bjarneweb.hopto.org/
89.162.38.29200 OK 697 B IP 89.162.38.29:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e7229fd1bc3e532b71e0acba956f5a53
9ba2825316355de37d21fcf263b19848becf3a9f
4ccddf47ac9713a7c37066b3301582344f68f75719df264d915078a3dee345ee
Analyzer Verdict Alert urlquery DynDNS domain detected
GET / HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.0 200 OK
Content-Length: 697
Last-Modified: Thu, 01 Dec 2022 14:08:07 GMT
Cache-Control: no-cache
Content-Type: text/html
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7301
Expires: Thu, 01 Dec 2022 16:09:48 GMT
Date: Thu, 01 Dec 2022 14:08:07 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2784
Cache-Control: max-age=162569
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 14:08:07 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:17:36 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12742
Expires: Thu, 01 Dec 2022 17:40:29 GMT
Date: Thu, 01 Dec 2022 14:08:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 13:19:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2901
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AssD/dcvR/wQbyCL1ZBUiG41H8W59QrHB53p/YDw1k3EuvZysFNTGMMFyoQQsY4IhyRJagyf4yo=
x-amz-request-id: C8H7MEG9TK2PYANV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 13:46:17 GMT
age: 1310
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 14:08:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
bjarneweb.hopto.org/view/viewer_index.shtml?id=67440
89.162.38.29200 OK 4.9 kB URL HTTP/1.0 bjarneweb.hopto.org/view/viewer_index.shtml?id=67440
IP 89.162.38.29:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, CR, LF line terminators
Hash 53d5c09ccf1bef800f211ac8b08f3198
cf29173589b7ef11f5cd6fec5922cd74792389e9
6cffa53e27f515ea4d0e9e495da2a6901a6cb0113804d286e5df8d6d4c583d5c
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /view/viewer_index.shtml?id=67440 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.0 200 OK
Content-Length: 4903
Last-Modified: Thu, 01 Dec 2022 14:08:07 GMT
Cache-Control: no-cache
Content-Type: text/html
bjarneweb.hopto.org/css/win_ns.css?version=142
89.162.38.29200 OK 39 B URL HTTP/1.1 bjarneweb.hopto.org/css/win_ns.css?version=142
IP 89.162.38.29:0
Hash 751e6a9ffb81404b07fb2c4ab9edfd52
eb6472c8504a28d11216ca68b6686f12af2d3c37
cf11735edb063a9adc8fcc74e92434a5a26d3fbcd28306a0364175dbd9b3f0f5
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /css/win_ns.css?version=142 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/viewer_index.shtml?id=67440
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:07 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 39
Last-Modified: Tue, 02 Nov 2010 10:16:17 GMT
Content-Type: text/css
bjarneweb.hopto.org/css/common.css?version=142
89.162.38.29200 OK 7.1 kB URL HTTP/1.1 bjarneweb.hopto.org/css/common.css?version=142
IP 89.162.38.29:0
File type assembler source, ASCII text
Hash af18dadc92220ae7c23f4f4fffdd43bc
42048def83026d5b75abf53a0a8c95780f6bc5ad
258ab8127193b189e672c39083d00267c854be58c3e1cbf9ff9e5c10ddbbcfb9
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /css/common.css?version=142 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/css/win_ns.css?version=142
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:08 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 7125
Last-Modified: Wed, 20 Oct 2010 13:45:28 GMT
Content-Type: text/css
bjarneweb.hopto.org/view/temp.shtml
89.162.38.29200 OK 247 B URL HTTP/1.0 bjarneweb.hopto.org/view/temp.shtml
IP 89.162.38.29:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c74e05fca73e41a12ccaed3fd749d098
03f134e404557540db540c2de3fadbd6320ea048
9911784f81595b3bd297aded8efd8ef6b7cae4275589657eba0f4d44cdda6a31
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /view/temp.shtml HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/viewer_index.shtml?id=67440
Upgrade-Insecure-Requests: 1
HTTP/1.0 200 OK
Content-Length: 247
Last-Modified: Thu, 01 Dec 2022 14:08:08 GMT
Cache-Control: no-cache
Content-Type: text/html
bjarneweb.hopto.org/view/viewer_ctl.shtml?id=67441&imagepath=&streamprofile=1024x640&size=1
89.162.38.29200 OK 4.9 kB URL HTTP/1.0 bjarneweb.hopto.org/view/viewer_ctl.shtml?id=67441&imagepath=&streamprofile=1024x640&size=1
IP 89.162.38.29:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, CR, LF line terminators
Hash b1f4e20525e1c836e97ad579ecb7baf5
856616491718ea2ff522775133681a71263f85d9
b3e2d59eaafe8c7ff2c067638a81fa8238e78157959c50d13c6eddc392b85c0a
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /view/viewer_ctl.shtml?id=67441&imagepath=&streamprofile=1024x640&size=1 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/viewer_index.shtml?id=67440
Upgrade-Insecure-Requests: 1
HTTP/1.0 200 OK
Content-Length: 4949
Last-Modified: Thu, 01 Dec 2022 14:08:08 GMT
Cache-Control: no-cache
Content-Type: text/html
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 13:11:15 GMT
cache-control: public,max-age=3600
age: 3413
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2818
Cache-Control: max-age=157539
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 14:08:08 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:53:47 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.88.25.203101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.88.25.203:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BJAYWF6Ymwt/yKMgv4irmw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TWcpt55RsUZdIzFvFRMTtYCmW5k=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2308
Expires: Thu, 01 Dec 2022 14:46:38 GMT
Date: Thu, 01 Dec 2022 14:08:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2308
Expires: Thu, 01 Dec 2022 14:46:38 GMT
Date: Thu, 01 Dec 2022 14:08:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2308
Expires: Thu, 01 Dec 2022 14:46:38 GMT
Date: Thu, 01 Dec 2022 14:08:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2308
Expires: Thu, 01 Dec 2022 14:46:38 GMT
Date: Thu, 01 Dec 2022 14:08:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2308
Expires: Thu, 01 Dec 2022 14:46:38 GMT
Date: Thu, 01 Dec 2022 14:08:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffd12f9c423ffc627d9e3b3145944fe4
5cf9a7a784952e1bb0cbe499104f1774b1269d08
a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 9d34c42b-ba0c-498f-8f99-d4ab527ffa89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMdHXNIAMFgaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe9-376846f31dc9b995797cbd18;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:25 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DngCuOTO9fQAwWe_ip6EtBcgruigZN6Bl1_v5BHM2dsWlhqCXCL3gg==
via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:33 GMT
age: 58957
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: b7c0e28a-de0d-443d-8bf4-900a964bf110
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uSFcMoAMF2CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc1-7abade3a670201cf1906b79f;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gZSkafSw8cXo9AChLOTVJW7r_hHLW8kaHlA-ED2_zFJwuUk1uS3VRw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 13:29:36 GMT
age: 2314
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 820cf89fcab8380adff42982c9fb11ed
84241ddddbbfd7de30118307fb1a62800d0a4cb3
0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gsn5uUFEzDZDOMPTvW9UQxtccvRfJKUM4eJ8U99jvUGzNIKkF9SzeA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:20 GMT
age: 58730
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 10:48:24 GMT
age: 11986
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7SqHjYIAMF8xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 12:31:43 GMT
age: 5787
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:44:47 GMT
age: 59003
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bjarneweb.hopto.org/incl/xmlPrototypes.js
89.162.38.29200 OK 2.8 kB URL HTTP/1.1 bjarneweb.hopto.org/incl/xmlPrototypes.js
IP 89.162.38.29:0
File type ASCII text, with CRLF line terminators
Hash 1052f6af9783e8102a2f1e2d9a62151b
e103877bf6c4bc3edbd9cd008fbec02cdf68a446
c8130ff9337b598ad00b407763761e7eaa780e8d0b1711ba103c56b8984e16ef
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /incl/xmlPrototypes.js HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 2767
Last-Modified: Fri, 13 Jan 2012 14:38:53 GMT
Content-Type: text/plain
bjarneweb.hopto.org/favicon.ico
89.162.38.29404 Not Found 77 kB URL HTTP/1.1 bjarneweb.hopto.org/favicon.ico
IP 89.162.38.29:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4206), with CRLF, CR, LF line terminators
Hash 0cf9c684f49d0b6ff5fbbf3e170db997
ca81c2943bb475c49a43cf183cb6c107ec41d50b
bfd1734fd0ee05afc28702fd133ea62abdf4555e3bfb71868b09a0d2ccc47957
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /favicon.ico HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/viewer_index.shtml?id=67440
HTTP/1.1 404 Not Found
Date: Thu, 01 Dec 2022 14:08:08 GMT
Accept-Ranges: bytes
Connection: close
Content-Type: text/html; charset=ISO-8859-1
bjarneweb.hopto.org/view/temp.shtml
89.162.38.29200 OK 247 B URL HTTP/1.0 bjarneweb.hopto.org/view/temp.shtml
IP 89.162.38.29:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c74e05fca73e41a12ccaed3fd749d098
03f134e404557540db540c2de3fadbd6320ea048
9911784f81595b3bd297aded8efd8ef6b7cae4275589657eba0f4d44cdda6a31
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /view/temp.shtml HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/viewer_ctl.shtml?id=67441&imagepath=&streamprofile=1024x640&size=1
Upgrade-Insecure-Requests: 1
If-Modified-Since: Thu, 01 Dec 2022 14:08:08 GMT
HTTP/1.0 200 OK
Content-Length: 247
Last-Modified: Thu, 01 Dec 2022 14:08:10 GMT
Cache-Control: no-cache
Content-Type: text/html
bjarneweb.hopto.org/incl/zxml.js
89.162.38.29200 OK 6.5 kB URL HTTP/1.1 bjarneweb.hopto.org/incl/zxml.js
IP 89.162.38.29:0
File type ASCII text, with very long lines (6516), with CRLF line terminators
Hash 5f0de3aca7de4c9eb8bd059b36138491
bfe2171da9195f346a791e6e2fa6243a88503082
18262ab276bc78278366494f9687de1ad3ba24385cda5389cdb7a5429b685449
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /incl/zxml.js HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 6520
Last-Modified: Fri, 13 Jan 2012 14:38:53 GMT
Content-Type: text/plain
bjarneweb.hopto.org/incl/activeX.js?id=67445
89.162.38.29200 OK 13 kB URL HTTP/1.1 bjarneweb.hopto.org/incl/activeX.js?id=67445
IP 89.162.38.29:0
File type ASCII text, with very long lines (507)
Hash 8f56953526eb436659271b9253727ba7
37fee554a687fb196482cee8dfdab6f0a452f0c5
16ca2d02bb6ac7af2a230b3fe6779373549b9af67ab7ebe90de2ff47920214d2
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /incl/activeX.js?id=67445 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 13315
Last-Modified: Tue, 15 May 2012 07:46:05 GMT
Content-Type: text/plain
bjarneweb.hopto.org/pics/line_corner_rb_5x5px.gif
89.162.38.29200 OK 48 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_corner_rb_5x5px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 5\012- data
Hash 7f9271dea7cd43c45cca6e553a10f06d
cda7b10a6b3e26f4b89898eea8f63eaaba2aa7ad
04b2dc050c59cd5c4a003b4b79ae4a3b5e9ed4da7a21cabcbf49b62deaf7f91c
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_corner_rb_5x5px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 48
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_t_100x5px.gif
89.162.38.29200 OK 69 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_t_100x5px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 100 x 5\012- data
Hash 6809b7ef06acc14d8152a55fd0b2f49e
ea1c50fbbb893893a16dbe55cb52f302442d6751
b7e379806243eac0558edc952424032ba6a1cb09921b5bafce4c285ac0d4e2c5
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_t_100x5px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 69
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_corner_rt_5x5px.gif
89.162.38.29200 OK 48 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_corner_rt_5x5px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 5\012- data
Hash 3ea5336c0a514bccfb6d895617c60d12
cfee602148b5ef3f70106feb2182b699d646c9ef
c2648ef69585a898397e1b7c8ec2f1aa056505db46cd06fc12a11f9ab534f657
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_corner_rt_5x5px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 48
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/blank.gif
89.162.38.29200 OK 44 B URL HTTP/1.1 bjarneweb.hopto.org/pics/blank.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 10 x 1\012- data
Hash 96c4c871750d7ca05dfa18ce6a85d369
afe63ad72576922e708bdc0bd7bffbec84fd42f5
74441313bb1fb62500484443c4937e90d4e335351a4fcd12a9ac48448500e33e
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/blank.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 44
Last-Modified: Tue, 13 Aug 2002 11:46:42 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_corner_lt_5x5px.gif
89.162.38.29200 OK 48 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_corner_lt_5x5px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 5\012- data
Hash 944c881d602212ff4eb6e8f623c9939c
9851bc817750b40acd01132462820d721762ad44
3f7581bd70f009c3262e90e6ece748c8436d78073fb02c41ad0e3eb60d12ccee
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_corner_lt_5x5px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 48
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_b_100x5px.gif
89.162.38.29200 OK 69 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_b_100x5px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 100 x 5\012- data
Hash 238b7a28fbabbc53541fd562e89462dc
ccb484b23d3f3f3de754ac7efca4851a96872f59
d6f6fed5943cdd8963bcfa4303243d136cd089507bdb34bc98cf80b1a1fd5874
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_b_100x5px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 69
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/gray_corner_lt_5x50px.gif
89.162.38.29200 OK 97 B URL HTTP/1.1 bjarneweb.hopto.org/pics/gray_corner_lt_5x50px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 50\012- data
Hash caa68f09f11ea725e1e7850e406057ad
0047d1b35f180c91327c02cfb91b40ef10087357
ecb733b2798a0921d0076674e1b13a4e67d5d573c8c525dfae6ceac6cdd51717
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/gray_corner_lt_5x50px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 97
Last-Modified: Wed, 29 Oct 2003 12:38:07 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/gray_t_5x50px.gif
89.162.38.29200 OK 56 B URL HTTP/1.1 bjarneweb.hopto.org/pics/gray_t_5x50px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 50\012- data
Hash 76b2deec2f26be26c7aefa51007de6a5
fa8eb64299d640806eff811ec086d330de48b330
01f74a17093570e91e2a36c6b098e8cb43e7610fd1406645e33af57fb2708955
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/gray_t_5x50px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 56
Last-Modified: Tue, 13 Aug 2002 11:45:05 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/gray_corner_rt_5x50px.gif
89.162.38.29200 OK 97 B URL HTTP/1.1 bjarneweb.hopto.org/pics/gray_corner_rt_5x50px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 50\012- data
Hash ed39fcdd6d85112ce437b22da9e99ae3
75b135d4ad0b85b382f405d669d3de4bb7904885
fc16736127a2a65794eff2d1221f6667b048a669e911e0a5e232e3486ff0a8d1
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/gray_corner_rt_5x50px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:10 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 97
Last-Modified: Wed, 29 Oct 2003 12:38:07 GMT
Content-Type: image/gif
bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
89.162.38.29200 OK 77 kB URL HTTP/1.0 bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
IP 89.162.38.29:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4206), with CRLF, CR, LF line terminators
Hash e959dd616d78a596bc350809544c4943
6aaba5664d96b85a92c0f39a6f0b9e8d8c75ac58
a17b9915c1ba97be5765d0cc91cbf97922b61f53e524b441c1edbccdd9b19239
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67443&imagepath=&streamprofile=1024x640&size=1
Upgrade-Insecure-Requests: 1
HTTP/1.0 200 OK
Content-Length: 76801
Last-Modified: Thu, 01 Dec 2022 14:08:10 GMT
Cache-Control: no-cache
Content-Type: text/html
bjarneweb.hopto.org/incl/activeX.js?id=67448
89.162.38.29200 OK 13 kB URL HTTP/1.1 bjarneweb.hopto.org/incl/activeX.js?id=67448
IP 89.162.38.29:0
File type ASCII text, with very long lines (507)
Hash 8f56953526eb436659271b9253727ba7
37fee554a687fb196482cee8dfdab6f0a452f0c5
16ca2d02bb6ac7af2a230b3fe6779373549b9af67ab7ebe90de2ff47920214d2
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /incl/activeX.js?id=67448 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 13315
Last-Modified: Tue, 15 May 2012 07:46:05 GMT
Content-Type: text/plain
bjarneweb.hopto.org/pics/logo_70x29px.gif
89.162.38.29200 OK 1.0 kB URL HTTP/1.1 bjarneweb.hopto.org/pics/logo_70x29px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 70 x 29\012- data
Hash c954786f71fdad5113c3e686f4281c87
637551ff6e0d94866d2a22102d20e4400e102e36
80ec053ee0d0c8c25650696fcd81c4a30c31dc341caab2b29088f030f130239b
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/logo_70x29px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 1015
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_corner_lb_5x5px.gif
89.162.38.29200 OK 48 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_corner_lb_5x5px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 5\012- data
Hash 1bbb7f5b47560a64d02e3d141d226c03
868a1f46c3f2b21b735285736d1d9dd630cdb310
668b8e124ac3c324cd4dedcbc03ce7968cc2c2775ca269d432a8df1c3b6840af
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_corner_lb_5x5px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 48
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_corner_lt_5x5px.gif
89.162.38.29200 OK 48 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_corner_lt_5x5px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 5 x 5\012- data
Hash 944c881d602212ff4eb6e8f623c9939c
9851bc817750b40acd01132462820d721762ad44
3f7581bd70f009c3262e90e6ece748c8436d78073fb02c41ad0e3eb60d12ccee
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_corner_lt_5x5px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 48
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/button_downsize_27x27px.gif
89.162.38.29200 OK 609 B URL HTTP/1.1 bjarneweb.hopto.org/pics/button_downsize_27x27px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 27 x 27\012- data
Hash 54d12be363af9389245794e2e1849282
a0d246c7128f6edf1c9f4b45c8769daf132dd035
7869d35359c4be988868c0852c6117dd92d104a7b2d882cb6662aea1a3a592aa
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/button_downsize_27x27px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 609
Last-Modified: Tue, 06 Mar 2007 14:27:13 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/button_shot_27x27px.gif
89.162.38.29200 OK 491 B URL HTTP/1.1 bjarneweb.hopto.org/pics/button_shot_27x27px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 27 x 27\012- data
Hash d4b99aeb7039bfbc3e87ab938f053d94
011601160d6bf72935be7bcdab82ce810cf902e8
3499894700fe71d97b7c2ab0edde2a761bae88d32e5a7964ef82dd996e00f2c1
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/button_shot_27x27px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 491
Last-Modified: Tue, 05 Nov 2002 09:19:13 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/stop_blue_button_27x27px.gif
89.162.38.29200 OK 573 B URL HTTP/1.1 bjarneweb.hopto.org/pics/stop_blue_button_27x27px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 27 x 27\012- data
Hash 8eb230e6ddf5c0dcb42cf7679fb14245
f95e8f3ab8a14ac9ad0580725fc7caa897974c72
89b58a66110844d850f57c206a53860437d34e60e8d17ed6ce8347aaa0cb72d6
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/stop_blue_button_27x27px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 573
Last-Modified: Thu, 19 Jun 2008 07:31:32 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_corner_l_box.gif
89.162.38.29200 OK 672 B URL HTTP/1.1 bjarneweb.hopto.org/pics/line_corner_l_box.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 7 x 3500\012- data
Hash 2797a561ac0e493790a67159758a904e
ed6dbc94cf23ff4ed85598faf0ab62dcdfa76d51
0787e9064db4f2835ebc05f44ed82da5340648ab5a94a19132565700c3a54278
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_corner_l_box.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/css/common.css?version=142
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 672
Last-Modified: Tue, 24 Jun 2008 13:25:50 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/button_x1_gray_27x27px.gif
89.162.38.29200 OK 537 B URL HTTP/1.1 bjarneweb.hopto.org/pics/button_x1_gray_27x27px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 27 x 27\012- data
Hash 33d97ef910586a328b5c5ead9842cfd8
3e41e226766db2f5291ad21957ae97660c08548b
10bd2b40d6f7025e9a151406e691e6b069f0d6c31aeea09bf22b761f3e5feefe
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/button_x1_gray_27x27px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 537
Last-Modified: Tue, 05 Nov 2002 09:19:14 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/line_corner_r_box.gif
89.162.38.29200 OK 20 kB URL HTTP/1.1 bjarneweb.hopto.org/pics/line_corner_r_box.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 3700 x 3500\012- data
Hash 116f2db2ab2f4cc85e3966f96dc20e71
6ad1e7cae13248f59c6c8bcc4d441f164fd40a98
f76f7eb6724d5a27376993599f7fa6e3e11b1deef321c0c3af17ba4a2976bc02
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/line_corner_r_box.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/css/common.css?version=142
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 20295
Last-Modified: Wed, 17 Sep 2008 09:02:40 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/space.gif
89.162.38.29200 OK 49 B URL HTTP/1.1 bjarneweb.hopto.org/pics/space.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/space.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 49
Last-Modified: Wed, 03 Jul 2002 14:18:33 GMT
Content-Type: image/gif
bjarneweb.hopto.org/pics/play_blue_button_27x27px.gif
89.162.38.29200 OK 598 B URL HTTP/1.1 bjarneweb.hopto.org/pics/play_blue_button_27x27px.gif
IP 89.162.38.29:0
File type GIF image data, version 89a, 27 x 27\012- data
Hash a047bce445dec6c82d8d043de67bc08d
7e9b46af25ba5a1fe742b6d776cef9a4464ae228
38af1f509c03722be0a3688c8ee383d391276d134e7ba8d073231f3e5d8c0121
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /pics/play_blue_button_27x27px.gif HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 14:08:13 GMT
Accept-Ranges: bytes
Connection: close
Content-Length: 598
Last-Modified: Thu, 19 Jun 2008 07:31:32 GMT
Content-Type: image/gif
bjarneweb.hopto.org/mjpg/video.mjpg?streamprofile=1024x640
89.162.38.29200 OK 0 B URL HTTP/1.0 bjarneweb.hopto.org/mjpg/video.mjpg?streamprofile=1024x640
IP 89.162.38.29:0
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /mjpg/video.mjpg?streamprofile=1024x640 HTTP/1.1
Host: bjarneweb.hopto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bjarneweb.hopto.org/view/view.shtml?id=67445&imagePath=/mjpg/video.mjpg&size=1&streamprofile=1024x640
HTTP/1.0 200 OK
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Connection: close
Content-Type: multipart/x-mixed-replace; boundary=myboundary