Report - calldate.us/

Report Overview

Visited public
2025-02-28 15:47:30
Tags
URL
calldate.us/
Finishing URL
ddgbef.naughtymets.com/s/63c5a1514ca7c
IP / ASN
192.64.119.13
#22612 NAMECHEAP-NET
Title
Best dating worldwide

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
guard.cdtbox.rocks	240008	2015-11-17	2020-08-11	2025-02-28	532 B	341 B	3.232.5.83
calldate.us	unknown	2025-01-19	2023-04-13	2023-04-13	668 B	658 B	192.64.119.13
ddgbef.naughtymets.com	unknown	2020-12-25	2025-02-28	2025-02-28	16 kB	805 kB	81.30.157.12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-28 15:47:17	low	192.64.119.13	Client IP	ET INFO Namecheap URL Forward
2025-02-28 15:47:17	low	192.64.119.13	Client IP	ET INFO Namecheap URL Forward

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	ddgbef.naughtymets.com/bundle/535/assets/js/functions.js	ScriptElement	1.7 kB	2023-03-14	2025-04-22
Pretty URL ddgbef.naughtymets.com/bundle/535/assets/js/functions.js IP 81.30.157.12 ASN #24961 WIIT AG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 04:56 Last Seen2025-04-22 13:25 Times Seen42 Hash 1ec95160d7dc800cc5b2ef9d3fa66493 cd3adbd6cfc18554c0eb95b8bded4c0c0aac83b5 8a7089c70c9247fed6f869ad728570503829745d859a22c862c37f42d1f165b9 Loading...

	ddgbef.naughtymets.com/s/63c5a1514ca7c	ScriptElement	1.1 kB	2025-02-28	2025-02-28
Pretty URL ddgbef.naughtymets.com/s/63c5a1514ca7c IP 81.30.157.12 ASN #24961 WIIT AG Introduced by scriptElement Embedded in HTML true Observations First Seen2025-02-28 15:47 Last Seen2025-02-28 15:47 Times Seen1 Hash f85e1f8015e9a9795244d3a930b3fa6b 17c66f0bf38e28667082c32ab2f8a222e0d9c179 7996a6fc4285abf61a3248903c7735452bef6d30ca040d7d22a2576787007ace Loading...

	ddgbef.naughtymets.com/s/63c5a1514ca7c	ScriptElement	74 B	2025-02-28	2025-02-28
Pretty URL ddgbef.naughtymets.com/s/63c5a1514ca7c IP 81.30.157.12 ASN #24961 WIIT AG Introduced by scriptElement Embedded in HTML true Observations First Seen2025-02-28 15:47 Last Seen2025-02-28 15:47 Times Seen1 Hash 88a0970efe06f30103aa2324805a8e39 48eda9f19b44687504e1c609c5971ea47f4a2f60 778267993d9cc2fb63c4e8ee2c1a10f920e651a65494289cec57ddeb814eb8a2 Loading...

	ddgbef.naughtymets.com/s/63c5a1514ca7c	ScriptElement	295 B	2024-11-10	2025-05-21
Pretty URL ddgbef.naughtymets.com/s/63c5a1514ca7c IP 81.30.157.12 ASN #24961 WIIT AG Introduced by scriptElement Embedded in HTML true Observations First Seen2024-11-10 04:50 Last Seen2025-05-21 06:21 Times Seen472 Hash f398ac5936744ce386a8e0e367b60de4 a188acd27aebe524f01b1d1c2e58e685c3cb5079 b1d8b9662c2eabddbe07915ca9c666282e62b10589c85ed60540a972829ba04e Loading...

	ddgbef.naughtymets.com/s/63c5a1514ca7c	ScriptElement	31 kB	2023-03-07	2025-06-08
Pretty URL ddgbef.naughtymets.com/s/63c5a1514ca7c IP 81.30.157.12 ASN #24961 WIIT AG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:14 Last Seen2025-06-08 17:39 Times Seen1478 Hash e7d6b85edb141824af8951e19333337c 76600b2cb1978ca24d9fe39b1412f052da855ddb 6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e Loading...

	ddgbef.naughtymets.com/s/63c5a1514ca7c	ScriptElement	6.8 kB	2024-11-10	2025-05-21
Pretty URL ddgbef.naughtymets.com/s/63c5a1514ca7c IP 81.30.157.12 ASN #24961 WIIT AG Introduced by scriptElement Embedded in HTML true Observations First Seen2024-11-10 04:50 Last Seen2025-05-21 06:21 Times Seen400 Hash 7c26f90e12f24cf6ece53d5765907698 daf46fc6d5f6c6b8e99d8aeb4fd376c2a1d38958 996038c06f2a6a19769c542696d0427f08a621fe8b0a326fd0f388f44fd0d70f Loading...

	ddgbef.naughtymets.com/bundle/535/assets/js/jquery.js	ScriptElement	86 kB	2023-03-14	2025-04-22
Pretty URL ddgbef.naughtymets.com/bundle/535/assets/js/jquery.js IP 81.30.157.12 ASN #24961 WIIT AG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 19:45 Last Seen2025-04-22 13:25 Times Seen39 Hash 27def02e48745c819ce83a509c97e9ff 4fcfbdb6fe3b561824578660d0e4a69003f680dd c7e4dd5aed848878fa1b5856d5e6e674815034f0836f636f73093b14bae01388 Loading...

		Size	First Seen	Last Seen
	#1 Eval - fbe13b8140ae04bf2addb565e37ad643	93 B	2024-10-16 12:29	2025-04-23 13:53
Pretty Observations First Seen2024-10-16 12:29 Last Seen2025-04-23 13:53 Times Seen17 Hash fbe13b8140ae04bf2addb565e37ad643 9c2953299e04acf079f5ae7719924667b7939683 20761a8b4ffa0c88db736c36e68d6a0a2fa0661ede08a2a881f80fa221f66503 Loading...

HTTP Transactions (10)

URL IP Response Size

calldate.us/

192.64.119.13

302 Found

69 B

URL User Request GET HTTP/1.1
calldate.us/
IP
192.64.119.13:80
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
69 B (69 bytes)
Hash
61a5af79b1d7d29300a46cd51150b662
881aeac1303b587304f6b7b985024a3ebf2160a9
4755bbe3f94ff0dc7f41def991a7b4664cd55b798fdf84c794ee59d8599a4604

Detections

NIDS	Severity	Alert
suricata	low	ET INFO Namecheap URL Forward
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET / HTTP/1.1
Host: calldate.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 28 Feb 2025 15:47:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 69
Connection: keep-alive
Location: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

calldate.us/

192.64.119.13

302 Found

69 B

URL User Request GET HTTP/1.1
calldate.us/
IP
192.64.119.13:80
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
69 B (69 bytes)
Hash
61a5af79b1d7d29300a46cd51150b662
881aeac1303b587304f6b7b985024a3ebf2160a9
4755bbe3f94ff0dc7f41def991a7b4664cd55b798fdf84c794ee59d8599a4604

Detections

NIDS	Severity	Alert
suricata	low	ET INFO Namecheap URL Forward
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET / HTTP/1.1
Host: calldate.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 28 Feb 2025 15:47:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 69
Connection: keep-alive
Location: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

ddgbef.naughtymets.com/bundle/535/assets/images/poster.jpg

81.30.157.12

200 OK

18 kB

URL GET HTTP/2
ddgbef.naughtymets.com/bundle/535/assets/images/poster.jpg
IP
81.30.157.12:443
ASN
#24961 WIIT AG

Requested by
https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Certificate
IssuerLet's Encrypt
Subjectnaughtymets.com
Fingerprint48:87:57:04:79:6D:68:D4:9B:B2:BD:7B:A0:9E:E0:37:A1:3A:3B:70
ValiditySat, 21 Dec 2024 22:02:38 GMT - Fri, 21 Mar 2025 22:02:37 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 735x353, components 3
Size
18 kB (18116 bytes)
Hash
c09d631dd606a03ffb77b6fd849b2a34
8a6fb51a32c0e3c027d3bd02cbf7f0d04b7e66ab
496f6f627e183f6eef083bcab0423070a36baa3c24b0913b4131211f089ff8c6

HTTP Headers

GET /bundle/535/assets/images/poster.jpg HTTP/1.1
Host: ddgbef.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Cookie: s=TPZq1%2BAfw8e1FOhpzt4YU6hH9rLZEXl3RY9wOWv5cihDgMN4ftrcWEfIr5CpArEIge44k49g1tEOpFxrJ%2BAjUyB%2BLvYRH5tb%2FTdQQiJD4fiOGGsfdbKwHYmPW2RH9tg5KCDgYmBrCTNpP2fRAM302XPr3TSd2PMeZQRRfGheqhzRSjxANHSg9n%2BOVuy7BIyVCw%2Bu6cX9Q6NIJYr5Sorb7ju3bRWX%2Fdq3HbAdM59%2BY7QzCHCIVOqT2z1i4iu7AGLZamHJhyKw6ebe0cgqU6w7WQ4jE0pCDawy800Xl3%2FITDjRMETyWdxqcCbMgv%2Bh3EGJxYWYF%2F%2ByLNPIAc2pKh7UrgBPT5gdq3K%2BoZgDCg8qqcUZgDwvlWuJbOEccT7x2RJecvjcVvjPKioUz%2FD93SxLO0XPxTQMaYQdFHWp6xW8EUBdku9xBxK7oqunkt4QIu21U9iq8M5kIB2o5NYWmSudh9xwISIdulF99cKYamcC9v7CZXtOcc1cCOSldFff%2F%2BlhgGmehEzHuWJVfimtULWvpxiSSyQENWTaGdbxt7gP3WpsvWwIiOvcR7XpfYviz%2FJJVp8ud5opD9yKLNLOuAg%2BBGmJRt6f1SKaGD8VDHLTeH6NfSttdvQ2hfh2xUrEhrgV3BPOd3XJOw6HaD7DlafKJF5XJxVbjAn02wgrupKHe0FgZkWXKIHNZUCGhSI0x1LUjdFMC%2FF4cbLyjIS4DdaJmGNTQcdlscSSRyBYcvAsY9stzuZ9Y2Ks4HlmRa16%2BZEz1Qez%2FnXBPYkBjHt7%2BR9Bl95xgJuBH2XEgCSEqqcFoS3B9rqWGPvDQTdyEglTfkez%2BmZcERJe0uzR1EbCh9dzgBVJMAxwOJa0Qxw%2FLpDZ7drfLvBK7hluNvuwT3bSAJkYbHqc%2F2v%2FeG8pxGGHTczzE8x1X5cdvl2wXOi%2FLMUp5c1%2FIOEWYv5%2BYBcYHrr27IjJu2BHM%2BBQ3OqE5RhmHGjUOCKBMnBucYBj7CLJnRrM6P4M7uysTfsCWO5wEg4zGyUbXyYr0JeeABja%2B17KSBw0qCwf0%2F9oZXQJk35gFGeDa9%2FkUah95UFnZbetzJBTpMVTUdFUwy3a91ebGrYm93S8%2Bat99aDXdI6en5PAJ91ePZDyMFDc%2FZVIAIEOhaLT3oUh6XZKj9Z4xJ5hTXNhRuHnhgsG%2FFHlexFto8nlSGKJ8FD18%2FZMGZuWPZqLBwqv%2FLgnFCS0kRkQtrCD53Mj06ioAZl5PqL5AWtR%2BF5AbufteSe3%2FxSPP2L7x5VVYjF9gmQIyuYf3VZ4Qu9ZtLdJ%2BMbDeiYYD9ugzGTd0TTg5gkz6cRnuHGlUwlP%2BBbgCMqA9YGYznI1kQwzFAeIyxNQBkg7lamH5LZqI8duvO7sUWqMYy09dv4nOb%2BQtsNQiAJ0JNcrWqK9SMB4Mfu7WKY7m86eFV8GZGWe65XGSsqYWJ%2FGW1ZF1JDAPPMHE2JLxLxwZ7Raopgt7olglnaaODaWNdgCMzufU5K8%2BhHXfcrmAo3fu7Xj9or6afdT%2F3iIRn3f1UZBHxT4hIcBbM3F%2F89yhr2nortPGu5fmQnay%2FenrHComTrVM1yOE5tldNuDkqJLoLyfi4ewBg7PAU%2FmXOKBKyzlIyi%2FMHBMy3H97QeMAJ5erpqMIlbo5leErIzuBNn%2Bhe0gfD8I6sKS3RS%2BN8SaGNPttsd5D2ZMjz%2BECex0%2BVXfiO5hV35HjpwIytsbvQWO13aF8MoeI5bJWVVvnrQo79UcX%2BZ3%2FktJsjziX4XvK3Ofiw7kdRaZ8g%2F3VbwRiohHdugxdlE0szJR0inzLuBCu5NDDJDNoY2sXUaAHIQm1AaGaA9EcCbX9vuLxNIFMc9PktDqrfMErV6cYjNLpDUcSW503XkWFiFgTrRzHc49zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Fri, 28 Feb 2025 15:47:08 GMT
content-type: image/jpeg
content-length: 18116
last-modified: Tue, 14 Dec 2021 09:36:57 GMT
etag: "61b865b9-46c4"
X-Firefox-Spdy: h2

ddgbef.naughtymets.com/bundle/535/assets//images/1.mp4

81.30.157.12

200 OK

662 kB

URL GET HTTP/2
ddgbef.naughtymets.com/bundle/535/assets//images/1.mp4
IP
81.30.157.12:443
ASN
#24961 WIIT AG

