Overview

URL bpc-rennes.fr/
IP167.114.117.237
ASNAS16276 OVH SAS
Location Canada
Report completed2019-03-28 22:34:38 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-03-28 22:34:08 CET 2 Client IP  193.9.60.76 ET POLICY HTTP Request to a *.tk domain
2019-03-28 22:34:08 CET 2 Client IP  193.9.60.76 ET POLICY HTTP Request to a *.tk domain
2019-03-28 22:34:11 CET 2 Client IP  193.9.60.76 ET POLICY HTTP Request to a *.tk domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 167.114.117.237

Date UQ / IDS / BL URL IP
2019-06-10 21:57:35 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-10 06:29:29 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-09 22:06:43 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-09 19:07:52 +0200
0 - 0 - 29 teambusiness35.com/ 167.114.117.237
2019-06-07 19:27:48 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-07 07:30:54 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-06 23:55:55 +0200
0 - 0 - 29 teambusiness35.com/ 167.114.117.237
2019-06-04 16:39:58 +0200
0 - 0 - 29 teambusiness35.com/ 167.114.117.237
2019-06-04 09:08:43 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-04 04:56:15 +0200
0 - 0 - 1 teambusiness35.com/ 167.114.117.237

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2019-07-01 07:47:12 +0200
0 - 0 - 0 https://www.munplanet.com/articles/arlo-camer (...) 158.69.39.233
2019-07-01 04:15:44 +0200
0 - 3 - 0 www.asind.ae/wp-content/uploads/2019/seconder (...) 5.39.72.197
2019-07-01 03:56:20 +0200
0 - 0 - 0 webcamsteen.com/16y4[CUSTOM_AFF 192.99.67.89
2019-07-01 02:43:31 +0200
0 - 0 - 0 167.114.144.169/Android/ 167.114.144.169
2019-06-30 21:34:01 +0200
0 - 0 - 0 streams.tvxweb.org 158.69.54.221
2019-06-30 21:30:47 +0200
0 - 0 - 0 source.magikserv.com 37.187.171.206
2019-06-30 20:09:51 +0200
0 - 0 - 0 www.kweeper.com/popcorn2kg/sentence/6382508 91.121.242.21
2019-06-30 18:49:10 +0200
0 - 0 - 0 www.ovh.com 198.27.92.1
2019-06-30 18:18:47 +0200
0 - 0 - 0 liczniki.org/hit.php?l=alltube&o=1 94.23.92.123
2019-06-30 18:11:40 +0200
0 - 0 - 0 hardrock.blogdns.org/ 91.121.69.126

Last 4 reports on domain: bpc-rennes.fr

Date UQ / IDS / BL URL IP
2019-03-24 20:34:58 +0100
0 - 1 - 0 bpc-rennes.fr/ 167.114.117.237
2019-03-24 18:34:47 +0100
0 - 1 - 0 bpc-rennes.fr/ 167.114.117.237
2019-03-23 22:35:13 +0100
0 - 4 - 0 bpc-rennes.fr/ 167.114.117.237
2019-03-21 00:35:18 +0100
0 - 3 - 0 bpc-rennes.fr/ 167.114.117.237


JavaScript

Executed Scripts (9)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (20)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         167.114.117.237
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 28 Mar 2019 21:41:05 GMT
Content-Length: 178
Connection: keep-alive
Location: http://www.bpc-rennes.fr/
X-Powered-By: PleskLin


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET / HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         167.114.117.237
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 28 Mar 2019 21:41:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.10
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Retry-After: 3600
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff”


--- Additional Info ---
Magic:  UTF-8 Unicode HTML document text
Size:   1365
Md5:    e39a0a3fe45d19e834c6ece63225dea5
Sha1:   b46de35748aa28ded6e1a0e41b4a823bf140b8a6
Sha256: 8954c6de4cfb960b3803ef05365c9a25fc833e441c26ab8dc7e09bc382397e6f
                                        
                                            GET /wp-content/plugins/wp-maintenance-mode/assets/css/style.min.css HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         167.114.117.237
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Thu, 28 Mar 2019 21:41:07 GMT
Content-Length: 8498
Last-Modified: Wed, 11 Apr 2018 14:35:17 GMT
Connection: keep-alive
Etag: "5ace1d25-2132"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   8498
Md5:    4094f20707ae3823d73f17cef26b57a6
Sha1:   272996bce9df67a608c85eb060e11d6e1f333db7
Sha256: 8ff096820d3d91a265b388029f645a6c7dc352bde71f103c7387c2d41fec8110
                                        
                                            GET /wp-content/plugins/wp-maintenance-mode/assets/js/scripts.min.js HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         167.114.117.237
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 28 Mar 2019 21:41:07 GMT
Content-Length: 1526
Last-Modified: Mon, 17 Sep 2018 11:42:54 GMT
Connection: keep-alive
Etag: "5b9f933e-5f6"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1526
Md5:    bde3d85c86271f6a225998ccdbf31434
Sha1:   d03359d0e5741e07989ca4dea59f57cb8190d50c
Sha256: 09b9031d8304457396e076cce2948dc7c38ae2a4558f2878369a0cb9c0600d81
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "E53EE1C0C5E814ACD150F8599CAB89654252A797AB206631BF349B3F95E30B85"
Last-Modified: Thu, 28 Mar 2019 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43175
Expires: Fri, 29 Mar 2019 09:33:42 GMT
Date: Thu, 28 Mar 2019 21:34:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    e604f69831341ef5e8403df8b80cea9d
Sha1:   7c28b41ebd303fa75af71648c46a7d2e8c4bd7bc
Sha256: e53ee1c0c5e814acd150f8599cab89654252a797ab206631bf349b3f95e30b85
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.26
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Mon, 25 Mar 2019 16:50:08 GMT
Etag: "0b9386c5cacef5e4eb7fd2c8709686c801025f0b"
Content-Length: 1396
Cache-Control: public, no-transform, must-revalidate, max-age=9193
Expires: Fri, 29 Mar 2019 00:07:20 GMT
Date: Thu, 28 Mar 2019 21:34:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1396
Md5:    dfc25746320b8eac10060d78144c6a17
Sha1:   0b9386c5cacef5e4eb7fd2c8709686c801025f0b
Sha256: 4621d0e6549ee314d0d4c0bbfdc40e9b8674de4152f81959176a78d0419301aa
                                        
                                            GET /in2herg42t2?type=in2&frm=scr& HTTP/1.1 
Host: setforspecialdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         176.123.9.52
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 28 Mar 2019 21:34:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.40
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4026
Md5:    12e115c587dec492d13e5efba2e57466
Sha1:   2489004a407ab46da13c22414050ce4b33d9a596
Sha256: 246c9a351c608c484227e40682bc8ba54a34eea8054e1d0324c10642a7bb1f27
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: pp0000011=1

                                         
                                         167.114.117.237
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Thu, 28 Mar 2019 21:41:07 GMT
Content-Length: 1406
Last-Modified: Sun, 26 Apr 2015 20:52:22 GMT
Connection: keep-alive
Etag: "553d5006-57e"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1406
Md5:    1b95dfbb473e2a8de3e6e9680fd9e63b
Sha1:   14746895b8b223d15807010abda6f772ab8abda1
Sha256: 7010bd789c87586c6543eb3376c92e52d153571b9dc05a528c00d0e2349c3c31
                                        
