ocsp.starfieldtech.com/
2.1 kB IP
Hash d9c12995e34501490ccec5d8d58b5fae
54b9a7e4fb0f3d2f2434093b32b8b6b23db3b7d8
80ab7260393f736f8202b30ebafa526a1384d14cfd3a46ce4d8a62272a23f119
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 07 May 2024 22:04:09 GMT
Content-Type: application/ocsp-response
Content-Length: 2148
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 May 2024 16:30:39 GMT
Expires: Wed, 08 May 2024 16:30:39 GMT
ETag: "54b9a7e4fb0f3d2f2434093b32b8b6b23db3b7d8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
trck.novatrcks.com/PR46RJM/2J3TGB37/
302 Found 236 B URL User Request GET HTTP/2 trck.novatrcks.com/PR46RJM/2J3TGB37/
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerStarfield Technologies, Inc.
Subjecttrck.novatrck.com
FingerprintD1:40:B6:26:F1:E7:AD:38:E9:30:82:8A:AD:1D:88:42:4E:9F:88:1D
ValidityWed, 03 Apr 2024 15:42:33 GMT - Mon, 05 May 2025 15:42:33 GMT
File type HTML document, ASCII text
Hash 52458293fe8182fcc4ad93b47da553dc
7394ca43970bf28b478c064e99c7d0ff26e1b36d
6356eb1be5ff7e7126b482228e882244c4561f188eb7f67bb1e698188750f3ee
GET /PR46RJM/2J3TGB37/ HTTP/1.1
Host: trck.novatrcks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 22:04:10 GMT
content-type: text/html; charset=utf-8
content-length: 236
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://trck.pecuniatrck.com/PR46RJM/2HBBQWMP/?__rpt=0&__po=24334&__ptid=93ac851a030b4ffb8701bcf0ea5af636&__rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9
set-cookie: uniqueClick_2J3TGB37=7acd19d0-67d1-4cad-978d-eacfecaadb4f:1715119450; Path=/; Expires=Wed, 08 May 2024 22:04:10 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 893c5f53-3c15-49b9-b69d-77c1f47ce25f
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trck.pecuniatrck.com/PR46RJM/2HBBQWMP/?__rpt=0&__po=24334&__ptid=93ac851a030b4ffb8701bcf0ea5af636&__rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9
302 Found 145 B URL User Request GET HTTP/2 trck.pecuniatrck.com/PR46RJM/2HBBQWMP/?__rpt=0&__po=24334&__ptid=93ac851a030b4ffb8701bcf0ea5af636&__rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttrck.numustrck.com
Fingerprint51:33:8D:9A:70:0F:B6:A0:E0:15:5F:91:4E:F0:CB:31:CF:DC:D0:6B
ValidityTue, 12 Mar 2024 18:11:27 GMT - Mon, 10 Jun 2024 19:03:40 GMT
File type HTML document, ASCII text
Hash 29c2f4709841392a8504bd67bfab3ca9
f3259961294acfba35c9ac71dc9bfbd78fa69f1c
9add490abda58f351c1c280fcf9be2f3e8fff4f3ba08ac4c484266a4627400bc
GET /PR46RJM/2HBBQWMP/?__rpt=0&__po=24334&__ptid=93ac851a030b4ffb8701bcf0ea5af636&__rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9 HTTP/1.1
Host: trck.pecuniatrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 22:04:10 GMT
content-type: text/html; charset=utf-8
content-length: 145
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://track.smart-tds.com/c9a9eca1-de73-466d-aa60-f2d1325e89a7?t1=12822&t2=&tag=3e8337a0141341b8ab754cb54dfdc65a
set-cookie: uniqueClick_2HBBQWMP=85cc8f9f-f172-438d-a0d5-cbc04bd32534:1715119450; Path=/; Expires=Wed, 08 May 2024 22:04:10 GMT; Secure; SameSite=None
transaction_id=3e8337a0141341b8ab754cb54dfdc65a; Path=/; Expires=Mon, 05 Aug 2024 22:04:10 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 6ee15467-9bd3-4345-82c8-b0af25c30d59
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
track.smart-tds.com/c9a9eca1-de73-466d-aa60-f2d1325e89a7?t1=12822&t2=&tag=3e8337a0141341b8ab754cb54dfdc65a
302 Found 0 B URL User Request GET HTTP/2 track.smart-tds.com/c9a9eca1-de73-466d-aa60-f2d1325e89a7?t1=12822&t2=&tag=3e8337a0141341b8ab754cb54dfdc65a
IP
Certificate IssuerLet's Encrypt
Subjecttrack.smart-tds.com
Fingerprint6D:A4:16:9B:9C:BD:51:73:F2:75:7D:1F:BF:80:89:F2:B9:F9:DF:57
ValidityFri, 15 Mar 2024 06:47:09 GMT - Thu, 13 Jun 2024 06:47:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9a9eca1-de73-466d-aa60-f2d1325e89a7?t1=12822&t2=&tag=3e8337a0141341b8ab754cb54dfdc65a HTTP/1.1
Host: track.smart-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 22:04:11 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://nicking-unding.com/c4b5ad04-8822-42c1-9db5-e9a49f15358b?s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&s8=&s9=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
pragma: no-cache
set-cookie: c9a9eca1-de73-466d-aa60-f2d1325e89a7-v4=9CAv25QcAxQHKKNNw0apPiwa69tuqwu_T21s2N0I1jk; Max-Age=86400; Expires=Wed, 08-May-2024 22:04:11 GMT; Domain=track.smart-tds.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=G5b4iBQMfi00Nw998pQBjXtC7qw4Uw0iArJ96SCZaz6L8fkoWMFA5uE4hTp4pq4Sjo6OJsZ61K5p0Eb5yPgIGe2UZ00%2BfHW0J7qPYcHtCy4uDCVo5IO%2FvNPFLp3Q1b1SlNAlEzXASw9ZGBSwRd50dw%3D%3D; Max-Age=31536000; Expires=Wed, 07-May-2025 22:04:11 GMT; Domain=track.smart-tds.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
nicking-unding.com/c4b5ad04-8822-42c1-9db5-e9a49f15358b?s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&s8=&s9=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
302 Found 0 B URL User Request GET HTTP/2 nicking-unding.com/c4b5ad04-8822-42c1-9db5-e9a49f15358b?s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&s8=&s9=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
IP
Certificate IssuerLet's Encrypt
Subjectnicking-unding.com
Fingerprint9B:E6:63:16:E4:1D:3A:A2:80:0A:CE:43:9A:C2:CC:63:66:28:92:FA
ValidityTue, 07 May 2024 05:58:07 GMT - Mon, 05 Aug 2024 05:58:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c4b5ad04-8822-42c1-9db5-e9a49f15358b?s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&s8=&s9=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s HTTP/1.1
Host: nicking-unding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 22:04:11 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
pragma: no-cache
set-cookie: c4b5ad04-8822-42c1-9db5-e9a49f15358b-v4=Ohswo--EWP5Nr82fvt9Wsc4Bh9TRTxuDGxSSqhBnv5Q; Max-Age=86400; Expires=Wed, 08-May-2024 22:04:11 GMT; Domain=nicking-unding.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=s2Y9G1jJg_-zk2_92RV8ly3bdIbxWuhjOGWDS3HhVFj8XWM5XdjGRHbXSedLzf8KoCDd9V97DZ963pZe18KKLdI9-ogXamn8yckV9aIy6umBZti8GdZctK-9MQiz4Hh8hftJ0O39zLEZfOeJqX1zfeWSV8y_JNu8poWPa-yZjpdSZuLnvmeOe8YPF87tf8XdNMUuJj8ZvzwdFUzxA49v1iVVa-RDblek3anx03RG99UrO3F7PZg9dgkFhvZw8GAIWIhGwA3_3o6FPGHU1-i_yS3ZxKYwvsU8D0OdezbLF7xvBO5Lq7onmxf93FKM_JgrF1N6osQHl6M1qn7RX9sTP8c0N6bzdPo277qEeNeqe6a78gL077yUtcW0zVRrsNJm3qv2AdJbB-5URnDTnlEoeqOtIfJ0SzShC5Zj4e1_EPOOliJvDk-AmKfMdbGgqaS3kKcMtNfpURc4axb-90Wbwlyr2zyqjlXeX82TE732AvMJON8R8IOUiPGAIMVjK7VoF4_6OkWZE0VQAWnpkxU-F0YIof6igceghYOsupFEOgY; Max-Age=86400; Expires=Wed, 08-May-2024 22:04:11 GMT; Domain=nicking-unding.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/Tlogo.png
200 OK 21 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/Tlogo.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 334 x 172, 8-bit/color RGBA, non-interlaced
Hash cf052695dcfea41b32891c6fe0db704a
04666c7589d5f76d4d83b25180be153c74fa12c4
b0323f64bf0cf04da9f58a4b09142954f6d7843dfb037826aca05125c1590e45
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/Tlogo.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 20691
last-modified: Tue, 28 Dec 2021 16:22:49 GMT
etag: "50d3-5d4373b7c4c11"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7GsCJW%2FRaqfnLIaPcMF%2B5Co5JFktp%2BN7jxZMyda157AVFDUdCuBDyyETFA%2F9O5W8s4mE4dYUz%2Bn2OvWASPfXXs2tqnh3x1QHkKfVog%2Fnvs0dFEsscVBYmp46vNmEHb7rAQjPo%2BexA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811dd9b6569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_1.png
200 OK 48 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_1.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash c37b1d71b49a4c8f8bf645d045f16985
548f445b73a87ed311986b78ad30ae585eb94d32
0940f506ad7a63a87d4094ed8982c9ced20a40f80968a8d60c413d9b5ecab79e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p7_1.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 47972
last-modified: Tue, 28 Dec 2021 16:22:50 GMT
etag: "bb64-5d4373b8b8e63"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aOfraVkRY1zp0mNeLQ5p4Hng7QGTSCI7j1Hc3G6aUVy0bkhKu4Ex7kh9EDTaH2AcLs0mUNXpumJ6sKPqUijWq1q3g5q1dYQtMeOMeb2zN9YokH4Dnz52TGbWnU6YZmcmiZmFOXp22w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811dd9b9569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/04.gif
200 OK 388 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/04.gif
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type GIF image data, version 89a, 312 x 312
Size 388 kB (388375 bytes)
Hash f8db03d9bf7a637a23362df0914aabfc
5828fb6a2ca814a2aa7db0f0c6f8ff61561a5ac3
8618a596b8ff121219334e7680e60691712f054bec2c7d3ed28c1381e28c01b1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/04.gif HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/gif
content-length: 388375
last-modified: Tue, 28 Dec 2021 16:22:59 GMT
etag: "5ed17-5d4373c0d22df"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9RggdUdCVOzN10uL7eNCt94Sd6lhuNatH4GJDMQtLUsROj90%2FvwRyoVpITedycTe1N1IYvI8rcN1nwqFGXlcOm13HQ8N%2Fply6zjR6Bmf%2FH6yK3CS%2Bc%2F8G39Zd8a%2Bbjct%2BSZQz7SBqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811dd9b8569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_2.png
200 OK 56 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_2.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 0d8f82b8f9aa4d840b186f45c58be648
b756e6fa8803f25ac91ed0091be37bfcabd70a78
7c62140581382ceef8fdc3fef780f94d132d2758a22393aec252d65373d74d86
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p7_2.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 55991
last-modified: Tue, 28 Dec 2021 16:22:52 GMT
etag: "dab7-5d4373ba99607"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1rv1qj635tC%2Bryg2wgU7QBGMXcvynGoQ5moFdI577gukr%2BQFDxS%2B1v%2FUIkrjgMf8Mmku8PHCHqA2dA%2BbOSngSMbCw4yJVX0GqcqJlp%2ByDDFre0muYLug4m0baMfJZHp5049SizvAdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9bd569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_3.png
200 OK 40 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_3.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash b4c70525d55d14c65478b0f8b9c9954e
31e2063dc95f3d6a9995b76d382880f567246803
6f3f1d4003323a7f9135232b8cdca5f2cfde0e6b9b2988255c41a97c7b6fd163
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p7_3.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 40337
last-modified: Tue, 28 Dec 2021 16:22:51 GMT
etag: "9d91-5d4373b9830d2"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ByKlhWV%2B31MwLIwHARh3YuevE4a%2BTL110G1zeb%2B%2BB30yrw7fjkIFSOtTtoktC31DOtT7q2Ki%2BV8l7KVeKAoyUvS6x7NybeD00rcDka0V8BVy2Y%2FuPalhPmVxwE%2BIR0SfZExqzThAwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9bf569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_4.png
200 OK 60 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_4.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 746ac82d1374f51b4ceae516f69ab6ad
e3a378690b02af5732f3569ea71e00e666c46f1b
a44f12838759e2055800c0642603be1085c5120d6f5df276c2e0e87210e0b8ab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p7_4.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 59759
last-modified: Tue, 28 Dec 2021 16:22:56 GMT
etag: "e96f-5d4373bddf486"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dM5nP0g59sSR0asxEAPgy2O%2BSuBn90XqbQ2%2FH4rdFd8SiLR8TV9cS%2FNbTrGj85eCC4Ym7QNiB80CMqHVAvdQ7tHSDQRW1UUYEPoeCTbjKxNxHTUCG7YTcw7HMyjRq4zojDxFQ%2Fo5ZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9c0569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_5.png
200 OK 51 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p7_5.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 9407b587b816571fef24ea488fb29138
f7cc0874ccb7c8199fc2a078b507cb7497369c91
db27f7041801043061be15117bf82104786d53d8c3fcdd3165270efb87110f01
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p7_5.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 50867
last-modified: Tue, 28 Dec 2021 16:22:54 GMT
etag: "c6b3-5d4373bc338a6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efa9%2Bi%2BKg%2FnMPb4oG%2BhFfDAQIJpPeX6tj2mWEeMAFavrbisDa%2BmEAwH6zl9S01BpjlBM6wCUzMIByC41oSCbD6rCAYPViEgi5G9uEkszGMLT3ztOpm1%2FvpuErk0%2BMiM1ldsaqOfi%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9c1569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_1.png
200 OK 58 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_1.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 63f74d7c97a74239d43d4418803b345a
2855449c3a816dfa892b75ce3b6a1415da740fec
a988dba1586aa8826577d9320678d3855d0d9d2e981d1073dd56b91a3859e3fb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p8_1.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 57903
last-modified: Tue, 28 Dec 2021 16:22:46 GMT
etag: "e22f-5d4373b4201eb"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Iza3Dd6eYtiuNdvzHz4rNKO8lrY%2Fr1Gh8kCYXH4kCbY9C7JgpK3zqBW93soZpLiPtZIVmJzV6U9t6YqMUfXba5muot4fQorrLAFqHi%2BJ0tm%2BziSLH3%2Fr8t4XeOlnApu2TPM8o52tQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9c3569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_2.png
200 OK 50 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_2.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 431679c0fdd060aeef69f2b8beec4169
0c7f0ef489e5e752c814420165bbd3941cb3fd70
ecee803291f0a56f17cbefc5c561f32d277226d4a25f331371109bdc0e1e27df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p8_2.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 49466
last-modified: Tue, 28 Dec 2021 16:22:45 GMT
etag: "c13a-5d4373b36d67e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RdFTfyA9%2FJZ1K27C1kY3YXh3JBPFaj2cqaup2QFfVIGaoa9Bzc%2FheMqMp6ZhCZeRzq4wqv1LsxecxUIiTPlidKEf5eEfu5poQtjplZ8qOf%2FVt9CPpOnbyipmJ%2FLEpU4D99L474rL%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9c4569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_3.png
200 OK 51 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_3.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash b44d52f1628ccbe49dea725a18667d74
80aacb07a91269756340ccfed0480ead57c6d54f
0057b6d4f57ea0dabd771f6358f10a231ae805436ee6fc6850a02135e8f13532
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p8_3.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 51413
last-modified: Tue, 28 Dec 2021 16:22:44 GMT
etag: "c8d5-5d4373b2d8f72"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDGHON5%2BHPqGo%2FyNUMy782pw11MIf9IpJztcCl2aj%2BnVOsCVn%2FoYmdzK97056%2FMBFXEKd7quexG5znb5AYr0e%2FKpGBUuI7EBqNPcYtHDzeheW%2BOeOOcbo8KXDomUL5Ysr0jymrsXyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9c6569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_4.png
200 OK 55 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_4.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 4dfe1a0253a15cd22e57b3eaab9116d2
8aa46e3d35632187a70e396c688293f6d7e688f4
62cc8f8b8dedacb8754b1ce93bc479ca3f6ae6246257928a4a0e1e0a281cf4a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p8_4.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 55219
last-modified: Tue, 28 Dec 2021 16:22:43 GMT
etag: "d7b3-5d4373b1dd01f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fjkdm0QHfZaEVfIWApPhWKjxWxqd6ASxDEb4En8cOEsRMQWpN8%2BN1jtVcdnL6Qi7ANUx9GLtXs6Ajyms8AIJGbVQOHGIrGcEv0gBTHlssrB%2BxayBLty9ajKbtN2b2kwXVZMBPfT2Pg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9c8569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_5.png
200 OK 54 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p8_5.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 621fa434f53e05bdff2819eaf6e5c9ed
1aa94b820cd55a353a569e8cb4b5302c784a6ae7
10309b3258647bc6866587d6bca464cc6619b5c54187c27116ff6f74b9edcf61
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p8_5.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 54413
last-modified: Tue, 28 Dec 2021 16:22:43 GMT
etag: "d48d-5d4373b18fdba"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7qViK165NZkbZMXIlymxUdZzNJNQKnqRLutYw3%2FeWm%2FBCKf9mufdDiCLwH1i8tKbhmz8ZzJyUmImPeycjhYdSs1JSZep0La72tp%2BmjF2ol250ncV5LNv8w%2B2t7RtFSngiKsrCoEi6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811de9ca569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_1.png
200 OK 54 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_1.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 37059e26c56db6eca0b25465101d4855
6540eb900095769de1a2e71516a48e54cd8173e1
cfc4151b42a93abddb3885a5d907ad7cf486149ec615e1c107759629c12cd49e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p9_1.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 54337
last-modified: Tue, 28 Dec 2021 16:22:48 GMT
etag: "d441-5d4373b620d31"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8pLXkQqdipDLtM%2BdOH7s1YyzCBpJO4k6h0OeixwkQ3Q2S24BhjQZBtSx7EcnSYj0%2BZUAi9I9s34xwqiGI%2BRvbTwGC%2FAhrgzPcvbugfZOb%2FmwuH3bdF%2B1tmhlJtPTWpxDAfgUFFA8vQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811df9cf569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_2.png
200 OK 54 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_2.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 01769e8254253553da95a9280b5a6527
7e586cd317b68b14984106d1f17089302b97d6ec
8d20fec6e5cd6640741ebcc46609813b2e10e0fdba6757f6b2c0e56d7fea3e43
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p9_2.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 53970
last-modified: Tue, 28 Dec 2021 16:22:50 GMT
etag: "d2d2-5d4373b7f0b34"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BZn%2BCByd97cssoo%2FdZsJX8L6v6RkaEoT78yNpMM%2BsvPRWqCtkvbKnYWyn%2FBK5FAQoY8U7FNf7AaNHYn%2BXP1d%2Bo01ksCLx5eWKlP4NvTkLm97rRcVBQUewp6AUf7yU6WwETL607iDaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811df9d2569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_3.png
200 OK 53 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_3.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 1c3a2dc3681b3e447263e8790608e334
74e77a8638a881d11f88af4b8733cb00dbb9d8bd
6c2bba41d4aea31e90741e2fa84107439011bd56963033734159d8c7f46d895b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p9_3.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 53318
last-modified: Tue, 28 Dec 2021 16:22:48 GMT
etag: "d046-5d4373b6d28ff"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZcIFt%2FKNoALEsCKaUugRTqEHVTrvvC4NL4sTbuRz40%2BnCHeA4uBEfud7e1OtuNcFykwZ%2FqZMYPOtEVo2oKu96T5rVpXpp8VNQH8K8LOpRnuKsJjJxzxJnX7JvkAHhYsvtngDIWPqSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811df9d5569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_4.png
200 OK 60 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_4.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 475389ca94897a28dafcc0f92631094f
d94dcab07cfdec16972a14c61d534a15ca8cb556
956dd0bba9897c9997c3f22604a603594342775cdd1aac6d1aea790f43f96b33
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p9_4.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 59693
last-modified: Tue, 28 Dec 2021 16:22:47 GMT
etag: "e92d-5d4373b536720"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qDCmqePC3HYRq0GXsTXW8HZnkyShB4BKaqhEUhvXkxAKVCI42C%2Bg0dnmpFkrv9o22dENUs4jfzdQuM6CiRNaK6nbzK7WCCuMWaavU6bU8b0UuaGtl4lMUlH2bFGJcEtNENAEe2qmgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811df9d8569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/bg1.jpg
200 OK 64 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/bg1.jpg
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3
Hash a6c153fab3849ec0e3ba73f645433aec
f3747bf682252fef7befdf2870f19e16c6d4f77f
33215a1515c319a23598b30fea546e10dcb8cca455b42e20d8aa5e2eebd73bde
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/bg1.jpg HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:12 GMT
content-type: image/jpeg
content-length: 64359
last-modified: Tue, 28 Dec 2021 16:22:54 GMT
etag: "fb67-5d4373bbc147e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=beJlVw%2BJIZBhmMIayOFnWjEbhOl2wWHzybymWzl5XcUFqbxBARrlFnIzadNXd%2BGT%2BitWoV3gQJAYCQ3yibfh16q1OCVzpCSlpenZlynQhZtj%2FljgJAWK7aA8t2JIyJKCD188lDcXMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811efa6b569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_5.png
200 OK 45 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/p9_5.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced
Hash 8c046ad61659ad83f18fb2d5349f274e
53526b692ba5ea4f318cae71cacdf7c7efb4712a
ac10817ac054c59733bd84b6c232b47e463b8557c479f534f3fbc609fdfd6314
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/p9_5.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: image/png
content-length: 45353
last-modified: Tue, 28 Dec 2021 16:22:47 GMT
etag: "b129-5d4373b57ace5"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kYXaxIaEhDowjiVNAub7fR%2FhfyeE8L6Mt%2BZ%2BR5Ji5kTCOguWI1dg5W%2FttpkiB%2FalZn8tIuF8rjM2MLKBfJdDaQ2Hh2CvapxCgZT46p3G7%2BLLiEi5qs9k5VZI1JxaJxZbj9X8TRBL5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811df9d9569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/bg2.jpg
200 OK 51 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/bg2.jpg
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3
Hash 37832c21ce4b202719cd33b6db45028b
a363710e7567d46202dd73b0761c46993bf68dca
431f71eb5f7842de8711739f0833a4c30e46ba8831dc8b209634ad48544b595d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/bg2.jpg HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:12 GMT
content-type: image/jpeg
content-length: 50733
last-modified: Tue, 28 Dec 2021 16:22:55 GMT
etag: "c62d-5d4373bd47e9b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h3yMnUj%2BU9z7yepm4%2FYOXtembAcC5P90NKb9GgDnrMTmMvYP%2BXOAgUJMIslox5bSz05BbgGmf%2BhMKF2zw6eFgtRvnmDNKR3kj9xziFmvbmR8IvuJiK5hBqBJlOmf7JUbwYYuLVXAeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811efa6c569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/bg3.jpg
200 OK 56 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/bg3.jpg
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3
Hash 4e2d83c4bf79c1e4c84aefc33a382f31
ffab591ef8385e851d2c17feeba2b2a22eeb6d12
e05a0702af3ef4e8d37e6c491e1478e0416cbdfc404fa5da52d135b4b8e04234
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/bg3.jpg HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:12 GMT
content-type: image/jpeg
content-length: 56408
last-modified: Tue, 28 Dec 2021 16:22:55 GMT
etag: "dc58-5d4373bcc6071"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E7oerDAIAJzApKl1WkvexEHzcTY4vmC4sIbYRU%2FDYYzoC2bUpRRGgH%2Ba0FpAYT943i7qwFhXSJGfCjkhy70ZBxiKChA3Ar5yTJYY3S0iXF4yN4V1Jm7ybKaFJwwVIZ4VG%2FARbYGiRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811efa6d569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/blob.png
200 OK 23 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/blob.png
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type PNG image data, 583 x 428, 8-bit/color RGBA, non-interlaced
Hash 5571d30924ae123918e9a192bdab268d
8456f8812e7f2a74b82c849a954c682e92dd8631
31cf63bfb1030bb5d36c6a84a8c5df57081e23481bde6f9fcb1ad78ccfea045b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/blob.png HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:12 GMT
content-type: image/png
content-length: 23169
last-modified: Tue, 28 Dec 2021 16:22:52 GMT
etag: "5a81-5d4373b9f455b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m9KYM8WtbuNVtNtdFsAL6aIECKR4dUEgQMzBPYmMmWiYJYouHQsPMhREpWpYw8JrcPVrWC2Lz58HlvhQuKNrcjh%2BSyoX5eCgqBqg7wIIsNPl5%2BEonHFuPRWZov9CNpDYFWSnw4tacw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804811f4aa7569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
200 OK 7.8 kB URL User Request GET HTTP/2 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1674), with CRLF, LF line terminators
Hash db69a22be501fed53ef1306192d73165
9a5619e332c23a2aaf6fb49ce3b58bc404430f67
405386641d8a47eae9926ef3419c39d5840c03fe05c6fe0dd939b3173b2fe404
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: text/html
cf-ray: 8804811b9a0e0afa-OSL
cf-cache-status: DYNAMIC
last-modified: Tue, 28 Dec 2021 16:22:36 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hyj0aCDqcPCFU4gHzbN7K4Mb%2FfHLmL0P%2FvN%2BchBVNH2dMpqiw44LwcxKUYvrO%2F29n048fRmKIyw79ehtc0iRLxpfowdllR7s1BuZn2xCpwuKupFtGd0VhxJB4zhZ9i07NTcJT%2FK2tA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/style.css
200 OK 15 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/style.css
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type ASCII text, with very long lines (9233), with no line terminators
Hash 26a4c2ca32b70017b7203fde81bed3a9
3c1d00c858ab49a30013c747b9faafbcdf84a063
cd3123418fc2ff36cbfa763593f84385bc0592d22a8eb9a9f5356519f00ef717
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/css/style.css HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=14510
etag: W/"38ae-5d4373ae27c58"
last-modified: Tue, 28 Dec 2021 16:22:39 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JDJzVIB3KFqgq1675SMuIWHJ7VkMatVXCll9TyhpDfz73%2B7dFCH7lKuHVZUZB19%2FHI%2BhAWOaWeUptVKSXTk219MNp3nBwgYNUmslfeRTHAjCPjJNzCy64PEODysANg3vFxr7KBM71Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804811d9992569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtm.js?id=GTM-W62P37M
200 OK 85 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W62P37M
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (40810)
Hash 0fbebf31d534a5f1c2c6ceed199e742b
f9af5b05bb46d3a3a5cefe05bdffa533f6981507
0b564b795efc545f72eab3999cd97f6e68d85f72856d5f2213cab8e907fc2e3e
GET /gtm.js?id=GTM-W62P37M HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 22:04:12 GMT
expires: Tue, 07 May 2024 22:04:12 GMT
cache-control: private, max-age=900
last-modified: Tue, 07 May 2024 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84613
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
2.1 kB IP
Hash d9c12995e34501490ccec5d8d58b5fae
54b9a7e4fb0f3d2f2434093b32b8b6b23db3b7d8
80ab7260393f736f8202b30ebafa526a1384d14cfd3a46ce4d8a62272a23f119
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 07 May 2024 22:04:14 GMT
Content-Type: application/ocsp-response
Content-Length: 2148
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 May 2024 16:30:39 GMT
Expires: Wed, 08 May 2024 16:30:39 GMT
ETag: "54b9a7e4fb0f3d2f2434093b32b8b6b23db3b7d8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cdn.onesignal.com/sdks/OneSignalSDK.js
200 OK 8.4 kB URL GET HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectonesignal.com
Fingerprint28:4D:B2:BB:68:03:29:A7:D8:CB:4B:48:D4:14:BD:A4:4C:0F:D8:70
ValidityMon, 01 Apr 2024 23:12:28 GMT - Sun, 30 Jun 2024 23:12:27 GMT
File type JavaScript source, ASCII text, with very long lines (9163)
Hash a87c48d211877c49b878679b2e3cdab8
e75653dd0156806682e39abe8b1323ed40d840ca
4191d89ec03bce5dc273716075335e31851031184b0fff0ab9fc900a8442019f
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 22:04:12 GMT
content-type: application/javascript
etag: W/"a87c48d211877c49b878679b2e3cdab8"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1346
expires: Fri, 10 May 2024 22:04:12 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=YsQgZYKF5cRM4_Z00kjKUR6EyOmbh9l.j4IosoWfROY-1715119452-1.0.1.1-VfQO8bfmRIOjzF_hPtuJJudnbJFWW1Gk7xdqSnQMNRq026SL1YAKgEiU2u6kZjPYYonTjbM095xjWN9RpysoRw; path=/; expires=Tue, 07-May-24 22:34:12 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 880481220b47b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/css.css
200 OK 8.1 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/css.css
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type ASCII text, with very long lines (8122), with no line terminators
Hash 123176116c749f7de8c66d3d54365989
c885d077360d7029e39eac8c340a4e7cc4e3012c
6d86148ecc48ad67e1a750e5f367009b7f6da2c18596092662b4b4413aad57f5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/css/css.css HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=9762
etag: W/"2622-5d4373ae366b9"
last-modified: Tue, 28 Dec 2021 16:22:39 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8yTV6bPzJn9%2Bv4a9%2BT8toTXhRNJbEUGDjMU1fVQqLYwu5cS4lHns13%2FSAiOEbraa96bVU81ZWQP0KJAa2gZkoBNPUu4GyretXKv5gl2NZTcE8xdlv0q1ApviWiG0gMJZUkk99iT0rw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804811d9994569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/cdn-cgi/zaraz/s.js?z=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
200 OK 4.9 kB URL GET HTTP/3 casual-flirt-hub.com/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyQkVTVCUyMERBVElORyUyMFdPUkxEV0lERSVGMCU5RiU5MiU5OCUyMiUyQyUyMnglMjIlM0EwLjY0MTUyMTUxOTkyNDUyMDYlMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNhc3VhbC1mbGlydC1odWIuY29tJTJGMCUyRm5vJTJGTk9fZnVsbHBhZ2UtdGlrXzI4MTIyMDIxJTJGJTNGbGFuZGVyJTNEYjEwMTY4MTktMTJmMS00NTgxLTkzMjUtYmMyYjY0NTRjNDY1JTI2Y2xpY2tpZCUzRHdiazFsMDE3bGhucDBtNDEzNm9jY2s2cyUyNm9mZmVyJTNENzJkNjA0ZTEtMGJhMC00MDJlLWFiMDItODNkMjc5NWE2MjZhJTI2c3ViYWZmJTNEMzA0MSUyNmdlbyUzRE5PJTI2czklM0QlMjZzOCUzRCUyNmQxJTNEbmlja2luZy11bmRpbmcuY29tJTI2Y2VwJTNEWFdBYURhT1p3WTRqSDBPb0ZqcXJ6RzdlMlI3LUUta1dPT0Z2NW56bFdiaXpCNHhsOHB4UzhhaVJiTTNNcmltT1ktamdkN3ZSWXlpUE1XYU5mWURpWWJiU1Z2QS1PUHEyd01PVUJMeDlVOFluR3dYZ3dVSEg1VHlDcG1EbkFMTzV5TVV3cVo1cWxON3BicTdrRi1QeldnQm50X3c2dGcwNVVFYzI2QnB2RzRFVVhHLU50VFdjaldHd3E1WldRR3BBSGszX3E2OUM0QkZBX0lsNTcwR1YyNGpCUGZ0N3pXbzZUelQ0SnBEN2V5V2hUNjVURTU2NXduVllqZ1dWMW5jODdZMUlGempUNGE2WWNOdm8yclNKM1ljX1prTzZrdHVuYi0zWFBTU0RtaDF1M0MydGZLc09mem13dHlGek5BeTlMZ3BLbl9OSWNJZWV2ODdReHpHdGZXTE8za1VTZ1pyc3pLTVVENGZ0SUM5TkxIQzMtaDdjd1VGV2t6N2FPRUVDZFRKLUFzZDJLSEZETzVfMGFNenpyZGpaeXAtclFHam4wQWVlVmMxenhJdHluRTQtdlAzZUFyVUx6dl8zVlk0NF9yY1VJQ2FQamtTdFNMdExEQ045WlBVNnBYcWpYN3ZpTHhWcGNXaWNEQUxkbGpHMnJ4WGdnaWxLX3FyeVNjaVBPeFdwaElZLXlpN2xNVzRpYTVtb3NfdmJsTlJ1V2RjSUxZWUIwMV85Wk9NJTI2bHB0b2tlbiUzRDE3NmMxNTM3MTIxYjEyZTg1MWM2JTI2czElM0QxMjgyMiUyNnMyJTNEJTI2czMlM0QlMjZzNCUzRCUyNnM1JTNEJTI2czYlM0QlMjZzNyUzRCUyNmtzJTNEMzA0MSUyNmNvc3QlM0QlMjZ0YWclM0R3YmsxbDAxN2xobnAwbTQxMzZvY2NrNnMlMjIlMkMlMjJyJTIyJTNBJTIyJTIyJTJDJTIyayUyMiUzQTI0JTJDJTIybiUyMiUzQSUyMlVURi04JTIyJTJDJTIybyUyMiUzQTAlMkMlMjJxJTIyJTNBJTVCJTVEJTdE
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type JavaScript source, ASCII text, with very long lines (5044), with no line terminators
Hash 2f6e5c5c53b1cdb5b7dfcff2097695fa
10afedc65461c7e8a7b2ba661b961b3ad4dfef24
b22a247e54da1e843abd6600d87df8d9d22ae5db1e3bfe0a8a0c74961b6b546d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyQkVTVCUyMERBVElORyUyMFdPUkxEV0lERSVGMCU5RiU5MiU5OCUyMiUyQyUyMnglMjIlM0EwLjY0MTUyMTUxOTkyNDUyMDYlMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmNhc3VhbC1mbGlydC1odWIuY29tJTJGMCUyRm5vJTJGTk9fZnVsbHBhZ2UtdGlrXzI4MTIyMDIxJTJGJTNGbGFuZGVyJTNEYjEwMTY4MTktMTJmMS00NTgxLTkzMjUtYmMyYjY0NTRjNDY1JTI2Y2xpY2tpZCUzRHdiazFsMDE3bGhucDBtNDEzNm9jY2s2cyUyNm9mZmVyJTNENzJkNjA0ZTEtMGJhMC00MDJlLWFiMDItODNkMjc5NWE2MjZhJTI2c3ViYWZmJTNEMzA0MSUyNmdlbyUzRE5PJTI2czklM0QlMjZzOCUzRCUyNmQxJTNEbmlja2luZy11bmRpbmcuY29tJTI2Y2VwJTNEWFdBYURhT1p3WTRqSDBPb0ZqcXJ6RzdlMlI3LUUta1dPT0Z2NW56bFdiaXpCNHhsOHB4UzhhaVJiTTNNcmltT1ktamdkN3ZSWXlpUE1XYU5mWURpWWJiU1Z2QS1PUHEyd01PVUJMeDlVOFluR3dYZ3dVSEg1VHlDcG1EbkFMTzV5TVV3cVo1cWxON3BicTdrRi1QeldnQm50X3c2dGcwNVVFYzI2QnB2RzRFVVhHLU50VFdjaldHd3E1WldRR3BBSGszX3E2OUM0QkZBX0lsNTcwR1YyNGpCUGZ0N3pXbzZUelQ0SnBEN2V5V2hUNjVURTU2NXduVllqZ1dWMW5jODdZMUlGempUNGE2WWNOdm8yclNKM1ljX1prTzZrdHVuYi0zWFBTU0RtaDF1M0MydGZLc09mem13dHlGek5BeTlMZ3BLbl9OSWNJZWV2ODdReHpHdGZXTE8za1VTZ1pyc3pLTVVENGZ0SUM5TkxIQzMtaDdjd1VGV2t6N2FPRUVDZFRKLUFzZDJLSEZETzVfMGFNenpyZGpaeXAtclFHam4wQWVlVmMxenhJdHluRTQtdlAzZUFyVUx6dl8zVlk0NF9yY1VJQ2FQamtTdFNMdExEQ045WlBVNnBYcWpYN3ZpTHhWcGNXaWNEQUxkbGpHMnJ4WGdnaWxLX3FyeVNjaVBPeFdwaElZLXlpN2xNVzRpYTVtb3NfdmJsTlJ1V2RjSUxZWUIwMV85Wk9NJTI2bHB0b2tlbiUzRDE3NmMxNTM3MTIxYjEyZTg1MWM2JTI2czElM0QxMjgyMiUyNnMyJTNEJTI2czMlM0QlMjZzNCUzRCUyNnM1JTNEJTI2czYlM0QlMjZzNyUzRCUyNmtzJTNEMzA0MSUyNmNvc3QlM0QlMjZ0YWclM0R3YmsxbDAxN2xobnAwbTQxMzZvY2NrNnMlMjIlMkMlMjJyJTIyJTNBJTIyJTIyJTJDJTIyayUyMiUzQTI0JTJDJTIybiUyMiUzQSUyMlVURi04JTIyJTJDJTIybyUyMiUzQTAlMkMlMjJxJTIyJTNBJTVCJTVEJTdE HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://casual-flirt-hub.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:12 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: https://casual-flirt-hub.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Set-Cookie, Cache-Control
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-max-age: 600
x-robots-tag: none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUdPISSt4RLmetNFxzsBb5Fe%2FhVvJ7LbmkmLtDPOayOQaawG4DmEiADx1zxMC24ck1%2BG%2F5qAsU0kpoV1ZF%2BefyhvmMOeJeuSkGb%2BvvbakrrD0%2FYVxVsqz9upU71v4JufOuhyiBpvNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804811f4aa4569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2
404 Not Found 371 B URL GET HTTP/3 casual-flirt-hub.com/0/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type HTML document, ASCII text, with very long lines (386), with no line terminators
Hash ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 07 May 2024 22:04:12 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ogh15xxBKlLSUafLV5X52BJBxC9zvVFsGaHgOY6FpLfXDFgYpVj4I2eTt%2FQMmGrn73TLpxfgQkUqqV4vsbVCKblvZtijvF%2BMMYO6pnUkBkT7kj74qvEQBk%2FsQuQjwdpt2Zt19exJlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804811f4aa9569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/js/jquery-3.5.1.min.js
200 OK 90 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/js/jquery-3.5.1.min.js
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/js/jquery-3.5.1.min.js HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:11 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Tue, 28 Dec 2021 16:23:02 GMT
etag: W/"15d84-5d4373c3684d1"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LajcajXwgxQlI7LetPLd519%2BoOWvGH0DNOnmTA54J1pmhYbu3iNXjXcA0lWIv7D57dxcsljQ%2Fytl55kcQ7vguD7iq4W8n6vAczhgIFXq9KQbIZhPiUJf2shgLAVKsQZU09RmZxifYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804811d9996569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0b.woff2
404 Not Found 371 B URL GET HTTP/3 casual-flirt-hub.com/0/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0b.woff2
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type HTML document, ASCII text, with very long lines (386), with no line terminators
Hash ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0b.woff2 HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 07 May 2024 22:04:12 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ZMlqu3PuZ8hqzdds5jY%2BIsBOAjvnp266JLnfirkeGQgp%2FX65nbJzs1mc6GFlCbhLXcSreX2bPtFsuu05%2BPJ1uzAQW7IyEERCYmBF2JYMp53EPSMYnp63Znk9lQJF83e8iX%2F8mb3ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804811efa6e569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhp.woff2
404 Not Found 371 B URL GET HTTP/3 casual-flirt-hub.com/0/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhp.woff2
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type HTML document, ASCII text, with very long lines (386), with no line terminators
Hash ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhp.woff2 HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 07 May 2024 22:04:12 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Txht60Qvi7ojFtlLdtgwWTMPHV7HSI9pBLor%2BKjI6HOTI0xzIKPZEMTBpmVr7ryQ6g2As41OebIypu2oGCWaJmgTNMhNQM8jN9p51ojFhrHaj844c5SOV52y1lpTbecI7pAhnRF7Ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804811f4aab569d-OSL
alt-svc: h3=":443"; ma=86400
casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/images/favicon.ico
IP
Requested by https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Certificate IssuerGoogle Trust Services LLC
Subjectcasual-flirt-hub.com
Fingerprint2D:20:4D:3A:9C:2A:DD:B2:D0:D3:4F:F3:70:13:57:FC:B3:9A:1D:92
ValiditySun, 05 May 2024 22:55:23 GMT - Sat, 03 Aug 2024 22:55:22 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 38722a803b73dd1871a3d8a19db44d2f
3379960a2c6611bfefcb39e662198d6df322e12d
314dc8584b1a7c7d66a5882b6d153c53ceae37d7137df7b67ddd9735187f2c97
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0/no/NO_fullpage-tik_28122021/images/favicon.ico HTTP/1.1
Host: casual-flirt-hub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual-flirt-hub.com/0/no/NO_fullpage-tik_28122021/?lander=b1016819-12f1-4581-9325-bc2b6454c465&clickid=wbk1l017lhnp0m4136occk6s&offer=72d604e1-0ba0-402e-ab02-83d2795a626a&subaff=3041&geo=NO&s9=&s8=&d1=nicking-unding.com&cep=XWAaDaOZwY4jH0OoFjqrzG7e2R7-E-kWOOFv5nzlWbizB4xl8pxS8aiRbM3MrimOY-jgd7vRYyiPMWaNfYDiYbbSVvA-OPq2wMOUBLx9U8YnGwXgwUHH5TyCpmDnALO5yMUwqZ5qlN7pbq7kF-PzWgBnt_w6tg05UEc26BpvG4EUXG-NtTWcjWGwq5ZWQGpAHk3_q69C4BFA_Il570GV24jBPft7zWo6TzT4JpD7eyWhT65TE565wnVYjgWV1nc87Y1IFzjT4a6YcNvo2rSJ3Yc_ZkO6ktunb-3XPSSDmh1u3C2tfKsOfzmwtyFzNAy9LgpKn_NIcIeev87QxzGtfWLO3kUSgZrszKMUD4ftIC9NLHC3-h7cwUFWkz7aOEECdTJ-Asd2KHFDO5_0aMzzrdjZyp-rQGjn0AeeVc1zxItynE4-vP3eArULzv_3VY44_rcUICaPjkStSLtLDCN9ZPU6pXqjX7viLxVpcWicDALdljG2rxXggilK_qrySciPOxWphIY-yi7lMW4ia5mos_vblNRuWdcILYYB01_9ZOM&lptoken=176c1537121b12e851c6&s1=12822&s2=&s3=&s4=&s5=&s6=&s7=&ks=3041&cost=&tag=wbk1l017lhnp0m4136occk6s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 22:04:12 GMT
content-type: image/x-icon
last-modified: Tue, 28 Dec 2021 16:22:44 GMT
etag: W/"47e-5d4373b23ac27"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ICQOxteplgHeezppwQtbYDqmMWhkvrB0jXNF7lmpJ3MuUyOCgZ9UdKvDuVrL6cLAyqT0G0zuL7pJt%2BdMDSXa9IyEe7DCryQLQDlpsPjMv671LQIYE6KJtEtj5UWVq6%2F%2B2kz6rwd%2Baw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048120fbb8569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
34.96.83.190
35.156.152.207
104.16.160.145
0.0.0.0