Requested by
https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Certificate
IssuerLet's Encrypt
Subjectnaughtymets.com
Fingerprint48:87:57:04:79:6D:68:D4:9B:B2:BD:7B:A0:9E:E0:37:A1:3A:3B:70
ValiditySat, 21 Dec 2024 22:02:38 GMT - Fri, 21 Mar 2025 22:02:37 GMT

File type
ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size
662 kB (662180 bytes)
Hash
d03164cf1f97adf07b6a9c2ba2e8ba20
570ae31133bfd7aeaf3f084d3588d8568da80632
56c8861b77baa40f722353515e2874b5235b68d9ee06b0fabbc9a22542206d80

HTTP Headers

GET /bundle/535/assets//images/1.mp4 HTTP/1.1
Host: ddgbef.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Cookie: s=TPZq1%2BAfw8e1FOhpzt4YU6hH9rLZEXl3RY9wOWv5cihDgMN4ftrcWEfIr5CpArEIge44k49g1tEOpFxrJ%2BAjUyB%2BLvYRH5tb%2FTdQQiJD4fiOGGsfdbKwHYmPW2RH9tg5KCDgYmBrCTNpP2fRAM302XPr3TSd2PMeZQRRfGheqhzRSjxANHSg9n%2BOVuy7BIyVCw%2Bu6cX9Q6NIJYr5Sorb7ju3bRWX%2Fdq3HbAdM59%2BY7QzCHCIVOqT2z1i4iu7AGLZamHJhyKw6ebe0cgqU6w7WQ4jE0pCDawy800Xl3%2FITDjRMETyWdxqcCbMgv%2Bh3EGJxYWYF%2F%2ByLNPIAc2pKh7UrgBPT5gdq3K%2BoZgDCg8qqcUZgDwvlWuJbOEccT7x2RJecvjcVvjPKioUz%2FD93SxLO0XPxTQMaYQdFHWp6xW8EUBdku9xBxK7oqunkt4QIu21U9iq8M5kIB2o5NYWmSudh9xwISIdulF99cKYamcC9v7CZXtOcc1cCOSldFff%2F%2BlhgGmehEzHuWJVfimtULWvpxiSSyQENWTaGdbxt7gP3WpsvWwIiOvcR7XpfYviz%2FJJVp8ud5opD9yKLNLOuAg%2BBGmJRt6f1SKaGD8VDHLTeH6NfSttdvQ2hfh2xUrEhrgV3BPOd3XJOw6HaD7DlafKJF5XJxVbjAn02wgrupKHe0FgZkWXKIHNZUCGhSI0x1LUjdFMC%2FF4cbLyjIS4DdaJmGNTQcdlscSSRyBYcvAsY9stzuZ9Y2Ks4HlmRa16%2BZEz1Qez%2FnXBPYkBjHt7%2BR9Bl95xgJuBH2XEgCSEqqcFoS3B9rqWGPvDQTdyEglTfkez%2BmZcERJe0uzR1EbCh9dzgBVJMAxwOJa0Qxw%2FLpDZ7drfLvBK7hluNvuwT3bSAJkYbHqc%2F2v%2FeG8pxGGHTczzE8x1X5cdvl2wXOi%2FLMUp5c1%2FIOEWYv5%2BYBcYHrr27IjJu2BHM%2BBQ3OqE5RhmHGjUOCKBMnBucYBj7CLJnRrM6P4M7uysTfsCWO5wEg4zGyUbXyYr0JeeABja%2B17KSBw0qCwf0%2F9oZXQJk35gFGeDa9%2FkUah95UFnZbetzJBTpMVTUdFUwy3a91ebGrYm93S8%2Bat99aDXdI6en5PAJ91ePZDyMFDc%2FZVIAIEOhaLT3oUh6XZKj9Z4xJ5hTXNhRuHnhgsG%2FFHlexFto8nlSGKJ8FD18%2FZMGZuWPZqLBwqv%2FLgnFCS0kRkQtrCD53Mj06ioAZl5PqL5AWtR%2BF5AbufteSe3%2FxSPP2L7x5VVYjF9gmQIyuYf3VZ4Qu9ZtLdJ%2BMbDeiYYD9ugzGTd0TTg5gkz6cRnuHGlUwlP%2BBbgCMqA9YGYznI1kQwzFAeIyxNQBkg7lamH5LZqI8duvO7sUWqMYy09dv4nOb%2BQtsNQiAJ0JNcrWqK9SMB4Mfu7WKY7m86eFV8GZGWe65XGSsqYWJ%2FGW1ZF1JDAPPMHE2JLxLxwZ7Raopgt7olglnaaODaWNdgCMzufU5K8%2BhHXfcrmAo3fu7Xj9or6afdT%2F3iIRn3f1UZBHxT4hIcBbM3F%2F89yhr2nortPGu5fmQnay%2FenrHComTrVM1yOE5tldNuDkqJLoLyfi4ewBg7PAU%2FmXOKBKyzlIyi%2FMHBMy3H97QeMAJ5erpqMIlbo5leErIzuBNn%2Bhe0gfD8I6sKS3RS%2BN8SaGNPttsd5D2ZMjz%2BECex0%2BVXfiO5hV35HjpwIytsbvQWO13aF8MoeI5bJWVVvnrQo79UcX%2BZ3%2FktJsjziX4XvK3Ofiw7kdRaZ8g%2F3VbwRiohHdugxdlE0szJR0inzLuBCu5NDDJDNoY2sXUaAHIQm1AaGaA9EcCbX9vuLxNIFMc9PktDqrfMErV6cYjNLpDUcSW503XkWFiFgTrRzHc49zg%3D%3D
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Fri, 28 Feb 2025 15:47:08 GMT
content-type: video/mp4
content-length: 662180
last-modified: Tue, 14 Dec 2021 09:36:57 GMT
etag: "61b865b9-a1aa4"
X-Firefox-Spdy: h2

ddgbef.naughtymets.com/bundle/535/assets/images/favicon.png

81.30.157.12

200 OK

5.5 kB

URL GET HTTP/2
ddgbef.naughtymets.com/bundle/535/assets/images/favicon.png
IP
81.30.157.12:443
ASN
#24961 WIIT AG