                                            GET /index/?4831537102803 HTTP/1.1 
Host: servoyage.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         193.9.60.76
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.12.2
Date: Thu, 28 Mar 2019 21:34:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Last-Modified: Thu, 28 Mar 2019 21:34:08 GMT
Cache-Control: max-age=0
Pragma: no-cache
Set-Cookie: 00831=%7B%22streams%22%3A%7B%225234%22%3A1553808848%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553808848%7D%2C%22time%22%3A1553808848%7D; expires=Sun, 28-Apr-2019 21:34:08 GMT; Max-Age=2678400; path=/; domain=.servoyage.tk 00831=%7B%22streams%22%3A%7B%225234%22%3A1553808848%2C%221509%22%3A1553808848%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553808848%2C%22250%22%3A1553808848%7D%2C%22time%22%3A1553808848%7D; expires=Sun, 28-Apr-2019 21:34:08 GMT; Max-Age=2678400; path=/; domain=.servoyage.tk 00831=%7B%22streams%22%3A%7B%225234%22%3A1553808848%2C%221509%22%3A1553808848%2C%221508%22%3A1553808848%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553808848%2C%22250%22%3A1553808848%2C%22261%22%3A1553808848%7D%2C%22time%22%3A1553808848%7D; expires=Sun, 28-Apr-2019 21:34:08 GMT; Max-Age=2678400; path=/; domain=.servoyage.tk


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   74735
Md5:    bcfd2e50c1c080592df9ede84d31bf63
Sha1:   01806cf0f24724592b0c357ed7c86a4a5e5f070b
Sha256: 80e2b6aec7012564f61c78f8f6e16d216fb4c70c43b2eed69c05ec41309a227a

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: servoyage.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 00831=%7B%22streams%22%3A%7B%225234%22%3A1553808848%2C%221509%22%3A1553808848%2C%221508%22%3A1553808848%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553808848%2C%22250%22%3A1553808848%2C%22261%22%3A1553808848%7D%2C%22time%22%3A1553808848%7D

                                         
                                         193.9.60.76
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Thu, 28 Mar 2019 21:34:09 GMT
Content-Length: 169
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   169
Md5:    389975d8d57ca94e672162998e06c017
Sha1:   510c51b5312030d6b14c649c19ef039aecc8d6b4
Sha256: c85357a07370a52790712227119a38aaaed7f997f12b91008cd4c0c76398c076

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /eniki-top HTTP/1.1 
Host: eniki-beniki.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://servoyage.tk/index/?4831537102803

                                         
                                         104.24.111.36
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 28 Mar 2019 21:34:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=df03c5948423286607fb4695e5e20d0d01553808848; expires=Fri, 27-Mar-20 21:34:08 GMT; path=/; domain=.eniki-beniki.info; HttpOnly ezoadgid_101775=-1; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 22:04:08 UTC ezoref_101775=servoyage.tk; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 23:34:08 UTC ezoab_101775=mod34-c; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 23:34:08 UTC lp_101775=http://eniki-beniki.info/eniki-top; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 23:34:08 UTC ezovuuidtime_101775=1553808848; Path=/; Domain=eniki-beniki.info; Expires=Sat, 30 Mar 2019 21:34:08 UTC ezovuuid_101775=40e6e227-c402-4393-6ec8-6d544d17bbef; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 22:04:08 UTC ezopvc_101775=1; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 22:04:08 UTC ezCMPCCS=true; Path=/; Domain=eniki-beniki.info; Expires=Sat, 28 Mar 2020 21:34:08 GMT
Age: 0
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
display: orig_site_sol
Expires: Wed, 27 Mar 2019 21:34:08 GMT
Location: http://eniki-beniki.info/eniki-top/
pagespeed: off
Vary: Accept-Encoding,X-APP-JSON
via: 1.1 varnish (Varnish/6.0), 1.1 varnish (Varnish/6.0)
x-middleton-display: orig_site_sol
x-redirect-by: WordPress
x-sol: orig
x-varnish: 622461913, 1071731413
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 4becb9f66b28caea-ARN


--- Additional Info ---
Magic:  exported SGML document text
Size:   1532
Md5:    d87ae480d442e677fb5870c2ed97d406
Sha1:   b2a0d6168f681e300dc10c7d923d9d180e53087d
Sha256: 08bc643ea15e7916b39c3cc2289ee8366d5137033732cf8d30965faa5e7c0366
                                        
                                            GET /eniki-top/ HTTP/1.1 
Host: eniki-beniki.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://servoyage.tk/index/?4831537102803
Cookie: __cfduid=df03c5948423286607fb4695e5e20d0d01553808848; ezoadgid_101775=-1; ezoref_101775=servoyage.tk; ezoab_101775=mod34-c; lp_101775=http://eniki-beniki.info/eniki-top; ezovuuidtime_101775=1553808848; ezovuuid_101775=40e6e227-c402-4393-6ec8-6d544d17bbef; ezopvc_101775=1; ezCMPCCS=true

                                         
                                         104.24.111.36
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 28 Mar 2019 21:34:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Age: 0
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
display: orig_site_sol
Expires: Wed, 27 Mar 2019 21:34:09 GMT
pagespeed: off
Set-Cookie: ezoab_101775=mod34-c; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 22:04:09 UTC ezoadgid_101775=-1; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 22:04:09 UTC ezoref_101775=servoyage.tk; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 23:34:09 UTC lp_101775=http://eniki-beniki.info/eniki-top; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 23:34:09 UTC ezovuuidtime_101775=1553808849; Path=/; Domain=eniki-beniki.info; Expires=Sat, 30 Mar 2019 21:34:09 UTC ezovuuid_101775=40e6e227-c402-4393-6ec8-6d544d17bbef; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 22:04:09 UTC ezopvc_101775=2; Path=/; Domain=eniki-beniki.info; Expires=Thu, 28 Mar 2019 22:04:09 UTC ezCMPCCS=true; Path=/; Domain=eniki-beniki.info; Expires=Sat, 28 Mar 2020 21:34:09 GMT
Vary: Accept-Encoding,X-APP-JSON
via: 1.1 varnish (Varnish/6.0), 1.1 varnish (Varnish/6.0)
x-middleton-display: orig_site_sol
x-sol: orig
x-varnish: 501213922, 258680467
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 4becb9f99c57caea-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   840
Md5:    e43b3ec1ff6e86cfd0a0cd7169b876f9
Sha1:   1c853c3061748c2e022abceadb35829424d61356
Sha256: 823d19111d10f2fb5bd9ab86f45b8a57fd0057b02c224bf2e83b09f99b5f0ad2
                                        
                                            GET /beacon.js HTTP/1.1 
Host: b.scorecardresearch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://eniki-beniki.info/eniki-top/

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Fri, 29 Mar 2019 21:34:09 GMT
Date: Thu, 28 Mar 2019 21:34:09 GMT
Content-Length: 901
Connection: keep-alive
Cache-Control: private, no-transform, max-age=86400


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   901
Md5:    763bb4ee04c48f5b88d41d987819fc7e
Sha1:   1005e2b8501094e2f39188800519814d3f896ff6
Sha256: 797dab532348ff2022a965c1aefc53114a2f812b97c3f4d51bf996500061931f
                                        
                                            GET /b?c1=2&c2=20015427&ns__t=1553808849459&ns_c=UTF-8&cv=3.1&c8=&c7=http%3A%2F%2Feniki-beniki.info%2Feniki-top%2F&c9=http%3A%2F%2Fservoyage.tk%2Findex%2F%3F4831537102803 HTTP/1.1 
Host: b.scorecardresearch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://eniki-beniki.info/eniki-top/

                                         
                                         91.135.34.16
HTTP/1.1 302 Moved Temporarily
                                        
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=2&c2=20015427&ns__t=1553808849459&ns_c=UTF-8&cv=3.1&c8=&c7=http%3A%2F%2Feniki-beniki.info%2Feniki-top%2F&c9=http%3A%2F%2Fservoyage.tk%2Findex%2F%3F4831537102803
Date: Thu, 28 Mar 2019 21:34:09 GMT
Connection: keep-alive
Set-Cookie: UID=11C91a13534a12a901fb77g1553808849; expires=Wed, 17-Mar-2021 21:34:09 GMT; path=/; domain=.scorecardresearch.com UIDR=1553808849; expires=Wed, 17-Mar-2021 21:34:09 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate


--- Additional Info ---
                                        
                                            GET /b2?c1=2&c2=20015427&ns__t=1553808849459&ns_c=UTF-8&cv=3.1&c8=&c7=http%3A%2F%2Feniki-beniki.info%2Feniki-top%2F&c9=http%3A%2F%2Fservoyage.tk%2Findex%2F%3F4831537102803 HTTP/1.1 
Host: b.scorecardresearch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://eniki-beniki.info/eniki-top/
Cookie: UID=11C91a13534a12a901fb77g1553808849; UIDR=1553808849

                                         
                                         91.135.34.16
HTTP/1.1 204 No Content
                                        
Content-Length: 0
Date: Thu, 28 Mar 2019 21:34:09 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate


--- Additional Info ---
                                        
                                            GET /quant.js HTTP/1.1 
Host: edge.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://eniki-beniki.info/eniki-top/

                                         
                                         91.228.74.213
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Cache-Control: private, no-transform, must-revalidate, max-age=604800
Content-Encoding: gzip
Date: Thu, 28 Mar 2019 21:34:09 GMT
Etag: M0-e2b9884a
Expires: Thu, 04 Apr 2019 21:34:09 GMT
Last-Modified: Thu, 28-Mar-2019 21:34:09 GMT
Server: QS
Vary: Accept-Encoding
Content-Length: 5456
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5456
Md5:    ea55b8aade97737bdb3ac34239afe3e9
Sha1:   5bd3746efdffacbe0a0415d8760167834bb181ee
Sha256: d98cf4549e148788618a1ba008dc66d210d0063608b7c0acdfceb11430dd1579
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: eniki-beniki.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=df03c5948423286607fb4695e5e20d0d01553808848; ezoadgid_101775=-1; ezoref_101775=servoyage.tk; ezoab_101775=mod34-c; lp_101775=http://eniki-beniki.info/eniki-top; ezovuuidtime_101775=1553808849; ezovuuid_101775=40e6e227-c402-4393-6ec8-6d544d17bbef; ezopvc_101775=2; ezCMPCCS=true

                                         
                                         104.24.111.36
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Thu, 28 Mar 2019 21:34:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4becb9fdc99acaea-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: eniki-beniki.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=df03c5948423286607fb4695e5e20d0d01553808848; ezoadgid_101775=-1; ezoref_101775=servoyage.tk; ezoab_101775=mod34-c; lp_101775=http://eniki-beniki.info/eniki-top; ezovuuidtime_101775=1553808849; ezovuuid_101775=40e6e227-c402-4393-6ec8-6d544d17bbef; ezopvc_101775=2; ezCMPCCS=true

                                         
                                         104.24.111.36
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Thu, 28 Mar 2019 21:34:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4becba04eaffcaea-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: servoyage.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 00831=%7B%22streams%22%3A%7B%225234%22%3A1553808848%2C%221509%22%3A1553808848%2C%221508%22%3A1553808848%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553808848%2C%22250%22%3A1553808848%2C%22261%22%3A1553808848%7D%2C%22time%22%3A1553808848%7D

                                         
                                         193.9.60.76
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Thu, 28 Mar 2019 21:34:12 GMT
Content-Length: 169
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   169
Md5:    389975d8d57ca94e672162998e06c017
Sha1:   510c51b5312030d6b14c649c19ef039aecc8d6b4
Sha256: c85357a07370a52790712227119a38aaaed7f997f12b91008cd4c0c76398c076

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /index/?4831537102803 HTTP/1.1 
Host: servoyage.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain