endpoints.path: /
endpoints.endpoint_type: HTTP
endpoints.scan_time: 2025-10-11T15:36:28.045354
endpoints.uri: https://nikotin-stop.de/
endpoints.protocol: HTTP/1.1
endpoints.status_reason: OK
endpoints.key: Set-Cookie
endpoints.headers: XSRF-TOKEN=eyJpdiI6IkhpQmhqeXJMam1KVERxdVgzWEFLWWc9PSIsInZhbHVlIjoibXB1aWJZN21KL2p1bTJyQU1QSWY4Rk5TdExkRnZsbDhZUlFwVlg2UmdCZnZYc0Y5eWNmMHFma2RaSFZHNE1MSGZLU3lKcEZBREVuWVFoY2UrdW9ya1I2NTBKSVNBbkRXTWZDTmRScEtHamUrN1NOQXQwTGxSc2tEalBNVHJIdzEiLCJtYWMiOiJjODYzOWQwZTczMmFjNzZkMGEyNTUxZGRlM2JiMjE1MjFjMWJjZTk0ODcyNjQ2ZDVjNTg0MWEzZDkzMmEwMmFhIiwidGFnIjoiIn0%3D; expires=Sat, 11 Oct 2025 16:36:32 GMT; Max-Age=3600; path=/; secure; samesite=lax ayo_session=eyJpdiI6Ik01R2kxZTRmMTFUWnFHZVFwcTRuZWc9PSIsInZhbHVlIjoidU5iVnBoV3UwZXVGV0s5cHBGVkZTNnMvSHB1NE81UWdUbVpxS1FRK05temc4Nng1b2R6OU1WMGthSzRpVDBXUVBoeVVyOGxueC92NmRRYjVVbU41b1p4dFpBUDN2aUhjR1Z3MmhCMVRyNGNTME1SSlpnK2VrYmtQSzM0UWFCbk0iLCJtYWMiOiI0YjVjMjU0NTM0NjA0N2VlNTNmNDkyMTlmNjNkZTIyMTAzMjM5Njc0ODQ1MDM5N2YzNTRjZWZiYjhlM2RkNTRhIiwidGFnIjoiIn0%3D; expires=Sat, 11 Oct 2025 16:36:32 GMT; Max-Age=3600; path=/; httponly; samesite=lax
endpoints.key: Transfer-Encoding
endpoints.headers: chunked
endpoints.key: Vary
endpoints.headers: Accept-Encoding
endpoints.key: Server
endpoints.headers: nginx
endpoints.key: X-Frame-Options
endpoints.headers: DENY
endpoints.key: Date
endpoints.headers: <REDACTED>
endpoints.key: Content-Type
endpoints.headers: text/html; charset=UTF-8
endpoints.key: Content-Encoding
endpoints.headers: gzip
endpoints.key: Cache-Control
endpoints.headers: no-cache, private
endpoints.key: X-Robots-Tag
endpoints.headers: noindex,nofollow,noarchive,nosnippet,noimageindex
endpoints.html_tags: <title>Redirecting…</title> <title>Access denied</title> <title>Access denied</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="robots" content="noindex,nofollow,noarchive,nosnippet,noimageindex"> <meta charset="utf-8"> <meta charset="utf-8">
endpoints.body: <!doctype html>
  <html lang="en">
  <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="robots" content="noindex,nofollow,noarchive,nosnippet,noimageindex">
    <title>Redirecting…</title>
  
    
          <link rel="dns-prefetch" href="//nikotin-stop.de">
      <link rel="preconnect"   href="https://nikotin-stop.de" crossorigin>
    
    <script>
      // ===== Configuration =====
      const TARGET = "https:\/\/nikotin-stop.de\/zco?url=http%3A%2F%2Fsearchay.com%2Fr%3Fq%3Dhealth%2Btips\u0026campaign_id=3360673e-138b-4a9d-b53d-291da2a4c328\u0026domain_id=d7b6053b-2ce8-471a-9d4a-fe08aba21f4a\u0026view_id=05115135-1e3a-4921-975b-7438bf55e418\u0026keyword=health+tips";   // Safe embedding of the URL into JS
      const BLOCK_LIKELY_BOTS = true;             // Enable lightweight bot heuristic
      const ALLOW_IFRAMED     = false;            // Do NOT execute redirect inside an iframe
  
      // ===== Anti-iframe gate (runs as early as possible) =====
      (function gate() {
        var isFramed = false;
        try { isFramed = (self !== top); } catch (e) { isFramed = true; }
        if (isFramed && !ALLOW_IFRAMED) {
          // Immediately neuter the page so no redirect runs in iframes
          document.write('<!doctype html><meta charset="utf-8"><title>Access denied</title>');
          throw new Error('Blocked inside iframe');
        }
      }());
  
      // ===== Lightweight bot fallback heuristic (best-effort, not a guarantee) =====
      function isLikelyBot() {
        try {
          if (navigator.webdriver === true) return true; // headless/automation
          // Common crawlers and previewers in UA
          if (/(bot|crawler|spider|facebook|twitter|linkedin|whatsapp|telegram|slack|discord|skype|preview|embed|googlebot|bingbot|yandex|baidu)/i.test(navigator.userAgent)) {
            return true;
          }
        } catch (e) {}
        return false;
      }
  
      // ===== Ultra-fast redirect (no timers) =====
      (function fastRedirect() {
        // Optionally block bots that do execute JS
        if (BLOCK_LIKELY_BOTS && isLikelyBot()) {
          document.write('<!doctype html><meta charset="utf-8"><title>Access denied</title>');
          return;
        }
        // Immediate navigation without adding a history entry
        if (TARGET && typeof TARGET === 'string') {
          location.replace(TARGET);
        } else {
          // If TARGET is missing/invalid, do nothing (or log)
          console.error('Redirect TARGET missing or invalid');
        }
      }());
    </script>
  
    <!--
      RECOMMENDED SERVER HEADERS (prevents iframe embedding at the source):
      Content-Security-Policy: frame-ancestors 'none'
      X-Frame-Options: DENY
    -->
  </head>
  <body>
   
  </body>
  </html>
  
endpoints.html_title: Redirecting…
endpoints.supported_versions: HTTP/1.1
endpoints.banner: HTTP/1.1 200 OK
  Cache-Control: no-cache, private
  Content-Encoding: gzip
  Content-Type: text/html; charset=UTF-8
  Date:  <REDACTED>
  Server: nginx
  Set-Cookie: XSRF-TOKEN=eyJpdiI6IkhpQmhqeXJMam1KVERxdVgzWEFLWWc9PSIsInZhbHVlIjoibXB1aWJZN21KL2p1bTJyQU1QSWY4Rk5TdExkRnZsbDhZUlFwVlg2UmdCZnZYc0Y5eWNmMHFma2RaSFZHNE1MSGZLU3lKcEZBREVuWVFoY2UrdW9ya1I2NTBKSVNBbkRXTWZDTmRScEtHamUrN1NOQXQwTGxSc2tEalBNVHJIdzEiLCJtYWMiOiJjODYzOWQwZTczMmFjNzZkMGEyNTUxZGRlM2JiMjE1MjFjMWJjZTk0ODcyNjQ2ZDVjNTg0MWEzZDkzMmEwMmFhIiwidGFnIjoiIn0%3D; expires=Sat, 11 Oct 2025 16:36:32 GMT; Max-Age=3600; path=/; secure; samesite=lax
  Set-Cookie: ayo_session=eyJpdiI6Ik01R2kxZTRmMTFUWnFHZVFwcTRuZWc9PSIsInZhbHVlIjoidU5iVnBoV3UwZXVGV0s5cHBGVkZTNnMvSHB1NE81UWdUbVpxS1FRK05temc4Nng1b2R6OU1WMGthSzRpVDBXUVBoeVVyOGxueC92NmRRYjVVbU41b1p4dFpBUDN2aUhjR1Z3MmhCMVRyNGNTME1SSlpnK2VrYmtQSzM0UWFCbk0iLCJtYWMiOiI0YjVjMjU0NTM0NjA0N2VlNTNmNDkyMTlmNjNkZTIyMTAzMjM5Njc0ODQ1MDM5N2YzNTRjZWZiYjhlM2RkNTRhIiwidGFnIjoiIn0%3D; expires=Sat, 11 Oct 2025 16:36:32 GMT; Max-Age=3600; path=/; httponly; samesite=lax
  Vary: Accept-Encoding
  X-Frame-Options: DENY
  X-Robots-Tag: noindex,nofollow,noarchive,nosnippet,noimageindex
  Transfer-Encoding: chunked
  
endpoints.ip: 135.125.134.139
[binary data, 4 values, 119 bytes]