| r10.o.lencr.org/ |  23.33.119.27 | | 504 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash85b35ef8e54cfd751670f6a6d56541bd 162e94ccf2a785ea99c41f45c3a76815a2f8ae5f 3f59c24a6538550f52a4c9b39d9f57b023c9d44d50a846e742b763f74dfc179d
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3F59C24A6538550F52A4C9B39D9F57B023C9D44D50A846E742B763F74DFC179D"
Last-Modified: Sun, 08 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4964
Expires: Wed, 11 Sep 2024 01:00:20 GMT
Date: Tue, 10 Sep 2024 23:37:36 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash6bd7ab339c70a2fbeee4c8c0acd11d01 d73d3395447b2a06e32c1e3efb673107259de9d2 fdfd7bc2cf6ecc38fb1098f0fdb33cc28a034bb850556c8be63823f4c4718be2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FDFD7BC2CF6ECC38FB1098F0FDB33CC28A034BB850556C8BE63823F4C4718BE2"
Last-Modified: Tue, 10 Sep 2024 00:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13317
Expires: Wed, 11 Sep 2024 03:19:33 GMT
Date: Tue, 10 Sep 2024 23:37:36 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashc02cbc5c5d1b0406dcc246d4bd1a6d2b 4926c8ef9661a0a06ddca8476543ba0016f6db23 6d53e4415d0c45468d4481cf09e5ea095019a86af85ccd64064eb060ab802455
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6D53E4415D0C45468D4481CF09E5EA095019A86AF85CCD64064EB060AB802455"
Last-Modified: Tue, 10 Sep 2024 02:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11463
Expires: Wed, 11 Sep 2024 02:48:39 GMT
Date: Tue, 10 Sep 2024 23:37:36 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashedb18f95b8662494bb1744d32f0faab9 e0db81a4003112c263f3ae9b4ada98249a114cfa 805f75981a2d1663f4672bc0630039d679800d1ed2ea8c246522234014136b2e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "805F75981A2D1663F4672BC0630039D679800D1ED2EA8C246522234014136B2E"
Last-Modified: Tue, 10 Sep 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8301
Expires: Wed, 11 Sep 2024 01:55:58 GMT
Date: Tue, 10 Sep 2024 23:37:37 GMT
Connection: keep-alive
|
|
| www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/girl2.gif |  143.204.55.54 | 200 OK | 83 kB |
URL GET HTTP/2www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/girl2.gif IP143.204.55.54:443
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerAmazon Subjectrencontreconfidentielle.com Fingerprint15:53:9F:D8:FA:51:CC:73:EB:D3:AA:69:80:F9:A9:C1:D2:6C:F8:D9 ValiditySun, 30 Jun 2024 00:00:00 GMT - Wed, 30 Jul 2025 23:59:59 GMT
File typeGIF image data, version 89a, 268 x 226 Hash5b897c7f22ab4ae10f149ead10f7a89b 42fbc5880163459417b4dc2b6e53331475f16d27 bf7b5d86bb8b872e304e6f2e8fc49da49f4e370eb43b653adeb338bda002b864
GET /fr3/cd-fr-tpl_3-mob-7s_toon_bgb/girl2.gif HTTP/1.1
Host: www.rencontreconfidentielle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 82733
last-modified: Fri, 22 Mar 2024 08:34:20 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 10 Sep 2024 14:32:10 GMT
etag: "5b897c7f22ab4ae10f149ead10f7a89b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4obG_ZD-l9QIqmyii8wkLviKa0Tm-tdyiuvxKSDm24A69AdVIzY3sA==
age: 32728
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashc0352a67fec0e31af09e55cadc62466a 3dc66227496510e7f0be04eda03988431dab1ca4 7d0049c3bfeec906333051c0f9890dc933760f494e850b2e0bbd5c42bcc552f4
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Sep 2024 23:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.10 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP142.250.74.10:443
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint9F:01:79:20:AD:58:33:6E:BF:F2:BF:DA:69:ED:BD:8D:19:F9:2D:D9 ValidityMon, 12 Aug 2024 07:18:03 GMT - Mon, 04 Nov 2024 07:18:02 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Sep 2024 09:00:16 GMT
expires: Wed, 10 Sep 2025 09:00:16 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 52641
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashc0352a67fec0e31af09e55cadc62466a 3dc66227496510e7f0be04eda03988431dab1ca4 7d0049c3bfeec906333051c0f9890dc933760f494e850b2e0bbd5c42bcc552f4
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Sep 2024 23:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| syndication.realsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 |  95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1syndication.realsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjectrealsrv.com Fingerprint77:56:9C:7F:44:F7:6D:E5:D8:EF:C2:F8:07:90:B1:8A:54:18:21:A3 ValidityMon, 01 Jul 2024 10:30:43 GMT - Sun, 29 Sep 2024 10:30:42 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Sep 2024 23:37:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A74046%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-09-10%22%3B%7D%7D; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.tf4srv.com/tag.php?goal=a2557a7b2e94197ff767970b67041697&stackUid=20240910233737700234 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1s.tf4srv.com/tag.php?goal=a2557a7b2e94197ff767970b67041697&stackUid=20240910233737700234 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjecttf4srv.com FingerprintAE:84:9E:9F:F4:DA:79:63:C3:18:2A:4C:FE:33:11:86:31:7F:2A:9A ValidityMon, 01 Jul 2024 10:32:11 GMT - Sun, 29 Sep 2024 10:32:10 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=a2557a7b2e94197ff767970b67041697&stackUid=20240910233737700234 HTTP/1.1
Host: s.tf4srv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Sep 2024 23:37:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A190%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-09-10%22%3B%7D%7D; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; domain=.tf4srv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.opoxv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1s.opoxv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjectopoxv.com FingerprintC2:B7:76:1E:D2:2A:F4:C2:48:01:55:08:7B:9C:F9:3E:8A:EC:7A:12 ValidityMon, 01 Jul 2024 10:27:08 GMT - Sun, 29 Sep 2024 10:27:07 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Sep 2024 23:37:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A74046%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-09-10%22%3B%7D%7D; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.orbsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1s.orbsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjectorbsrv.com Fingerprint60:41:E2:42:D0:66:79:69:EE:2B:95:5A:6C:61:88:F5:5E:72:D8:E7 ValidityMon, 01 Jul 2024 10:28:42 GMT - Sun, 29 Sep 2024 10:28:41 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 HTTP/1.1
Host: s.orbsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Sep 2024 23:37:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A74046%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-09-10%22%3B%7D%7D; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.pemsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1s.pemsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjectpemsrv.com FingerprintE0:4E:2D:C6:04:B3:F6:F6:B8:FF:9A:F3:7B:C4:9C:68:52:FA:D4:3E ValidityMon, 01 Jul 2024 10:29:00 GMT - Sun, 29 Sep 2024 10:28:59 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Sep 2024 23:37:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A74046%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-09-10%22%3B%7D%7D; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.zlinkl.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1s.zlinkl.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjectzlinkl.com FingerprintCF:87:E9:8B:FF:C4:7D:37:6E:72:BD:29:22:EA:6A:0D:B5:A4:75:46 ValidityMon, 12 Aug 2024 07:51:47 GMT - Sun, 10 Nov 2024 07:51:46 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 HTTP/1.1
Host: s.zlinkl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Sep 2024 23:37:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A74046%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-09-10%22%3B%7D%7D; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.magsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 | 95.211.229.245 | 200 OK | 20 B |
URL GET HTTP/1.1s.magsrv.com/tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 IP95.211.229.245:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjectmagsrv.com Fingerprint8E:61:86:2F:82:07:61:43:48:51:5B:D9:4A:30:13:C5:56:73:0F:42 ValidityMon, 01 Jul 2024 10:24:45 GMT - Sun, 29 Sep 2024 10:24:44 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=c6cda87d296c9c18c95d11036186f965&stackUid=20240910233737700467 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Sep 2024 23:37:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A74046%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-09-10%22%3B%7D%7D; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| tsyndicate.com/api/v1/retargeting/set/79de1c1b-e66e-4dd1-a2cf-189efbf21aa7 |  136.243.69.157 | 200 OK | 43 B |
URL GET HTTP/2tsyndicate.com/api/v1/retargeting/set/79de1c1b-e66e-4dd1-a2cf-189efbf21aa7 IP136.243.69.157:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerLet's Encrypt Subjecttsyndicate.com Fingerprint4D:12:60:AA:74:8F:2E:44:38:74:D2:5E:33:2E:CB:10:F3:F5:0A:39 ValidityMon, 12 Aug 2024 09:07:54 GMT - Sun, 10 Nov 2024 09:07:53 GMT
File typeGIF image data, version 89a, 1 x 1 Hashba036c43037cfe89320d1ef7b64cd43f 88c72d3e26047eb1e45e5564a76427734f120efe 42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/79de1c1b-e66e-4dd1-a2cf-189efbf21aa7 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 10 Sep 2024 23:37:37 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
set-cookie: ts_rt_79de1c1b-e66e-4dd1-a2cf-189efbf21aa7=AAMC; expires=Wed, 10 Sep 2025 23:37:37 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0d73bb8f423c272f8206f468a187cda1 ac92ec37ff809a72dc2a4ca83c0e3ffe0e465075 17262f224cda9bd7912f9bbbf2b674cb97d997485ff1f5040e4cfe73a04360ce
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "17262F224CDA9BD7912F9BBBF2B674CB97D997485FF1F5040E4CFE73A04360CE"
Last-Modified: Tue, 10 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15595
Expires: Wed, 11 Sep 2024 03:57:34 GMT
Date: Tue, 10 Sep 2024 23:37:39 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0d73bb8f423c272f8206f468a187cda1 ac92ec37ff809a72dc2a4ca83c0e3ffe0e465075 17262f224cda9bd7912f9bbbf2b674cb97d997485ff1f5040e4cfe73a04360ce
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "17262F224CDA9BD7912F9BBBF2B674CB97D997485FF1F5040E4CFE73A04360CE"
Last-Modified: Tue, 10 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15595
Expires: Wed, 11 Sep 2024 03:57:34 GMT
Date: Tue, 10 Sep 2024 23:37:39 GMT
Connection: keep-alive
|
|
| www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html | 143.204.55.54 | 200 OK | 16 kB |
URL User Request GET HTTP/2www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html IP143.204.55.54:443
CertificateIssuerAmazon Subjectrencontreconfidentielle.com Fingerprint15:53:9F:D8:FA:51:CC:73:EB:D3:AA:69:80:F9:A9:C1:D2:6C:F8:D9 ValiditySun, 30 Jun 2024 00:00:00 GMT - Wed, 30 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html HTTP/1.1
Host: www.rencontreconfidentielle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Tue, 10 Sep 2024 04:43:42 GMT
last-modified: Fri, 23 Aug 2024 09:33:07 GMT
etag: W/"f3418495a7e37ea0b5c0b8ca04e2fd9b"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _l8g1Kg7f_HTBxL2425eKXcbk3JLrFn_wkVkIccWYcYSUVI9Tl2x7w==
age: 68036
X-Firefox-Spdy: h2
|
|
| trk.mobzaza.com/click.php?event9=1 | 172.67.134.205 | 200 OK | 0 B |
URL GET HTTP/2trk.mobzaza.com/click.php?event9=1 IP172.67.134.205:443
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerGoogle Trust Services Subjectmobzaza.com Fingerprint31:36:3A:85:7F:BD:1A:7F:58:27:A9:A6:30:E4:25:A2:60:1D:57:B5 ValiditySun, 25 Aug 2024 19:07:04 GMT - Sat, 23 Nov 2024 19:07:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click.php?event9=1 HTTP/1.1
Host: trk.mobzaza.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Sep 2024 23:37:37 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1zhpMjZcweX0EO0Z2PI92pvIX%2B6dojzVdPTTiJoKkz9nGM7u0eBimoXqvjVUjDUEX1yajHE%2BVqIhCwl3Su%2BUvPMGW42lIs%2BxK%2BS%2Fwj5CLEZXtuyKAOrrlVDM4ZRYb7JnL4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c133f3afb295688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.rencontreconfidentielle.com/favicon.ico | 143.204.55.54 | 403 Forbidden | 243 B |
URL GET HTTP/2www.rencontreconfidentielle.com/favicon.ico IP143.204.55.54:443
Requested byhttps://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html CertificateIssuerAmazon Subjectrencontreconfidentielle.com Fingerprint15:53:9F:D8:FA:51:CC:73:EB:D3:AA:69:80:F9:A9:C1:D2:6C:F8:D9 ValiditySun, 30 Jun 2024 00:00:00 GMT - Wed, 30 Jul 2025 23:59:59 GMT
File typeXML document, ASCII text, with no line terminators Hash893b27dc003076771bccc38a767c279b 41b20fc8a9f0c2faf96f6a68f5ff4585b336c796 c836b6d3c773503b1fb1fd75ca99d491fe63f42d11a980498d07e4c60c655814
GET /favicon.ico HTTP/1.1
Host: www.rencontreconfidentielle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rencontreconfidentielle.com/fr3/cd-fr-tpl_3-mob-7s_toon_bgb/index.html
Cookie: model=yes
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
date: Tue, 10 Sep 2024 23:37:37 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DXelYyi_3PCgKBcR5R_m9ZgO87kM24t3TipraSn7M158CdSyAwHh7Q==
X-Firefox-Spdy: h2
|
|
0.0.0.0