Report - lovingyoulive.com/chat/en-ld12bbac2-WH/index.html

Report Overview

Visited public
2023-12-07 02:16:41
Tags
URL
lovingyoulive.com/chat/en-ld12bbac2-WH/index.html
Finishing URL
lovingyoulive.com/chat/en-ld12bbac2-WH/
IP / ASN
104.21.53.43
#13335 CLOUDFLARENET
Title
Sophia wants to connect with you!

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lovingyoulive.com	unknown	2023-03-01	2023-03-01 04:13:00	2023-07-23 02:36:18	5.8 kB	310 kB	104.21.53.43
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-12-06 07:50:48	570 B	18 kB	216.58.207.227
psothoms.com	unknown	2022-10-03	2022-10-03 18:42:51	2023-12-06 15:08:09	1.0 kB	28 kB	139.45.197.251

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-07	medium	psothoms.com	Sinkholed
2023-12-07	medium	psothoms.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	lovingyoulive.com/backunder.js	ScriptElement	1.6 kB	2023-08-04	2024-08-20
Pretty URL lovingyoulive.com/backunder.js IP 104.21.53.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-04 16:34 Last Seen2024-08-20 17:18 Times Seen3 Hash e787316ee8210d8edce908051df40ea1 1699009b59d54bb81d5cccc14acfb429425f219d 7ad4bf616010f93d72ca40cbbf1932ff0ca358dbb14b38fd1afe404294a4a5a1 Loading...

	psothoms.com/pfe/current/micro.tag.min.js?z=5757301&sw=/sw-check-permissions-2591a.js	ScriptElement	27 kB	2023-11-02	2024-08-20
Pretty URL psothoms.com/pfe/current/micro.tag.min.js?z=5757301&sw=/sw-check-permissions-2591a.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-02 09:44 Last Seen2024-08-20 21:23 Times Seen8998 Hash 5ccd2d5882a06f293d07510ac91c92e6 b44dc0eaa03981adb70d3313e728f9359c1d21c1 9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba Loading...

	lovingyoulive.com/chat/en-ld12bbac2-WH/js/jquery.min.js	ScriptElement	108 kB	2023-03-07	2025-05-06
Pretty URL lovingyoulive.com/chat/en-ld12bbac2-WH/js/jquery.min.js IP 104.21.53.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08 Last Seen2025-05-06 12:50 Times Seen392 Hash e86504b92c4745b9315d7f4f9b73fc2a b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d 878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9 Loading...

	lovingyoulive.com/chat/en-ld12bbac2-WH/	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL lovingyoulive.com/chat/en-ld12bbac2-WH/ IP 104.21.53.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 09:35 Times Seen4635125 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	lovingyoulive.com/chat/en-ld12bbac2-WH/	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL lovingyoulive.com/chat/en-ld12bbac2-WH/ IP 104.21.53.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 09:35 Times Seen4635125 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (15)

URL IP Response Size

lovingyoulive.com/chat/en-ld12bbac2-WH/index.html

104.21.53.43

308 Permanent Redirect

0 B

URL User Request GET HTTP/2
lovingyoulive.com/chat/en-ld12bbac2-WH/index.html
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /chat/en-ld12bbac2-WH/index.html HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 308 Permanent Redirect
date: Thu, 07 Dec 2023 02:16:24 GMT
content-length: 0
location: /chat/en-ld12bbac2-WH/
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sJgLRsSlDbfJaxZG%2FcuwRujNDYMh3C89xcN3L4Qo0E5XfVPZG%2FxgxRVhD9NeyxKqyZLygNiiZuD9JdtLx1GJQp3IwYYYCoS9Rp5Eob7RY0eIopIcb0rtAYU7%2F97Er9zbTbVKcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83194432ae41dc4d-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

lovingyoulive.com/chat/en-ld12bbac2-WH/img/avatar1.png

104.21.53.43

200 OK

17 kB

URL GET HTTP/3
lovingyoulive.com/chat/en-ld12bbac2-WH/img/avatar1.png
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=300, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 112x112, components 3\012- data
Size
17 kB (17134 bytes)
Hash
1f59fd81052a6643ec1e53c21d2a0838
4fbd35810c7865352eea87fed0039eb761f9f068
4c5cdbae2ffc249f03fdd47a6b856dd4bf14c1fa54312fd245829f710ec1cf85

HTTP Headers

GET /chat/en-ld12bbac2-WH/img/avatar1.png HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: image/png
content-length: 17134
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "7c0de655c892573580475e9229de4176"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1fELry2diI2yaY%2F1sYyYWLGhRzbYNiolzu0Ab9neGT5RahY%2Bki0LV6BBXWAhcGuxopG6bDDp4ddtb6YtaVbJnHn6Ig9PmYyL9Rya6XM%2BjPtzwW9JD2zMr2f24OiaYBxsbdCVgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 831944375a367692-LHR
alt-svc: h3=":443"; ma=86400

lovingyoulive.com/chat/en-ld12bbac2-WH/img/photo1.png

104.21.53.43

200 OK

31 kB

URL GET HTTP/3
lovingyoulive.com/chat/en-ld12bbac2-WH/img/photo1.png
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
PNG image data, 2160 x 2160, 8-bit colormap, non-interlaced\012- data
Size
31 kB (30856 bytes)
Hash
c0649e25e0e9a97e9932f640018336f3
1a48ac52b00b213f7e49c0bcd92515647cd57561
5eb2c7e9c7e68919cf0330a1a95560905072dc67087fc925d868f83115c5255a

HTTP Headers

GET /chat/en-ld12bbac2-WH/img/photo1.png HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: image/png
content-length: 30856
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "deea1d1c0820002e5637c6b249919a3d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4yB9D0YFre1jaablWEFTENxz0HYFNnojbrkMpRl%2BI1799OpEhrUhDjdenF1qkOibY9Wm043%2FvJ%2FxZYnkYaSrrjcb6xQZ1W5DzT4y9%2FJ7vmdvmrwozYnjlLoSXA7KBAbOPDm2RA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 831944376a3a7692-LHR
alt-svc: h3=":443"; ma=86400

lovingyoulive.com/chat/en-ld12bbac2-WH/img/selfie1.jpg

104.21.53.43

200 OK

42 kB

URL GET HTTP/3
lovingyoulive.com/chat/en-ld12bbac2-WH/img/selfie1.jpg
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x785, components 3\012- data
Size
42 kB (42031 bytes)
Hash
2d8a9aad27ee80901dca4d6ca634df7d
d9e399d97f6d8112be2fb3dc04b949b5dcc8cc4c
99749c8d73f0eb9243718eade255eff7b1c146c1ea061c8603549214fa8db22d

HTTP Headers

GET /chat/en-ld12bbac2-WH/img/selfie1.jpg HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: image/jpeg
content-length: 42031
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "63397ade04eafb4c65a1835953a30ec5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jVv3hO%2BuZSY2Micq21OOlYE08J1PlhlDpdEWbLwmr70EhiCEQl3DN78BZGwq9uYqH97kcHFBQUllg6ExG0liQI0tgh5YTQ2pli0ePQUYxfEtB3XhIS32oND1fv5wecUR5Z79Yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 831944376a3b7692-LHR
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

216.58.207.227

200 OK

17 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Size
17 kB (16740 bytes)
Hash
e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681

HTTP Headers

GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://lovingyoulive.com/
Origin: https://lovingyoulive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:49:23 GMT
expires: Tue, 03 Dec 2024 23:49:23 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
age: 181623
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

lovingyoulive.com/favicon.ico

104.21.53.43

404 Not Found

0 B

URL GET HTTP/3
lovingyoulive.com/favicon.ico
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 02:16:26 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DTvnqft2dYTKEnQc4UnappXPHtcKBAaBkckMcS9FxV7kL3bx4Kc09qGoE93wi%2BI0jv6Vnhoap%2Bk59stOSK8nGGnXe8vwObKXBGfhqneoqsOCM%2FWarrZGEE4xiMQNtIsscqjYBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8319443cecb77692-LHR
alt-svc: h3=":443"; ma=86400

psothoms.com/zone?&pub=0&zone_id=5757301&is_mobile=false&domain=lovingyoulive.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest

139.45.197.251

200 OK

0 B

URL POST HTTP/2
psothoms.com/zone?&pub=0&zone_id=5757301&is_mobile=false&domain=lovingyoulive.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerLet's Encrypt
Subjectpsothoms.com
FingerprintE5:BE:13:9F:C8:F8:27:45:2D:96:0B:9C:A1:44:4C:27:9C:AF:7E:E7
ValidityTue, 07 Nov 2023 05:18:35 GMT - Mon, 05 Feb 2024 05:18:34 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=5757301&is_mobile=false&domain=lovingyoulive.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: psothoms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/
Origin: https://lovingyoulive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 02:16:27 GMT
content-length: 0
x-trace-id: 0eb560a37a3c6c706304390762d48f87
access-control-allow-origin: https://lovingyoulive.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

lovingyoulive.com/chat/en-ld12bbac2-WH/

104.21.53.43

200 OK

6.2 kB

URL User Request GET HTTP/2
lovingyoulive.com/chat/en-ld12bbac2-WH/
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6579), with no line terminators
Size
6.2 kB (6191 bytes)
Hash
a34d085d5e95cb8362def6ac791a2f7c
f8118b00b5a4e943199f99f653697d48def1bf76
2d877947d4ed7a8f39298ce5232c2f2b623cff443a3ef871eb942cc508ce72b5

HTTP Headers

GET /chat/en-ld12bbac2-WH/ HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 07 Dec 2023 02:16:24 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U%2Fn9%2B%2BOuYHOULU8RILxpxPG6T%2BlvlxoqNUwgsEH5H1ftF8bkgpHCUjjD4H1DIaSGMVBiZ6R8ZbRxkd3Hfc13IP%2Bs81GkYTwP8NjyvXFJfVmumze1dVLGCGWGkqB9v7ph%2Fdxs3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 831944337eccdc4d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

lovingyoulive.com/chat/en-ld12bbac2-WH/css/bootstrap.css

104.21.53.43

200 OK

82 kB

URL GET HTTP/3
lovingyoulive.com/chat/en-ld12bbac2-WH/css/bootstrap.css
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
ASCII text
Size
82 kB (82184 bytes)
Hash
a277f9008b841a226c4b38b605133afe
3a352b4835843e65c289a9c945ad4b8668b19c41
e0514f80f6e42580ec0b64053db883a3c5bd3cea1f39bedcdad2a68e99a114ba

HTTP Headers

GET /chat/en-ld12bbac2-WH/css/bootstrap.css HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"5cfe5819acdb166c34c2916ccae71f75"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4zNFLA9AVbYK4qSOKXt%2FBR%2FmxGfP12ZxI%2FvdT6i83af%2BTQSNI6LIBpgBPxB9J0WI%2Fj0yuBUgj3ODA%2Fjfof6K7Egop0AYR36QjwO389Vz0VNGMlWrEiwV4lPRhBWb2mL8oXR6Rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 831944375a307692-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400

psothoms.com/pfe/current/micro.tag.min.js?z=5757301&sw=/sw-check-permissions-2591a.js

139.45.197.251

200 OK

27 kB

URL GET HTTP/2
psothoms.com/pfe/current/micro.tag.min.js?z=5757301&sw=/sw-check-permissions-2591a.js
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerLet's Encrypt
Subjectpsothoms.com
FingerprintE5:BE:13:9F:C8:F8:27:45:2D:96:0B:9C:A1:44:4C:27:9C:AF:7E:E7
ValidityTue, 07 Nov 2023 05:18:35 GMT - Mon, 05 Feb 2024 05:18:34 GMT

File type
ASCII text, with very long lines (27007), with no line terminators
Size
27 kB (27007 bytes)
Hash
5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5757301&sw=/sw-check-permissions-2591a.js HTTP/1.1
Host: psothoms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 02:16:27 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

lovingyoulive.com/backunder.js

104.21.53.43

200 OK

1.6 kB

URL GET HTTP/3
lovingyoulive.com/backunder.js
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
ASCII text, with very long lines (1614), with no line terminators
Size
1.6 kB (1612 bytes)
Hash
b0a9b135f46a81fd4671ecbde7513060
6148986ef0de5d40c36bde3cab424b3b60857437
22820df3ef4ddb0813815f76a6f078673f23d998dac1c1fb5b651ae920ac8bdf

HTTP Headers

GET /backunder.js HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"678e98f5302f3af09a5b49415a670ae3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZqGjrO37%2F6Ba5tgFJEhDYlvOHEpF4W84dOqioRy23JYXM32b3pYJQ4sdq6azMNtmAgPWNqiXwqHKPq7hu9dz%2Fj%2BAZFHQMw9b2GExDvwu%2FLl6EwTR7RgKn2x2eztjz7SL2asEfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 16
server: cloudflare
cf-ray: 831944376a3d7692-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400

lovingyoulive.com/chat/en-ld12bbac2-WH/css/fonts1.css

104.21.53.43

200 OK

3.0 kB

URL GET HTTP/3
lovingyoulive.com/chat/en-ld12bbac2-WH/css/fonts1.css
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
ASCII text, with very long lines (3041), with no line terminators
Size
3.0 kB (2962 bytes)
Hash
4b1b1039ecbac38baa955c0328959009
eea5368f2d28a4b407d1cc4da1170720f1de69e9
ea562fed0c7d746aa290190b0021aadd8bd272562a049b4362f3289f4a23704a

HTTP Headers

GET /chat/en-ld12bbac2-WH/css/fonts1.css HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"9945aa39053a0af95a273b3b22fba785"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9WCODItIEZJUAzipmUiVbXtYPAgX41HvYkeKisB%2B1hhWFAl4f4tk%2FQm2wg5iCGjlb1vLVWC1stNlL7T9Fk%2FQ3J%2BqHQojcbS%2B6370hQQ5qeT5HsLTJuIXz7hq7tDmLNuzfmmjUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 831944375a327692-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400

lovingyoulive.com/chat/en-ld12bbac2-WH/js/jquery.min.js

104.21.53.43

200 OK

108 kB

URL GET HTTP/3
lovingyoulive.com/chat/en-ld12bbac2-WH/js/jquery.min.js
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
ASCII text, with very long lines (65447)
Size
108 kB (107748 bytes)
Hash
e86504b92c4745b9315d7f4f9b73fc2a
b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d
878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9

HTTP Headers

GET /chat/en-ld12bbac2-WH/js/jquery.min.js HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"a68404e14939a854569cb5ef044a7fe2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OIncHUZCpy2JDfKDd1rftz%2BLNf6q6hMN5ayIPxC5Y8FrP9FFr7P5T5A13oqD1pHZ5JAiG3JWivCW4mFLgR5G%2BN59paeRgtBpbRcD3OM7SEil%2Fh0uy6VybeWz%2Br3AlGVTDcyslQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 831944375a337692-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400

lovingyoulive.com/sw-check-permissions-2591a.js

104.21.53.43

200 OK

566 B

URL GET HTTP/3
lovingyoulive.com/sw-check-permissions-2591a.js
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
ASCII text, with very long lines (605), with no line terminators
Size
566 B (566 bytes)
Hash
73094559a7f7067d9ba22bf978b9b7e3
e95d153bad5c58f093dedcdfb1224c02dbd49d49
89cc728d1add82d28e669a328dfc8cd2b2027a5afb4be2684a59a09097bcf3cc

HTTP Headers

GET /sw-check-permissions-2591a.js HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:27 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"2c02569fdf93d6e43e8942b588304ee0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=StbQPf1Tch2lyh6HFxzc3LI24ie6slZ2Syd9jm1po8xIykplrdhvMyT4HmZctBZqdVX9kuHLwZgI0hnbj%2F8S7h7lCDJZnmd7%2Bsf8rSGMMRrW6NWxmMrtNsL7nwJ%2FYCPiKGXejg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5992
server: cloudflare
cf-ray: 831944426f247692-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400

lovingyoulive.com/chat/en-ld12bbac2-WH/css/froala_style.min.css

104.21.53.43

200 OK

9.0 kB

URL GET HTTP/3
lovingyoulive.com/chat/en-ld12bbac2-WH/css/froala_style.min.css
IP
104.21.53.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lovingyoulive.com/chat/en-ld12bbac2-WH/
Certificate
IssuerGoogle Trust Services LLC
Subjectlovingyoulive.com
FingerprintC7:75:E0:C7:DF:48:81:C2:82:52:A9:C8:97:A6:00:65:E6:99:A7:99
ValidityMon, 23 Oct 2023 08:09:44 GMT - Sun, 21 Jan 2024 08:09:43 GMT

File type
ASCII text, with very long lines (9473), with no line terminators
Size
9.0 kB (8968 bytes)
Hash
24c75fd0c0ed317f745b195988094e1a
5f2a0b2fc440ac711b640c47a8cbff2ec065cb65
3530a117dd2aa80a7772051fb0326961b1fe1a59f741e9c6e590e8f2d21a16e6

HTTP Headers

GET /chat/en-ld12bbac2-WH/css/froala_style.min.css HTTP/1.1
Host: lovingyoulive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovingyoulive.com/chat/en-ld12bbac2-WH/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 07 Dec 2023 02:16:25 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"98c045e7eca0a7d6982d4e720bbdf03b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x7xk7JaS8v1C4jVCbN00KizK3uX2MVYLBuNqrZSK5CRPjQpWpBUCdOra0Iqctxj5%2BN776Re1WbI%2FcEOdFjDtIWW6GdpDjo8tnWtey1obf2QPp6V5jXnPlCFNMBwmStXzsXHJDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 831944375a357692-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate