c51a6e2809b SHA256d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /util/flag-icon/css/flag-icon.css HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/css Content-Length: 40627 Connection: keep-alive ETag: "0a47b937981e7389e3ebe63e4a503066" Last-Modified: Tue, 21 Nov 2023 12:30:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E14025FA778E00 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1695223575#888122023/gid:0/gname:root/mode:33188/mtime:1655386274#684017000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:31:14.684017Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/js/jquery.js	185.155.186.25	200 OK	93 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/js/jquery.js IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJavaScript source, ASCII text, with very long lines (32072) First Seen2023-03-07 Last Seen2025-08-07 Times Seen4525 Size93 kB (93064 bytes) MD5df6173bad69801a82b84701789ab16c5 SHA194908755cae039762ad53086b858eac553e3f56e SHA256cd8f413e39247d48ea354b8fb11c227e72f641403bd8d4dd81cd7473d60daafb Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/js/jquery.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/javascript Content-Length: 93064 Connection: keep-alive ETag: "df6173bad69801a82b84701789ab16c5" Last-Modified: Mon, 01 Jul 2024 09:47:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E14025FAA72088 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1715611637#289344272/gid:0/gname:root/mode:33188/mtime:1719827263#573984311/uid:0/uname:root x-amz-meta-mm-source-mtime: 2024-07-01T09:47:43.626Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/js/vegas.js	185.155.186.25	200 OK	22 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/js/vegas.js IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJavaScript source, ASCII text, with CRLF line terminators First Seen2024-07-01 Last Seen2025-03-12 Times Seen1840 Size22 kB (22473 bytes) MD5ea8391e9e4f905102fef9737e225aba3 SHA12111929b9d64a20ecdeea04e3cf2a6633e09f428 SHA256586607fdd9a798760719c89e72801e7f9f4af96a830fbbcee2889cffd521c239 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/js/vegas.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/javascript Content-Length: 22473 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "ea8391e9e4f905102fef9737e225aba3" Last-Modified: Mon, 01 Jul 2024 09:47:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 17E14026009D3B93 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1715611637#289344272/gid:0/gname:root/mode:33188/mtime:1719827264#397986142/uid:0/uname:root x-amz-meta-mm-source-mtime: 2024-07-01T09:47:44.452Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/util/utils.js	185.155.186.25	200 OK	7.5 kB
URL GET HTTPS weak3w6.aimrockgem.live/util/utils.js IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJavaScript source, ASCII text, with very long lines (641), with CRLF line terminators First Seen2024-07-01 Last Seen2025-07-27 Times Seen6589 Size7.5 kB (7514 bytes) MD585a42b1d6c8769fce99fb44aefb041b0 SHA12c6ba9c724ceec8ab80658429a031f2991eb930b SHA256a487d76bb55539f230c127ef33550d5c455ac0b67ca2b78b87452345bb0dc718 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /util/utils.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/javascript Content-Length: 7514 Connection: keep-alive ETag: "85a42b1d6c8769fce99fb44aefb041b0" Last-Modified: Mon, 01 Jul 2024 09:08:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402603723082 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1719824921#861045785/gid:0/gname:root/mode:33188/mtime:1719824938#357078843/uid:0/uname:root x-amz-meta-mm-source-mtime: 2024-07-01T09:08:58.408Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/js/trls.js	185.155.184.55	200 OK	18 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/js/trls.js IP / ASN 185.155.184.55 #5398 AS5398 SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeUnicode text, UTF-8 text, with CRLF line terminators First Seen2024-07-01 Last Seen2024-08-19 Times Seen59 Size18 kB (17710 bytes) MD5bf40ace34782ab7d0fc835338b58ff04 SHA1b8c0c2e81718f7b4f380dd7e5022a7ea64bbafc9 SHA25604253ca3822766257f351312ab60f6031e13f7c843901f6ce62a4e5c199e4271 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/js/trls.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/javascript Content-Length: 17710 Connection: keep-alive ETag: "bf40ace34782ab7d0fc835338b58ff04" Last-Modified: Mon, 01 Jul 2024 09:47:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E14026051DF01C X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1719827264#17985297/gid:0/gname:root/mode:33188/mtime:1719827263#961985173/uid:0/uname:root x-amz-meta-mm-source-mtime: 2024-07-01T09:47:44.019Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/bb.js	185.155.186.25	200 OK	639 B
URL GET HTTPS weak3w6.aimrockgem.live/media/bb.js IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeASCII text, with very long lines (639), with no line terminators First Seen2023-03-07 Last Seen2025-03-17 Times Seen12939 Size639 B (639 bytes) MD50d553e4bac91c74bfee2dbabba61e99e SHA15af71e2377c9c012a7826a695f2724901941b19b SHA2561be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/bb.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: application/javascript Content-Length: 639 Connection: keep-alive ETag: "0d553e4bac91c74bfee2dbabba61e99e" Last-Modified: Wed, 20 Sep 2023 15:21:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E140260563862B X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134512#756035434/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/exit-new/exit1.js	185.155.186.25	200 OK	3.5 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/exit-new/exit1.js IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJavaScript source, ASCII text, with very long lines (641), with CRLF line terminators First Seen2023-03-07 Last Seen2025-03-17 Times Seen12781 Size3.5 kB (3473 bytes) MD5625e5e2950612f771e246beb33c9ea61 SHA1e4fc251c6c000496c285f8dc3fa097040b031681 SHA256618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/exit-new/exit1.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/javascript Content-Length: 3473 Connection: keep-alive ETag: "625e5e2950612f771e246beb33c9ea61" Last-Modified: Tue, 21 Nov 2023 12:30:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402605825ABE X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1695223389#507714946/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/js/timer.js	185.155.186.25	200 OK	639 B
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/js/timer.js IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJavaScript source, ASCII text, with CRLF line terminators First Seen2024-07-01 Last Seen2025-03-12 Times Seen2550 Size639 B (639 bytes) MD5db12eacb17d6d147e21495e2f8787fff SHA132c7f9200e989eeb54df98b8ee70331a3b22789b SHA256b18fa00e948ce4a17e7cfa703c82e27fc8e1bababa97327ead9562c2281aff0f Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /media/dating/sinderv2/js/timer.js HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: text/javascript Content-Length: 639 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "db12eacb17d6d147e21495e2f8787fff" Last-Modified: Mon, 01 Jul 2024 09:47:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 17E1402605E0DE0F X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1715611637#289344272/gid:0/gname:root/mode:33188/mtime:1719827263#657984498/uid:0/uname:root x-amz-meta-mm-source-mtime: 2024-07-01T09:47:43.71Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/images/logo-loveme_white1.svg	185.155.186.25	200 OK	4.6 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/images/logo-loveme_white1.svg IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeSVG Scalable Vector Graphics image First Seen2023-04-07 Last Seen2024-11-20 Times Seen4147 Size4.6 kB (4564 bytes) MD5896592d7f2fa3d761c0b767e9399b010 SHA1ed1c0502263392938f4cbdd72afb1a8704bf840e SHA2563417f549b6a1018ee687dd84aec136cb7fba2bb5b4c83cf269f9f8e958cc48de Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/images/logo-loveme_white1.svg HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: image/svg+xml Content-Length: 4564 Connection: keep-alive ETag: "896592d7f2fa3d761c0b767e9399b010" Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E140260763E5DB X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1695223363#695657344/gid:0/gname:root/mode:33188/mtime:1655387527#38754000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:52:07.038754Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	o.pki.goog/wr2	142.250.74.131		472 B
