1701535525923.badlykitrace.info/fe6d6282-89d6-4734-b62a-1df7eab8f621?n=1&t=1701535525923&l_next=aHR0cHM6Ly93d3cudmF0aWNhbm1pbmFzLmNsdWIvP3NsPTU2OTgzNDItNTNlMzUmZGF0YTE9VHJhY2sxJmRhdGEyPVRyYWNrMiZ0YWc9&type_v=global&key_v=error
542 B URL 1701535525923.badlykitrace.info/fe6d6282-89d6-4734-b62a-1df7eab8f621?n=1&t=1701535525923&l_next=aHR0cHM6Ly93d3cudmF0aWNhbm1pbmFzLmNsdWIvP3NsPTU2OTgzNDItNTNlMzUmZGF0YTE9VHJhY2sxJmRhdGEyPVRyYWNrMiZ0YWc9&type_v=global&key_v=error
IP
File type HTML document, ASCII text, with very long lines (542), with no line terminators
Hash 6fd23f65497e5054128d30cae3ef8c7e
ff9f6ccb0aac7c1bb81439ff39f236180ba6162b
58d7043f0710f6f92a49657df33b5704e403682556343e55a20cddac7701e880
GET /fe6d6282-89d6-4734-b62a-1df7eab8f621?n=1&t=1701535525923&l_next=aHR0cHM6Ly93d3cudmF0aWNhbm1pbmFzLmNsdWIvP3NsPTU2OTgzNDItNTNlMzUmZGF0YTE9VHJhY2sxJmRhdGEyPVRyYWNrMiZ0YWc9&type_v=global&key_v=error HTTP/1.1
Host: 1701535525923.badlykitrace.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
X-Powered-By: Express
Location: http://1701535549542.muchkivanish.info/d2978955-d7ee-4711-9358-1f6c7815060f?n=2&t=1701535525923&l_next=aHR0cHM6Ly93d3cudmF0aWNhbm1pbmFzLmNsdWIvP3NsPTU2OTgzNDItNTNlMzUmZGF0YTE9VHJhY2sxJmRhdGEyPVRyYWNrMiZ0YWc9&type_v=global&key_v=error
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 542
Date: Sat, 02 Dec 2023 16:45:49 GMT
Connection: keep-alive
Keep-Alive: timeout=5
1701535549542.muchkivanish.info/d2978955-d7ee-4711-9358-1f6c7815060f?n=2&t=1701535525923&l_next=aHR0cHM6Ly93d3cudmF0aWNhbm1pbmFzLmNsdWIvP3NsPTU2OTgzNDItNTNlMzUmZGF0YTE9VHJhY2sxJmRhdGEyPVRyYWNrMiZ0YWc9&type_v=global&key_v=error
224 B URL 1701535549542.muchkivanish.info/d2978955-d7ee-4711-9358-1f6c7815060f?n=2&t=1701535525923&l_next=aHR0cHM6Ly93d3cudmF0aWNhbm1pbmFzLmNsdWIvP3NsPTU2OTgzNDItNTNlMzUmZGF0YTE9VHJhY2sxJmRhdGEyPVRyYWNrMiZ0YWc9&type_v=global&key_v=error
IP
File type HTML document, ASCII text, with no line terminators
Hash ee4ce2fab66266e51e5ae3f4a87c42a0
07a1305f8137ef6259b6d74e87ec7d9dc8c81ef2
7c9b1585147509737211a40b48663bec0af5a130718041abd2fe43843d947ea1
GET /d2978955-d7ee-4711-9358-1f6c7815060f?n=2&t=1701535525923&l_next=aHR0cHM6Ly93d3cudmF0aWNhbm1pbmFzLmNsdWIvP3NsPTU2OTgzNDItNTNlMzUmZGF0YTE9VHJhY2sxJmRhdGEyPVRyYWNrMiZ0YWc9&type_v=global&key_v=error HTTP/1.1
Host: 1701535549542.muchkivanish.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
X-Powered-By: Express
Location: https://www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 224
Date: Sat, 02 Dec 2023 16:45:51 GMT
Connection: keep-alive
Keep-Alive: timeout=5
www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=
4.2 kB URL www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3400)
Hash 37bc8be185b289bd69f8cbfea636094e
dd844a0980a81e04cb6b4342186833c36e49fec5
ea4f43b5958a17f255bd02c3271fb54b98a7cb193c8e882edc8b99f127e6b008
GET /?sl=5698342-53e35&data1=Track1&data2=Track2&tag= HTTP/1.1
Host: www.vaticanminas.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 02 Dec 2023 16:45:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-transform
Accept-CH: Sec-CH-UA-Platform-Version
www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=&eyeg=92dd2fa635b9d14988e1a4e5a18e7169&eyer=0.6894562810189597&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=
0 B URL www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=&eyeg=92dd2fa635b9d14988e1a4e5a18e7169&eyer=0.6894562810189597&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5698342-53e35&data1=Track1&data2=Track2&tag=&eyeg=92dd2fa635b9d14988e1a4e5a18e7169&eyer=0.6894562810189597&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef= HTTP/1.1
Host: www.vaticanminas.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 02 Dec 2023 16:45:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=&eyeg=3&eyer=0.6894562810189597&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=
www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=&eyeg=3&eyer=0.6894562810189597&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=
0 B URL www.vaticanminas.club/?sl=5698342-53e35&data1=Track1&data2=Track2&tag=&eyeg=3&eyer=0.6894562810189597&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5698342-53e35&data1=Track1&data2=Track2&tag=&eyeg=3&eyer=0.6894562810189597&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef= HTTP/1.1
Host: www.vaticanminas.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 02 Dec 2023 16:45:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://wwu.merdapraisto.lat/?utm_medium=4380b8af5455965347a14cc974463bff361d7753&utm_campaign=adult1&cid=7105221150248581647&2=5698342&3=53&1=asl_NO
www.vaticanminas.club/favicon.ico
0 B URL www.vaticanminas.club/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.vaticanminas.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Sat, 02 Dec 2023 16:45:51 GMT
Connection: keep-alive
cartining-specute.com/2c8047c4-066e-4834-a1b5-360c8c138f20?partner_id=19854&click_cost=0&subid=M7308039548838084619
302 Found 0 B URL User Request GET HTTP/2 cartining-specute.com/2c8047c4-066e-4834-a1b5-360c8c138f20?partner_id=19854&click_cost=0&subid=M7308039548838084619
IP
Certificate IssuerLet's Encrypt
Subjectcartining-specute.com
FingerprintAC:7E:7F:69:6C:5C:60:F6:55:9A:22:DF:BD:1F:6D:05:0E:5F:47:81
ValidityTue, 28 Nov 2023 06:48:10 GMT - Mon, 26 Feb 2024 06:48:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2c8047c4-066e-4834-a1b5-360c8c138f20?partner_id=19854&click_cost=0&subid=M7308039548838084619 HTTP/1.1
Host: cartining-specute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wwu.merdapraisto.lat/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 02 Dec 2023 16:45:52 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
pragma: no-cache
set-cookie: 2c8047c4-066e-4834-a1b5-360c8c138f20-v4=oox-jPF3uS_OdLQckBGquajtQUnP4SfagDZDQuwxOhM; Max-Age=86400; Expires=Sun, 03-Dec-2023 16:45:52 GMT; Domain=cartining-specute.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=Q2%2BBlKS4mu%2Fmoxe6%2FyOv7TbNOVxGpzmM5VH9C%2FcWnm%2F0bz2gigxLCtzhRhz7n7tEm8QUb1YytuMxq%2Fw%2Fz78tz%2FwkOGdQnY2s1DNPIcRlSp6UkjyCNHjKQiNE11sUyBMjK%2BI3WOTjIIa5lCXhfhE2zQ%3D%3D; Max-Age=31536000; Expires=Sun, 01-Dec-2024 16:45:52 GMT; Domain=cartining-specute.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
200 OK 7.7 kB URL User Request GET HTTP/1.1 casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
IP
ASN #203639 Tekka Digital SA
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (531), with CRLF line terminators
Hash 1b6e02d9d8b120eaa2ba60171815455f
7c782e19a3657b16ee3ba51c51c396bd88a047ef
e2d0d45cbf83a600d2ec7be594d10e4a597eb887c1dbc6e618535ad3d6cc4e2b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wwu.merdapraisto.lat/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:52 GMT
Content-Type: text/html
Content-Length: 7693
Connection: keep-alive
set-cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic; path=/
cache-control: private, no-transform
wwu.merdapraisto.lat/favicon.ico
1.2 kB URL wwu.merdapraisto.lat/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 91abe01116ab422c598e9c8af72cf4da
0f2815fe8e067d48537ad168225ab4674271fa27
b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc
GET /favicon.ico HTTP/1.1
Host: wwu.merdapraisto.lat
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wwu.merdapraisto.lat/proc.php?414606e5da2e8efe670f11a7b3dd51a60c7d2eea
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 16:45:52 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Wed, 31 Jul 2019 07:48:51 GMT
etag: "5d4147e3-47e"
expires: Sun, 03 Dec 2023 16:45:52 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
casualdatesconnect.life/media/casual/toon3/css/style_alt.css
200 OK 5.1 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/css/style_alt.css
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type ASCII text, with CRLF line terminators
Hash faef7172cb03c340a5df27533a002d1a
d84c0103e7996d5558026aa9253afeeca390d654
5b2cf586d1b6a80ea096b4df5f234fddce3d6cedef138ac48b93b1f38d8307ad
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/css/style_alt.css HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: text/css
Content-Length: 5097
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "faef7172cb03c340a5df27533a002d1a"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D118D3BAD557B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#483933773/gid:0/gname:root/mode:33188/mtime:1655386485#244446000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:45.244446Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/cookie/js.cookie11.js
200 OK 4.2 kB URL GET HTTP/1.1 casualdatesconnect.life/cookie/js.cookie11.js
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type ASCII text, with very long lines (1709), with CRLF line terminators
Hash d69ea699f15818eb39d4f4898f75a7e3
0209181a1da02eaf3857d30efd7092ea85f4c7eb
1d6379dcee88d76c4895ef26cc84e178b995e0a8e1effc943691fe9c59ccdb60
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cookie/js.cookie11.js HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: text/javascript
Content-Length: 4157
Connection: keep-alive
ETag: "d69ea699f15818eb39d4f4898f75a7e3"
Last-Modified: Tue, 21 Nov 2023 12:29:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D11655E3C1A4B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223193#711267407/gid:0/gname:root/mode:33188/mtime:1659030829#652674000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:53:49.652674Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/util/utils.js
200 OK 7.5 kB URL GET HTTP/1.1 casualdatesconnect.life/util/utils.js
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 01816d15ca03032751161a746e2fb7c3
dcc72ea5fa1356490ba473288159df9786b4a3c3
8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/utils.js HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: application/javascript
Content-Length: 7512
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Mon, 20 Feb 2023 09:36:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D0FFBED367E8F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676885559#334512232/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/js/main.js
200 OK 405 B URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/js/main.js
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
Hash f2eab5d5860befa6e1b4eca345006bf1
f4f7958b8de4822f1b2e946f8ca2a4d104484866
c00613979fdbf8d2850f0e08260b582bb8745265c28c216444bc31d475416bc3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/js/main.js HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: application/javascript
Content-Length: 405
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f2eab5d5860befa6e1b4eca345006bf1"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D101F5AE6C0B0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#487933778/gid:0/gname:root/mode:33188/mtime:1655386487#8450000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:47.00845Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/body2_o.jpg
200 OK 7.1 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/body2_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 25ead115fd19de86d001b9ea0e530b98
2f87b29630774c703ddd5b3f63c598099741589c
3b654731702ea10a66129af5b97f7dad0db5f60ef6ee0960ce99b7bf9ee6face
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/body2_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 7139
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "25ead115fd19de86d001b9ea0e530b98"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D101196E4A189
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#483933773/gid:0/gname:root/mode:33188/mtime:1655386486#236448000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.236448Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/body3_o.jpg
200 OK 7.1 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/body3_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 25f4616348a1f5076ddaaf43b8be0d99
1ebb536691f648bcfc91b6e0e8e7b0de099873d9
a738b84f2486de67b74a3ce03617e248b592b3e316bc9ad5b471f13e29924210
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/body3_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 7115
Connection: keep-alive
ETag: "25f4616348a1f5076ddaaf43b8be0d99"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D101F32CB6531
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#867530752/gid:0/gname:root/mode:33188/mtime:1655386486#296448000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.296448Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/body4_o.jpg
200 OK 4.7 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/body4_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 6bfe731b38785116e374e8afd448473b
ce318d0506e12cb3f373b791e78fb60c183e6366
f64c0ecdf9c70f46bbd9a30de7d9b7eba62730b88084543d31037eace2807a68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/body4_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 4708
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "6bfe731b38785116e374e8afd448473b"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D10378D00CCCC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#487933778/gid:0/gname:root/mode:33188/mtime:1655386486#356448000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.356448Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/body5_o.jpg
200 OK 7.4 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/body5_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 67c337328ace4aa7c94fbcadbb997963
19ecc8595ff083a870598689b85713014b9941b4
ab5b0cdc771fbee94ae961621de091469cd6d3ee9e0345d67fea8790f47ef21b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/body5_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 7402
Connection: keep-alive
ETag: "67c337328ace4aa7c94fbcadbb997963"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D10378AE93488
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#875530770/gid:0/gname:root/mode:33188/mtime:1655386486#420448000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.420448Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/js/trls.js
200 OK 25 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/js/trls.js
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
Hash 2187f773a9ee4d03d21448c6856698b9
ad93a8e10e0a04c4c32caba37ea54253e22c1369
a6551598594d2f7e4dc32dcb406efdae0538435ef49fc83308cb1a5f40f3353e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/js/trls.js HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: application/javascript
Content-Length: 25348
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2187f773a9ee4d03d21448c6856698b9"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D104351FDE534
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676801120#552288002/gid:0/gname:root/mode:33188/mtime:1659085987#388970000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:13:07.38897Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/girl.png
200 OK 20 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/girl.png
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type PNG image data, 320 x 352, 8-bit colormap, non-interlaced\012- data
Hash 3e9715aca14895be6809d18ee806d561
584fb439c7a6c3d9ac2cda1f3ee24212546d316c
5c30263d90e5109b19aec665afcf22292bff66fd158c31e34c08de212e14ecb7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/girl.png HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/png
Content-Length: 20415
Connection: keep-alive
ETag: "3e9715aca14895be6809d18ee806d561"
Last-Modified: Wed, 20 Sep 2023 15:21:47 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D118714023783
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134504#780010470/gid:0/gname:root/mode:33188/mtime:1655386486#508449000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.508449Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/js/jquery-1.11.1.min.js
200 OK 96 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/js/jquery-1.11.1.min.js
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 612ce073e0525fda305524a4a9949587
a87a1ec66b4a404b2f793f2de9f806955e8952cf
a181a613a6eeab77259b1d6537f82fd28f4cb38fa41e43af8d1677a3542e74bf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/js/jquery-1.11.1.min.js HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: application/javascript
Content-Length: 95699
Connection: keep-alive
ETag: "612ce073e0525fda305524a4a9949587"
Last-Modified: Wed, 20 Sep 2023 15:21:47 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D101F1B3A5C3F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134504#780010470/gid:0/gname:root/mode:33188/mtime:1655386486#952449000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.952449Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/age1_o.jpg
200 OK 6.1 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/age1_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 412c98a48bd4e5f3095860f53e2fab25
f06ffecbc1f132beb4ec81a149cc79cb5b78559b
1e26c71724f0061870300be2d22c080c376f3189783e4b07f13e9457b9ace154
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/age1_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 6051
Connection: keep-alive
ETag: "412c98a48bd4e5f3095860f53e2fab25"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D1037A422E999
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#839530689/gid:0/gname:root/mode:33188/mtime:1655386485#852447000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:45.852447Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/age2_o.jpg
200 OK 9.5 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/age2_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash bdee974dfa1bd0381fb37d21c6a24d2b
71c58820bdcd2353850aa2efdf9bcf707198673b
0e9ec0e7494a79661fe5644cda9c4d6c5fe12260606ad1f3ba8105cb953d830b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/age2_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 9472
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "bdee974dfa1bd0381fb37d21c6a24d2b"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D11707BDF49CD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#483933773/gid:0/gname:root/mode:33188/mtime:1655386485#916447000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:45.916447Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/age3_o.jpg
200 OK 7.7 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/age3_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 47f8432cca02f63b701c2999eeea43ba
56d51f3b5039c7e60ad400f17e123a5dff714304
3cf09326ff416c5f53d81127aca350009110721c6ea1e879a363d71018bf2b88
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/age3_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 7696
Connection: keep-alive
ETag: "47f8432cca02f63b701c2999eeea43ba"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D11707D0228F5
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#843530699/gid:0/gname:root/mode:33188/mtime:1655386485#980447000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:45.980447Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/fonts/QuattrocentoSans.ttf
200 OK 78 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/fonts/QuattrocentoSans.ttf
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type TrueType Font data, 16 tables, 1st "GPOS", 7 names, Microsoft, language 0x409, type 1 string, Quattrocento SansRegularPabloImpallari,IginoMarini,BrendaGallo: Quattrocento Sans: 2011Version 2\012- data
Hash ce091a3d610240f8ea45c336266b5792
240eb69d6e901909208105620256e0871ef9737f
8a1e4d8cb32309d03e754bbff5cf0dea8cb14973a0a650c1cb58b8592f5da13a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/fonts/QuattrocentoSans.ttf HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/media/casual/toon3/css/style_alt.css
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: font/ttf
Content-Length: 78036
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://casualdatesconnect.life
Access-Control-Expose-Headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
ETag: "ce091a3d610240f8ea45c336266b5792"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D10EFEE5638E1
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#823530654/gid:0/gname:root/mode:33188/mtime:1655386485#660447000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:45.660447Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/age4_o.jpg
200 OK 6.9 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/age4_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 7d81b6b005bf4b955b5e6297172c5a8d
0bae48d0799d12602b3166a19472e1db6fedc248
d4c8c2b2cc9bf5d502fc17d4f83ca73c4c9cbfbdff6624b3d00ba2e05f3efe94
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/age4_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 6924
Connection: keep-alive
ETag: "7d81b6b005bf4b955b5e6297172c5a8d"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D1037B61AC8FF
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#847530707/gid:0/gname:root/mode:33188/mtime:1655386486#44448000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.044448Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
wwu.merdapraisto.lat/proc.php?414606e5da2e8efe670f11a7b3dd51a60c7d2eea
7.9 kB URL wwu.merdapraisto.lat/proc.php?414606e5da2e8efe670f11a7b3dd51a60c7d2eea
IP
File type gzip compressed data, from Unix\012- data
Hash f7e02dd48f2909b09ea7abf643bb6424
4f7e4edec8ba10847a8019bd51bfc2103afaa775
a1ba90d4de7cee4eb3bfcb12f4d5ea109c2e1c7b31ca61501b16e4507f0f6040
GET /proc.php?414606e5da2e8efe670f11a7b3dd51a60c7d2eea HTTP/1.1
Host: wwu.merdapraisto.lat
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wwu.merdapraisto.lat/?utm_medium=4380b8af5455965347a14cc974463bff361d7753&utm_campaign=adult1&cid=7105221150248581647&2=5698342&3=53&1=asl_NO
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 16:45:52 GMT
content-type: text/html; charset=UTF-8
location: https://cartining-specute.com/2c8047c4-066e-4834-a1b5-360c8c138f20?partner_id=19854&click_cost=0&subid=M7308039548838084619
vary: Accept-Encoding
x-powered-by: PHP/8.2.12
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
accept-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version
content-encoding: gzip
X-Firefox-Spdy: h2
casualdatesconnect.life/media/casual/toon3/fonts/QuattrocentoSansBold.ttf
200 OK 80 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/fonts/QuattrocentoSansBold.ttf
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type TrueType Font data, 16 tables, 1st "GPOS", 7 names, Microsoft, language 0x409, type 1 string, Quattrocento SansBoldPabloImpallari,IginoMarini,BrendaGallo: Quattrocento Sans Bold: 2011Quattro\012- data
Hash b80c7c5dc4739cd94fbc56b2f57509c4
ae800186fbcf2c85b1d9f271b69455c8ad5c8f40
fc24aac0d90f109b21b91a1c7171a9e96cf056ac8eb888be2a9d3d35d35ac795
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/fonts/QuattrocentoSansBold.ttf HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/media/casual/toon3/css/style_alt.css
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: font/ttf
Content-Length: 79848
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://casualdatesconnect.life
Access-Control-Expose-Headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
ETag: "b80c7c5dc4739cd94fbc56b2f57509c4"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D1111B4980AB6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#831530672/gid:0/gname:root/mode:33188/mtime:1655386485#792447000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:45.792447Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/relations1_o.jpg
200 OK 9.6 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/relations1_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 974ca1664d2cea320c17179302d33d4e
dc48c7bc4b20d281f190ff2ad5579df2f853864e
a66348a7dfa7072dedec904d8069b573678ca9bb73168170ed010640ef929af1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/relations1_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 9613
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "974ca1664d2cea320c17179302d33d4e"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D1037D0DC0369
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#487933778/gid:0/gname:root/mode:33188/mtime:1655386486#568449000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.568449Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/relations2_o.jpg
200 OK 9.1 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/relations2_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 90448128e70479a071e70b19b0f8b187
4a4e5f480b8df6e6fa4fd1ce2579a7eb33afdaf6
ca08d85836df6ab8247acd0df5c027ec6e5d63fd436b9ebef5769fae98252638
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/relations2_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 9079
Connection: keep-alive
ETag: "90448128e70479a071e70b19b0f8b187"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D115A58D71D3E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#887530797/gid:0/gname:root/mode:33188/mtime:1655386486#632449000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.632449Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/relations4_o.jpg
200 OK 7.5 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/relations4_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash b3160168c65670576b0c54f6ef80c972
4b4c73fea6466f0733dbe55b7b60d0fa5b05ccd7
d26ed7a1ce5bc3a33d1d88b0b04c0c7ee156c59149af8409eb308581eea87f45
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/relations4_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 7546
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "b3160168c65670576b0c54f6ef80c972"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D118D0C5B4282
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#487933778/gid:0/gname:root/mode:33188/mtime:1655386486#752449000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.752449Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/relations5_o.jpg
200 OK 8.3 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/relations5_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash c8977e9f072bac461be435c71ffd01d0
f13fbff743f380f87271d37af099e83ad8186e61
ad74a6271b89a55e3df1ec7dfd3c938024b701b0d5ef3bf939793e30b8100bf8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/relations5_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 8333
Connection: keep-alive
ETag: "c8977e9f072bac461be435c71ffd01d0"
Last-Modified: Wed, 20 Sep 2023 15:21:47 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D103803CF5467
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134504#780010470/gid:0/gname:root/mode:33188/mtime:1655386486#816449000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.816449Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/body1_o.jpg
200 OK 9.4 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/body1_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 85ccecbbf23425d18c7c012f7341ce27
7317eda85c061ee60c072d89fe407f37c26c0d1e
1b10dd2a543fef61a4a61836377e5461b57c95dd95d12f1e35c57b26d7edf834
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/body1_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 9351
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "85ccecbbf23425d18c7c012f7341ce27"
Last-Modified: Mon, 20 Feb 2023 09:30:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D11872116400C
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843511#483933773/gid:0/gname:root/mode:33188/mtime:1655386486#176448000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.176448Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/bbc.js
200 OK 1.1 kB URL GET HTTP/1.1 casualdatesconnect.life/media/bbc.js
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type ASCII text, with CRLF line terminators
Hash 57e25a20c9962ce9c7077e46c69a265f
cba5f15234d9059feacd95fe60fcd7165b45295b
329ed89ce6841f591a258c691e89ca2a55d0c8f481a7ba7c167df8f8198f2791
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/bbc.js HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: application/javascript
Content-Length: 1132
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "57e25a20c9962ce9c7077e46c69a265f"
Last-Modified: Mon, 20 Feb 2023 09:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179D100AEE1DFCC7
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676832256#258761277/gid:0/gname:root/mode:33188/mtime:1659030913#968764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.968764Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/media/casual/toon3/images/relations3_o.jpg
200 OK 9.4 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/relations3_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 4d3d38adf2f0ce332b20112bd35cd8bf
6b4c3de36268a2459f4970779ab51efbf5b5ccf5
2f824639869c4c24dc402ace4994ff5e628f7a48dd39dc5598ce36136f26719f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/relations3_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 9360
Connection: keep-alive
ETag: "4d3d38adf2f0ce332b20112bd35cd8bf"
Last-Modified: Tue, 21 Nov 2023 12:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D1037EE3422BD
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223307#891530806/gid:0/gname:root/mode:33188/mtime:1655386486#692449000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.692449Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
casualdatesconnect.life/favicon.ico
204 No Content 0 B URL GET HTTP/1.1 casualdatesconnect.life/favicon.ico
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Connection: keep-alive
Cache-Control: no-transform
casualdatesconnect.life/media/casual/toon3/images/age5_o.jpg
200 OK 7.2 kB URL GET HTTP/1.1 casualdatesconnect.life/media/casual/toon3/images/age5_o.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Certificate IssuerLet's Encrypt
Subjectcasualdatesconnect.life
FingerprintAE:00:B5:95:1E:0A:78:62:6A:7F:6B:11:E2:38:9D:D6:A9:5C:A4:24
ValidityTue, 10 Oct 2023 08:30:17 GMT - Mon, 08 Jan 2024 08:30:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x220, components 3\012- data
Hash 7f23ba7584e5f2f5f5bc1129a7a21492
141963c0678f4591441797f99a45a03616f5c8fb
a3f7fb4399ca65391f898e2346c079e1706165a02c04db92babe675b5cdeb490
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/casual/toon3/images/age5_o.jpg HTTP/1.1
Host: casualdatesconnect.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casualdatesconnect.life/?u=xunwwwr&o=b0ep0zn&cid=whdogmldkk1mgoet22850r1k
Cookie: sid=t2~noq0vgdbmlpjis4e5afmh4ic
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 16:45:53 GMT
Content-Type: image/jpeg
Content-Length: 7158
Connection: keep-alive
ETag: "7f23ba7584e5f2f5f5bc1129a7a21492"
Last-Modified: Wed, 20 Sep 2023 15:21:47 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179D1037CD7E9613
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134504#780010470/gid:0/gname:root/mode:33188/mtime:1655386486#108448000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:34:46.108448Z
Expires: Sun, 01 Dec 2024 16:45:53 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
172.104.190.11
51.68.82.147
18.197.36.77
185.155.186.16
173.236.35.188