{"report_id":"9884660f-55be-44f1-b036-77e376a75751","version":6,"status":"done","tags":[],"date":"2025-08-04T08:38:23Z","url":{"schema":"http","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":0,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"final":{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"title":"frogie's arcade v4"},"submit":{"url":{"schema":"http","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":0,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-08T08:38:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"domain_registered":"2016-07-23","domain_rank":0,"first_seen":"2025-08-04T08:38:24.084095Z","last_seen":"2025-08-04T08:38:24.084095Z","alert_count":0,"request_count":36,"received_data":1575375,"sent_data":21198,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Firebase:8.6.8","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-07-30T15:24:51.957591Z","alert_count":0,"request_count":3,"received_data":389279,"sent_data":1557,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-30T15:12:44.837685Z","alert_count":0,"request_count":1,"received_data":405815,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/css/styles.css","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/css/styles.css HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=0\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-length: 3489\r\nvia: 1.1 Caddy\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nlast-modified: Sun, 20 Jul 2025 20:53:52 GMT\r\netag: W/\"42e9-198299d4f00\"\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17129,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"1e44d69bc2a509bfa6657bfa915aff8b","sha1":"6bdf1dc39f59e42dd612451dd384baf82b7b9c77","sha256":"5fcc9afd3b380ccf843c76f63711319ebaab4235d37813e84bf0560b5aac29f5","sha512":"360a362d0d52713a125441a5707b427ed7e995ca5479b07de8b30bdabb5087362f8f3318466d17d253d40b7bd222738ac8fa1199855fc2fbf17551e333b0a5d8","ssdeep":"192:QaO6NSdH1SdHENud+zKvt57s57KBrZQDsQudJrZQDKdo4x8miS6/N2rlKwsSd1Em:QaOAMJIzve8xhH1qZAZ7YNCc0mfPLu","tlshash":"4a724465ea041148b232c3b8bfe30739e6bb5083ea03047d77d526565fb256c52b6fe8","first_seen":"2025-08-03T23:32:13.349731Z","last_seen":"2025-08-04T13:12:06.596296Z","times_seen":15,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/logo.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/logo.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvia: 1.1 Caddy\r\nlast-modified: Sat, 06 Apr 2024 22:19:00 GMT\r\ncontent-length: 83436\r\nx-powered-by: Express\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\netag: W/\"145ec-18eb57e5820\"\r\ncontent-type: image/png\r\ndate: Mon, 04 Aug 2025 08:37:44 GMT\r\ncache-control: public, max-age=0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":83436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"3d641b73e819209d956b2b777204e28d","sha1":"f967253ba82f220a4e342430ad18bc82d315c302","sha256":"ce1f6375593f072415509002307a990f5fbcb483546c94899050585c6a574fb5","sha512":"a86ad729dbfbeb5eb9991aec5b294acb586ac8e0eb98ec3fd7dfaf3ad532df54aa8c737f7ef5d037cb6a6cb5db293e25d6feb14ce0acb4e36a306ca520bbd4cf","ssdeep":"1536:+Ycby68CPytBJkYFiddIksgSLsxpdh2Dr6hqtQjuuChTInZhqe1nnpYd:0yBcXsgSLqp66hsPjIxFnpYd","tlshash":"c383d060fe82187adc8024e6bb83b1d2f4ba906775a41d1e2f515ebb5d47600ff70e62","first_seen":"2025-08-03T23:32:13.399325Z","last_seen":"2026-05-07T16:37:12.448758Z","times_seen":108,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":98,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/apps/youtube.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/apps/youtube.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncache-control: public, max-age=0\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 9949\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nlast-modified: Tue, 28 May 2024 22:45:45 GMT\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nvia: 1.1 Caddy\r\netag: W/\"26dd-18fc16185a8\"\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit colormap, non-interlaced","md5":"bf7960614b37da7788c099d1a21231b7","sha1":"c21824fceb4585e39a7db4693bf352195374ac6c","sha256":"83ff3ddefd845b517b30b0a913841d7d8e43e717f3e24e78e7da53f24ed858cf","sha512":"e3b18608607772b2a86f5eaaf2a063c1f09ef6c1ed6855476e9c9659e8e24af9d6f484e37168709b88f2ede8aac359a7b51ff88eff7b1b9269e60ffbf5d1bd3a","ssdeep":"192:PoSjOLy/5ES5SWfQa5zCC9hpUo+wTbcXFRDK7TZEJzfcavvQlhY/7:P3AS5XQa5zCC9p+wTITyT+Jz0aohm","tlshash":"c222b0b06567bed4dfcc5ab314f5286739eac52f24c6f022c46689f46848fa1b1305f0","first_seen":"2025-02-19T17:21:12.031365Z","last_seen":"2026-05-07T20:28:48.328552Z","times_seen":145,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.6.8/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /firebasejs/8.6.8/firebase-database.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 52287\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:14:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:14:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 01 Jul 2021 23:11:46 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 314636\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187423,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62a92abf26d656af331911351b8d08db","sha1":"ecf425099274ae11ad59f040391d495ca61e2274","sha256":"6a20fab40b390c2d0086ae42b9cb2263b2b3d092aea3f8256b4f398f6ba7e232","sha512":"06062150a898544f3383366f5c993b7983b036aa34c67a6b2b8e9eb0b635e952891de39b14a9d32d1a02063c8909797be2f1d8bf2d4f51a375f744a1f473ad5a","ssdeep":"3072:Yo1/8ZbeAZJKJyJzJPJgJBJaJWJ4J4JsJgJqrfL/DI8JWCSTuv:Yc0A04EFpGzEgGai+aL/DI8JW8v","tlshash":"12040a897691b12313b361b5403f910bb33b6c6d6808406cf669d8e57cb9a4d637bfb8","first_seen":"2023-04-05T01:46:26Z","last_seen":"2026-05-07T18:52:45.084254Z","times_seen":144,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":107,"dns":0,"connect":28,"send":0,"wait":16,"receive":18,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/cursor.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/cursor.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\nvia: 1.1 Caddy\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Feb 2025 04:57:49 GMT\r\netag: W/\"6d5-1950d1eacc8\"\r\ncontent-length: 1749\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, interlaced","md5":"6635b6f68e07609b854805ffff92d919","sha1":"97e8b3ff5281c823aa3fbfd40b2fefcd211ebac5","sha256":"8c40289992585297434d27ac06c8f02392fc790e01ba3753bfc64aadf71027bc","sha512":"71e44757d1a1fd99b83da9c3a6ab3ccb237b3ef9254b962de24c51c6f8c281217c2d3a3be8b3c1c19fbbf304a30de8d442a621c48259413295cccefc0be0d7c0","ssdeep":"","tlshash":"d4314de890d6b6ac2576b688470bc2469fe7574d53557e1801a073c320513c5afc53b0","first_seen":"2025-08-03T23:32:13.303696Z","last_seen":"2026-05-07T16:37:12.446093Z","times_seen":124,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":101,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/js/loading.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/js/loading.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\ncache-control: public, max-age=0\r\nvia: 1.1 Caddy\r\ncontent-encoding: gzip\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nvary: Accept-Encoding\r\netag: W/\"29ae-1984654d348\"\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nlast-modified: Sat, 26 Jul 2025 10:43:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10670,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0f7936429a7bd95f3d99161374894f9a","sha1":"ff14bb3d592d3f8486809485ac4c8b7fefe514e1","sha256":"da25e0f426fd4f450e306b7aefed3660464d63b990312daf6236e8d5c39895b6","sha512":"e8c437b9742cd16acf91e334532c6298229bd609473f950e4355ee0d53ac696fc86480df5b7660655e98a28019df26faacc426755e97fe80019fac781512e2f0","ssdeep":"192:EeZMDYbvDYvV9WQlRxWi0m1F6F1f8MYJi8hUflktLudFgtSQ:EeZMDYbvDYvVcQlRxWgj6zf8dJixduQQ","tlshash":"de22d60ff2216f7541b24315abaf1a46fb21035f23519527397ca12d2fb1aa91237eec","first_seen":"2025-08-03T23:32:13.38973Z","last_seen":"2025-08-04T13:12:06.585835Z","times_seen":15,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/handshake-solid.svg","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/handshake-solid.svg HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=0\r\netag: W/\"452-1931d2c8060\"\r\ncontent-encoding: gzip\r\ncontent-length: 624\r\ncontent-type: image/svg+xml\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nlast-modified: Mon, 11 Nov 2024 21:41:16 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7deacdc643416c9ba82860c590ea5f1a","sha1":"731cab6682c0143728a45b11a02aa97802a62338","sha256":"1e4bc1dff433ff1ee2a0a151476b80b684762dbeada0127d1bcedd66305d617f","sha512":"ce468c1ab98aefe8d17b6c11ca03432d09c5400a392b041ca98677b800f125a4e609555a3d3a03c8264765a402a6e1d0f486a78a5269c7eb74ad55de55be417b","ssdeep":"","tlshash":"4111607cc9ab30fc6a95436a8e3230b0788aa0e92de00238b138853070956dee1e24c1","first_seen":"2025-08-03T23:32:13.332613Z","last_seen":"2026-05-07T16:37:12.453915Z","times_seen":126,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/apps/tiktok.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/apps/tiktok.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=0\r\netag: W/\"7e4-18fc16185a8\"\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nvia: 1.1 Caddy\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nlast-modified: Tue, 28 May 2024 22:45:45 GMT\r\ncontent-length: 2020\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2020,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"33beaa9cd9259002ace366b764de61ee","sha1":"36aa568c884b724f3d139b74188d2325452a0aab","sha256":"486448a91a7d28a0b660100fb24677cb0757ef2e4dbae4f2a1ca3fa8b1a13f07","sha512":"abce97362d1f4cf7e8801ba536c65c42f86cbb0afddb0ae6560642f0cff5e1a06b3a2cb1273fc626e48fd67c24c9db9feb2408abb825c262d337d817b4fd8b71","ssdeep":"","tlshash":"e741d7b6b77c778cf66a81323a905b44ba66b946498a0f13004c8674072c6c52afcb43","first_seen":"2025-02-19T17:21:12.025541Z","last_seen":"2026-05-07T20:28:48.323665Z","times_seen":126,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/apps/twitch.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/apps/twitch.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 28 May 2024 22:45:45 GMT\r\ncontent-length: 8080\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nvia: 1.1 Caddy\r\netag: W/\"1f90-18fc16185a8\"\r\ncontent-type: image/png\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"e9997ba9eb2594ecad93ad85abdef64c","sha1":"f1bad10e2534b56d086011bec2d2d92b088f8b74","sha256":"6bd02a61a826a78b382180ba47d0d7b053f9478eac4b00950ae25caf43350b33","sha512":"a0e63600cab0178b7b240742ef02604ddaf42ac65f9a23d55cb26ccfe2062341a1f8948e44ee62c453d4be7318055478ff3051199fb6cfa5d0e7c290a45dcdf9","ssdeep":"192:7RGjCVpyXSPfk9eQRlVa2IsSA5/ziOfaEIRHcKD:7RGjacRkQXdDiOoxD","tlshash":"09f17d4300e5c56bc4eb411fbb192a5adfd2c233afb85180e878abd45795c21f4c5be0","first_seen":"2025-02-19T17:21:12.033126Z","last_seen":"2026-05-07T16:37:12.455495Z","times_seen":119,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/fonts/Quicksand/static/Quicksand-Medium.ttf","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/fonts/Quicksand/static/Quicksand-Medium.ttf HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\netag: W/\"13464-194aefa9b98\"\r\ndate: Mon, 04 Aug 2025 08:37:44 GMT\r\nlast-modified: Tue, 28 Jan 2025 22:14:07 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":78948,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 27 names, Microsoft, language 0x409","md5":"fd7f304a26dd790aef9f1ae84403eab3","sha1":"9cbdd6785519aa2d85ee58cb5101ea9dbff8652f","sha256":"054bafb6bbbb24203baeda2bb65aa5c972a8e4596edff8677092bb21517b0ec5","sha512":"34e6c83859504f8003bc88c6ac2d60e85f70a049df034331a9fc489c6954260b3d7a31843e5f12a6d11f887c43a6cb1063368e9cf5fda0ff73da14da4abf7fc6","ssdeep":"1536:M5cblftx47z4adYo4zSHRxcTXvZ7K1PL0hrhYSJ9n:ecblez4aWUjcbZ2NLS1PJ9n","tlshash":"ac735b07f313ebaace664efca731975467a97d26ae7dc20bfd023919e88f4404c49548","first_seen":"2025-05-19T22:03:46.132884Z","last_seen":"2026-05-07T16:37:12.474993Z","times_seen":156,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/particlesjs-config.json","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /particlesjs-config.json HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 614\r\ndate: Mon, 04 Aug 2025 08:37:44 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: application/json; charset=UTF-8\r\nlast-modified: Tue, 28 Jan 2025 22:08:15 GMT\r\netag: W/\"7d4-194aef53c98\"\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2004,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99eeb553fae9270512a74b14327a46b5","sha1":"78196244310ebc9ef40d684bb2fcd0c0c205e6b5","sha256":"91d4a444e9e796b30eb34fd62f5b0bb90683b7ea81f1b683704fe25b7c8f76b8","sha512":"cbc7bfc018ddb00c25007b3e05ecfe28ed6f63d6e84768af50d04c7d2d54ce12c3c5f0c03ed3a4f3ec461b18fb425ef65c9eac34829cfe0818564ce7952e2d2e","ssdeep":"","tlshash":"a041022de9b01db3008ab03908be9247b63085574d2e3d35b95c869c5f0ed3da2be7e5","first_seen":"2025-08-03T23:32:13.307077Z","last_seen":"2026-05-07T16:37:12.469526Z","times_seen":108,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/api/onlineusers","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:03.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /api/onlineusers HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: iOcfSWbeVr2RbCiclzHQvg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: _ga_JMXEZ1F6QH=GS2.1.s1754296682$o1$g0$t1754296683$j59$l0$h0; _ga=GA1.1.2081516828.1754296683\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: 49np8rzNEZTfwGtz/quWTl1EKPo=\r\nServer: Caddy\r\nUpgrade: websocket\r\nDate: Mon, 04 Aug 2025 08:37:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":1,"connect":93,"send":0,"wait":95,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/gamepad-solid.svg","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/gamepad-solid.svg HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-length: 367\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 11 Nov 2024 21:37:41 GMT\r\ncontent-type: image/svg+xml\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\netag: W/\"269-1931d293888\"\r\nx-powered-by: Express\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0157f340c3b996a88b0791d904bf24b1","sha1":"0c86c4c950b456256568d2a9fa413e9d093f9f30","sha256":"dcd0d2895703e0bbd3a87a1af857543c3f572a53d18af8980ed1d31127c38ca2","sha512":"33ce31ea78892dd7d826f0494abf7832a754107dd686954433fd35093e2158265c7c40fbb5f29dbebe4e1d197f8c9bd78392f1b114ef29eaf589d4b5f694f345","ssdeep":"","tlshash":"f3f07835481c00bc0f2ac3882e1d707d682ee48e38e42e79a1adc3a62353bb1f0879d0","first_seen":"2025-08-03T23:32:13.314435Z","last_seen":"2026-05-07T16:37:12.457081Z","times_seen":140,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/apps/discord.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/apps/discord.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\nlast-modified: Mon, 26 Aug 2024 09:27:48 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccept-ranges: bytes\r\netag: W/\"b4f-1918e035220\"\r\nx-powered-by: Express\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\ncontent-length: 2895\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"43a14f71ae242003262ff49122b3d29f","sha1":"26a3c11602b7328f6ecaf48fbbdb1325d51c8504","sha256":"2a3927dd0d19886015a8f1d416ee78d7f1106714d68df9ed1a42114d9d18c5a6","sha512":"121e197f9723f5f0cde1fd26d25d5dd2f0dd524a64ab2ee6c11e5012433b48213db52ddcddad9c8e58a2c876c8956b11f0ef90bd2f084697fe930535082bfe10","ssdeep":"","tlshash":"1b513ba2f8a7f1d5fbd145f30009b4439e7041c7fbf4f148c29ad918a5a68b50b84056","first_seen":"2025-08-03T23:32:13.404686Z","last_seen":"2026-05-07T20:28:48.34976Z","times_seen":124,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/js/particles.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/js/particles.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=0\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\nlast-modified: Sun, 20 Jul 2025 20:52:01 GMT\r\netag: W/\"a827-198299b9d68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":43047,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"047d4dc76a77d90189e5a7b1c9707f47","sha1":"4d61b7cc10f345a5df5bb2e4c1ccf59c6df17695","sha256":"25581018f7c23945c900a736036d55367e26d7b081a396bf61e44b4e7f906445","sha512":"ae7b84c7fa72b04219018f2bda8122f150491addd265f0c6afffb221cee52e34398590254f2a37438a182d62323b9dad289f8f5d8b6cc8894695eb864ece9ed6","ssdeep":"384:TxzjtwGGs5YQWS+ngXFlkjXEFOcQmxm3DO3p3z8CIopbubAi4OUlLqozr+XDhYnf:9t+BDcpz88pbuM+Uo0r+XUd1YTebVCQL","tlshash":"fb131f8d5bfb18632697b1b84fdf8001e73080db1a8b95a5fc6c0258cf98655d29efe4","first_seen":"2025-08-03T23:32:13.394765Z","last_seen":"2026-05-07T16:37:12.478011Z","times_seen":124,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.6.8/firebase-auth.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /firebasejs/8.6.8/firebase-auth.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 56948\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:16:25 GMT\r\nexpires: Fri, 31 Jul 2026 10:16:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 339697\r\nlast-modified: Thu, 01 Jul 2021 23:11:47 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":177250,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5c1363452acbaf438e12f8bba039062d","sha1":"7353bd2511bae6223a68d438c9b1cc22e8152d28","sha256":"71fb15f82ea03c57f7790a2fe7affc95f6a686f6e81855212e85b6001b45b934","sha512":"b6dff0e26105c0c573f8c438836319661d83c4bf278d47ed44fad3e0df388371d1695e60d8fab8d05fa5e7cf8897fad863f811f4a3b427e81f7dcbfc4358a683","ssdeep":"3072:qGATLHDn34Kc4+R/Kvky32a9l5rGEEwwdrsZVKm:qLLHL9cHR/S2aBGqw+/","tlshash":"9d04e98db292b071039710b2657f100be33a685d689f4068b164d9ea7cb995ee337f7c","first_seen":"2023-03-12T09:11:16Z","last_seen":"2026-05-07T16:37:12.463794Z","times_seen":155,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":247,"dns":0,"connect":30,"send":0,"wait":15,"receive":9,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/js/moresettings.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/js/moresettings.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 10 May 2025 06:30:08 GMT\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\ncontent-length: 952\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nx-powered-by: Express\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\netag: W/\"94a-196b8e30580\"\r\ncontent-type: application/javascript; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"7f9806ea484ed7e5856fbf6bda7c63d6","sha1":"e55da99c7a1e9df49cc82ac66a548eaf888b213a","sha256":"85df9a2d756e19f8ed1d2e1f7b5cc9713c637da8553651be1dcf54f84f284be8","sha512":"a701a0f56a4d885f3049c6b63fda5badef05e6b6a0f68616121e472b942803456a813768f821274c12a535a8462624b7c41ec243515354a02662f6cb3286e8c6","ssdeep":"","tlshash":"7741334987270b75c17103b99b1c9040ff53b2226a55d15271adc4602f71e2d72f3eee","first_seen":"2025-08-03T23:32:13.353617Z","last_seen":"2026-05-07T16:37:12.468302Z","times_seen":124,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/fonts/Quicksand/static/Quicksand-SemiBold.ttf","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/fonts/Quicksand/static/Quicksand-SemiBold.ttf HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ndate: Mon, 04 Aug 2025 08:37:44 GMT\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\ncontent-encoding: gzip\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 28 Jan 2025 22:14:07 GMT\r\netag: W/\"133e4-194aefa9b98\"\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":78820,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 27 names, Microsoft, language 0x409","md5":"025d26a905aa7e016827cdc2b429552f","sha1":"1f5c9cf95379bef6cee5f2a7deb393b157c91f4e","sha256":"d7c6724ce56af5429b20c54f320f319d8a68a197f1b01c9cd7013308daa3706a","sha512":"fdc475e3daf6d38555f9eb47e27e30682214be3e081d7252e4481ebaaa2dc122f068362b82bcc83433dcc7737b5ca523e2d8a7444680c744e28ce326713b8721","ssdeep":"1536:AxYgy5OfffffffffMfffffff0x47z4aD42vRYhCXIcPwnw8PC7nI5lMhrgC:Tzz4aDJvyCRPwLaTI5lIgC","tlshash":"e4734a07fb43db6adea60fbce621a7c5277dbdb46e7d810f9842791de88e581084418c","first_seen":"2024-08-19T20:35:14.494863Z","last_seen":"2026-05-07T16:37:12.452407Z","times_seen":137,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/border-all-solid.svg","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/border-all-solid.svg HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 11 Nov 2024 21:40:01 GMT\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\ncontent-length: 490\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\netag: W/\"1ea-1931d2b5b68\"\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d74a5041b9347069cab2a908c9759d31","sha1":"11ab47840e781a81e342a14f203eec4817044306","sha256":"11d4c5b0916455fc9e26375a21eb851851d9ec0ac276fa1f6d8b4b435e48656f","sha512":"e70111eee44799af1a2f48cac199b94e0b89feb2a3c03d296dacf251b9eeb402676cc68b510832e97b7250804e7badfa8bde7160be57375229c8822302e52d9d","ssdeep":"","tlshash":"11f0973f88a550bf4f51d2101c6c55396e1830c93ac40aadb1e191a0219361d3af2fed","first_seen":"2025-08-03T23:32:13.412847Z","last_seen":"2026-05-07T16:37:12.476781Z","times_seen":140,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/settings.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/settings.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\netag: W/\"832-19001911df0\"\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nlast-modified: Mon, 10 Jun 2024 09:53:26 GMT\r\ncontent-length: 2098\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2098,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"fcff0909dde9a21892bad7e94ab23afa","sha1":"5c157214fe10a3e1072cdd06c22f14fb710e8860","sha256":"b38082deebee4139ec5eb953896742d8e3514d809c91bec16970f5a66481f32b","sha512":"06aae5148e152df8a3476794a895740cb128b23ccdf904011d15dc8f9acc80eb1b711c243acaf223d2e3c1a9a8b67b94a3cd2ee662c77c65f89f9132ebc7054c","ssdeep":"","tlshash":"b0416ecfb802970ad3a10ade9034349e531d903ee1352221b21310ff073cf5002f5669","first_seen":"2025-02-19T17:21:12.021466Z","last_seen":"2026-05-07T16:37:12.477379Z","times_seen":135,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/user.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/user.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: W/\"ea2-18fd14973b8\"\r\ncontent-length: 3746\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncache-control: public, max-age=0\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nvia: 1.1 Caddy\r\nlast-modified: Sat, 01 Jun 2024 00:53:23 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"284bea3981cb26b99ac5656b91795195","sha1":"0a224b929be74b95a36075e218e08f9c01538c98","sha256":"7193ef68392fa1ad5afaf61d542e496c175679e63b849e604dddab16edd43dfe","sha512":"e12334023f683d7d0d8959085db261b2da63af35f189a953aeda4fb71e094f371a0a0ab16eb99524ea64c5e3da7b818cec9dc68a8211967bfba75ae295f8fb6a","ssdeep":"","tlshash":"78716d4162360b29c735fee497be012e7768bfe5ff00f5d51b2ce80562e2820c259951","first_seen":"2025-02-19T17:21:12.038587Z","last_seen":"2026-05-07T16:37:12.462153Z","times_seen":129,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/app.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: W/\"db-198298e9d48\"\r\ncontent-length: 219\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 20 Jul 2025 20:37:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nvia: 1.1 Caddy\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nx-powered-by: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"7a7c72fdd5b51d28a7c5983511edf0a7","sha1":"58939864736ffef60d3b9525983b947373472b32","sha256":"ddfa451d7de7cf6f1a00c99827a57e4c93bb9512e86fb5b5a268a63a860b6a83","sha512":"5e299b726b66e779034f2bc2fcc55d9b76569143b466d9c1a53b96f8098f7c9d638bec70ab8b72edcb6a5f6933199d9bf2ead28282816c19072ce85c4c5990b4","ssdeep":"","tlshash":"88d0a91a28ff6e3380f2f3e88c8a22205b245e82b0c5648be62912ec9e428014921c98","first_seen":"2025-08-03T23:32:13.300103Z","last_seen":"2026-05-07T16:37:12.472256Z","times_seen":124,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-04T08:38:01.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\netag: W/\"3019-19864833c38\"\r\nlast-modified: Fri, 01 Aug 2025 07:22:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-length: 3561\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Firebase:8.6.8","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":12313,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"acd868cc5880bb28bbc06c30ecceb89f","sha1":"862e5b15f4a05a51f62a88cda5635a0cb1e819a5","sha256":"28d428daa4d1459538a2c68a1765dd7e88bbb34f26aba37ae8d4ff4584e282ec","sha512":"3c195af7a61f2cf0660c4a8f19c42335555fae170595222c9052aeb6ea405372db05c6e70add6fa1e14dd70af47314cb35c482e8f98ed965a261648ca0018baa","ssdeep":"192:z+JDvE999B33vJn+36Yh91eHlFkLkX842R/RhKDI0oCw2mOG2BpKaElHq6ytxJsd:jLzXqEkiBpKaEln20","tlshash":"3442c74ba8846866037347a59bb7ba49fd32200b8641d4453a3c4ed31f72fda9963fd8","first_seen":"2025-08-03T23:32:13.328692Z","last_seen":"2025-08-04T13:12:06.592319Z","times_seen":15,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":363,"dns":162,"connect":94,"send":0,"wait":102,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/css/alert.css","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/css/alert.css HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 29 Jan 2025 21:19:12 GMT\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\netag: W/\"271-194b3eeb080\"\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-encoding: gzip\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\ncontent-length: 294\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":625,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"8c6fdcdb39ce8cd80039b56cc13cfe0e","sha1":"fd471d935a63cd1cb322b222994bc5d4f7bad62a","sha256":"8a16f24c3580fd20a2a5bf0aef65c00008a09c38ed2258787c5f682c5c84c075","sha512":"afc3b2c5bd7f8818e4a944af83685ae9f71831b49252f8793ae1d8265a4f0334e3a87b692b4161afd5a76c46b73ae09483607cc99a4b0eb9eb55dccc819e116a","ssdeep":"","tlshash":"a3f02715da0826116070edcdbb6a5b16c5ff104782494a7a7afcbb5c8ff65288550fcc","first_seen":"2025-08-03T23:32:13.365736Z","last_seen":"2026-05-07T16:37:12.467699Z","times_seen":125,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/js/messages.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/js/messages.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 20 Jul 2025 20:50:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 501\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\netag: W/\"1f5-198299aa368\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":501,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"4254f13ea5138e7b97468d207e59849a","sha1":"77be65f601f2a00efb0764ce25a508a7d33747c7","sha256":"03f1aedf5210235e5165909836ad3f857109755a1e013b04a1aef36042cc861e","sha512":"a0d37fc7096c9b5b1d0c7f8df45ffbca9f87cf2dd2ffe8ebeeb8faa14376e0d7d32097f33e14b4c18b3818b8fa0cfd8ecb57d20f4880d1bd9bcfdc2f225475dd","ssdeep":"","tlshash":"edf05cee1641893056fbd77ad0273b48ee3640a75405a5113d1c04442fbae5a4637ed6","first_seen":"2025-08-03T23:32:13.356221Z","last_seen":"2026-05-07T16:37:12.447283Z","times_seen":124,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/js/exportindexeddb.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/js/exportindexeddb.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 16 Jul 2025 22:33:19 GMT\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nvary: Accept-Encoding\r\netag: W/\"110a-198155eeb98\"\r\ncontent-length: 1347\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4362,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"55d0cc884e1ef3ef39494a13c768720a","sha1":"b2cf5c94e0416b2eab913d8320db769bb9e5f4b8","sha256":"bc60ea4ac5e22e06c98fd430f6e09a4b0ab949e7d8c260edfcc877560db56e40","sha512":"d4f4f0dd07919703e1dfb211ecd5553125099936b196772853e80dac6292b54d3681df16c10f79cca94d1a09bbe74aeaebce2e87edbabd3a4a53e88949662f9b","ssdeep":"96:UIgzfa1rhItuXlKEyHLJdHa0gu4PnTxYOnTr9xnTok:0zfAsyyThgNnTxYOnTr9xnTok","tlshash":"1791118768946439863a93789f074402f11ab9177600cb64fb9cc7790fb5514fbdaedc","first_seen":"2025-08-03T23:32:13.372339Z","last_seen":"2025-08-04T13:12:06.593327Z","times_seen":15,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.6.8/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /firebasejs/8.6.8/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 6966\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 02:42:06 GMT\r\nexpires: Fri, 31 Jul 2026 02:42:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 366956\r\nlast-modified: Thu, 01 Jul 2021 23:11:47 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21934,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21892)","md5":"89a140a058cb2b6a7e5d3e7f3c2ca1fe","sha1":"f62380c92481b0d361b125cefe23e7c009db311e","sha256":"1977ae2b50845838a0f0848012e1d2bb312a7a760bc7427c601305531de0d2d4","sha512":"5bfb7eec352fd327a8be4442c3a90dd00ac1f4b8825492b30573efa54cf4cfae50fa8c70ff214b6ddc0c35570e76c08a76a192b813335b92a3afca821613c98e","ssdeep":"384:mcq9EarSceeQMORRKp6kHU4VCPH3ZaSKLxkL2UaA2m2:ONrbQMOHKp5yaSH92m2","tlshash":"dda2b69cf7e2b06347a350b4453f310ba33e2958984c80a8b55de4e69db690f516ff78","first_seen":"2023-03-07T21:17:42Z","last_seen":"2026-05-07T18:52:45.095477Z","times_seen":197,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":74,"dns":0,"connect":14,"send":0,"wait":15,"receive":1,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/fonts/Quicksand/static/Quicksand-Bold.ttf","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/fonts/Quicksand/static/Quicksand-Bold.ttf HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\netag: W/\"13304-194aefa9b98\"\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 28 Jan 2025 22:14:07 GMT\r\ndate: Mon, 04 Aug 2025 08:37:44 GMT\r\ncontent-encoding: gzip\r\nvia: 1.1 Caddy\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":78596,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 25 names, Microsoft, language 0x409","md5":"e8dcee4bbf2288a2d264c76fa547f37a","sha1":"07ca4486c80653a7f3abc18145c2f251d5c9989b","sha256":"68d51c322a16807a6d4dac7afd41b63355b4ee4f9727d40f20d03aa7da8e2c10","sha512":"69878149fed49d8363490d923f064c698b0dca113ce04f1891ff8c96b59f0b64bfabffefe3f319642053c0e0e04a44b223139198b2f10d4a45d447c02d5249dc","ssdeep":"1536:Ti7+Ix47z4a/oMwxZxA7lth2e9RYSqE5Z4k9h:Ti7+5z4a/oMwxZxA7lTN98E5Z9h","tlshash":"f2733a4bf603ef6ede5a4ef8b56263943b79bc65aa7cc14bd841792cf88e4504c0d488","first_seen":"2023-10-23T11:55:23Z","last_seen":"2026-05-07T16:37:12.468881Z","times_seen":178,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/apps/snapchat.jpg","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/apps/snapchat.jpg HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\ncache-control: public, max-age=0\r\netag: W/\"2749-18fc1a0ffa8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nlast-modified: Tue, 28 May 2024 23:55:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10057\r\naccept-ranges: bytes\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"9bd06bf6e55d86a36331f11df01eecf6","sha1":"f4fea819e938b5c969596693b3248a686e18b98c","sha256":"554c14cee17d29f4d7f59478d61bd22b8b999a5a992e4a015c9f224ec8d34f02","sha512":"2d2d5dfdadd599844a2377ecfa3d644640e53f8b19ae5bd5df84fc6356eccb85a6d796bd165a21e31ce044aa5245ac30198b785a44d1775068acebafc1154455","ssdeep":"192:SfX7bgU462xlCRqq3UvZ4m018GVOz9iJHXB42HDa4YnNYJ0NKm4UxDDjq:Sv7DQCIqkvZ4m0GGiiJHXa2dYntK5UxO","tlshash":"76228d995bf82fc7d80db332154a5a277602ac13a089db9f4ac4057b672f06d55a00e3","first_seen":"2025-02-19T17:21:12.032261Z","last_seen":"2026-05-07T20:28:48.329808Z","times_seen":47,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/themes/teto/teto.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/themes/teto/teto.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: image/png\r\ncontent-length: 314292\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nvia: 1.1 Caddy\r\netag: W/\"4cbb4-196b7c6e720\"\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nlast-modified: Sat, 10 May 2025 01:19:48 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":314292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 474 x 645, 8-bit/color RGBA, non-interlaced","md5":"533464d0aee716b46ef0f6bd5f332614","sha1":"7e4b6058854764efc47e0d3db0d24c84b0f673a6","sha256":"33960b5128718c680f9513a73aeb1f5bb9f87b431c8c36edf04c928d17ba1c8c","sha512":"e4c6a06f7b57eb9dd2c462acef642cb999c70ef419b5ffaea80ff664edf1497aa0c1092610638743ca2710d821ecb92ed1f31b5d4fc630f8735a51984916f45e","ssdeep":"6144:efHN+xffg/1v8FdFst3MUzIGC4Cr9u22uzOPnuxWDB63g1mv:efHCf2N8HFQBzBC3n2brB63ymv","tlshash":"fc64238106bc0bf5db51b482f151602096fa6ee9162195ee4dc7bfcb1beb0c356b2374","first_seen":"2025-08-03T23:32:13.358794Z","last_seen":"2026-05-07T16:37:12.463206Z","times_seen":123,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/frog/bundle.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /frog/bundle.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\netag: W/\"a4713-1931ed707c8\"\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nlast-modified: Tue, 12 Nov 2024 05:27:09 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":673555,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63966)","md5":"1f39f00bb4103b2a9dfdcd755f8f46e1","sha1":"7ffab17c0bc4efb48e6cb634228751f78dda9471","sha256":"fe4183aeee0d80af8f9aa79dfdc6aa2254aca89296aeca04d984823e43e1a06d","sha512":"9d188b891251e3e8ac20fde04c7fa8660d04d98de66a233af4fe22ead0ee9cc647d98ea6d9b860465c1309dc530a90dac3f3d74752ea626be0d8fa5fd9720c02","ssdeep":"12288:2SmBRKA9/hnXEWO2Di5s9lUou74oPhmsSr:2SXM/hnXEWOSi5s9lUou74oPwsSr","tlshash":"6de419f3344268734fa7d19f9e5762a0a275400df4c84c1efaacc5da1a2166d1227ebf","first_seen":"2025-02-19T17:21:12.046713Z","last_seen":"2026-05-07T16:37:12.482294Z","times_seen":119,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/frog/config.js?cdn","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /frog/config.js?cdn HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 343\r\ncache-control: public, max-age=0\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nvia: 1.1 Caddy\r\nlast-modified: Wed, 05 Feb 2025 23:54:57 GMT\r\netag: W/\"157-194d889cc68\"\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":343,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"a1125bdd008b95a4768303828bc7ef98","sha1":"15e5ad553245a84cdd04faec031f77df509fda68","sha256":"f6fc745dfdcf4465fb13630f17cafa658c3c7ef16b5434f0366f02e59e219996","sha512":"49ea7028e7f818242651c5cf4e1870f3473d28cf48b11ef6e6986f1dea25e8308b5ee8af83bf13eedb940d4f4e74448dd7613e40e17c6339abe5e8c86924e23f","ssdeep":"","tlshash":"79e080cf4da80d6367440d54f157c876976d7bc75907b0045734e31ee50d77121a79ac","first_seen":"2025-08-03T23:32:13.321587Z","last_seen":"2026-04-27T21:06:30.944865Z","times_seen":97,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/js/alert.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/js/alert.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 25 Jul 2025 08:44:26 GMT\r\netag: W/\"8c9-19840c14a10\"\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 731\r\ncache-control: public, max-age=0\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2249,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3ed35508de2713ecf545f2359c023647","sha1":"57afac0e093af809d93228924fe354669bd98d77","sha256":"fcf720cc16a64408cc149c0e2e5596c0675389a73144e5b17fd88a39545deb02","sha512":"5d2d0ff7fa891648b82fad2530426c9de7783427933e5e12816e89925714e0de52a4489634918c75da85f05aba3e0c526b0a569a8b188f8de8e6907d3c3f615f","ssdeep":"","tlshash":"7141c37428f103d81ef2a212b97af54cb32613c66bf81349f4dc7c91af7a904e6856c9","first_seen":"2025-08-03T23:32:13.392257Z","last_seen":"2026-05-07T16:37:12.465374Z","times_seen":125,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JMXEZ1F6QH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-JMXEZ1F6QH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 04 Aug 2025 08:38:02 GMT\r\nexpires: Mon, 04 Aug 2025 08:38:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 135210\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404814,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"f658b56ff8d91bf47a86ff1cddf45bc3","sha1":"8f45375ab94820ecc1fd5bc7a0a2d9e86e4a0a47","sha256":"a4223c711af17609dcbf3c558cebae56d3722432813980803b7860995c207822","sha512":"7e03c66ea8cef026a79b7a27239c1dddee71a7e129cd23ee44d6ed404e90bd437afb6c2f468c4e254d81a9c1c874e41555e32e9707ff0885bfba62e683b50226","ssdeep":"3072:NQujWeWKA8xwym06o1Vlffz0ee38JGXbrunAIH1EMHsNKlKZtcRWaWU5Fjt2YwrG:igvm0HPHnCKlo9aWU5Fh2nr7FwK4L","tlshash":"928419ce73d674269396f478503f018ba57b29a2f45cc89ab189cce42d34a9a0177f7c","first_seen":"2025-08-04T08:38:26.896338Z","last_seen":"2025-08-04T08:38:26.896338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":108,"dns":1,"connect":21,"send":0,"wait":38,"receive":57,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/plus-solid.svg","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/plus-solid.svg HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\nlast-modified: Thu, 30 Jan 2025 06:13:35 GMT\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-length: 447\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncache-control: public, max-age=0\r\netag: W/\"1bf-194b5d7ee98\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":447,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"693f09bc874626cb4fbae84ba72d0cb2","sha1":"3359f7f06a717cb43190f373eb9719fc83de0dcc","sha256":"afbaf4a0779b848ff47c3f7700ee30854544f193312ac515c3cfdf9895ce3d4b","sha512":"75867f2a23ff03b887be2930487d90bf676030fa53d41203ea45bea57fc3c4050f0d67e1986eff96b649280bb550aeee7d6f8db2709d8228e360fdd5efb9074c","ssdeep":"","tlshash":"93f0abfc083f10b40b934792de2e756d9ca870d52aa402a5b033c06221d064bf551cc0","first_seen":"2025-08-03T23:32:13.318197Z","last_seen":"2026-05-07T16:37:12.45444Z","times_seen":125,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/apps/ai.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/apps/ai.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nvia: 1.1 Caddy\r\nlast-modified: Wed, 29 Jan 2025 00:09:31 GMT\r\netag: W/\"eb2-194af644278\"\r\naccess-control-allow-origin: *\r\ncontent-length: 3762\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit grayscale, non-interlaced","md5":"c1a6f69798ba4a03e4e6e1c097543201","sha1":"9917f8112c8cb9a5be0ecfee44351c5ada5fb387","sha256":"8392b61729486e3b846f2188d24b05b15f834c2f37f00de6133eb16992c12742","sha512":"d0ecc6e601555cf43a1831f0b28b5c8612ef1f62f7c23bb0e2b1e1dd01a20c433c4cc487bfad7d1760b8e4cae76489c23ce682d0a0d1cad04d13ed5cc066e901","ssdeep":"","tlshash":"f1718dfcb3ec7ad4ca13504280da5a54f770eb3a565a83c0e745c1178793a49da1d07a","first_seen":"2024-08-20T05:08:52.665728Z","last_seen":"2026-03-28T06:57:04.038545Z","times_seen":74,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/api/announcements/","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /api/announcements/ HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: AXTu21XjqB7t7CFVFjaqpQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nAlt-Svc: h3=\":443\"; ma=2592000, h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 969cbc7c4ebd0790-IAD\r\nConnection: upgrade\r\nDate: Mon, 04 Aug 2025 08:38:03 GMT\r\nSec-WebSocket-Accept: 6JMWQotdf0QRE+Qd2rVu77Xbd0E=\r\nServer: Caddy, cloudflare\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":1320,"timings":{"blocked":-1,"dns":302,"connect":395,"send":0,"wait":514,"receive":0,"ssl":410},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/icons/pointer.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/icons/pointer.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 16 Feb 2025 04:57:39 GMT\r\ncontent-length: 2396\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nx-powered-by: Express\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\netag: W/\"95c-1950d1e85b8\"\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nvia: 1.1 Caddy\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, interlaced","md5":"286d21ae089fabadbbb290125e6a0c95","sha1":"4035d78c2bc1fecb7fa4aedd62c2664c6da92268","sha256":"c3040a6acff2d4c3dfa7b97f5fdbe715b7e98898f251929102ece5b5f8b3bc0a","sha512":"a114d8a8aca16f862f78493dabddd0c1b23b7c20708513f129b96b026a2d741f894893253bd29797ef017c7b10b1cfee0c832de789988e29ce72614e5bbaf8b6","ssdeep":"","tlshash":"c8415be998f296d8fba76b18570fa00ef8de662d0903ff48506012c6e5c299b16c8139","first_seen":"2025-08-03T23:32:13.324882Z","last_seen":"2026-05-07T16:37:12.466167Z","times_seen":112,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/js/settings.js","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/js/settings.js HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nx-powered-by: Express\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 01 Aug 2025 07:19:24 GMT\r\ncache-control: public, max-age=0\r\netag: W/\"5a5a-198647ff460\"\r\ncontent-encoding: gzip\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":23130,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (4152)","md5":"e745335e5273ade1f7a982eab505e783","sha1":"3c9eb802c1d37108cd5982141ed19e3090874aab","sha256":"c0f38a08439074aec80625740e3e7971056ce82d7f4f23802e85a576903df40a","sha512":"58fd6b932c4311a3e8eb6830dcdeb9a63748341a3815ab3f0db872d4f6c7b3bf114e9845797a73b67899ff9fc524cfc52d82b4ca018a351d0ae123d2f7b90988","ssdeep":"192:iMQyg3ZzPuwsGIPsPaFWEuzhoglXBGlMr4yPLCqJfGDNZb3cjzFhIPD2ZDFMZaOp:Iyg3FuDGDZRr4aNrZ08+N3dfEWIq","tlshash":"aca287564da309759123a6bf5fafc1847576e0032e85e42672edd0286f00f7a53b3aec","first_seen":"2025-08-03T23:32:13.369029Z","last_seen":"2025-08-04T13:12:06.592799Z","times_seen":15,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/stuff/logo.png","fqdn":"4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org","domain":"frogg-services.webredirect.org","tld":"webredirect.org"},"ip":{"addr":"152.53.81.196","port":443,"asn":214996,"as":"netcup GmbH","country":"Austria","country_code":"AT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/","date":"2025-08-04T08:38:02.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 22:21:21 GMT","end":"Sat, 18 Oct 2025 22:21:20 GMT"},"fingerprint":{"sha1":"35:1D:30:8F:A7:92:4E:43:4A:CA:C0:98:35:95:1F:EA:38:16:46:3A","sha256":"10:CE:69:5D:B1:7E:0E:68:D9:5F:49:72:16:6B:85:AB:83:78:AF:C7:D5:56:E2:22:17:8D:1B:78:B3:7A:46:0D"}}},"request":{"raw":"GET /stuff/logo.png HTTP/1.1\r\nHost: 4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4609techoocuzeyexahj.ing-ingdirect.frogg-services.webredirect.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\netag: W/\"145ec-18eb57e5820\"\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nlast-modified: Sat, 06 Apr 2024 22:19:00 GMT\r\ndate: Mon, 04 Aug 2025 08:37:43 GMT\r\nvia: 1.1 Caddy\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nx-powered-by: Express\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-length: 83436\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":83436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"3d641b73e819209d956b2b777204e28d","sha1":"f967253ba82f220a4e342430ad18bc82d315c302","sha256":"ce1f6375593f072415509002307a990f5fbcb483546c94899050585c6a574fb5","sha512":"a86ad729dbfbeb5eb9991aec5b294acb586ac8e0eb98ec3fd7dfaf3ad532df54aa8c737f7ef5d037cb6a6cb5db293e25d6feb14ce0acb4e36a306ca520bbd4cf","ssdeep":"1536:+Ycby68CPytBJkYFiddIksgSLsxpdh2Dr6hqtQjuuChTInZhqe1nnpYd:0yBcXsgSLqp66hsPjIxFnpYd","tlshash":"c383d060fe82187adc8024e6bb83b1d2f4ba906775a41d1e2f515ebb5d47600ff70e62","first_seen":"2025-08-03T23:32:13.399325Z","last_seen":"2026-05-07T16:37:12.448758Z","times_seen":108,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}