URL HTTP o.pki.goog/wr2 IP / ASN 142.250.74.131 #15169 GOOGLE Requested byN/A Resource Info File typedata First Seen2024-07-11 Last Seen2024-08-19 Times Seen1782 Size472 B (472 bytes) MD5cf5f998662d89641cd26fce7d82fbb3f SHA1de82deeab46ba1426f319d40a231f4d69c49f816 SHA25636ddc7588dfb4f426d9541f160727f68bda693b75bcf6f2efc10ffce03274f3c HTTP Headers `POST /wr2 HTTP/1.1 Host: o.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 11 Jul 2024 19:44:24 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2	185.155.186.25	200 OK	22 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 21796, version 3.786 First Seen2023-04-07 Last Seen2025-07-28 Times Seen4067 Size22 kB (21796 bytes) MD5b796339b324ec08006ca04dca90284cf SHA14283d779705f09e68939572df76c52cb41a3ec68 SHA256d65bbca022f8953936d6e60b9a59fc27f9bfd74ba96257ffe14df83b3d8eb0e3 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/media/dating/sinderv2/css/style.css Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: font/woff2 Content-Length: 21796 Connection: keep-alive ETag: "b796339b324ec08006ca04dca90284cf" Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E140260C80B99F X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2	185.155.184.55	200 OK	22 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 IP / ASN 185.155.184.55 #5398 AS5398 SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 22284, version 3.786 First Seen2023-04-07 Last Seen2025-07-28 Times Seen4065 Size22 kB (22284 bytes) MD55c92d5d3e39a260d5dd06ced7eca070d SHA164df09fd462e6bb76890b7782578777b901f2003 SHA2562a99c11dd137ef8b515b3a95d2bdb38ec99bf745b2865196aa910628bcb144b9 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/media/dating/sinderv2/css/style.css Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: font/woff2 Content-Length: 22284 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "5c92d5d3e39a260d5dd06ced7eca070d" Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT No-Gzip-Compression: true Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 17E140260E660AEB X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2	185.155.186.25	200 OK	15 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 14772, version 3.327 First Seen2023-04-07 Last Seen2025-07-28 Times Seen4072 Size15 kB (14772 bytes) MD5bcf3bb1b7f7a3436181788e748bae013 SHA18ee24d38f618f070a43619f1d471d90f17d666f1 SHA25642e50c76c1bf569cb8b597ffc8cdd18a6f4a311832f46fdc1489145027550781 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/media/dating/sinderv2/css/style.css Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: font/woff2 Content-Length: 14772 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "bcf3bb1b7f7a3436181788e748bae013" Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT No-Gzip-Compression: true Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 17E140260EE97202 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/util/flag-icon/flags/4x3/no.svg	185.155.184.55	200 OK	331 B
URL GET HTTPS weak3w6.aimrockgem.live/util/flag-icon/flags/4x3/no.svg IP / ASN 185.155.184.55 #5398 AS5398 SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeSVG Scalable Vector Graphics image First Seen2023-04-07 Last Seen2025-07-08 Times Seen6320 Size331 B (331 bytes) MD5c7ecfe59439b5fd23924fd206cf2fded SHA1056fbd2b17c7f08bfb480d21973a96bf86fbd72a SHA2564027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/util/flag-icon/css/flag-icon.css Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: image/svg+xml Content-Length: 331 Connection: keep-alive ETag: "c7ecfe59439b5fd23924fd206cf2fded" Last-Modified: Wed, 20 Sep 2023 15:26:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402612D4CC1F X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134513#304037147/gid:0/gname:root/mode:33188/mtime:1655386305#848080000/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:31:45.84808Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2	185.155.186.25	200 OK	22 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeWeb Open Font Format (Version 2), TrueType, length 21908, version 3.786 First Seen2023-04-07 Last Seen2025-03-12 Times Seen3924 Size22 kB (21908 bytes) MD52e5fca371696cab9fb5a9fe214c1319c SHA14bd3fe039b2f65d10d1b8c1b30c7962bdc313b7a SHA256f8b1a05998ba7e93e5c9f41b004496a3576b8d10d9fafc2f7014894ebc3e72e9 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/media/dating/sinderv2/css/style.css Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: font/woff2 Content-Length: 21908 Connection: keep-alive ETag: "2e5fca371696cab9fb5a9fe214c1319c" Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E14026131F8165 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1695223362#783655432/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia9.jpg	185.155.186.25	200 OK	142 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia9.jpg IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 11:12:47], baseline, precision 8, 1980x1080, components 3 First Seen2023-04-07 Last Seen2024-08-21 Times Seen970 Size142 kB (141621 bytes) MD5f16004903b5d570ad959a2c9056ce64f SHA1b5fa2860520973cdd38a6720714688f97697444d SHA25617e63bd141a2a4195e11fd2b2c50d6af70b19b28c9e29bce869c02859dfc76ed Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/images/scandinavia9.jpg HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:24 GMT Content-Type: image/jpeg Content-Length: 141621 Connection: keep-alive ETag: "f16004903b5d570ad959a2c9056ce64f" Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402613381E77 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134507#308018396/gid:0/gname:root/mode:33279/mtime:1655387456#354591413/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.354591413Z Expires: Fri, 11 Jul 2025 19:44:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/favicon.ico	185.155.186.25	204 No Content	0 B
URL GET HTTPS weak3w6.aimrockgem.live/favicon.ico IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-07 Times Seen5706962 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers `GET /favicon.ico HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 204 No Content Server: openresty Date: Thu, 11 Jul 2024 19:44:25 GMT Connection: keep-alive`

	e5.o.lencr.org/	23.33.119.27		345 B
URL HTTP e5.o.lencr.org/ IP / ASN 23.33.119.27 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-11 Last Seen2024-08-19 Times Seen2 Size345 B (345 bytes) MD553f5e4b88259850558499250938c669a SHA1f20c9376c908c7c79ec931610bcf5c4b47e39fc1 SHA2565024a6e779ff495535b82fa8bf6cdaa9104631270a36b46f87d4633e5f68fd53 HTTP Headers `POST / HTTP/1.1 Host: e5.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 345 ETag: "5024A6E779FF495535B82FA8BF6CDAA9104631270A36B46F87D4633E5F68FD53" Last-Modified: Wed, 10 Jul 2024 20:18:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3266 Expires: Thu, 11 Jul 2024 20:38:51 GMT Date: Thu, 11 Jul 2024 19:44:25 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.33.119.57 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen38767 Size504 B (504 bytes) MD550e4489707989517510128817aedd2ea SHA136a54d7b34a9ac621715b569e5a870f62671c574 SHA2563e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3468 Expires: Thu, 11 Jul 2024 20:42:14 GMT Date: Thu, 11 Jul 2024 19:44:26 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.33.119.57 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen38767 Size504 B (504 bytes) MD550e4489707989517510128817aedd2ea SHA136a54d7b34a9ac621715b569e5a870f62671c574 SHA2563e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3468 Expires: Thu, 11 Jul 2024 20:42:14 GMT Date: Thu, 11 Jul 2024 19:44:26 GMT Connection: keep-alive`

	GET fonts.googleapis.com/css?family=Roboto:400,300,700\|Raleway:400,700&subset=latin,cyrillic	142.250.74.106	200 OK	1.3 kB
URL GET HTTPS fonts.googleapis.com/css?family=Roboto:400,300,700\|Raleway:400,700&subset=latin,cyrillic IP / ASN 142.250.74.106 #15169 GOOGLE Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typegzip compressed data, max compression First Seen2024-08-19 Last Seen2024-08-19 Times Seen1 Size1.3 kB (1321 bytes) MD51d0c523022b2db1617c58c1a688aee8d SHA106531d791412e620858ccab5177764b221f76df4 SHA256a5aaee7cfade94ad73afd2a408711d17d10fae42e25abaf26a8990bd39b16992 Certificate Info IssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC7:12:52:3A:BD:E0:73:20:AD:A8:5F:DF:12:DB:C6:DE:AF:63:88:6B ValidityThu, 13 Jun 2024 16:32:33 GMT - Thu, 05 Sep 2024 16:32:32 GMT HTTP Headers `GET /css?family=Roboto:400,300,700\|Raleway:400,700&subset=latin,cyrillic HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 11 Jul 2024 19:44:24 GMT date: Thu, 11 Jul 2024 19:44:24 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups content-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	r10.o.lencr.org/	23.33.119.57		504 B
URL HTTP r10.o.lencr.org/ IP / ASN 23.33.119.57 #20940 Akamai International B.V. Requested byN/A Resource Info File typedata First Seen2024-07-10 Last Seen2024-08-19 Times Seen38767 Size504 B (504 bytes) MD550e4489707989517510128817aedd2ea SHA136a54d7b34a9ac621715b569e5a870f62671c574 SHA2563e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3468 Expires: Thu, 11 Jul 2024 20:42:14 GMT Date: Thu, 11 Jul 2024 19:44:26 GMT Connection: keep-alive`

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia30.jpg	185.155.186.25	200 OK	227 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia30.jpg IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 13:04:35], baseline, precision 8, 1980x1080, components 3 First Seen2023-04-06 Last Seen2024-08-21 Times Seen978 Size227 kB (226699 bytes) MD5a388364d8d1e4684a2cd72c68d625b73 SHA1ce210b5b755bae87788ca2eeca7799d284e8477a SHA25636e0d2fd85c40dfc080246c7f7c426fc23ebd8f7937c86ef2b435c345ec5c2a2 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/images/scandinavia30.jpg HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:30 GMT Content-Type: image/jpeg Content-Length: 226699 Connection: keep-alive ETag: "a388364d8d1e4684a2cd72c68d625b73" Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402748BC0CEA X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134507#300018371/gid:0/gname:root/mode:33279/mtime:1655387456#286591257/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.286591257Z Expires: Fri, 11 Jul 2025 19:44:30 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia1.jpg	185.155.186.25	200 OK	113 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia1.jpg IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 15:45:49], baseline, precision 8, 1980x1080, components 3 First Seen2023-04-05 Last Seen2024-08-21 Times Seen988 Size113 kB (112943 bytes) MD50f9a4527dedf00f0c0a990615b2519df SHA10a630419869a18bfb73c3d62c28f2f38cde507ba SHA256bb2af625a058610ae2f7f96ee82469238a9c389ca76373217593f508fba11918 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/images/scandinavia1.jpg HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:35 GMT Content-Type: image/jpeg Content-Length: 112943 Connection: keep-alive ETag: "0f9a4527dedf00f0c0a990615b2519df" Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402883ABE0F3 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1695223364#43658078/gid:0/gname:root/mode:33279/mtime:1655387456#206591073/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.206591073Z Expires: Fri, 11 Jul 2025 19:44:35 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	GET weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia26.jpg	185.155.186.25	200 OK	186 kB
URL GET HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia26.jpg IP / ASN 185.155.186.25 #203639 Teknology SA Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 12:41:54], baseline, precision 8, 1980x1080, components 3 First Seen2023-04-07 Last Seen2024-08-21 Times Seen975 Size186 kB (185677 bytes) MD5a63692d7d5d04522b973b3f2f32b1a82 SHA1368df18ecd96ecaa3b41dbc1095ce4f9c36c8f19 SHA2561451e4b066eec2455703b8fd8b1d4364929773d91435b067b407257291fc3f65 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/images/scandinavia26.jpg HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:40 GMT Content-Type: image/jpeg Content-Length: 185677 Connection: keep-alive Content-Security-Policy: block-all-mixed-content ETag: "a63692d7d5d04522b973b3f2f32b1a82" Last-Modified: Mon, 20 Feb 2023 09:32:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Request-Id: 17E14029BEAB9B72 X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1676843335#439665338/gid:0/gname:root/mode:33279/mtime:1655387456#282591248/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.282591248Z Expires: Fri, 11 Jul 2025 19:44:40 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia25.jpg	185.155.186.25		131 kB
URL HTTPS weak3w6.aimrockgem.live/media/dating/sinderv2/images/scandinavia25.jpg IP / ASN 185.155.186.25 #203639 Teknology SA Requested byN/A Resource Info File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 12:41:02], baseline, precision 8, 1980x1080, components 3 First Seen2023-04-05 Last Seen2024-08-21 Times Seen998 Size131 kB (130919 bytes) MD5b43a0c525444d73171788f59be0179ac SHA1ae4bc4daef2fcf28286a139ee5f40f7965c85ee3 SHA256cedab3477ba5b9dbdd7dcccb3209185508470f466bfd18d3a8c499052b312e38 Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /media/dating/sinderv2/images/scandinavia25.jpg HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:45 GMT Content-Type: image/jpeg Content-Length: 130919 Connection: keep-alive ETag: "b43a0c525444d73171788f59be0179ac" Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Accept-Encoding X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8 X-Amz-Request-Id: 17E1402AF9C8454A X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-amz-meta-mc-attrs: atime:1693134507#300018371/gid:0/gname:root/mode:33279/mtime:1655387456#282591248/uid:0/uname:root x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.282591248Z Expires: Fri, 11 Jul 2025 19:44:45 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes

	weak3w6.aimrockgem.live/cnweljsp?x=3	185.155.186.25		8.8 kB
URL HTTPS weak3w6.aimrockgem.live/cnweljsp?x=3 IP / ASN 185.155.186.25 #203639 Teknology SA Requested byN/A Resource Info File typeHTML document, Unicode text, UTF-8 text, with very long lines (1888), with CRLF line terminators First Seen2024-08-19 Last Seen2024-08-19 Times Seen1 Size8.8 kB (8788 bytes) MD5689247932d082417347e7c6fd4d41afb SHA1a110ce77956bbec543010c6274c6ab72101df98a SHA2568221b63ae55b9a5a8623aeaa3fbc9ce1850c958292a84ca2a814cfad5decf09e Certificate Info IssuerLet's Encrypt Subjectaimrockgem.live Fingerprint7A:FE:2F:18:C7:61:84:0A:C2:06:B3:0B:94:65:3D:A1:22:C3:69:B3 ValidityThu, 11 Jul 2024 12:18:37 GMT - Wed, 09 Oct 2024 12:18:36 GMT HTTP Headers GET /cnweljsp?x=3 HTTP/1.1 Host: weak3w6.aimrockgem.live User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/cnweljsp Cookie: sid=t1~avmwzk0y32hrah3w2jega21z; IsNotUnique=true Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: openresty Date: Thu, 11 Jul 2024 19:44:47 GMT Content-Type: text/html Content-Length: 8788 Connection: keep-alive cache-control: private`

	GET bigdatajsext.com/ExtService.svc/getextparams	136.243.216.252	200 OK	537 B
URL GET HTTPS bigdatajsext.com/ExtService.svc/getextparams IP / ASN 136.243.216.252 #24940 Hetzner Online GmbH Requested byhttps://weak3w6.aimrockgem.live/cnweljsp Resource Info File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (628), with no line terminators First Seen2024-07-10 Last Seen2024-12-17 Times Seen212 Size537 B (537 bytes) MD5b099882ba430e43c2354218364c505ca SHA1efb3598d4f056a19ba5e73a97f5d2bd20e751a8f SHA256582d30eeaaf0995210acd71b983f9de501ee028d3a76485e46fe9ee941f95ce6 Certificate Info IssuerLet's Encrypt Subjectbigdatajsext.com Fingerprint58:00:0D:5C:5A:95:60:53:64:C0:25:43:D0:6F:76:DF:CA:21:DA:77 ValidityMon, 24 Jun 2024 08:25:37 GMT - Sun, 22 Sep 2024 08:25:36 GMT HTTP Headers `GET /ExtService.svc/getextparams HTTP/1.1 Host: bigdatajsext.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://weak3w6.aimrockgem.live DNT: 1 Connection: keep-alive Referer: https://weak3w6.aimrockgem.live/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Thu, 11 Jul 2024 19:44:25 GMT content-type: application/json; charset=utf-8 vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip X-Firefox-Spdy: h2`

Detections

Host Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

HTTP Transactions (40)

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers