Report - hotpleasure.live/go/ee3be369-fb24-4ac6-98f5-c97ee7f488f7

Report Overview

Visited public
2023-10-28 06:55:40
Tags
Submit Tags
URL
hotpleasure.live/go/ee3be369-fb24-4ac6-98f5-c97ee7f488f7
Finishing URL
casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
IP / ASN
3.70.16.242
#16509 AMAZON-02
Title
Secret connections in your area

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
casualdategirls.life	unknown	2023-10-01	2023-10-01 12:03:17	2023-10-24 13:49:33	6.9 kB	320 kB	185.155.186.16
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-10-27 19:02:29	469 B	17 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-10-27 18:55:07	1.6 kB	50 kB	216.58.207.227
d374x37sd0waxl.cloudfront.net	unknown	2008-04-25	2021-08-28 07:21:05	2023-10-27 15:23:34	634 B	4.0 kB	143.204.55.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-28 06:55:25	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:25	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-10-28 06:55:26	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed
2023-10-28	medium	casualdategirls.life	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w	ScriptElement	665 B	2024-08-20	2024-08-20
Pretty URL casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 22:05 Last Seen2024-08-20 22:05 Times Seen1 Hash 97a6c1ee42cc07b42ab4aa98763567fe d7c175db7cebd9b19d3a3ce73ae5f21a05cddcf4 819b747f8dab7e4e0637ec159b64ab74ff3004f1a2cf6833df587e34d9e89e73 Loading...

	casualdategirls.life/util/utils.js	ScriptElement	7.5 kB	2023-03-07	2024-08-21
Pretty URL casualdategirls.life/util/utils.js IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2024-08-21 09:44 Times Seen8808 Hash 01816d15ca03032751161a746e2fb7c3 dcc72ea5fa1356490ba473288159df9786b4a3c3 8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea Loading...

	casualdategirls.life/media/casual/simpledate/js/checkbox.js	ScriptElement	10 kB	2023-03-07	2024-08-21
Pretty URL casualdategirls.life/media/casual/simpledate/js/checkbox.js IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10 Last Seen2024-08-21 09:44 Times Seen1344 Hash d68f180c6761c52a9d03193f605d585d 1723d4b0d072db593cfb4e65da2835b1bae3b5bc e74c2efed952ea609303f5d21cf259f4d57e2552bef4b727c3efd628bcbfce4a Loading...

	casualdategirls.life/media/casual/simpledate/js/trls.js	ScriptElement	55 kB	2023-03-07	2024-08-21
Pretty URL casualdategirls.life/media/casual/simpledate/js/trls.js IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10 Last Seen2024-08-21 09:44 Times Seen1343 Hash 289403a53f42e281dbcacab6490e20c2 155f80ca26668719e05272cb508bd4b6155aef93 f4d1cc43d3a9832abfded59dcf2b67d20e2c1221837ef30596fb7ae568f06737 Loading...

	casualdategirls.life/cookie/js.cookie11.js	ScriptElement	4.2 kB	2023-03-07	2025-03-14
Pretty URL casualdategirls.life/cookie/js.cookie11.js IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10 Last Seen2025-03-14 06:41 Times Seen3459 Hash d69ea699f15818eb39d4f4898f75a7e3 0209181a1da02eaf3857d30efd7092ea85f4c7eb 1d6379dcee88d76c4895ef26cc84e178b995e0a8e1effc943691fe9c59ccdb60 Loading...

	casualdategirls.life/media/casual/simpledate/js/jquery-2.2.4.min.js	ScriptElement	86 kB	2023-03-07	2025-07-16
Pretty URL casualdategirls.life/media/casual/simpledate/js/jquery-2.2.4.min.js IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-07-16 07:32 Times Seen188841 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	casualdategirls.life/media/casual/simpledate/js/main.js	ScriptElement	3.8 kB	2023-03-07	2024-08-21
Pretty URL casualdategirls.life/media/casual/simpledate/js/main.js IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10 Last Seen2024-08-21 09:44 Times Seen1344 Hash e01397a9f5927f9155b63d0565bd3947 09e16014fde2ac5f86ec1dbef021e46ef5173b35 8946190d95953fde0418c360ce81078777090a28137d4b31b55e4615a5c8149a Loading...

	casualdategirls.life/media/bbc.js	ScriptElement	1.1 kB	2023-03-07	2025-03-14
Pretty URL casualdategirls.life/media/bbc.js IP 185.155.186.16 ASN #203639 Tekka Digital SA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10 Last Seen2025-03-14 06:41 Times Seen3554 Hash 57e25a20c9962ce9c7077e46c69a265f cba5f15234d9059feacd95fe60fcd7165b45295b 329ed89ce6841f591a258c691e89ca2a55d0c8f481a7ba7c167df8f8198f2791 Loading...

HTTP Transactions (18)

URL IP Response Size

d374x37sd0waxl.cloudfront.net/tiktoks2.2/index.html?bemobdata=c%3Dee3be369-fb24-4ac6-98f5-c97ee7f488f7..l%3D54befe9f-81df-402f-9ba0-937268f8625a..a%3D0..b%3D0..ts%3D1698476123389

143.204.55.68

3.6 kB

URL
d374x37sd0waxl.cloudfront.net/tiktoks2.2/index.html?bemobdata=c%3Dee3be369-fb24-4ac6-98f5-c97ee7f488f7..l%3D54befe9f-81df-402f-9ba0-937268f8625a..a%3D0..b%3D0..ts%3D1698476123389
IP
143.204.55.68:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1673)
Size
3.6 kB (3569 bytes)
Hash
cb98791e985b8bf87ca16b13cdeb5a3c
aecda7a84338292e6caec67fdd4f48a5bf347f66
c88947f60c05f296ab0eae4dd4a916a12024d960a2f7caae933a32c1d3cafe4e

HTTP Headers

GET /tiktoks2.2/index.html?bemobdata=c%3Dee3be369-fb24-4ac6-98f5-c97ee7f488f7..l%3D54befe9f-81df-402f-9ba0-937268f8625a..a%3D0..b%3D0..ts%3D1698476123389 HTTP/1.1
Host: d374x37sd0waxl.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
content-length: 3569
date: Sat, 28 Oct 2023 06:55:25 GMT
last-modified: Thu, 09 Feb 2023 06:59:25 GMT
etag: "cb98791e985b8bf87ca16b13cdeb5a3c"
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Go1odYPSx3i8mlqwcnzOEEM0EOOLVeiXQyNHRK0eGytvDAOD08dnUQ==
X-Firefox-Spdy: h2

GET casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w

185.155.186.16

200 OK

7.5 kB

URL User Request GET HTTP/1.1
casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (531), with CRLF line terminators
Size
7.5 kB (7458 bytes)
Hash
0d27185a1bf64740e8012177bf96c7e1
a69db9f6d4a708733b5641aa9f1c934faaf9f65e
28d133a21a49de4198bdf05ec422ff7f6b3e287df3492f7b441d6ea9186f9285

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: text/html
Content-Length: 7458
Connection: keep-alive
set-cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d; path=/
cache-control: private, no-transform

GET casualdategirls.life/media/casual/simpledate/css/style.css

185.155.186.16

200 OK

27 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/css/style.css
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text, with CRLF line terminators
Size
27 kB (27224 bytes)
Hash
6b81fb730efd5377e214989160193adf
711e8e382a92ebb9a7d38e3e9f4f871264d5a323
dbbb1b3eb49171b6818f6b913bf94358f77d513c215d994551d117f51e966d47

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/css/style.css HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: text/css
Content-Length: 27224
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "6b81fb730efd5377e214989160193adf"
Last-Modified: Mon, 20 Feb 2023 09:30:41 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179231D2D78874EE
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#355933577/gid:0/gname:root/mode:33188/mtime:1655386437#668347000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:33:57.668347Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/media/casual/simpledate/js/checkbox.js

185.155.186.16

200 OK

10 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/js/checkbox.js
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text, with very long lines (1584)
Size
10 kB (10351 bytes)
Hash
d68f180c6761c52a9d03193f605d585d
1723d4b0d072db593cfb4e65da2835b1bae3b5bc
e74c2efed952ea609303f5d21cf259f4d57e2552bef4b727c3efd628bcbfce4a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/js/checkbox.js HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: application/javascript
Content-Length: 10351
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "d68f180c6761c52a9d03193f605d585d"
Last-Modified: Mon, 20 Feb 2023 09:30:41 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179231D2F55BB6C1
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#355933577/gid:0/gname:root/mode:33188/mtime:1655386438#212348000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:33:58.212348Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/media/casual/simpledate/css/checkbox.css

185.155.186.16

200 OK

3.0 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/css/checkbox.css
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text, with CRLF line terminators
Size
3.0 kB (2977 bytes)
Hash
6e6ee3dd09a10898a3aa3a5871a4b141
5a5b631e57ca5456b8f40e8d7c15ed8289d600da
da4393f1890178a49ffd272bcebd3381e5afb2f12e54eba761cd440599604a7f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/css/checkbox.css HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: text/css
Content-Length: 2977
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "6e6ee3dd09a10898a3aa3a5871a4b141"
Last-Modified: Mon, 03 Apr 2023 12:28:32 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 179231D2E8256702
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679349480#695639671/gid:0/gname:root/mode:33188/mtime:1655386437#288347000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:33:57.288347Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/cookie/js.cookie11.js

185.155.186.16

200 OK

4.2 kB

URL GET HTTP/1.1
casualdategirls.life/cookie/js.cookie11.js
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text, with very long lines (1709), with CRLF line terminators
Size
4.2 kB (4157 bytes)
Hash
d69ea699f15818eb39d4f4898f75a7e3
0209181a1da02eaf3857d30efd7092ea85f4c7eb
1d6379dcee88d76c4895ef26cc84e178b995e0a8e1effc943691fe9c59ccdb60

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cookie/js.cookie11.js HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: application/javascript
Content-Length: 4157
Connection: keep-alive
ETag: "d69ea699f15818eb39d4f4898f75a7e3"
Last-Modified: Wed, 20 Sep 2023 15:19:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179232C071795130
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#248036972/gid:0/gname:root/mode:33188/mtime:1659030829#652674000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:53:49.652674Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/util/utils.js

185.155.186.16

200 OK

7.5 kB

URL GET HTTP/1.1
casualdategirls.life/util/utils.js
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text, with very long lines (641), with CRLF line terminators
Size
7.5 kB (7512 bytes)
Hash
01816d15ca03032751161a746e2fb7c3
dcc72ea5fa1356490ba473288159df9786b4a3c3
8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /util/utils.js HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: application/javascript
Content-Length: 7512
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Mon, 03 Apr 2023 12:33:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 179232C08C4A8BC8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679391338#434566559/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/media/casual/simpledate/js/main.js

185.155.186.16

200 OK

3.8 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/js/main.js
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text
Size
3.8 kB (3777 bytes)
Hash
e01397a9f5927f9155b63d0565bd3947
09e16014fde2ac5f86ec1dbef021e46ef5173b35
8946190d95953fde0418c360ce81078777090a28137d4b31b55e4615a5c8149a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/js/main.js HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: application/javascript
Content-Length: 3777
Connection: keep-alive
ETag: "e01397a9f5927f9155b63d0565bd3947"
Last-Modified: Wed, 20 Sep 2023 15:21:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179231D2F34B718E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134504#752010383/gid:0/gname:root/mode:33188/mtime:1655386438#400349000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:33:58.400349Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/media/casual/simpledate/js/trls.js

185.155.186.16

200 OK

55 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/js/trls.js
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
Unicode text, UTF-8 text, with very long lines (329)
Size
55 kB (54899 bytes)
Hash
289403a53f42e281dbcacab6490e20c2
155f80ca26668719e05272cb508bd4b6155aef93
f4d1cc43d3a9832abfded59dcf2b67d20e2c1221837ef30596fb7ae568f06737

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/js/trls.js HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: application/javascript
Content-Length: 54899
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "289403a53f42e281dbcacab6490e20c2"
Last-Modified: Mon, 20 Feb 2023 09:30:41 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1792329C49E79B03
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676801060#776195577/gid:0/gname:root/mode:33188/mtime:1659085981#436960000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:13:01.43696Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/media/bbc.js

185.155.186.16

200 OK

1.1 kB

URL GET HTTP/1.1
casualdategirls.life/media/bbc.js
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text, with CRLF line terminators
Size
1.1 kB (1132 bytes)
Hash
57e25a20c9962ce9c7077e46c69a265f
cba5f15234d9059feacd95fe60fcd7165b45295b
329ed89ce6841f591a258c691e89ca2a55d0c8f481a7ba7c167df8f8198f2791

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/bbc.js HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: application/javascript
Content-Length: 1132
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "57e25a20c9962ce9c7077e46c69a265f"
Last-Modified: Mon, 03 Apr 2023 12:27:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 1792321B4BBBD085
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679338323#885197229/gid:0/gname:root/mode:33188/mtime:1659030913#968764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.968764Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/media/casual/simpledate/images/snap.png

185.155.186.16

200 OK

19 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/images/snap.png
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
PNG image data, 306 x 277, 8-bit/color RGBA, non-interlaced\012- data
Size
19 kB (18861 bytes)
Hash
69d9997aba86a1a9e6137cbe4f27a050
5f925a40ece3f0ea1530feb89bacee346b284e7b
a9114bbb996705bd01e19dc5b0e1b3fb49b41f1810e4a8e0976492821f1acbe4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/images/snap.png HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: image/png
Content-Length: 18861
Connection: keep-alive
ETag: "69d9997aba86a1a9e6137cbe4f27a050"
Last-Modified: Wed, 20 Sep 2023 15:21:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179231D2E9CB90CD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134504#752010383/gid:0/gname:root/mode:33188/mtime:1655386438#152348000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:33:58.152348Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET fonts.googleapis.com/css?family=Monoton|Raleway:400,700|Roboto:300,400,700

142.250.74.106

200 OK

17 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Monoton|Raleway:400,700|Roboto:300,400,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint87:BD:C2:71:54:40:3F:F2:18:79:1A:89:F5:E9:BC:63:E5:EC:57:64
ValidityMon, 09 Oct 2023 08:10:33 GMT - Mon, 01 Jan 2024 08:10:32 GMT

File type
gzip compressed data, max compression\012- data
Size
17 kB (16578 bytes)
Hash
9ee789ba0c502ee2dd72fc5ee0cf42ac
42b0cdd1af8cf64e08eade57ba73b1e95fff7fbc
da9d6beb9c280a99a937a9b074d9f4e3c0fef7859bb67d711e5791b8127d4283

HTTP Headers

GET /css?family=Monoton|Raleway:400,700|Roboto:300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 28 Oct 2023 06:55:25 GMT
date: Sat, 28 Oct 2023 06:55:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET casualdategirls.life/media/casual/simpledate/js/jquery-2.2.4.min.js

185.155.186.16

200 OK

86 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/js/jquery-2.2.4.min.js
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
ASCII text, with very long lines (32065)
Size
86 kB (85578 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/js/jquery-2.2.4.min.js HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: application/javascript
Content-Length: 85578
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2f6b11a7e914718e0290410e85366fe9"
Last-Modified: Mon, 03 Apr 2023 12:28:32 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Request-Id: 179231D2F32F8884
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1679349480#695639671/gid:0/gname:root/mode:33188/mtime:1655386438#340349000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:33:58.340349Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://casualdategirls.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Oct 2023 10:05:24 GMT
expires: Sat, 26 Oct 2024 10:05:24 GMT
cache-control: public, max-age=31536000
age: 75001
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Size
16 kB (15740 bytes)
Hash
b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://casualdategirls.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Oct 2023 11:13:54 GMT
expires: Sun, 20 Oct 2024 11:13:54 GMT
cache-control: public, max-age=31536000
age: 589291
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET casualdategirls.life/media/casual/simpledate/images/03.gif

185.155.186.16

200 OK

87 kB

URL GET HTTP/1.1
casualdategirls.life/media/casual/simpledate/images/03.gif
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type
GIF image data, version 89a, 400 x 400\012- data
Size
87 kB (86924 bytes)
Hash
25d57241160e3258e3c112c2e06dd072
82cbf8f448ddf499923f86e0a0cd47de125ee707
f1c8a1b72f934027f54b12f42a3e3833736f915cd2d96b1cd783f7e4a1ef1d7c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /media/casual/simpledate/images/03.gif HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Content-Type: image/gif
Content-Length: 86924
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "25d57241160e3258e3c112c2e06dd072"
Last-Modified: Mon, 20 Feb 2023 09:30:41 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179231D2EAEF303B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#355933577/gid:0/gname:root/mode:33188/mtime:1655386437#800348000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:33:57.800348Z
Expires: Sun, 27 Oct 2024 06:55:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes

GET casualdategirls.life/favicon.ico

185.155.186.16

204 No Content

0 B

URL GET HTTP/1.1
casualdategirls.life/favicon.ico
IP
185.155.186.16:443
ASN
#203639 Tekka Digital SA

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerLet's Encrypt
Subjectcasualdategirls.life
FingerprintA8:74:2B:C7:82:10:DC:64:E7:9F:6C:C9:C7:83:6A:3F:12:89:68:8A
ValidityWed, 11 Oct 2023 05:01:58 GMT - Tue, 09 Jan 2024 05:01:57 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: casualdategirls.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Cookie: sid=t9~fcxmrb4fhmsqiwx0j1w3ig3d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 28 Oct 2023 06:55:25 GMT
Connection: keep-alive
Cache-Control: no-transform

GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://casualdategirls.life/?u=7krkaeq&o=ezgpfhg&cid=XesHz5UJ2DQWttm7XMQF3w
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://casualdategirls.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Oct 2023 02:00:44 GMT
expires: Sat, 26 Oct 2024 02:00:44 GMT
cache-control: public, max-age=31536000
age: 104081
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN