Overview

URL gaestezimmer.2glaser.tk/
IP195.20.40.194
ASNAS31624 Verotel International B.V.
Location Netherlands
Report completed2018-11-27 04:53:26 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-11-27 04:52:52 CET 2 Client IP  35.186.233.234 ET POLICY HTTP Request to a *.tk domain
2018-11-27 04:52:57 CET 2 Client IP  35.186.233.234 ET POLICY HTTP Request to a *.tk domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 195.20.40.194

Date UQ / IDS / BL URL IP
2019-06-08 23:19:22 +0200
0 - 4 - 0 2glaser.tk/ 195.20.40.194
2019-06-07 08:24:22 +0200
0 - 1 - 0 gaestezimmer.2glaser.tk/ 195.20.40.194
2019-05-30 06:36:05 +0200
0 - 1 - 0 2glaser.tk/ 195.20.40.194
2019-05-30 06:28:23 +0200
0 - 2 - 0 gaestezimmer.2glaser.tk/ 195.20.40.194
2019-05-28 20:02:02 +0200
0 - 2 - 0 makeservers.tk/gsxserverguard.exe 195.20.40.194
2019-05-20 19:07:41 +0200
0 - 1 - 0 makeservers.tk/gsxserverguard.exe 195.20.40.194
2019-05-16 13:59:22 +0200
0 - 4 - 0 2glaser.tk/ 195.20.40.194
2019-05-15 11:30:43 +0200
0 - 2 - 0 gaestezimmer.2glaser.tk/ 195.20.40.194
2019-04-19 04:40:30 +0200
0 - 0 - 1 desconsinc.tk/mine/segs.exe 195.20.40.194
2019-04-18 16:03:15 +0200
0 - 0 - 1 desconsinc.tk/ambiss/biss.exe 195.20.40.194

Last 10 reports on ASN: AS31624 Verotel International B.V.

Date UQ / IDS / BL URL IP
2019-06-20 08:08:39 +0200
0 - 0 - 4 www.streamers.gq/ 195.20.55.36
2019-06-19 21:26:18 +0200
0 - 2 - 0 novelhypertensiontreatment.gq 195.20.55.185
2019-06-19 16:47:45 +0200
0 - 2 - 0 fortunetent.tk/ 195.20.44.53
2019-06-19 16:37:39 +0200
0 - 1 - 0 balliwood.ml 195.20.54.105
2019-06-18 23:11:05 +0200
0 - 0 - 0 wecandothis.gq/ 195.20.49.111
2019-06-14 14:35:27 +0200
0 - 2 - 0 195.20.43.151 195.20.43.151
2019-06-12 01:05:32 +0200
0 - 1 - 1 https://huaweiphones.ml/index/once/one/css/ 195.20.49.134
2019-06-11 01:15:50 +0200
0 - 2 - 1 redesabilooety.tk/555 195.20.47.247
2019-06-11 01:15:45 +0200
0 - 2 - 1 helpsupp603111234567890.tk/index.html 195.20.42.208
2019-06-11 01:12:53 +0200
0 - 2 - 1 toobuti.tk/vpp 195.20.44.4

No other reports on domain: 2glaser.tk



JavaScript

Executed Scripts (11)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (36)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: gaestezimmer.2glaser.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.20.40.194
HTTP/1.1 203 Non-Authoritative Information
Content-Type: text/html;charset=UTF-8
                                        
Server: nginx
Date: Tue, 27 Nov 2018 03:52:51 GMT
Content-Length: 677
Connection: keep-alive
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Set-Cookie: JSESSIONID=FF922C23F38B07E6611F79BE60C78780; Path=/; HttpOnly
X-Server: 7e89e25f690e


--- Additional Info ---
Magic:  HTML document text
Size:   677
Md5:    f32ec366f6b1da23b69386212d0eb4b8
Sha1:   c8fb42f1a6118123b90a040f5b6ab86ebaaca691
Sha256: e212f19161701451be6d48a24ca39b88c936b952c207fd91808be910b5114be7
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: gaestezimmer.2glaser.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: JSESSIONID=FF922C23F38B07E6611F79BE60C78780

                                         
                                         195.20.40.194
HTTP/1.1 429 Too Many Requests
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Tue, 27 Nov 2018 03:52:51 GMT
Content-Length: 178
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    403214dab1dc8abd38496301eff419c1
Sha1:   b4c91f28fc64e602d63ae40f9e8ec23f2cd73c45
Sha256: ac061aeb038d56f49ccd10f7684c8f20b7a75d965279217bdd9665c65992bbc9
                                        
                                            GET /p/?d=GAESTEZIMMER.2GLASER.TK&i=77.40.129.123&c=47&ro=0&ref=unknown&_=1543290771519 HTTP/1.1 
Host: domain.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gaestezimmer.2glaser.tk/

                                         
                                         217.115.151.99
HTTP/1.0 302 Found
Content-Type: text/html; charset=ISO-8859-1
                                        
Date: Tue, 27 Nov 2018 03:52:51 GMT
Server: Apache/1.3.41 (Unix) mod_perl/1.30
Location: http://www.dot.tk/
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gaestezimmer.2glaser.tk/

                                         
                                         35.186.233.234
HTTP/1.1 302 Found
                                        
Server: nginx/1.11.9
Transfer-Encoding: chunked
Set-Cookie: mydottk_languagenr=0; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:51 GMT dottyLn=en; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:51 GMT wwwLn=en; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:51 GMT
Date: Tue, 27 Nov 2018 03:52:51 GMT
Location: http://www.dot.tk/en/index.html?lang=en
Via: 1.1 google


--- Additional Info ---

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /en/index.html?lang=en HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gaestezimmer.2glaser.tk/
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:07:05 GMT
Content-Length: 24164
X-GUploader-UploadID: AEnB2UoqpoNGmvR2RZkENL_WMzQPzmv9Wk5c_9qEuB-iFwv0UQ1oI2dvpTudgxfBzLnydPhTLS4RbEgWzZaliMpO_AHntJB7rYEYPdNpm5z5cYbND1ek3GI
Expires: Tue, 27 Nov 2018 04:07:05 GMT
Last-Modified: Wed, 08 Feb 2017 16:12:54 GMT
Etag: "c18547c6af07588201e6fb4c5c305553"
x-goog-generation: 1486570374609937
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 24164
Content-Language: en
x-goog-hash: crc32c=A/RRCw==, md5=wYVHxq8HWIIB5vtMXDBVUw==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 2746
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   24164
Md5:    c18547c6af07588201e6fb4c5c305553
Sha1:   9469da6afe1f452401d990e3f4b582cb3b530304
Sha256: 993dbb4fcd63aa077b64b6196526201741baa8d71e956c0db7930a1032fa5899
                                        
                                            GET /css/reset.css HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:11:05 GMT
Content-Length: 3924
X-GUploader-UploadID: AEnB2Uqees38xhT1TTKAr2GFmW67rt2FiExyPqAzmN28mzhW8Vcj7gDGh6HGLHdry1zuUGRPx4djeMSyE69zzaMB9lpp7UJjkg
Expires: Tue, 27 Nov 2018 04:11:05 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:36 GMT
Etag: "8219336bd4c8c7266d6ee6d8cbbc57fd"
x-goog-generation: 1465472196758000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3924
Content-Language: en
x-goog-hash: crc32c=Dlg3aQ==, md5=ghkza9TIxyZtbubYy7xX/Q==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 2507
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  ASCII C program text, with very long lines
Size:   3924
Md5:    8219336bd4c8c7266d6ee6d8cbbc57fd
Sha1:   bfbd30e06fe1a5f4fcd84b3f77327d4bc32e4c0b
Sha256: a3216d8151c1701c2bb64a7c24f19e05a2e73eef994f3bfb54cc85d4fd093ef0
                                        
                                            GET /js/rotatingbg.js HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:11:05 GMT
Content-Length: 1751
X-GUploader-UploadID: AEnB2UoIiSqqXxzsAeD-LOVkChqkV7wKl_8BTCNOwKVsbi1Q20XEeTSgZcZkf8XLralao3S1Cy8PXMRx9fcHoYpdzKMvs5smWw
Expires: Tue, 27 Nov 2018 04:11:05 GMT
Last-Modified: Wed, 08 Feb 2017 16:12:54 GMT
Etag: "313c0f5d884c7f780d69abc422ea0e44"
x-goog-generation: 1486570374978085
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1751
Content-Language: en
x-goog-hash: crc32c=qQ23fg==, md5=MTwPXYhMf3gNaavEIuoORA==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 2507
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1751
Md5:    313c0f5d884c7f780d69abc422ea0e44
Sha1:   a662cc07beded0473e46739737ce322f28442c19
Sha256: 0d0529bb9ba7a196880355c2f59828de90a09733065e08c98cd8e4f6f3758ffd
                                        
                                            GET /ajax/libs/jquery/2.0.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29440
Date: Mon, 12 Nov 2018 22:41:56 GMT
Expires: Tue, 12 Nov 2019 22:41:56 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1228256


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29440
Md5:    28af7f5e92a03473c5dce4c935ce3050
Sha1:   33d1ea00351b34426b7cdab04c41038b403b2016
Sha256: ac81a37b4a51234bcd7d53ad9b26513ca6a07b50a9aa4060791d37e528984a0c
                                        
                                            GET /css/style.css HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:31:07 GMT
Content-Length: 20287
X-GUploader-UploadID: AEnB2Uofbp4ymp6EZqG-Cx_rWzU-tfaAdN424srN0tYBEIkySeQIiKvxQKNTYPBnPNgv1kbTMEnpV4_RrP3tkkCCRbE4rTX4-g
Expires: Tue, 27 Nov 2018 04:31:07 GMT
Last-Modified: Wed, 08 Feb 2017 16:12:54 GMT
Etag: "1a4bc294c01009244e93bc9981945932"
x-goog-generation: 1486570374566291
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 20287
Content-Language: en
x-goog-hash: crc32c=QtS1mQ==, md5=GkvClMAQCSROk7yZgZRZMg==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 1305
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   20287
Md5:    1a4bc294c01009244e93bc9981945932
Sha1:   01a125067639cb5966291b33a5a77f2c38b4be33
Sha256: 14b25cff57af5967c41fd02971a342972037a5096f7c665b505e4b2e488ac333
                                        
                                            GET /css/availability.css HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:17:07 GMT
Content-Length: 22354
X-GUploader-UploadID: AEnB2UolZgxE0lPN3Q3qKHG6oJ9R3ieEsbWBHxtE1pfMpCOuFf5a0AwuhFv9rQ7b4MAGs4vpJZUeLRFpBYFbShrzXg6oPsWsPQ
Expires: Tue, 27 Nov 2018 04:17:07 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:37 GMT
Etag: "86d246c9551d66a032950723f08ac7e1"
x-goog-generation: 1465472197621000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 22354
Content-Language: en
x-goog-hash: crc32c=RNiRqw==, md5=htJGyVUdZqAylQcj8IrH4Q==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 2145
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   22354
Md5:    86d246c9551d66a032950723f08ac7e1
Sha1:   3f1a791aaa19aa0e898c1a7aa74694f579d09a24
Sha256: 176859b8b2c7587c8f2f59fd68a1842641ca4bc3be58e2e15b88d162d1bdfada
                                        
                                            GET /ui/1.11.2/jquery-ui.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         205.185.208.52
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 27 Nov 2018 03:52:52 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 113672
Last-Modified: Fri, 24 Oct 2014 00:16:08 GMT
Server: nginx
Etag: W/"54499a48-7296c"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1543290772.dop009.sk1.t,1543290772.cds046.sk1.c


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   113672
Md5:    e6e59c2adcb2d2ffddd4473670a793f0
Sha1:   0a39a7ada2975e109e1ac5b9ff389d16a42964b0
Sha256: b426d31b38119c3c13198b79597976f60024eafb459e356313925e242bf10a92
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Nov 2018 03:52:52 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a57e88527aed946af1a0ccf236d1338a
Sha1:   0870f11f0e1bcef34da68c7aa5274d0be6f37f71
Sha256: a86422b4c65b53f1abbc2ea8b94a0c7e24ab5e8028d6ae3bdea87e0e35b47c71
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Nov 2018 03:52:52 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 23 Nov 2018 03:41:19 GMT
Etag: 87BCF3E84931FA05A33F43B422A79409ECB67346
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=257857
Expires: Fri, 30 Nov 2018 03:30:29 GMT
Date: Tue, 27 Nov 2018 03:52:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d932110f045a82ac3a05d0fbefdf5df8
Sha1:   87bcf3e84931fa05a33f43b422a79409ecb67346
Sha256: cc62960691fabf0d8ff9c9aff25480da557da4af3192eeae992a42fb2c579484
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 20 Nov 2018 14:14:26 GMT
Etag: 872EDE14E9ED29ED14D448013DEFD1F57B745779
X-OCSP-Responder-ID: (null)
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=36641
Expires: Tue, 27 Nov 2018 14:03:33 GMT
Date: Tue, 27 Nov 2018 03:52:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    d636243250bb3aa83775f34de4d88557
Sha1:   872ede14e9ed29ed14d448013defd1f57b745779
Sha256: 82458de7bef0879cb9f2a8b8ef664887292241fe9c266a68e177c9c19c95226f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 20 Nov 2018 14:14:26 GMT
Etag: D36AB48E7F2F65F29AE6DB32EB9CEEF3BA821BE7
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=36637
Expires: Tue, 27 Nov 2018 14:03:29 GMT
Date: Tue, 27 Nov 2018 03:52:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8b953e414faf619b60bdd2aa97fac22a
Sha1:   d36ab48e7f2f65f29ae6db32eb9ceef3ba821be7
Sha256: f76d14e9694723acc0690551575bf56a36c784a3ac2aea2a7e0755ee809ffb0e
                                        
                                            GET /ajax/libs/jquery/1.6.4/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 32222
Date: Mon, 12 Nov 2018 22:33:10 GMT
Expires: Tue, 12 Nov 2019 22:33:10 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1228782
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32222
Md5:    a015b68cda88f520df0928508a54a7c0
Sha1:   a848deb0d23d4d7d9284713d63c166b83224ef79
Sha256: cbbe607200143bcb0190054543cd723ec1317aac43ab5f03a291dc9ab6163074
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sat, 24 Nov 2018 01:31:11 GMT
Etag: 07A67235EFDC976E6DB1F10689B30FB3B2F4EF4D
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=336447
Expires: Sat, 01 Dec 2018 01:20:19 GMT
Date: Tue, 27 Nov 2018 03:52:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    19fc096feaddb0ec84fda04a2c9a5923
Sha1:   07a67235efdc976e6db1f10689b30fb3b2f4ef4d
Sha256: 5b313d8917609508e0653354d9da41e164e5f83c65b9831006c3450663185249
                                        
                                            GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Date: Tue, 27 Nov 2018 03:52:52 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1518903977"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 4292
Last-Modified: Sat, 17 Feb 2018 21:46:17 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4292
Md5:    18902a41533d4e631e65a8d0c1f61282
Sha1:   c956a0dc434b90d06c2528b76c4e5273a30f9ac0
Sha256: 09b434cbaea55c0879a0598d4e3ae8b7ecd3a3a1edd8a995e600f4064ceb5454
                                        
                                            GET /css?family=Lato:400,300,100,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 27 Nov 2018 03:52:52 GMT
Date: Tue, 27 Nov 2018 03:52:52 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   267
Md5:    c19afbae780ee2fe8eac1f4df92c4430
Sha1:   2ea8d0445eb1f296ee6cef2adda4df8c87b25f5c
Sha256: 4f4a041e6f1e1576d1e9ee6e41de110a32ece8633b52d9a31edcdfacf9d70b60
                                        
                                            GET /images.v2/logo.png HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:23:09 GMT
Content-Length: 9309
X-GUploader-UploadID: AEnB2UrVLvpbubdfPfkxWrZDPnAmle__xlz6x1sNmizOsuchIyGlhHWM97Xb8CJnqje3Ea3S9Xx4844IkbJuZhgj27E16aE-Kg
Expires: Tue, 27 Nov 2018 04:23:09 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:46 GMT
Etag: "cf869c0a6dbfa71c1981c35d85fd8053"
x-goog-generation: 1465472206459000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9309
Content-Language: en
x-goog-hash: crc32c=i689kw==, md5=z4acCm2/pxwZgcNdhf2AUw==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 1783
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  PNG image, 300 x 200, 8-bit/color RGBA, non-interlaced
Size:   9309
Md5:    cf869c0a6dbfa71c1981c35d85fd8053
Sha1:   b47d8e7d26cf0fc2989e79ada637ecf4a3df4328
Sha256: 8e03bc9d923ade686eb09696983c7a6961f75595178fda35681f5f561b03c5d1

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /includes/domains/fn-available.js HTTP/1.1 
Host: my.freenom.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         52.212.70.141
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.10.3
Date: Tue, 27 Nov 2018 03:52:52 GMT
Content-Length: 3302
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache="set-cookie"
Content-Encoding: gzip
Etag: "4a9a-57a23f39deffe-gzip"
Last-Modified: Thu, 08 Nov 2018 09:35:13 GMT
Set-Cookie: AWSELB=BB755F330E44FE27E970EAECFCC78F629EB1F82E68CB93B56D804F0F511C3B74F1C430525E0202DF70A8B5C0D9E31B198842717239B5BA9B18B99F611C4B22E5CA841ED9EF;PATH=/
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3302
Md5:    3ebecd9c78ac87ed9374fdc387619c00
Sha1:   525cce5f94d0816cbfc5cae71ed72fa3ac676aaa
Sha256: b6453ad8d9e58cdb014340fb2a3a3179316593027087257ee9099d57e0eddea4
                                        
                                            GET /external/jsrender.min.js HTTP/1.1 
Host: my.freenom.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         52.212.70.141
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.10.3
Date: Tue, 27 Nov 2018 03:52:52 GMT
Content-Length: 16069
Connection: keep-alive
x-amz-id-2: alatdYAzzZFNU3LK+zWbTDGzArjaA8cs592M9/4rPTR24qizzy+uzhD9pbJYihFE021jB6tiR1w=
x-amz-request-id: 5F0EE38C1246A993
Last-Modified: Wed, 16 Mar 2016 12:40:52 GMT
Etag: "36e17e14ff43dfd5349677522b3821a3"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C++ program text, with very long lines
Size:   16069
Md5:    36e17e14ff43dfd5349677522b3821a3
Sha1:   1eef675b40347067eefb8fd55e9b899fa9cd4216
Sha256: 5bf5e6b88eefc8f7ef5f4c00f9496657f3be732fd74c10a895d9a24c9a753e48
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 27 Nov 2018 02:54:01 GMT
Expires: Tue, 27 Nov 2018 04:54:01 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17404
Age: 3531
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17404
Md5:    33586531225d561faadda61de818c510
Sha1:   9a3b5ffbdc4071557def3d9609eee6ad3c52d1e1
Sha256: 521d2fb506ca60463e914fd138e092f935579d31436dcff3cc6a1d216d06ef82
                                        
                                            GET /r/collect?v=1&_v=j72&a=1299938898&t=pageview&_s=1&dl=http%3A%2F%2Fwww.dot.tk%2Fen%2Findex.html%3Flang%3Den&dr=http%3A%2F%2Fgaestezimmer.2glaser.tk%2F&ul=en-us&de=UTF-8&dt=Dot%20TK%20-%20Find%20a%20new%20FREE%20domain&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=75148650&gjid=298829500&cid=2077140972.1543290774&tid=UA-29857775-3&_gid=711826909.1543290774&_r=1&z=1203433996 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 27 Nov 2018 03:52:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Nov 2018 03:52:54 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    00019580c87c3ba60c8df7025c2671b9
Sha1:   527cd965c37d908b7daa318af8a8d4e80f29a6cf
Sha256: b7db7540d75826d1d44ba1acf372b5c8e7144943fc4e4e33975b96e43f864914
                                        
                                            GET /s/lato/v14/S6u9w4BMUTPHh7USSwiPHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,300,100,700
Origin: http://www.dot.tk

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29852
Date: Tue, 13 Nov 2018 15:07:37 GMT
Expires: Wed, 13 Nov 2019 15:07:37 GMT
Last-Modified: Wed, 11 Oct 2017 18:24:02 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1169117
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   29852
Md5:    ba2452bdc790a4fee05202eac3c092b3
Sha1:   6382414b3b2df2fb2946e09d5909e27afdadb7dd
Sha256: 8084a57f30a2d3d730b5d25b8d2ccb18369d90d333144231704418d555c20c0f
                                        
                                            GET /s/lato/v14/S6u9w4BMUTPHh6UVSwiPHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,300,100,700
Origin: http://www.dot.tk

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27848
Date: Sun, 11 Nov 2018 23:48:40 GMT
Expires: Mon, 11 Nov 2019 23:48:40 GMT
Last-Modified: Wed, 11 Oct 2017 18:24:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1310654
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   27848
Md5:    96759e32fdc800c78b527a3e53fe2be6
Sha1:   e12403cfe60f852a8fbbe05d84d58d33c6c2a6b9
Sha256: 60c05ee47e768315541e487d11b92eec54a7f5336f84cecc8b5825c87bb70053
                                        
                                            GET /s/lato/v14/S6uyw4BMUTPHjx4wWA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,300,100,700
Origin: http://www.dot.tk

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28412
Date: Sun, 11 Nov 2018 23:51:01 GMT
Expires: Mon, 11 Nov 2019 23:51:01 GMT
Last-Modified: Wed, 11 Oct 2017 18:23:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1310513
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   28412
Md5:    62fb51e9e645f63599238881b9de15dd
Sha1:   82b144e3c8b4ff40aeca34ddf7bc35985311b90e
Sha256: 5aeb07f9980663c2501c9620371e11ae7aa6e320d94dd753d0ef56d8308c74b3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: gaestezimmer.2glaser.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: JSESSIONID=FF922C23F38B07E6611F79BE60C78780

                                         
                                         195.20.40.194
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Tue, 27 Nov 2018 03:52:54 GMT
Content-Length: 2048
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Server: b883eac4ec8a
Cache-Control: no-cache


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   2048
Md5:    9d88adf1b48d0395e690bd17e5625851
Sha1:   1874190d30c93ca117b3b1d65f150be38ec55a56
Sha256: 817d5d40f1addc3a4247e62aaf58400a7a81830addc9692b2ba65dd5068f02c8
                                        
                                            GET /font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css
Origin: http://www.dot.tk

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Tue, 27 Nov 2018 03:52:56 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1518903988"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 44433
Last-Modified: Sat, 17 Feb 2018 21:46:28 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   44433
Md5:    122359bdfee05a5b4ce0f19b244e85bb
Sha1:   35d57f1553391ddfdb1525ffd37ca902f79d2d7e
Sha256: 3e8f404d881f687fdcc53a1a7f8c59d3bdfa201c14e3d8470fb55eb99c4fdc4a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en; _ga=GA1.2.2077140972.1543290774; _gid=GA1.2.711826909.1543290774; _gat=1

                                         
                                         35.186.233.234
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:52:56 GMT
Content-Length: 185
Location: http://www.dot.tk/
Via: 1.1 google


--- Additional Info ---
Magic:  HTML document text
Size:   185
Md5:    d1c1428bc0662ffe1841e05e006406f8
Sha1:   d78d57d3ef1731a52e3ca18e385980e3c5e9bdf1
Sha256: d93ecffa2aa7610bc7b83d9f7e0fa1f486055e8fb5751d9073058d60d8d16063
                                        
                                            GET / HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en; _ga=GA1.2.2077140972.1543290774; _gid=GA1.2.711826909.1543290774; _gat=1

                                         
                                         35.186.233.234
HTTP/1.1 302 Found
                                        
Server: nginx/1.11.9
Transfer-Encoding: chunked
Set-Cookie: mydottk_languagenr=0; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:56 GMT dottyLn=en; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:56 GMT wwwLn=en; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:56 GMT
Date: Tue, 27 Nov 2018 03:52:56 GMT
Location: http://www.dot.tk/en/index.html?lang=en
Via: 1.1 google


--- Additional Info ---

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en; _ga=GA1.2.2077140972.1543290774; _gid=GA1.2.711826909.1543290774; _gat=1

                                         
                                         35.186.233.234
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:52:59 GMT
Content-Length: 185
Location: http://www.dot.tk/
Via: 1.1 google


--- Additional Info ---
Magic:  HTML document text
Size:   185
Md5:    d1c1428bc0662ffe1841e05e006406f8
Sha1:   d78d57d3ef1731a52e3ca18e385980e3c5e9bdf1
Sha256: d93ecffa2aa7610bc7b83d9f7e0fa1f486055e8fb5751d9073058d60d8d16063
                                        
                                            GET / HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en; _ga=GA1.2.2077140972.1543290774; _gid=GA1.2.711826909.1543290774; _gat=1

                                         
                                         35.186.233.234
HTTP/1.1 302 Found
                                        
Server: nginx/1.11.9
Transfer-Encoding: chunked
Set-Cookie: mydottk_languagenr=0; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:59 GMT dottyLn=en; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:59 GMT wwwLn=en; domain=.dot.tk; path=/; expires=Wed, 28-Nov-2018 03:52:59 GMT
Date: Tue, 27 Nov 2018 03:52:59 GMT
Location: http://www.dot.tk/en/index.html?lang=en
Via: 1.1 google


--- Additional Info ---

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /images.v2/006.jpg HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.11.9
Date: Tue, 27 Nov 2018 03:52:53 GMT
Content-Length: 580213
X-GUploader-UploadID: AEnB2Up7jrWRlvW3xDR8YXnnfNOIiys56yZ2eCwbzgJRHC2qIPoU_2e_IfvqoT6AWVIMr_qwWwifOnU-1xo-djUmber3-0WOGw
Cache-Control: max-age=3600, public
Expires: Tue, 27 Nov 2018 04:52:53 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:45 GMT
Etag: "64d7da2525b6ac94f5e14d4bd9691ec8"
x-goog-generation: 1465472205247000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 580213
Content-Language: en
x-goog-hash: crc32c=scgA7g==, md5=ZNfaJSW2rJT14U1L2WkeyA==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google


--- Additional Info ---