Overview

URLteruggavetabel2022.ddns.net/in/
IP 45.82.120.13 (Germany)
ASN#44486 SYNLINQ
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-18 12:48:16 UTC
StatusLoading report..
IDS alerts0
Blocklist alert12
urlquery alerts
27
DynDNS domain detected
Tags None

Domain Summary (8)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
r3.o.lencr.org (8) 344 No data No data 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-18 05:29:52 UTC 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-18 05:27:45 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.89.136.7
teruggavetabel2022.ddns.net (26) 0 2022-11-17 15:38:07 UTC 2022-11-18 02:53:56 UTC 45.82.120.13 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-11-18 2 teruggavetabel2022.ddns.net/in/ ING

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-18 2 teruggavetabel2022.ddns.net/in/ Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764? Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/bower_components/jquery/dist/jquery.min.js Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/bower_components/ua-parser-js/dist/ua-parser (...) Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/core/form/core_form.js Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/core/token/core_token.js Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/login/form/form.js?v=63777f084d84c Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/login/ng/ng.js?v=63777f084d84f Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/login/token/token.js?v=63777f084d850 Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/bower_components/angular/angular.min.js Malware
2022-11-18 2 teruggavetabel2022.ddns.net/in/login/ing-logo.svg Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.82.120.13
Date UQ / IDS / BL URL IP
2022-11-18 13:05:41 +0000 4 - 0 - 3 teruggavetabel2022.ddns.net/bpf/a1b2c3/180a35 (...) 45.82.120.13
2022-11-18 13:05:39 +0000 4 - 0 - 3 teruggavetabel2022.ddns.net/in/a1b2c3/fd97f0b (...) 45.82.120.13
2022-11-18 13:05:38 +0000 4 - 0 - 3 teruggavetabel2022.ddns.net/in/a1b2c3/3c022e3 (...) 45.82.120.13
2022-11-18 13:05:35 +0000 4 - 0 - 3 teruggavetabel2022.ddns.net/in/a1b2c3/cfd926d (...) 45.82.120.13
2022-11-18 13:05:34 +0000 4 - 0 - 3 teruggavetabel2022.ddns.net/in/a1b2c3/c9670c4 (...) 45.82.120.13


Last 5 reports on ASN: SYNLINQ
Date UQ / IDS / BL URL IP
2023-03-21 09:37:55 +0000 0 - 0 - 7 compresse-servizi.net.23065-5347.s3.webspace. (...) 91.218.65.6
2023-03-21 08:34:44 +0000 0 - 0 - 7 compresse-servizi.net.23065-5347.s3.webspace. (...) 91.218.65.6
2023-03-21 05:53:04 +0000 0 - 1 - 2 194.15.36.101/Simps.arm6 194.15.36.101
2023-03-21 03:23:42 +0000 0 - 1 - 2 194.15.36.207/school-shit/omfgitsloligang.m68k 194.15.36.207
2023-03-21 00:37:23 +0000 0 - 2 - 0 eat-people-in.space/driver.exe 91.218.66.52


Last 5 reports on domain: teruggavetabel2022.ddns.net
Date UQ / IDS / BL URL IP
2023-03-16 23:11:00 +0000 0 - 3 - 0 teruggavetabel2022.ddns.net/bpf/a1b2c3/f59ec6 (...) 0.0.0.0
2023-03-12 01:13:59 +0000 0 - 3 - 0 teruggavetabel2022.ddns.net/kbc/a1b2c3/678dfc (...) 0.0.0.0
2023-03-09 00:11:21 +0000 0 - 3 - 0 teruggavetabel2022.ddns.net/in/a1b2c3/6471a1a (...) 0.0.0.0
2023-03-08 17:46:36 +0000 0 - 3 - 0 teruggavetabel2022.ddns.net/fi/a1b2c3/1fa30f4 (...) 0.0.0.0
2023-03-07 00:59:35 +0000 0 - 3 - 0 teruggavetabel2022.ddns.net/fi/a1b2c3/5b2d237 (...) 0.0.0.0


No other reports with similar screenshot

JavaScript

Executed Scripts (12)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (47)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4590
Cache-Control: max-age=169172
Date: Fri, 18 Nov 2022 12:48:05 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:47:37 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6821
Expires: Fri, 18 Nov 2022 14:41:46 GMT
Date: Fri, 18 Nov 2022 12:48:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "04D64920CC8E6B096841938B0C1140889F5D7A04EABD440934A31F1C7AB90352"
Last-Modified: Wed, 16 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7459
Expires: Fri, 18 Nov 2022 14:52:24 GMT
Date: Fri, 18 Nov 2022 12:48:05 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 12:44:47 GMT
cache-control: public,max-age=3600
age: 198
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: r3/T2zO375/QfcBrz/T9Lnqajn+bdx94XS7amclTRpTeXqmFv5FgspNwLehFIXSq7hfGkkU6P7M=
x-amz-request-id: P3SDVN9NRP6MYN0X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 12:15:36 GMT
age: 1949
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 18 Nov 2022 12:48:05 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 12:25:01 GMT
cache-control: public,max-age=3600
age: 1385
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5739
Cache-Control: max-age=165269
Date: Fri, 18 Nov 2022 12:48:06 GMT
Etag: "63774b30-1d7"
Expires: Sun, 20 Nov 2022 10:42:35 GMT
Last-Modified: Fri, 18 Nov 2022 09:06:56 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RdLuAHENrvUDC58Yb81KHg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.89.136.7
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FGxpXyQISs1Wn/4W9d+GVg5rp4E=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B801F713EADC60CDE23D4248FCA9DE0F75A9437D57BD653051F832FDF1C0054E"
Last-Modified: Thu, 17 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11595
Expires: Fri, 18 Nov 2022 16:01:22 GMT
Date: Fri, 18 Nov 2022 12:48:07 GMT
Connection: keep-alive

                                        
                                            GET /in/ HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 18 Nov 2022 12:48:07 GMT
Server: Apache/2.4.29 (Ubuntu)
Set-Cookie: real=OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 453
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   453
Md5:    909b0ef0afad23ad7ee9388584655ce7
Sha1:   ed1a7302320cb1fd1f17bc5261ec536d68c30318
Sha256: f16f80cee832140cca8d83123838055033a14075e0eb149dc519b07cd210318e

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - openphish: ING
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 18 Nov 2022 12:48:07 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   290
Md5:    2580bed35eb5a329185a3037f24cf354
Sha1:   a70f4b9b138bf74b15683b74efc360f8397c765d
Sha256: 192419f7bbdacac46de84c5e0d1680a074a8d01e77ea721f695af98f055b0c77

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8026
Expires: Fri, 18 Nov 2022 15:01:53 GMT
Date: Fri, 18 Nov 2022 12:48:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8026
Expires: Fri, 18 Nov 2022 15:01:53 GMT
Date: Fri, 18 Nov 2022 12:48:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8026
Expires: Fri, 18 Nov 2022 15:01:53 GMT
Date: Fri, 18 Nov 2022 12:48:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8026
Expires: Fri, 18 Nov 2022 15:01:53 GMT
Date: Fri, 18 Nov 2022 12:48:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8026
Expires: Fri, 18 Nov 2022 15:01:53 GMT
Date: Fri, 18 Nov 2022 12:48:07 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3759
x-amzn-requestid: 8c91ac59-89dc-4218-b69f-0cebb29f301b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-wJHgxoAMF-hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab33-4dac305614a92bc52c038222;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mb2-PTjNmt06Wd5jOjQ5WoLY-0NgI80CKPXtwgzBt4n5km8Pu_WN0Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:50:49 GMT
age: 53838
etag: "399ac393209dcdac7d2188d7aa8d95f04570ef7c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3759
Md5:    5d0b6106f00f9fd8b89c2d484a559a1a
Sha1:   399ac393209dcdac7d2188d7aa8d95f04570ef7c
Sha256: 5d8151c9eb558f4a2b8bd2952c6845606ddb0c27e36f6e49aca7e60908cd9fe4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: mhgNSp1_LsVmn00ULm116flMHpnfE6G6JABrJwXH5i4q-isv_W1-Ig==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:34:18 GMT
age: 54829
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6344
Md5:    a9d32fa3866dd741de610a61a93ad893
Sha1:   4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e
Sha256: 4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F484ffe7b-1073-4220-bf53-ccbfc7e9654e.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8884
x-amzn-requestid: 3739b8f5-bb0c-4798-a931-e955dd6df81d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-MiGFxoAMFlxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa50-74c24a2f737634b655a5b47c;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:32 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: d_bLYyZzi1phYwQ2e5uvUmzO0GuvNu9Ubi2PQ0ChilQJegKr3uUiRw==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:53 GMT
etag: "96c6cbfe31e7247c64dfa8c3759967627f8c6286"
age: 53534
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8884
Md5:    14649d486602810c1b218b96b27b2cc4
Sha1:   96c6cbfe31e7247c64dfa8c3759967627f8c6286
Sha256: 80f5d7573fd2bf4e6a6038ebf1335d159ad37c391ee539918455963d6ee88654
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12065
x-amzn-requestid: 45c97153-71c7-4985-a1ad-fc21a509d153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K5FyVIAMFtDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-0f9d22dd544a4580570f3089;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dxT2WJB7m5tUhgBn2PwTIN4Zskzm3X7CW-29hl1nCyNPbKt5j6q5iA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:27 GMT
age: 53560
etag: "ce1bb33256b0754f9acc01e7e9f3e5dc85f89244"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12065
Md5:    05289172c1455c4134e496c6f4606efd
Sha1:   ce1bb33256b0754f9acc01e7e9f3e5dc85f89244
Sha256: a8b4411a0310cc376efe2aec7c0830b8d3b63b8827631b0ff43ec092f1f80f82
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11667
x-amzn-requestid: ae092a0a-1709-4497-9f07-0348a28d2491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZOIEN7oAMFlaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637408c0-5ac595df302a8f1d3703ad8d;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:46:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c_SJMaV3uYSUysTSOFV--jQqDUxw-fBp8cXWWUZw9vUjt0d6PsOpxA==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 18:45:44 GMT
age: 64943
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11667
Md5:    032386e5c9dffff1ba1ee5e8a322d438
Sha1:   dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
Sha256: 0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10349
x-amzn-requestid: fc85e078-a81a-4fed-899e-15249961f59c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7tHGLIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7d-4224d193517794684fcdc0ad;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UK-XD_8EcfPwfLb-QVwfLr8aG-sqVBoUJcbPb5hKAlQS68eOxdgM5g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:03:27 GMT
age: 53080
etag: "fa7c5c9a1d16355859196271f3d13f3850931888"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10349
Md5:    7d16e5ff718353c095d266b080fe547f
Sha1:   fa7c5c9a1d16355859196271f3d13f3850931888
Sha256: 9a94d8eb20cc56d0898b1e2b80c0006ebbef75c15ad94e907050c5be4e19a960
                                        
                                            GET /in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764? HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/
Cookie: real=OK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Location: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/?
Content-Length: 382
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   382
Md5:    cdfa93b2c37d921b6017f7748bd8af01
Sha1:   196a7afb275f0479fc4a7f53772e6add677d634c
Sha256: c73f2ecf61c6579e341ddb63cd5b7c09751602356ddaedc9615415e54cb55ae8

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/? HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://teruggavetabel2022.ddns.net/in/
Connection: keep-alive
Cookie: real=OK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Set-Cookie: bid=5bf6c4fe37d0729bd9bbbb8fd3580764; expires=Sun, 18-Dec-2022 12:48:08 GMT; Max-Age=2592000; path=/
location: login/?
Content-Length: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/? HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://teruggavetabel2022.ddns.net/in/
Connection: keep-alive
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3910
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (7865)
Size:   3910
Md5:    909cce29f390db5183f346ac00c4d381
Sha1:   80d8d479698494c3343ea2b5f23b1896ed9b2231
Sha256: 849fecc5328fec021274653d496c6cc3370032be294ffbe807d38a2ce1e327ca

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/bower_components/jquery/dist/jquery.min.js HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 05 Jun 2017 03:55:06 GMT
ETag: "15283-5512e77ee3a80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30138
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   30138
Md5:    3430607b4301113ad9394c9260eef3f0
Sha1:   8c4db68b161b17e31be300e968a30ab0116b3193
Sha256: 31e4d11375322cd6f94dba7338570426f2412d6c5fa670427966d45c3648098c

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/core/form/core_form.css HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 22 Feb 2020 12:08:14 GMT
ETag: "adb-59f28fe174780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 686
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   686
Md5:    e7b32e7038cfb20be8011e0b3571a04f
Sha1:   9aaaa841f6d75a375d9e64c9f816bd5ecf9fd00a
Sha256: 6015239bdc446b51ab323c5a5463207af24bbcbfaa532bb07f567381d8c9c546

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/bower_components/ua-parser-js/dist/ua-parser.min.js HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Thu, 12 Oct 2017 08:16:24 GMT
ETag: "4298-55b5527f0e600-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6063
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (16817)
Size:   6063
Md5:    14da93cff6d49885bf214d2503f614db
Sha1:   04d64d738cd0fd2b4eee3b8abc5326dfda3f1dea
Sha256: 49e584e9a0aee55b81771b9e010ccf1da6278da03fb8ddba07ef7a1f0a126732

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/bower_components/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 09 Apr 2017 04:29:24 GMT
ETag: "7918-54cb44da47100-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7053
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7053
Md5:    52f1a8a2ce85fa8432308b33bc1a2e79
Sha1:   fd80917af5371c8ecad0198592a1e7cce4b77b0e
Sha256: 07bd6a9ea0213e20f362485aadc17a88c486ecfb394004b41b8b38db6e6a35f6

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/core/form/core_form.js HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 31 Mar 2020 16:47:04 GMT
ETag: "4736-5a229513f1200-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4177
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   4177
Md5:    1257798da972f5247f4cd35c30244a2e
Sha1:   98ac669b169b25bf26fe33dccff1377df406075e
Sha256: 4d57a4eceedd5dee6352e7cbc3b6d34f4eb5b8c7ef4b9648eaac7a55cec0c79b

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/core/token/core_token.js HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 31 Mar 2020 16:47:28 GMT
ETag: "3260-5a22952ad4800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1556
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1556
Md5:    c7315234b47983acd902a1dd7e5f2f0e
Sha1:   b0a93c9e122fc8995e1cde826ebdac9787e539a8
Sha256: f4068fd90a48594846808bcd64a8bd43fd321fdd103a13dccdc6b7f6a53afd27

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/login/form/css.css HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 25 Jul 2020 23:20:24 GMT
ETag: "d0e-5ab4c5581fe00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1060
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1060
Md5:    198bdc30280d2f1dc89fde7281a92b45
Sha1:   4002a08a96acade94fcd152a568e5c11ca40b83d
Sha256: 9818ceeb2ef898f5731adaef563991ce3828189ed82504d7eeb0a60efc4a296e

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/login/form/form.js?v=63777f084d84c HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 22 Feb 2020 00:52:06 GMT
ETag: "bf7-59f1f8c0cb980-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 709
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   709
Md5:    42018b123357c5b2ce388ae78890b0f6
Sha1:   a8f7c33e594052eb4e5c5ebfea63079b402166aa
Sha256: 8ded9dda8bfa0bf3bbb1bb4577b99ccb105ba6ca04e7a583adcb8f59c71835d8

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/login/ng/ng.js?v=63777f084d84f HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 22 Feb 2020 01:22:36 GMT
ETag: "162c-59f1ff9204f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1458
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1458
Md5:    e67c74d734fe9a6a9a39f3c637869fcc
Sha1:   81cad7ca61a8e9c94182e4d73bc5465e93d3540b
Sha256: 73ee9c1cf9044662ae830db7891d5b87f1d1c89d1b724b6bcd9cc2599374f2be

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/login/token/token.js?v=63777f084d850 HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 22 Feb 2020 01:08:14 GMT
ETag: "509-59f1fc5bf3b80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 529
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   529
Md5:    03287ae87c7b226df11566994dbff75e
Sha1:   c28f839a913a0d0c0ffa74b14e434fd3851f34d3
Sha256: 23ce52af8a02f0010ea0a5414a927840a270e125c81af306a977d59b8fb867e8

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/node_modules/bootstrap/dist/css/bootstrap.min.css HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 25 Jul 2020 22:50:30 GMT
ETag: "2565e-5ab4bea93b980-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 22973
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65324)
Size:   22973
Md5:    a5d5584b3540529a77b585b36d82f5b4
Sha1:   cad6f25941450fb9e50470b640f86f06047a290a
Sha256: 568f398f7aadd5c46a2b8a3a17c8a24aa91abf38aa2ffbbe57285cb881fd2dab

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/bower_components/angular/angular.min.js HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 18 Aug 2017 14:37:28 GMT
ETag: "2937c-5570811783a00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (552)
Size:   58946
Md5:    ef8273bb5f21cf02cdb9ccd56513e7c1
Sha1:   0de400b680cfc9a05f3d182ea010b4ecb6166f7a
Sha256: 369f26576626b7705342e67ae37363858a5655c66755ddff450054dfe9c70bc4

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/login/exl.png HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 21 Feb 2020 15:31:50 GMT
ETag: "8dc-59f17b8614580"
Accept-Ranges: bytes
Content-Length: 2268
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 60 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size:   2268
Md5:    6aafb7072a0586bd3fd337d707901cf7
Sha1:   9e36713f2917615a67e16461d20ed85011a4e2be
Sha256: e5620bc582c2f7bd3834e85cd794c133ee5ecac3f211665ee4a60b25a1c01852

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/login/reader.png HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 25 Jul 2020 22:12:14 GMT
ETag: "1224-5ab4b61b98b80"
Accept-Ranges: bytes
Content-Length: 4644
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   4644
Md5:    fcae74c21fad21891adbde3590c060b9
Sha1:   9c8023e5d4352e35be0a8984d2461cf70a61288e
Sha256: e52467c1c522694f58da582d93cba6d2892ee23765c131e0baa261e51374b332

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/login/ing-logo.svg HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 21 Feb 2020 14:50:04 GMT
ETag: "2d3d-59f172302bf00"
Accept-Ranges: bytes
Content-Length: 11581
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11581), with no line terminators
Size:   11581
Md5:    5f89c07d68158cd838ca3620fe676d87
Sha1:   dd50362c3a74f557da848b1073f75b5c06ee04eb
Sha256: da4638536ea61163947d415fce63a19e4c7be592fe76908e9dac19eb35e5ea8f

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /in/login/favicon.ico HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 21 Feb 2020 13:57:16 GMT
ETag: "1cee-59f16662ee700"
Accept-Ranges: bytes
Content-Length: 7406
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel\012- data
Size:   7406
Md5:    c6c99b7340d7e268a6801165554a2ce6
Sha1:   9631fbd54e7764a7cf02c50c36eb4575dce4fdd5
Sha256: cf7fa75dfa95e4cdff567a10c10186d7a5bf7bba10e6022b8669e76594a150aa

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/login/bg.png HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/login/form/css.css
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764; lng=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 21 Feb 2020 23:14:14 GMT
ETag: "fa26-59f1e2e0d1d80"
Accept-Ranges: bytes
Content-Length: 64038
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 296 x 375, 8-bit/color RGBA, non-interlaced\012- data
Size:   64038
Md5:    131bdb43059ee91da903a5f1bce9991f
Sha1:   2e804576b49b5b8a273698540bb8b97e09cc4333
Sha256: 6c5629e19f8ba5040f1433da6c379412a915a6a2ae5076b806c1fd5e606b7580

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /in/bower_components/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/bower_components/font-awesome/css/font-awesome.min.css
Cookie: real=OK; bid=5bf6c4fe37d0729bd9bbbb8fd3580764; lng=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 09 Apr 2017 04:29:24 GMT
ETag: "12d68-54cb44da47100"
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /uadmin/gate.php?pl=token&link=ing_be&bid=5bf6c4fe37d0729bd9bbbb8fd3580764&callback=jQuery3210876422258159422_1668775686774&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1668775686775 HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: bid=5bf6c4fe37d0729bd9bbbb8fd3580764; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Length: 56
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    3ce1ce8399c90e348ef73c2d5d54cbb0
Sha1:   5348007efd3de49796bc05dac9a275c312a28ccb
Sha256: f7c9a3ce8ff6be866fb6afc4dfbb9b35d4819880132a643158bf13f0a71acc23

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /uadmin/gate.php?pl=token&link=ing_be&bid=5bf6c4fe37d0729bd9bbbb8fd3580764&callback=jQuery3210876422258159422_1668775686776&data=%7B%22mes%22%3A%22User%20on%20login%20page%22%7D&_=1668775686777 HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: bid=5bf6c4fe37d0729bd9bbbb8fd3580764; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:08 GMT
Server: Apache/2.4.29 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Length: 56
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    587bdcd84926e8d97f563f0eb32d580e
Sha1:   677e86b59ce11e2f008a834fbb33d42237ce8c8a
Sha256: 21dbbe93497866ba3a48ffe603069e8dfa4a080b5ae13646e717c67458015d50

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /uadmin/gate.php?pl=token&link=ing_be&bid=5bf6c4fe37d0729bd9bbbb8fd3580764&callback=jQuery3210876422258159422_1668775686776&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1668775686778 HTTP/1.1 
Host: teruggavetabel2022.ddns.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://teruggavetabel2022.ddns.net/in/a1b2c3/5bf6c4fe37d0729bd9bbbb8fd3580764/login/?
Cookie: bid=5bf6c4fe37d0729bd9bbbb8fd3580764; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         45.82.120.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 18 Nov 2022 12:48:13 GMT
Server: Apache/2.4.29 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Length: 56
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    587bdcd84926e8d97f563f0eb32d580e
Sha1:   677e86b59ce11e2f008a834fbb33d42237ce8c8a
Sha256: 21dbbe93497866ba3a48ffe603069e8dfa4a080b5ae13646e717c67458015d50

Alerts:
  urlquery:
    - DynDNS domain detected