GET nannyirrationalacquainted.com/favicon.ico
0 B URL GET nannyirrationalacquainted.com/favicon.ico
IP
Requested by https://nannyirrationalacquainted.com/ybeyftcb?ugujour=81&refer=https://alwix.com/leona&kw=[%22leona%22,%22-%22,%22premium%22,%22bio%22,%22link%22]&key=bcc780c08574749b1f06a4574f1429ac&scrWidth=360&scrHeight=760&tz=5.5&v=25.5.2579&ship=&psid=alwix.com,alwix.com&sub3=invoke_layer&res=14.229&dev=r&adb=n
Certificate IssuerLet's Encrypt
Subjectnannyirrationalacquainted.com
Fingerprint02:A2:15:3C:6C:15:16:0E:78:8F:56:09:21:EA:27:04:2D:EC:D5:E2
ValiditySun, 20 Apr 2025 00:43:48 GMT - Sat, 19 Jul 2025 00:43:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: nannyirrationalacquainted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nannyirrationalacquainted.com/api/users?token=L3liZXlmdGNiP2tleT05Y2E2MDFhOWY0N2M3MzVkZjc2ZDVjYTQ2ZmEyNmE2NiZzdWJtZXRyaWM9MjY1NzA4NDc
Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.XP3PHkRazWGht5A3Jq8HnXZdLKmbekwX0l0tdCvJte8; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
GET nannyirrationalacquainted.com/api/users?token=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
302 Found 52 kB URL User Request GET nannyirrationalacquainted.com/api/users?token=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
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectnannyirrationalacquainted.com
Fingerprint02:A2:15:3C:6C:15:16:0E:78:8F:56:09:21:EA:27:04:2D:EC:D5:E2
ValiditySun, 20 Apr 2025 00:43:48 GMT - Sat, 19 Jul 2025 00:43:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/users?token=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 HTTP/1.1
Host: nannyirrationalacquainted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nannyirrationalacquainted.com/api/users?token=L3liZXlmdGNiP2tleT05Y2E2MDFhOWY0N2M3MzVkZjc2ZDVjYTQ2ZmEyNmE2NiZzdWJtZXRyaWM9MjY1NzA4NDc
Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.XP3PHkRazWGht5A3Jq8HnXZdLKmbekwX0l0tdCvJte8; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Sun, 18 May 2025 13:17:29 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://momotrk.com/click?key=4d63642b45a1e017075a&t=0.004080&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult
Set-Cookie: iprc68a3150605d468b30b33476cb809b723=5808057; expires=Mon, 19 May 2025 13:17:29 GMT; path=/
pdhtkv=true; expires=Mon, 19 May 2025 13:17:29 GMT; path=/
uncs=1; expires=Mon, 19 May 2025 13:17:29 GMT; path=/
pdhtkv28=true; expires=Mon, 19 May 2025 13:17:29 GMT; path=/
uncs28=1; expires=Mon, 19 May 2025 13:17:29 GMT; path=/
u_pl26570847=1; expires=Mon, 19 May 2025 13:17:29 GMT; path=/
Host: nannyirrationalacquainted.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2d56ffb5b358e3648bf16bfa834fe488
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET momotrk.com/click?key=4d63642b45a1e017075a&t=0.004080&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult
307 Temporary Redirect 52 kB URL User Request GET momotrk.com/click?key=4d63642b45a1e017075a&t=0.004080&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectmomotrk.com
FingerprintE1:14:A8:61:97:98:EA:02:D3:F9:C9:C4:59:C4:2F:74:43:C0:30:9A
ValidityThu, 03 Apr 2025 17:42:02 GMT - Wed, 02 Jul 2025 17:42:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /click?key=4d63642b45a1e017075a&t=0.004080&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult HTTP/1.1
Host: momotrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nannyirrationalacquainted.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sun, 18 May 2025 13:17:30 GMT
location: https://d0ktrqinaffc73f5apng.svesguard.pro/x/?lp_key=1747536a01e3b6e6a1ea83c6f845c3d21d25b74550&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult&key=4d63642b45a1e017075a&clickid=d0ktrqinaffc73f5apng&trk=momotrk.com&fdd=84aa37662098479eb7134612c36e31e2&vpb=BHW3phSH13221etningbw3-8y4IKz6bzzzUxjsF564sRQbauNQypVhBsw-Q0Sk8eK7CKIGzv6KRiZ_3Fe9_nH4A&language=en-US&feed=800e&zone=4497adf3&dm=1
server: Caddy
set-cookie: uclick=ne+LllwKOd410eugOGCYtRjAuemumyQPI8U8gvpV5nO2BymL7UCPbMsttb8zrzgiaSsV30c=; Max-Age=31536000; SameSite=Lax
bcid=d0ktrqinaffc73f5apng; Max-Age=31536000; SameSite=Lax
x-request-id: 6439097c-1fab-4eb9-b557-6b95b09274c7
content-length: 0
X-Firefox-Spdy: h2
GET d0ktrqinaffc73f5apng.svesguard.pro/x/?lp_key=1747536a01e3b6e6a1ea83c6f845c3d21d25b74550&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult&key=4d63642b45a1e017075a&clickid=d0ktrqinaffc73f5apng&trk=momotrk.com&fdd=84aa37662098479eb7134612c36e31e2&vpb=BHW3phSH13221etningbw3-8y4IKz6bzzzUxjsF564sRQbauNQypVhBsw-Q0Sk8eK7CKIGzv6KRiZ_3Fe9_nH4A&language=en-US&feed=800e&zone=4497adf3&dm=1
200 OK 52 kB URL User Request GET d0ktrqinaffc73f5apng.svesguard.pro/x/?lp_key=1747536a01e3b6e6a1ea83c6f845c3d21d25b74550&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult&key=4d63642b45a1e017075a&clickid=d0ktrqinaffc73f5apng&trk=momotrk.com&fdd=84aa37662098479eb7134612c36e31e2&vpb=BHW3phSH13221etningbw3-8y4IKz6bzzzUxjsF564sRQbauNQypVhBsw-Q0Sk8eK7CKIGzv6KRiZ_3Fe9_nH4A&language=en-US&feed=800e&zone=4497adf3&dm=1
IP
Certificate IssuerLet's Encrypt
Subjectsvesguard.pro
FingerprintA4:25:03:2A:75:74:0D:14:03:06:86:15:C3:17:EB:B4:19:3C:6A:61
ValidityFri, 18 Apr 2025 03:37:57 GMT - Thu, 17 Jul 2025 03:37:56 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (15902), with CRLF line terminators
Hash be336b5ba8f0248f57a9c5ffe822db57
e32c8c33828436ad93b22744bbcc1227ebf3df4f
794fc30ced4c52066b2905a7b245f8f51c21b146bdc934c888fd4915af7a1497
GET /x/?lp_key=1747536a01e3b6e6a1ea83c6f845c3d21d25b74550&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult&key=4d63642b45a1e017075a&clickid=d0ktrqinaffc73f5apng&trk=momotrk.com&fdd=84aa37662098479eb7134612c36e31e2&vpb=BHW3phSH13221etningbw3-8y4IKz6bzzzUxjsF564sRQbauNQypVhBsw-Q0Sk8eK7CKIGzv6KRiZ_3Fe9_nH4A&language=en-US&feed=800e&zone=4497adf3&dm=1 HTTP/1.1
Host: d0ktrqinaffc73f5apng.svesguard.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nannyirrationalacquainted.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 May 2025 13:17:30 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=EP%2FBO6yX0qPCYITXbiH4sjHaTl6ep1NSLYbkVX2t6IptNyM02u3IatZw1sswXHlm1BBFQjPdd95V%2F5BvJcsjcLIHIHgLITHZ%2FD%2BpGqVjN2Aku%2FzX5rZzLUAj3qmZlsGo"}]}
cf-cache-status: DYNAMIC
vary: accept-encoding
content-encoding: br
cf-ray: 941ba2975a5556b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET d0ktrqinaffc73f5apng.svesguard.pro/favicon.ico
404 Not Found 153 B URL GET d0ktrqinaffc73f5apng.svesguard.pro/favicon.ico
IP
Requested by https://d0ktrqinaffc73f5apng.svesguard.pro/x/?lp_key=1747536a01e3b6e6a1ea83c6f845c3d21d25b74550&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult&key=4d63642b45a1e017075a&clickid=d0ktrqinaffc73f5apng&trk=momotrk.com&fdd=84aa37662098479eb7134612c36e31e2&vpb=BHW3phSH13221etningbw3-8y4IKz6bzzzUxjsF564sRQbauNQypVhBsw-Q0Sk8eK7CKIGzv6KRiZ_3Fe9_nH4A&language=en-US&feed=800e&zone=4497adf3&dm=1
Certificate IssuerLet's Encrypt
Subjectsvesguard.pro
FingerprintA4:25:03:2A:75:74:0D:14:03:06:86:15:C3:17:EB:B4:19:3C:6A:61
ValidityFri, 18 Apr 2025 03:37:57 GMT - Thu, 17 Jul 2025 03:37:56 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /favicon.ico HTTP/1.1
Host: d0ktrqinaffc73f5apng.svesguard.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0ktrqinaffc73f5apng.svesguard.pro/x/?lp_key=1747536a01e3b6e6a1ea83c6f845c3d21d25b74550&t1=4.080000&t2=26570847&t3=1767209&t4=4937930&t5=3280507&t6=s&t12=Adult&key=4d63642b45a1e017075a&clickid=d0ktrqinaffc73f5apng&trk=momotrk.com&fdd=84aa37662098479eb7134612c36e31e2&vpb=BHW3phSH13221etningbw3-8y4IKz6bzzzUxjsF564sRQbauNQypVhBsw-Q0Sk8eK7CKIGzv6KRiZ_3Fe9_nH4A&language=en-US&feed=800e&zone=4497adf3&dm=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 18 May 2025 13:17:30 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKIFRzCyJV7nP7GMgJxoDSdhbkEWk3CfJ3qVbQEhT68XySXktggpcWAyfNUKdffGKe6H0qkquv9LUMsDwo5Y4Z4i6Dj%2FwYY%2F9akSUf63lrV3p4m%2FiQckHBbD%2BvWHr3q7yEdKu36WIcYajFwHYdaw9u4itasr"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
content-encoding: br
cf-ray: 941ba29aac285695-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4517&min_rtt=793&rtt_var=2393&sent=56&recv=81&lost=0&retrans=0&sent_bytes=5687&recv_bytes=5277&delivery_rate=1789&cwnd=12000&unsent_bytes=0&cid=8027d88af3e6d00b&ts=500&x=16"
GET nannyirrationalacquainted.com/ybeyftcb?ugujour=81&refer=https://alwix.com/leona&kw=[%22leona%22,%22-%22,%22premium%22,%22bio%22,%22link%22]&key=bcc780c08574749b1f06a4574f1429ac&scrWidth=360&scrHeight=760&tz=5.5&v=25.5.2579&ship=&psid=alwix.com,alwix.com&sub3=invoke_layer&res=14.229&dev=r&adb=n
200 OK 4.9 kB URL User Request GET nannyirrationalacquainted.com/ybeyftcb?ugujour=81&refer=https://alwix.com/leona&kw=[%22leona%22,%22-%22,%22premium%22,%22bio%22,%22link%22]&key=bcc780c08574749b1f06a4574f1429ac&scrWidth=360&scrHeight=760&tz=5.5&v=25.5.2579&ship=&psid=alwix.com,alwix.com&sub3=invoke_layer&res=14.229&dev=r&adb=n
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectnannyirrationalacquainted.com
Fingerprint02:A2:15:3C:6C:15:16:0E:78:8F:56:09:21:EA:27:04:2D:EC:D5:E2
ValiditySun, 20 Apr 2025 00:43:48 GMT - Sat, 19 Jul 2025 00:43:47 GMT
File type HTML document, ASCII text, with very long lines (4858)
Hash 7acafddc1544427d671b5177cd124164
c9da25f7f35aa42b72502f73601f182a0d9c43c6
4e1b4b5a8536fd3bfe013d1819127f5440ee517f5bb739c07bcafc25f1470679
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ybeyftcb?ugujour=81&refer=https://alwix.com/leona&kw=[%22leona%22,%22-%22,%22premium%22,%22bio%22,%22link%22]&key=bcc780c08574749b1f06a4574f1429ac&scrWidth=360&scrHeight=760&tz=5.5&v=25.5.2579&ship=&psid=alwix.com,alwix.com&sub3=invoke_layer&res=14.229&dev=r&adb=n HTTP/1.1
Host: nannyirrationalacquainted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 18 May 2025 13:17:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.XP3PHkRazWGht5A3Jq8HnXZdLKmbekwX0l0tdCvJte8; expires=Sun, 18 May 2025 13:18:28 GMT; path=/
Host: nannyirrationalacquainted.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 63e0fcc10732062425945767906130de
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET experttrafficcounter.com/stats
0 B URL GET experttrafficcounter.com/stats
IP
Requested by https://nannyirrationalacquainted.com/ybeyftcb?ugujour=81&refer=https://alwix.com/leona&kw=[%22leona%22,%22-%22,%22premium%22,%22bio%22,%22link%22]&key=bcc780c08574749b1f06a4574f1429ac&scrWidth=360&scrHeight=760&tz=5.5&v=25.5.2579&ship=&psid=alwix.com,alwix.com&sub3=invoke_layer&res=14.229&dev=r&adb=n
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats HTTP/1.1
Host: experttrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nannyirrationalacquainted.com
DNT: 1
Connection: keep-alive
Referer: https://nannyirrationalacquainted.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
172.240.127.234
157.90.104.39
172.67.213.155
192.243.59.12