ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
200 OK 7.2 kB URL User Request GET HTTP/1.1 ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
IP
ASN #203639 Tekka Digital SA
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (531), with CRLF line terminators
Hash 9b43216058cb21c5fe5eb67c07799302
6fb1d3fba755cfc1ed3fdb27fe2188fe13fa5e7e
5acdcbc11e07b30ae4b419cf38fbb755d5813e1057a1cdc8660676ae0e3af816
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40 HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:02 GMT
Content-Type: text/html
Content-Length: 7215
Connection: keep-alive
set-cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4; path=/
cache-control: private, no-transform
ladysecret.life/media/dating/toon2/css/animate.min.css
200 OK 53 kB URL GET HTTP/1.1 ladysecret.life/media/dating/toon2/css/animate.min.css
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type ASCII text, with very long lines (52592)
Hash 178b651958ceff556cbc5f355e08bbf1
97afa151569f046b2e01f27c1871646e9cd87caf
8fe3fa119255adb5e0c12479331f9e092e85bcff56ab6ecc0510bfa2056b898d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/css/animate.min.css HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: text/css
Content-Length: 52789
Connection: keep-alive
ETag: "178b651958ceff556cbc5f355e08bbf1"
Last-Modified: Wed, 20 Sep 2023 15:22:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DF7DAAF14ACD0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134506#144014750/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ladysecret.life/media/exit-new/exit1.js
200 OK 3.5 kB URL GET HTTP/1.1 ladysecret.life/media/exit-new/exit1.js
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 625e5e2950612f771e246beb33c9ea61
e4fc251c6c000496c285f8dc3fa097040b031681
618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/exit-new/exit1.js HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: application/javascript
Content-Length: 3473
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "625e5e2950612f771e246beb33c9ea61"
Last-Modified: Mon, 20 Feb 2023 09:32:43 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179DF799970DE5CF
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843279#623580037/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ladysecret.life/util/utils.js
200 OK 7.5 kB URL GET HTTP/1.1 ladysecret.life/util/utils.js
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 01816d15ca03032751161a746e2fb7c3
dcc72ea5fa1356490ba473288159df9786b4a3c3
8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/utils.js HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: text/javascript
Content-Length: 7512
Connection: keep-alive
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Tue, 21 Nov 2023 12:30:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DF79136194456
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223579#380129542/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ladysecret.life/media/dating/toon2/css/style.css
200 OK 8.6 kB URL GET HTTP/1.1 ladysecret.life/media/dating/toon2/css/style.css
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type ASCII text, with CRLF line terminators
Hash 549edaff59c582a6a3ca91f95c60ea71
a9edcba7d667efcfd812bcd413ccbdcb2b67cc88
b28722475035fc8fdc751034c2df8f49d66eb25cf28cf031c4e7357414a131da
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/css/style.css HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: text/css
Content-Length: 8608
Connection: keep-alive
ETag: "549edaff59c582a6a3ca91f95c60ea71"
Last-Modified: Tue, 21 Nov 2023 12:30:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DF7DAAEF61054
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223378#43689163/gid:0/gname:root/mode:33279/mtime:1655387458#962597414/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.962597414Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ladysecret.life/cookie/js.cookie.js
200 OK 4.3 kB URL GET HTTP/1.1 ladysecret.life/cookie/js.cookie.js
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type ASCII text, with very long lines (1709), with CRLF line terminators
Hash a7e9883924072f15259de6888d5ef515
7f4f6e5938e68f55aef81e0cd0145f008cd28382
985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cookie/js.cookie.js HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: application/javascript
Content-Length: 4264
Connection: keep-alive
ETag: "a7e9883924072f15259de6888d5ef515"
Last-Modified: Wed, 20 Sep 2023 15:19:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DF79A43929524
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#248036972/gid:0/gname:root/mode:33188/mtime:1658397637#354375000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-21T10:00:37.354375Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ladysecret.life/media/bb.js
200 OK 639 B URL GET HTTP/1.1 ladysecret.life/media/bb.js
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type ASCII text, with very long lines (639), with no line terminators
Hash 0d553e4bac91c74bfee2dbabba61e99e
5af71e2377c9c012a7826a695f2724901941b19b
1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/bb.js HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: text/javascript
Content-Length: 639
Connection: keep-alive
ETag: "0d553e4bac91c74bfee2dbabba61e99e"
Last-Modified: Tue, 21 Nov 2023 12:29:38 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DF790F1434D7F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1699191752#883882671/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ladysecret.life/media/dating/toon2/images/123.jpg
200 OK 179 kB URL GET HTTP/1.1 ladysecret.life/media/dating/toon2/images/123.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1069, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=620], progressive, precision 8, 620x1032, components 3\012- data
Size 179 kB (179176 bytes)
Hash a2d245e1c43c61ca34bea001510dd6d9
7a7e0dbf8bb132958fecd093e6741ffe49d060b5
f6113b1f6bdd279404fd53c920f6ba411b66a897db4c67e16d2129af22370a57
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/images/123.jpg HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: image/jpeg
Content-Length: 179176
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "a2d245e1c43c61ca34bea001510dd6d9"
Last-Modified: Mon, 20 Feb 2023 09:32:28 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179DF729D76412D8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843394#511755078/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ladysecret.life/media/dating/toon2/js/jquery-2.2.4.min.js
200 OK 86 kB URL GET HTTP/1.1 ladysecret.life/media/dating/toon2/js/jquery-2.2.4.min.js
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/js/jquery-2.2.4.min.js HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: application/javascript
Content-Length: 85578
Connection: keep-alive
ETag: "2f6b11a7e914718e0290410e85366fe9"
Last-Modified: Wed, 20 Sep 2023 15:22:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DF729D5047E7A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134506#148014762/gid:0/gname:root/mode:33279/mtime:1655387458#954597395/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.954597395Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext
200 OK 1.9 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext
IP
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 2f46d770afd724d6028bdcddb41d6892
e4fcac0308ebd0a879e96ff1bbc32961897361e9
64097360d31950c922e0489cf1c364f6ec18ce51c09ba2d86347c88e5fba6ffa
GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 15:08:03 GMT
date: Tue, 05 Dec 2023 15:08:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ladysecret.life/media/dating/toon2/images/bg.jpg
200 OK 120 kB URL GET HTTP/1.1 ladysecret.life/media/dating/toon2/images/bg.jpg
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=660, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1279], progressive, precision 8, 1279x660, components 3\012- data
Size 120 kB (119754 bytes)
Hash 842a5629f17ec8342230aa12ea32291a
0f2390a3eda1a71d676f1cd1866956fef8e77090
1c7361fcec43aecb4c517914dde9ecbf1fe1aaa0969411a7a383391236f335f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/images/bg.jpg HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/media/dating/toon2/css/style.css
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Content-Type: image/jpeg
Content-Length: 119754
Connection: keep-alive
ETag: "842a5629f17ec8342230aa12ea32291a"
Last-Modified: Tue, 21 Nov 2023 12:30:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DF72CC54F4189
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223378#83689252/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Wed, 04 Dec 2024 15:08:03 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ladysecret.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 21:59:03 GMT
expires: Tue, 03 Dec 2024 21:59:03 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
age: 61740
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ladysecret.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:00:51 GMT
expires: Fri, 29 Nov 2024 04:00:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
age: 472032
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ladysecret.life/favicon.ico
204 No Content 0 B URL GET HTTP/1.1 ladysecret.life/favicon.ico
IP
ASN #203639 Tekka Digital SA
Requested by https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Certificate IssuerLet's Encrypt
Subjectladysecret.life
FingerprintF0:0D:CD:6A:40:99:6E:84:2D:DC:13:88:C8:3C:48:64:08:8B:89:61
ValidityThu, 12 Oct 2023 20:15:18 GMT - Wed, 10 Jan 2024 20:15:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: ladysecret.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ladysecret.life/?u=4rv8wwn&o=83akrhk&t=Amfibi2&cid=4r405njl4t40
Cookie: sid=t1~o5hbab2cfwzlqmwfct5dcmo4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 05 Dec 2023 15:08:03 GMT
Connection: keep-alive
Cache-Control: no-transform
185.155.186.18
142.250.74.106