Requested by
https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Certificate
IssuerLet's Encrypt
Subjectnaughtymets.com
Fingerprint48:87:57:04:79:6D:68:D4:9B:B2:BD:7B:A0:9E:E0:37:A1:3A:3B:70
ValiditySat, 21 Dec 2024 22:02:38 GMT - Fri, 21 Mar 2025 22:02:37 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
5.5 kB (5533 bytes)
Hash
30c9e792a1ad6251ab3437d7da76e293
d440c16e6948c307382f67677d3561652b26275b
312e2177186abb7f162c20d5530fd4a4462e48ec6f611f374a497e73752ad523

HTTP Headers

GET /bundle/535/assets/images/favicon.png HTTP/1.1
Host: ddgbef.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Cookie: s=TPZq1%2BAfw8e1FOhpzt4YU6hH9rLZEXl3RY9wOWv5cihDgMN4ftrcWEfIr5CpArEIge44k49g1tEOpFxrJ%2BAjUyB%2BLvYRH5tb%2FTdQQiJD4fiOGGsfdbKwHYmPW2RH9tg5KCDgYmBrCTNpP2fRAM302XPr3TSd2PMeZQRRfGheqhzRSjxANHSg9n%2BOVuy7BIyVCw%2Bu6cX9Q6NIJYr5Sorb7ju3bRWX%2Fdq3HbAdM59%2BY7QzCHCIVOqT2z1i4iu7AGLZamHJhyKw6ebe0cgqU6w7WQ4jE0pCDawy800Xl3%2FITDjRMETyWdxqcCbMgv%2Bh3EGJxYWYF%2F%2ByLNPIAc2pKh7UrgBPT5gdq3K%2BoZgDCg8qqcUZgDwvlWuJbOEccT7x2RJecvjcVvjPKioUz%2FD93SxLO0XPxTQMaYQdFHWp6xW8EUBdku9xBxK7oqunkt4QIu21U9iq8M5kIB2o5NYWmSudh9xwISIdulF99cKYamcC9v7CZXtOcc1cCOSldFff%2F%2BlhgGmehEzHuWJVfimtULWvpxiSSyQENWTaGdbxt7gP3WpsvWwIiOvcR7XpfYviz%2FJJVp8ud5opD9yKLNLOuAg%2BBGmJRt6f1SKaGD8VDHLTeH6NfSttdvQ2hfh2xUrEhrgV3BPOd3XJOw6HaD7DlafKJF5XJxVbjAn02wgrupKHe0FgZkWXKIHNZUCGhSI0x1LUjdFMC%2FF4cbLyjIS4DdaJmGNTQcdlscSSRyBYcvAsY9stzuZ9Y2Ks4HlmRa16%2BZEz1Qez%2FnXBPYkBjHt7%2BR9Bl95xgJuBH2XEgCSEqqcFoS3B9rqWGPvDQTdyEglTfkez%2BmZcERJe0uzR1EbCh9dzgBVJMAxwOJa0Qxw%2FLpDZ7drfLvBK7hluNvuwT3bSAJkYbHqc%2F2v%2FeG8pxGGHTczzE8x1X5cdvl2wXOi%2FLMUp5c1%2FIOEWYv5%2BYBcYHrr27IjJu2BHM%2BBQ3OqE5RhmHGjUOCKBMnBucYBj7CLJnRrM6P4M7uysTfsCWO5wEg4zGyUbXyYr0JeeABja%2B17KSBw0qCwf0%2F9oZXQJk35gFGeDa9%2FkUah95UFnZbetzJBTpMVTUdFUwy3a91ebGrYm93S8%2Bat99aDXdI6en5PAJ91ePZDyMFDc%2FZVIAIEOhaLT3oUh6XZKj9Z4xJ5hTXNhRuHnhgsG%2FFHlexFto8nlSGKJ8FD18%2FZMGZuWPZqLBwqv%2FLgnFCS0kRkQtrCD53Mj06ioAZl5PqL5AWtR%2BF5AbufteSe3%2FxSPP2L7x5VVYjF9gmQIyuYf3VZ4Qu9ZtLdJ%2BMbDeiYYD9ugzGTd0TTg5gkz6cRnuHGlUwlP%2BBbgCMqA9YGYznI1kQwzFAeIyxNQBkg7lamH5LZqI8duvO7sUWqMYy09dv4nOb%2BQtsNQiAJ0JNcrWqK9SMB4Mfu7WKY7m86eFV8GZGWe65XGSsqYWJ%2FGW1ZF1JDAPPMHE2JLxLxwZ7Raopgt7olglnaaODaWNdgCMzufU5K8%2BhHXfcrmAo3fu7Xj9or6afdT%2F3iIRn3f1UZBHxT4hIcBbM3F%2F89yhr2nortPGu5fmQnay%2FenrHComTrVM1yOE5tldNuDkqJLoLyfi4ewBg7PAU%2FmXOKBKyzlIyi%2FMHBMy3H97QeMAJ5erpqMIlbo5leErIzuBNn%2Bhe0gfD8I6sKS3RS%2BN8SaGNPttsd5D2ZMjz%2BECex0%2BVXfiO5hV35HjpwIytsbvQWO13aF8MoeI5bJWVVvnrQo79UcX%2BZ3%2FktJsjziX4XvK3Ofiw7kdRaZ8g%2F3VbwRiohHdugxdlE0szJR0inzLuBCu5NDDJDNoY2sXUaAHIQm1AaGaA9EcCbX9vuLxNIFMc9PktDqrfMErV6cYjNLpDUcSW503XkWFiFgTrRzHc49zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Fri, 28 Feb 2025 15:47:08 GMT
content-type: image/png
content-length: 5533
last-modified: Tue, 14 Dec 2021 09:36:57 GMT
etag: "61b865b9-159d"
X-Firefox-Spdy: h2

ddgbef.naughtymets.com/s/63c5a1514ca7c

81.30.157.12

200 OK

21 kB

URL User Request GET HTTP/2
ddgbef.naughtymets.com/s/63c5a1514ca7c
IP
81.30.157.12:443
ASN
#24961 WIIT AG

Certificate
IssuerLet's Encrypt
Subjectnaughtymets.com
Fingerprint48:87:57:04:79:6D:68:D4:9B:B2:BD:7B:A0:9E:E0:37:A1:3A:3B:70
ValiditySat, 21 Dec 2024 22:02:38 GMT - Fri, 21 Mar 2025 22:02:37 GMT

File type
gzip compressed data, from Unix
Size
21 kB (21320 bytes)
Hash
7244e70916a53dbdce54cf7600283780
bc48e63e9ca9513929b14eb3326c5d5eb8647886
ca94084fae7b14f51bea20c7248062a476d78119fd34d4f1d27d2510375f7cff

HTTP Headers

GET /s/63c5a1514ca7c HTTP/1.1
Host: ddgbef.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Fri, 28 Feb 2025 15:47:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: s=vqoqHq2CF9oO5T1X0BGM2pm6jbnNY3TWhTQFx98n761IAYIzIV1CIu3xKMyQySnL7l9aUWMGFSukhLX9w49mbCB%2BLvaRPqNZ%2FRxQ5mRHYanl%2FmmPxb02Al7vWndObc8cTgT3Y3BdV8BaG0pws8rWarPbuJ7EOZ5lTNrs4mgJAoruCJ13TKUgtkletdbx06oX3EVov%2BbzGXnD1DS4kceUJbPbUgmAuSaBigY6hrF2fPuOtiluujGmPINRFzjLXZwl9ZyhPo1AYq%2F80f%2BW7lI440xqJaguxTWX0SBNxbSIP%2FjWo%2Bc1u99qoC0Gwfln%2FDtoItzauakTLzzsaWQgElTSDDgITKoUMbiH8SVHstptE5orIshgGeKXHgbhu3TuksP6xLAtQGr%2BQfJV5uJlXzGiW5IWUqhC0NuYAiPOVq7gpDis2%2FbkJ7YiBPjNLJiXMLhp0Y70KVnZQkM%2Bou1OYHK5DjFVdblORaqRoWEmjVmXZRtvJNybT8B6PuDSnhv4ntvUZrHX%2BXq7GE2CiUd89PLaOrmWnkpBiwN399q3aIPlAaU79DKCpyjk0uQvcTjapZMZD1Hn6LPBEixwJNU8HWq9Rlv4Pkf6abUWN%2B0MmhxwBO5X%2FMDkRZ%2FZFvXcRhyD%2B6LcECaBxf0tRMYHOrVRy3e0vnB8Ovb2Lyo1MxQR3IJAaEcNPTu%2FPIHNZUBmhiI0x1LUjdFMh3PpOO8bafwK8down3lZVnc7IO0RRH2WV0tVrbEcVUDRn8Gk9CxBCfW3k5Sx0J74slknoyxrE1oEYzAo%2FlhtAIOYBMHryXJEIP3ObUUAZVhonldrVdY1VSBAvUjCW0A%2BQ%2BSZMX16679pXMBNeSvawUFklP8PkNpAPeu9v8gYiIe0ksWksOO234bEqUWICdkNn8gHLWP9yMCQTCqGHwHAS2RqHDGgfxBft9aLMlh%2FAdZ8NcPgFpI4wwi2AfU50G8vD8zXEZwLzACwlUrTtcZir17KDzo9KV1tGOQDP6lSR5WV88KfPJvzvcHzQWhF98ZKXy5JL6ucASnRnrKP9Y1yaml7bJ43UV0p1PIn2hKaE1COuPQY6q8BUlNQj4Di65g8gDWT5BuB%2B9XHV7swlXMXnY3XoVkK%2F%2FHtfmpFSpYX48T79%2BzKwYKZWqquSruVwJO4CJVf6BylN8bfqskC6RTFT%2BmKdm6mcMVRHl%2B7xq9A4ZntZZr8XbO5geUAiQ%2FAEqsRsGoiwJPOY786LAMdlqDBbrvDeh%2FVzCPNn7QUt9VdvtG%2F4YfaYPTH3wUllNa2GVgLgcmXoNk%2FFV8T0OkxzvKhUaJvH9I0jbzbK3UDGuy%2BDDyd3RY8TTCe1hXTRrh8nDVRnlk2I%2FPr1JEUQltDvL8R7jX92sTqLNBDPDLLXhMr%2BwaQWzDWRydc9xE4q2VXoIYUvbjMtpRpxk6kLPXm6zB1cnzykgmWZvkcWXfysm2WOzrcQZ75n8%2FjUnvCUJSbaNvojF%2FOwLl8f%2Bx1J0tx5%2BhsV1AaYS2AW3p9MQlFOIaUQexpIR1CSd6CB44CS2yyzoqIo7c%2BM5eD5xyFKOTW3QO07dR7yN%2B%2B8zz%2Fuyy710NZ%2FlczqVExJAvG9D1hpcYUpq2fQOjvpsLl0EB6sshON%2F0wx6imQX%2FAgZ45X2WaHQ933UrrXbgKUQekY8r%2F%2BwAWEZTSUK1Y9ZZX%2BqUl%2BzVj1o2YsazjLdrsnPIyDZZmR2WNzRincrOJqwS%2BtS%2FzuTPJ4FnuSId7VwENR%2B8M8z0o%2BuiEVpH2CkvayKnnBksmAFVUXbrxUFxKuRvwCdrFinOTnbHLfUFtDKQvFJsUTNCq6wA%2F1T%2FcBIu0rm5Srz%2BtCxsH0xnvMf4uvHGbXhqIfwM5vlJ%2Fn2asqDtZR%2FQZHMa4nl847qGSXVusgpDH; expires=Sat, 01 Mar 2025 15:47:07 GMT; Max-Age=86400; path=/; domain=naughtymets.com
cache-control: must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: 0
content-encoding: gzip
X-Firefox-Spdy: h2

guard.cdtbox.rocks/color?x=1&forScheme=aHR0cHM6Ly9kZGdiZWYubmF1Z2h0eW1ldHMuY29tL3MvNjNjNWExNTE0Y2E3Yw==

3.232.5.83

200 OK

93 B

URL GET HTTP/2
guard.cdtbox.rocks/color?x=1&forScheme=aHR0cHM6Ly9kZGdiZWYubmF1Z2h0eW1ldHMuY29tL3MvNjNjNWExNTE0Y2E3Yw==
IP
3.232.5.83:443
ASN
#14618 AMAZON-AES

Requested by
https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Certificate
IssuerAmazon
Subjectguard.cdtbox.rocks
Fingerprint13:8A:B9:08:45:9D:9D:0C:79:05:42:81:97:00:34:A5:FD:92:F8:97
ValiditySat, 13 Apr 2024 00:00:00 GMT - Sun, 11 May 2025 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
93 B (93 bytes)
Hash
fbe13b8140ae04bf2addb565e37ad643
9c2953299e04acf079f5ae7719924667b7939683
20761a8b4ffa0c88db736c36e68d6a0a2fa0661ede08a2a881f80fa221f66503

HTTP Headers

GET /color?x=1&forScheme=aHR0cHM6Ly9kZGdiZWYubmF1Z2h0eW1ldHMuY29tL3MvNjNjNWExNTE0Y2E3Yw== HTTP/1.1
Host: guard.cdtbox.rocks
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ddgbef.naughtymets.com
DNT: 1
Connection: keep-alive
Referer: https://ddgbef.naughtymets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 28 Feb 2025 15:47:08 GMT
content-type: application/json
content-length: 93
server: nginx
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
X-Firefox-Spdy: h2

ddgbef.naughtymets.com/bundle/535/assets/js/jquery.js

81.30.157.12

200 OK

86 kB

URL GET HTTP/2
ddgbef.naughtymets.com/bundle/535/assets/js/jquery.js
IP
81.30.157.12:443
ASN
#24961 WIIT AG

Requested by
https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Certificate
IssuerLet's Encrypt
Subjectnaughtymets.com
Fingerprint48:87:57:04:79:6D:68:D4:9B:B2:BD:7B:A0:9E:E0:37:A1:3A:3B:70
ValiditySat, 21 Dec 2024 22:02:38 GMT - Fri, 21 Mar 2025 22:02:37 GMT

File type
JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators
Size
86 kB (85822 bytes)
Hash
27def02e48745c819ce83a509c97e9ff
4fcfbdb6fe3b561824578660d0e4a69003f680dd
c7e4dd5aed848878fa1b5856d5e6e674815034f0836f636f73093b14bae01388

HTTP Headers

GET /bundle/535/assets/js/jquery.js HTTP/1.1
Host: ddgbef.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Cookie: s=TPZq1%2BAfw8e1FOhpzt4YU6hH9rLZEXl3RY9wOWv5cihDgMN4ftrcWEfIr5CpArEIge44k49g1tEOpFxrJ%2BAjUyB%2BLvYRH5tb%2FTdQQiJD4fiOGGsfdbKwHYmPW2RH9tg5KCDgYmBrCTNpP2fRAM302XPr3TSd2PMeZQRRfGheqhzRSjxANHSg9n%2BOVuy7BIyVCw%2Bu6cX9Q6NIJYr5Sorb7ju3bRWX%2Fdq3HbAdM59%2BY7QzCHCIVOqT2z1i4iu7AGLZamHJhyKw6ebe0cgqU6w7WQ4jE0pCDawy800Xl3%2FITDjRMETyWdxqcCbMgv%2Bh3EGJxYWYF%2F%2ByLNPIAc2pKh7UrgBPT5gdq3K%2BoZgDCg8qqcUZgDwvlWuJbOEccT7x2RJecvjcVvjPKioUz%2FD93SxLO0XPxTQMaYQdFHWp6xW8EUBdku9xBxK7oqunkt4QIu21U9iq8M5kIB2o5NYWmSudh9xwISIdulF99cKYamcC9v7CZXtOcc1cCOSldFff%2F%2BlhgGmehEzHuWJVfimtULWvpxiSSyQENWTaGdbxt7gP3WpsvWwIiOvcR7XpfYviz%2FJJVp8ud5opD9yKLNLOuAg%2BBGmJRt6f1SKaGD8VDHLTeH6NfSttdvQ2hfh2xUrEhrgV3BPOd3XJOw6HaD7DlafKJF5XJxVbjAn02wgrupKHe0FgZkWXKIHNZUCGhSI0x1LUjdFMC%2FF4cbLyjIS4DdaJmGNTQcdlscSSRyBYcvAsY9stzuZ9Y2Ks4HlmRa16%2BZEz1Qez%2FnXBPYkBjHt7%2BR9Bl95xgJuBH2XEgCSEqqcFoS3B9rqWGPvDQTdyEglTfkez%2BmZcERJe0uzR1EbCh9dzgBVJMAxwOJa0Qxw%2FLpDZ7drfLvBK7hluNvuwT3bSAJkYbHqc%2F2v%2FeG8pxGGHTczzE8x1X5cdvl2wXOi%2FLMUp5c1%2FIOEWYv5%2BYBcYHrr27IjJu2BHM%2BBQ3OqE5RhmHGjUOCKBMnBucYBj7CLJnRrM6P4M7uysTfsCWO5wEg4zGyUbXyYr0JeeABja%2B17KSBw0qCwf0%2F9oZXQJk35gFGeDa9%2FkUah95UFnZbetzJBTpMVTUdFUwy3a91ebGrYm93S8%2Bat99aDXdI6en5PAJ91ePZDyMFDc%2FZVIAIEOhaLT3oUh6XZKj9Z4xJ5hTXNhRuHnhgsG%2FFHlexFto8nlSGKJ8FD18%2FZMGZuWPZqLBwqv%2FLgnFCS0kRkQtrCD53Mj06ioAZl5PqL5AWtR%2BF5AbufteSe3%2FxSPP2L7x5VVYjF9gmQIyuYf3VZ4Qu9ZtLdJ%2BMbDeiYYD9ugzGTd0TTg5gkz6cRnuHGlUwlP%2BBbgCMqA9YGYznI1kQwzFAeIyxNQBkg7lamH5LZqI8duvO7sUWqMYy09dv4nOb%2BQtsNQiAJ0JNcrWqK9SMB4Mfu7WKY7m86eFV8GZGWe65XGSsqYWJ%2FGW1ZF1JDAPPMHE2JLxLxwZ7Raopgt7olglnaaODaWNdgCMzufU5K8%2BhHXfcrmAo3fu7Xj9or6afdT%2F3iIRn3f1UZBHxT4hIcBbM3F%2F89yhr2nortPGu5fmQnay%2FenrHComTrVM1yOE5tldNuDkqJLoLyfi4ewBg7PAU%2FmXOKBKyzlIyi%2FMHBMy3H97QeMAJ5erpqMIlbo5leErIzuBNn%2Bhe0gfD8I6sKS3RS%2BN8SaGNPttsd5D2ZMjz%2BECex0%2BVXfiO5hV35HjpwIytsbvQWO13aF8MoeI5bJWVVvnrQo79UcX%2BZ3%2FktJsjziX4XvK3Ofiw7kdRaZ8g%2F3VbwRiohHdugxdlE0szJR0inzLuBCu5NDDJDNoY2sXUaAHIQm1AaGaA9EcCbX9vuLxNIFMc9PktDqrfMErV6cYjNLpDUcSW503XkWFiFgTrRzHc49zg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Fri, 28 Feb 2025 15:47:08 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 14 Dec 2021 09:36:58 GMT
etag: W/"61b865ba-14f3e"
content-encoding: gzip
X-Firefox-Spdy: h2

ddgbef.naughtymets.com/bundle/535/assets/css/style.css

81.30.157.12

200 OK

6.2 kB

URL GET HTTP/2
ddgbef.naughtymets.com/bundle/535/assets/css/style.css
IP
81.30.157.12:443
ASN
#24961 WIIT AG

Requested by
https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Certificate
IssuerLet's Encrypt
Subjectnaughtymets.com
Fingerprint48:87:57:04:79:6D:68:D4:9B:B2:BD:7B:A0:9E:E0:37:A1:3A:3B:70
ValiditySat, 21 Dec 2024 22:02:38 GMT - Fri, 21 Mar 2025 22:02:37 GMT

File type
ASCII text, with very long lines (6904), with no line terminators
Size
6.2 kB (6168 bytes)
Hash
387cb73e24392de217e08fbce2e4488e
52db1f8122fa37a171c4d5836bc07233fa06ccc1
cb19fdfef270a269b8b4aeeac03a4aacfd3bba860e9f7fa0f1d934f8e94b847b

HTTP Headers

GET /bundle/535/assets/css/style.css HTTP/1.1
Host: ddgbef.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Cookie: s=TPZq1%2BAfw8e1FOhpzt4YU6hH9rLZEXl3RY9wOWv5cihDgMN4ftrcWEfIr5CpArEIge44k49g1tEOpFxrJ%2BAjUyB%2BLvYRH5tb%2FTdQQiJD4fiOGGsfdbKwHYmPW2RH9tg5KCDgYmBrCTNpP2fRAM302XPr3TSd2PMeZQRRfGheqhzRSjxANHSg9n%2BOVuy7BIyVCw%2Bu6cX9Q6NIJYr5Sorb7ju3bRWX%2Fdq3HbAdM59%2BY7QzCHCIVOqT2z1i4iu7AGLZamHJhyKw6ebe0cgqU6w7WQ4jE0pCDawy800Xl3%2FITDjRMETyWdxqcCbMgv%2Bh3EGJxYWYF%2F%2ByLNPIAc2pKh7UrgBPT5gdq3K%2BoZgDCg8qqcUZgDwvlWuJbOEccT7x2RJecvjcVvjPKioUz%2FD93SxLO0XPxTQMaYQdFHWp6xW8EUBdku9xBxK7oqunkt4QIu21U9iq8M5kIB2o5NYWmSudh9xwISIdulF99cKYamcC9v7CZXtOcc1cCOSldFff%2F%2BlhgGmehEzHuWJVfimtULWvpxiSSyQENWTaGdbxt7gP3WpsvWwIiOvcR7XpfYviz%2FJJVp8ud5opD9yKLNLOuAg%2BBGmJRt6f1SKaGD8VDHLTeH6NfSttdvQ2hfh2xUrEhrgV3BPOd3XJOw6HaD7DlafKJF5XJxVbjAn02wgrupKHe0FgZkWXKIHNZUCGhSI0x1LUjdFMC%2FF4cbLyjIS4DdaJmGNTQcdlscSSRyBYcvAsY9stzuZ9Y2Ks4HlmRa16%2BZEz1Qez%2FnXBPYkBjHt7%2BR9Bl95xgJuBH2XEgCSEqqcFoS3B9rqWGPvDQTdyEglTfkez%2BmZcERJe0uzR1EbCh9dzgBVJMAxwOJa0Qxw%2FLpDZ7drfLvBK7hluNvuwT3bSAJkYbHqc%2F2v%2FeG8pxGGHTczzE8x1X5cdvl2wXOi%2FLMUp5c1%2FIOEWYv5%2BYBcYHrr27IjJu2BHM%2BBQ3OqE5RhmHGjUOCKBMnBucYBj7CLJnRrM6P4M7uysTfsCWO5wEg4zGyUbXyYr0JeeABja%2B17KSBw0qCwf0%2F9oZXQJk35gFGeDa9%2FkUah95UFnZbetzJBTpMVTUdFUwy3a91ebGrYm93S8%2Bat99aDXdI6en5PAJ91ePZDyMFDc%2FZVIAIEOhaLT3oUh6XZKj9Z4xJ5hTXNhRuHnhgsG%2FFHlexFto8nlSGKJ8FD18%2FZMGZuWPZqLBwqv%2FLgnFCS0kRkQtrCD53Mj06ioAZl5PqL5AWtR%2BF5AbufteSe3%2FxSPP2L7x5VVYjF9gmQIyuYf3VZ4Qu9ZtLdJ%2BMbDeiYYD9ugzGTd0TTg5gkz6cRnuHGlUwlP%2BBbgCMqA9YGYznI1kQwzFAeIyxNQBkg7lamH5LZqI8duvO7sUWqMYy09dv4nOb%2BQtsNQiAJ0JNcrWqK9SMB4Mfu7WKY7m86eFV8GZGWe65XGSsqYWJ%2FGW1ZF1JDAPPMHE2JLxLxwZ7Raopgt7olglnaaODaWNdgCMzufU5K8%2BhHXfcrmAo3fu7Xj9or6afdT%2F3iIRn3f1UZBHxT4hIcBbM3F%2F89yhr2nortPGu5fmQnay%2FenrHComTrVM1yOE5tldNuDkqJLoLyfi4ewBg7PAU%2FmXOKBKyzlIyi%2FMHBMy3H97QeMAJ5erpqMIlbo5leErIzuBNn%2Bhe0gfD8I6sKS3RS%2BN8SaGNPttsd5D2ZMjz%2BECex0%2BVXfiO5hV35HjpwIytsbvQWO13aF8MoeI5bJWVVvnrQo79UcX%2BZ3%2FktJsjziX4XvK3Ofiw7kdRaZ8g%2F3VbwRiohHdugxdlE0szJR0inzLuBCu5NDDJDNoY2sXUaAHIQm1AaGaA9EcCbX9vuLxNIFMc9PktDqrfMErV6cYjNLpDUcSW503XkWFiFgTrRzHc49zg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Fri, 28 Feb 2025 15:47:08 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 14 Dec 2021 09:36:56 GMT
etag: W/"61b865b8-1818"
content-encoding: gzip
X-Firefox-Spdy: h2

ddgbef.naughtymets.com/bundle/535/assets/js/functions.js

81.30.157.12

200 OK

1.7 kB

URL GET HTTP/2
ddgbef.naughtymets.com/bundle/535/assets/js/functions.js
IP
81.30.157.12:443
ASN
#24961 WIIT AG

Requested by
https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Certificate
IssuerLet's Encrypt
Subjectnaughtymets.com
Fingerprint48:87:57:04:79:6D:68:D4:9B:B2:BD:7B:A0:9E:E0:37:A1:3A:3B:70
ValiditySat, 21 Dec 2024 22:02:38 GMT - Fri, 21 Mar 2025 22:02:37 GMT

File type
JavaScript source, ASCII text, with very long lines (1857), with no line terminators
Size
1.7 kB (1713 bytes)
Hash
b3a6f2be6d3e54347d42308a79c687b2
6f8948d9dd165a895f1eaf7cfa0c22633179df7a
34ed1dc5c306721b97f0c6921c47fe3fc16c267442d567747f59a1f3fecab12b

HTTP Headers

GET /bundle/535/assets/js/functions.js HTTP/1.1
Host: ddgbef.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ddgbef.naughtymets.com/s/63c5a1514ca7c
Cookie: s=TPZq1%2BAfw8e1FOhpzt4YU6hH9rLZEXl3RY9wOWv5cihDgMN4ftrcWEfIr5CpArEIge44k49g1tEOpFxrJ%2BAjUyB%2BLvYRH5tb%2FTdQQiJD4fiOGGsfdbKwHYmPW2RH9tg5KCDgYmBrCTNpP2fRAM302XPr3TSd2PMeZQRRfGheqhzRSjxANHSg9n%2BOVuy7BIyVCw%2Bu6cX9Q6NIJYr5Sorb7ju3bRWX%2Fdq3HbAdM59%2BY7QzCHCIVOqT2z1i4iu7AGLZamHJhyKw6ebe0cgqU6w7WQ4jE0pCDawy800Xl3%2FITDjRMETyWdxqcCbMgv%2Bh3EGJxYWYF%2F%2ByLNPIAc2pKh7UrgBPT5gdq3K%2BoZgDCg8qqcUZgDwvlWuJbOEccT7x2RJecvjcVvjPKioUz%2FD93SxLO0XPxTQMaYQdFHWp6xW8EUBdku9xBxK7oqunkt4QIu21U9iq8M5kIB2o5NYWmSudh9xwISIdulF99cKYamcC9v7CZXtOcc1cCOSldFff%2F%2BlhgGmehEzHuWJVfimtULWvpxiSSyQENWTaGdbxt7gP3WpsvWwIiOvcR7XpfYviz%2FJJVp8ud5opD9yKLNLOuAg%2BBGmJRt6f1SKaGD8VDHLTeH6NfSttdvQ2hfh2xUrEhrgV3BPOd3XJOw6HaD7DlafKJF5XJxVbjAn02wgrupKHe0FgZkWXKIHNZUCGhSI0x1LUjdFMC%2FF4cbLyjIS4DdaJmGNTQcdlscSSRyBYcvAsY9stzuZ9Y2Ks4HlmRa16%2BZEz1Qez%2FnXBPYkBjHt7%2BR9Bl95xgJuBH2XEgCSEqqcFoS3B9rqWGPvDQTdyEglTfkez%2BmZcERJe0uzR1EbCh9dzgBVJMAxwOJa0Qxw%2FLpDZ7drfLvBK7hluNvuwT3bSAJkYbHqc%2F2v%2FeG8pxGGHTczzE8x1X5cdvl2wXOi%2FLMUp5c1%2FIOEWYv5%2BYBcYHrr27IjJu2BHM%2BBQ3OqE5RhmHGjUOCKBMnBucYBj7CLJnRrM6P4M7uysTfsCWO5wEg4zGyUbXyYr0JeeABja%2B17KSBw0qCwf0%2F9oZXQJk35gFGeDa9%2FkUah95UFnZbetzJBTpMVTUdFUwy3a91ebGrYm93S8%2Bat99aDXdI6en5PAJ91ePZDyMFDc%2FZVIAIEOhaLT3oUh6XZKj9Z4xJ5hTXNhRuHnhgsG%2FFHlexFto8nlSGKJ8FD18%2FZMGZuWPZqLBwqv%2FLgnFCS0kRkQtrCD53Mj06ioAZl5PqL5AWtR%2BF5AbufteSe3%2FxSPP2L7x5VVYjF9gmQIyuYf3VZ4Qu9ZtLdJ%2BMbDeiYYD9ugzGTd0TTg5gkz6cRnuHGlUwlP%2BBbgCMqA9YGYznI1kQwzFAeIyxNQBkg7lamH5LZqI8duvO7sUWqMYy09dv4nOb%2BQtsNQiAJ0JNcrWqK9SMB4Mfu7WKY7m86eFV8GZGWe65XGSsqYWJ%2FGW1ZF1JDAPPMHE2JLxLxwZ7Raopgt7olglnaaODaWNdgCMzufU5K8%2BhHXfcrmAo3fu7Xj9or6afdT%2F3iIRn3f1UZBHxT4hIcBbM3F%2F89yhr2nortPGu5fmQnay%2FenrHComTrVM1yOE5tldNuDkqJLoLyfi4ewBg7PAU%2FmXOKBKyzlIyi%2FMHBMy3H97QeMAJ5erpqMIlbo5leErIzuBNn%2Bhe0gfD8I6sKS3RS%2BN8SaGNPttsd5D2ZMjz%2BECex0%2BVXfiO5hV35HjpwIytsbvQWO13aF8MoeI5bJWVVvnrQo79UcX%2BZ3%2FktJsjziX4XvK3Ofiw7kdRaZ8g%2F3VbwRiohHdugxdlE0szJR0inzLuBCu5NDDJDNoY2sXUaAHIQm1AaGaA9EcCbX9vuLxNIFMc9PktDqrfMErV6cYjNLpDUcSW503XkWFiFgTrRzHc49zg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Fri, 28 Feb 2025 15:47:08 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 14 Dec 2021 09:36:57 GMT
etag: W/"61b865b9-6b1"
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers