{"report_id":"f8b07695-0bc8-479a-832d-e2b33c875cfe","version":6,"status":"done","tags":[],"date":"2024-11-28T12:18:20Z","url":{"schema":"http","addr":"nudeleaksteen.com","fqdn":"nudeleaksteen.com","domain":"nudeleaksteen.com","tld":"com"},"ip":{"addr":"162.55.172.212","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"tsyndicate.com/api/v1/direct/2e8976ee662a4438b239517c6a766478?subid=nudeleaksteen.com","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"title":"tsyndicate.com/api/v1/direct/2e8976ee662a4438b239517c6a766478?subid=nudeleaksteen.com"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-02-06T12:18:20Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nudeleaksteen.com","ip":{"addr":"159.69.83.207","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":10948,"sent_data":1221,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tsyndicate.com","ip":{"addr":"144.76.168.81","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":13042,"first_seen":"2017-03-16T10:04:54Z","last_seen":"2024-11-27T22:43:25.21556Z","alert_count":0,"request_count":2,"received_data":1133,"sent_data":1081,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"Mnemonic Secure DNS","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"nudeleaksteen.com/banner_ads.js","fqdn":"nudeleaksteen.com","domain":"nudeleaksteen.com","tld":"com"},"ip":{"addr":"159.69.83.207","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-11-28T12:17:56.877811744Z","timestamp":1732796276877,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /banner_ads.js HTTP/1.1\r\nHost: nudeleaksteen.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nudeleaksteen.com/\r\nCookie: ndsp=eyJkb21haW5OYW1lIjoibnVkZWxlYWtzdGVlbi5jb20iLCJtZW1iZXIiOiIxNTciLCJ0ZW1wbGF0ZSI6InRyYWZmaWNzdGFycyIsInVzZXJBZ2VudCI6Ik1vemlsbGFcLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvXC8yMDEwMDEwMSBGaXJlZm94XC85Ni4wIiwic2Vzc2lvbiI6IjFkMGVhZDU4ODI4NDFjNDk1MmY5YWM4ZGE5NTY4YjFmIiwidGltZV9pbml0IjoxNzMyNzk0Mjg1fQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 28 Nov 2024 11:44:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 111\r\nlast-modified: Thu, 26 Sep 2019 08:13:05 GMT\r\netag: \"5d8c7311-6f\"\r\nexpires: Sat, 28 Dec 2024 11:44:45 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111,"size_decoded":111,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b55398d3f22571b3e9dcaba2eb37cf70","sha1":"9ab8cd7e33d19a6a5f7a58b15aa6a598202ae054","sha256":"4aa355b64f75bc8293836eb2ca7ff4a0d7230f361c2e9b1b2d7394ac7c540f90","sha512":"795d998c5aeefc4e207eeda4eca35704d4f8c7335856c2afd63fbf9a44b469dd76dd5d06ef3d4db22c74bba6a733dc61f8cc689c246e6adb603ac0081de320ee","ssdeep":"","tlshash":"41b012181d722624422c054f3170cfa5f9b5212c6d733040cc9ccc1cf628dc1025a892","first_seen":"2023-03-08T20:20:47Z","last_seen":"2026-04-04T23:47:09.669535Z","times_seen":403,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/api/v1/direct/2e8976ee662a4438b239517c6a766478?subid=nudeleaksteen.com","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"144.76.168.81","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-11-28T12:17:56.898Z","timestamp":1732796276898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Oct 2024 09:13:35 GMT","end":"Sun, 12 Jan 2025 09:13:34 GMT"},"fingerprint":{"sha1":"E0:43:D1:58:CD:C6:3F:BF:29:2C:7E:33:A7:B5:0C:1D:5C:BC:BB:3D","sha256":"75:3B:E4:CE:C6:D2:B4:D7:C6:67:11:51:FF:17:59:8A:D1:4B:66:04:2F:18:06:D5:38:8E:A8:D1:80:59:4F:BB"}}},"request":{"raw":"GET /api/v1/direct/2e8976ee662a4438b239517c6a766478?subid=nudeleaksteen.com HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nudeleaksteen.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 Nov 2024 12:17:57 GMT\r\ncontent-length: 0\r\npragma: no-cache\r\nexpires: 0\r\nvary: *\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":86,"dns":1,"connect":32,"send":0,"wait":34,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/favicon.ico","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"144.76.168.81","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tsyndicate.com/api/v1/direct/2e8976ee662a4438b239517c6a766478?subid=nudeleaksteen.com","date":"2024-11-28T12:17:57.097Z","timestamp":1732796277097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Oct 2024 09:13:35 GMT","end":"Sun, 12 Jan 2025 09:13:34 GMT"},"fingerprint":{"sha1":"E0:43:D1:58:CD:C6:3F:BF:29:2C:7E:33:A7:B5:0C:1D:5C:BC:BB:3D","sha256":"75:3B:E4:CE:C6:D2:B4:D7:C6:67:11:51:FF:17:59:8A:D1:4B:66:04:2F:18:06:D5:38:8E:A8:D1:80:59:4F:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tsyndicate.com/api/v1/direct/2e8976ee662a4438b239517c6a766478?subid=nudeleaksteen.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 28 Nov 2024 12:17:57 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":610,"size_decoded":610,"mime_type":"text/html","magic":"gzip compressed data, from Unix","md5":"ebe8c22eda312a49b3f422c356785779","sha1":"0c686b8a30d9ef9f2bf5ea93de62973b3ef74305","sha256":"5948c83a08674a55eafce54b82ea43e0444264c0a207eed28ab0cc141994329c","sha512":"685d5de77590c17e2294daed79c1a2c04ac1d8a8b411c14d4911a5b87bc0e029503ca5596ac6390df5310bd3a33fd49b4ad708ef83d3ebce30efff81f84bbda8","ssdeep":"","tlshash":"17f0476b7538bc44591dd4795b26f1733751b5e03450e1e6c4b4d7e14c56fa83204e2c","first_seen":"2024-11-28T12:18:23.696747Z","last_seen":"2024-11-28T12:18:23.696747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"nudeleaksteen.com/","fqdn":"nudeleaksteen.com","domain":"nudeleaksteen.com","tld":"com"},"ip":{"addr":"159.69.83.207","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-11-28T12:18:05.625520298Z","timestamp":1732796285625,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: nudeleaksteen.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 28 Nov 2024 11:44:45 GMT\r\ncontent-type: text/html; charset=utf8\r\nset-cookie: ndsp=eyJkb21haW5OYW1lIjoibnVkZWxlYWtzdGVlbi5jb20iLCJtZW1iZXIiOiIxNTciLCJ0ZW1wbGF0ZSI6InRyYWZmaWNzdGFycyIsInVzZXJBZ2VudCI6Ik1vemlsbGFcLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvXC8yMDEwMDEwMSBGaXJlZm94XC85Ni4wIiwic2Vzc2lvbiI6IjFkMGVhZDU4ODI4NDFjNDk1MmY5YWM4ZGE5NTY4YjFmIiwidGltZV9pbml0IjoxNzMyNzk0Mjg1fQ%3D%3D; expires=Thu, 28-Nov-2024 22:59:59 GMT; Max-Age=40514; path=/\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9889,"size_decoded":9889,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"a09e68ba805a9d3f53a47478e1654a63","sha1":"4904f32d7b58f97ef7e94b74147673bf0b28e101","sha256":"370c56f3f243cd1c8f3a24f72d19a2f7de0ca18509f9bb0b5a5907e07e07d975","sha512":"52f43fa3c66875a1c8f6f9dee80e30163b6920e78cac6c8e20720834acccdee4762fd1f2d57d6b99a73d97ec09bf6fbc5ab201bcca2376ca28eac5f35772889e","ssdeep":"192:xJhJHYREvWm6rjubEt7oyLTWwVwdOkP+4fXOA8LiONY81BpfjNz:xUEvOj5tMyLo+4fXx8Gd81vNz","tlshash":"a612aebb7358a961ccad89f83a442b710bcb8f5f547912d40a8623f20efe921f426344","first_seen":"2024-11-28T12:18:23.699235Z","last_seen":"2024-11-28T12:18:23.699235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}