Overview

URLhelalfoodbv.nl/teut/index.php?QBOT.zip
IP 185.56.146.30 (Netherlands)
ASN#50673 Serverius Holding B.V.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-07 17:42:44 UTC
StatusLoading report..
IDS alerts0
Blocklist alert62
urlquery alerts No alerts detected
Tags None

Domain Summary (14)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6203 95.101.11.115
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
ocsp.comodoca.com (1) 1696 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 341 1009 172.64.155.188
fonts.gstatic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 478 16693 142.250.74.35
ocsp.digicert.com (1) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 341 797 93.184.220.29
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 54.149.83.187
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 54917 34.120.237.76
ocsp.pki.goog (9) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3087 6298 142.250.74.131
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 382 77052 172.217.21.168
fonts.googleapis.com (1) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 429 746 142.250.74.74
helalfoodbv.nl (31) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 14154 413185 185.56.146.30
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 35.241.9.150
region1.google-analytics.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 692 561 216.239.34.36

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
Scan Date Severity Indicator Comment
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed
2022-12-07 medium helalfoodbv.nl Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 185.56.146.30
Date UQ / IDS / BL URL IP
2022-12-25 07:30:20 UTC 0 - 0 - 15 topspeakers.nl/ 185.56.146.30
2022-12-24 17:20:02 UTC 0 - 0 - 16 topspeakers.nl/ 185.56.146.30
2022-12-07 17:42:44 UTC 0 - 0 - 62 helalfoodbv.nl/teut/index.php?QBOT.zip 185.56.146.30


Last 5 reports on ASN: Serverius Holding B.V.
Date UQ / IDS / BL URL IP
2023-05-28 13:57:52 UTC 0 - 0 - 2 messytube.com/video/scatlina-masturbates-and- (...) 185.53.162.165
2023-05-28 04:11:44 UTC 0 - 1 - 0 trracckkdat.xyz/G34vShhj 185.8.178.168
2023-05-28 03:32:09 UTC 0 - 0 - 1 getapk.link/apk/fetch/com.games.street.fighte (...) 46.249.59.121
2023-05-26 07:50:03 UTC 0 - 24 - 0 kvartirka.kh.ua 185.67.0.162
2023-05-26 02:29:43 UTC 0 - 0 - 1 getapk.link/apk/fetch/com.v2r.pjewel1a/com-v2 (...) 46.249.59.121


Last 1 reports on domain: helalfoodbv.nl
Date UQ / IDS / BL URL IP
2022-12-07 17:42:44 UTC 0 - 0 - 62 helalfoodbv.nl/teut/index.php?QBOT.zip 185.56.146.30


No other reports with similar screenshot

JavaScript

Executed Scripts (18)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (64)


Request Response
                                        
                                            GET /teut/index.php?QBOT.zip HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             185.56.146.30
HTTP/1.1 301 Moved Permanently
content-type: text/html
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-length: 707
date: Wed, 07 Dec 2022 17:42:33 GMT
server: LiteSpeed
location: https://helalfoodbv.nl/teut/index.php?QBOT.zip
vary: User-Agent,Accept-Encoding


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   707
Md5:    1304294c0823ca486542ba408ed761e3
Sha1:   b2a70fb2d810ca13985882e6981f33998823e83e
Sha256: 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9725
Expires: Wed, 07 Dec 2022 20:24:38 GMT
Date: Wed, 07 Dec 2022 17:42:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7568
Expires: Wed, 07 Dec 2022 19:48:41 GMT
Date: Wed, 07 Dec 2022 17:42:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "E00EAAD18FFA9F5181FE540B156608DF88565B09E98CA78B87EBA97F3FBC6E79"
Last-Modified: Wed, 07 Dec 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12452
Expires: Wed, 07 Dec 2022 21:10:05 GMT
Date: Wed, 07 Dec 2022 17:42:33 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: au4bNREofnLj1s1BAV8MX4GM5ciXMjM1GCkOag1OMi0NHfnBR64wKpPL+jlmk609BnRTyazbew0=
x-amz-request-id: F7A6WR7SA60TK7JJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 16:49:26 GMT
age: 3187
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 17:08:04 GMT
age: 2069
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Wed, 07 Dec 2022 17:42:33 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:34 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 14:53:11 GMT
Expires: Wed, 14 Dec 2022 14:53:10 GMT
Etag: "1a54aaeeaf6d37c5db70054a1499f08c91314895"
Cache-Control: max-age=594036,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775f0efd4dbfb51e-OSL

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 17:07:55 GMT
age: 2079
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6009
Cache-Control: max-age=147865
Date: Wed, 07 Dec 2022 17:42:34 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 10:46:59 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IuEg5Cuzme5NJf9P/eh81g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.149.83.187
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gQnDAkB1ZQurZ3/Vui2yiGU+Tjg=

                                        
                                            GET /teut/index.php?QBOT.zip HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             185.56.146.30
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                            
x-powered-by: PHP/8.0.26
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://helalfoodbv.nl/teut/?QBOT.zip
content-length: 0
date: Wed, 07 Dec 2022 17:42:35 GMT
server: LiteSpeed
vary: User-Agent,Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8272
Expires: Wed, 07 Dec 2022 20:00:27 GMT
Date: Wed, 07 Dec 2022 17:42:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8272
Expires: Wed, 07 Dec 2022 20:00:27 GMT
Date: Wed, 07 Dec 2022 17:42:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8272
Expires: Wed, 07 Dec 2022 20:00:27 GMT
Date: Wed, 07 Dec 2022 17:42:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8272
Expires: Wed, 07 Dec 2022 20:00:27 GMT
Date: Wed, 07 Dec 2022 17:42:35 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 08:32:51 GMT
age: 32984
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6557
Md5:    210b27f5f6310d8fad640acce3d9ae0e
Sha1:   08d241e56622cb900754d95bc5d58ed8826d9f32
Sha256: 64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
age: 71116
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8351
Md5:    98d2cf29c710d25bd2f03ff216fdd369
Sha1:   b8eb2e11f9655f19334befc036f21489a6473827
Sha256: 614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6352
x-amzn-requestid: cd970b83-2a99-4e38-afed-580d733040a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSuWF1bIAMFcpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c2-1ba552306e857bb37424d679;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EQB1d1_-QYmDo7FxVUouAGjFBtLR90s0pzZjOYjpN6mpGJWt8MZ7aQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:43:37 GMT
age: 71938
etag: "eaa956309d27052d466f7c4bd75b3bdf8443f251"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6352
Md5:    ebd3528452aecd80e39bbf82d3f71f2c
Sha1:   eaa956309d27052d466f7c4bd75b3bdf8443f251
Sha256: 680066dadbddc2cd7179ad5bdfbf9b2014ea601561e585d18dfcda73512ae84a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cmRvAOLmk_xZC4RKdin-lozUNeK9-icqkzsQmSjP9scXnnCLxkvJ5A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:01:53 GMT
age: 70842
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8701
Md5:    604a4132da78a0c013b5818644adb121
Sha1:   ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566
Sha256: eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 20:49:34 GMT
age: 75181
etag: "36082b7329d473829178f280cb71a83b1531e486"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11224
Md5:    b15136d60fd0a5e0f657a4f5c75d540f
Sha1:   36082b7329d473829178f280cb71a83b1531e486
Sha256: 79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 03:15:41 GMT
age: 52014
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7392
Md5:    c9257f2e3b9bd1b3aa262b0f4bf57968
Sha1:   4bcdd6ecd63834aa1010faf19457a97f37ae99fa
Sha256: 9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.6.10 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Mon, 22 Feb 2021 16:10:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 7413
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (27525)
Size:   7413
Md5:    f4992a99706388d1e769f1c2f3425657
Sha1:   f5832a6e30ba031a00fe4c7d6ed435d0a2259092
Sha256: 6ce5e100f597320bed1cbed9a418336a679b5d754719d7f7917b2dd95a4e556a

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.6.10 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 647
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2297), with no line terminators
Size:   647
Md5:    9564254620d94958dc47a35008b825a8
Sha1:   ebe16a9a023ac9bf1a7bcd063ea8a62e19dd7653
Sha256: bd0ea35115a3f6708ab0c7cc1640cd7938e7a0d66de592b22879d91f9aebe163

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 621
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   621
Md5:    85598598d8403d6f36ffb33763088efe
Sha1:   13cee471c0ee733cc5ab17a995fe789b77fe63b1
Sha256: 5ea1e09117bb834b01b00f95d9c0f9935ed8a242987d85e65ee1929bb5b7335a

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=1.9.5 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:33:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 825
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   825
Md5:    90aaffc001d2ffb60072699bdd052fff
Sha1:   770c30fe368c633b065256d1689b2d6e7a10867c
Sha256: 6a68e64472a3c944b9fb14b28501f5f2784ebb88890f1561b864899c2fd68025

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=1.9.5 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:33:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 4467
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4467
Md5:    3db7026f2e7f04bffeeb2d1b67ae83c9
Sha1:   93f9eaa5151cabff76eb11f4e2e3b00b7bc90921
Sha256: 810533feffefd53da4eb860cf60a4091838f59e91e9fc925e0a0048308b84646

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.4 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 12028
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12602)
Size:   12028
Md5:    fb634b6cb245949cd8fe6f341c94d267
Sha1:   3c6c89cc6847f925168c8e32897e5e04a6a8bf5f
Sha256: c9dc1ca23a26375f0ad3d5fa91011e09d4ede34fe8b43be0fb34cc0a06ede785

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7/css-lite/wpbakery.min.css?ver=9.5.1.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 4094
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25298)
Size:   4094
Md5:    b7b0f4b6fc7d5786713c7d3cebfa343a
Sha1:   8cdee5dbedbdeed928c9bc89bd1f40c9b214648f
Sha256: 95cd4d2c6dbc1cdde7622d4037a33659b29c78ed6a291486c9edc596e4e26c47

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/the7-css/media.css?ver=696bebee065a HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Thu, 31 Dec 2020 09:16:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 9772
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   9772
Md5:    7f49e01dca5a651debe5650292825ea0
Sha1:   30098e17f8e5104485247ffb02e9a389e5a0f20b
Sha256: 7f9f49a9a88103bd312075f1504fdb5d128a9413205f78f40af7d84f3dbea72a

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/the7-css/mega-menu.css?ver=696bebee065a HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Thu, 31 Dec 2020 09:16:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 2673
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2673
Md5:    95374446775f1ddbda71171f1b286e21
Sha1:   41c434fcf0214f3210bcdf997bbacbd1d213dedd
Sha256: 472a6498971bd00c4cc9925dc452fb73fb18c1ee95118312e8008336d4b93f84

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/the7-css/post-type-dynamic.css?ver=696bebee065a HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Thu, 31 Dec 2020 09:16:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 1141
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1141
Md5:    a774f9444439496e9eac752c2935b77f
Sha1:   f3dbcbbd43af2858f3300ccd0298de780bd471c1
Sha256: 3c1494c6eb09bcb0b4247c3878def5ef12436b88813eee9b418831d58b57be0a

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7-child/style.css?ver=9.5.1.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 482
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (521)
Size:   482
Md5:    b1c0d0e507e82fcef0c667e596da4c44
Sha1:   a1952103e616158b43a33f569021892d246387a6
Sha256: 871e29e30648227104bf1c115b999c235ca2a3f32202f669f3094f92eaccc9e1

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /gtag/js?id=G-KVBG4JR9KV HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.217.21.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 17:42:36 GMT
expires: Wed, 07 Dec 2022 17:42:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76335
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20080)
Size:   76335
Md5:    feeecdcfb036dd639f28e0f531e0ba9a
Sha1:   15d1cb46e0c57a8d3c0c0f4611a49a8f275cded8
Sha256: 3c98ae3ac26cca82ed10d67def32991bc218000443c374709d1244f02f7fa731
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 30287
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30287
Md5:    ef2cb9901cc106c049c57b6bb1c6eec4
Sha1:   3773a0684805600ac8a1c5543d0586e7f8b7e2de
Sha256: 386fc33b0d773cbabecd02bfa72605f417d337fcc8f26f5f919a8c7e6b7a5a0b

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 3700
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   3700
Md5:    d195c191fe9bd887d9c0731b49295cc0
Sha1:   e3b86a888cacde393fc60365850cb4668f3e2ab2
Sha256: 1b91f8ebf36b0e4196a89c6560bb1e45ed6826232fe463e84c67b2502006443c

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7/css-lite/main.min.css?ver=9.5.1.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 40434
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38958)
Size:   40434
Md5:    59d2aea7acbc4b97bf0c671d2199b413
Sha1:   39d0eb11f22c818dd40bcfa53aad0a692a551b28
Sha256: f04e88cb7e4132729a248143e405b751bceccf5d4e7767d6ca46b9c048616bcc

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=9.5.1.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 2481
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20277), with no line terminators
Size:   2481
Md5:    2612682af674ca346e6890eb42b09670
Sha1:   090a04ee6a30bd8c14c2385771688a3ef3312452
Sha256: 641f938e0a841160d1bbf6895b57633bd38605824f2a3df9370bfda35cbf1340

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7/fonts/FontAwesome/css/all.min.css?ver=9.5.1.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 12143
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (58209)
Size:   12143
Md5:    1de6e006854df7f1a3329a9287ab525c
Sha1:   f11f7eba4aca4ec0ca0e417417de50b1296ce7b4
Sha256: 9437d971e209184f441d085b42a1a0b8460de17b9af3251790e64c2b177fd527

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=2.5.5.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 6045
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43211)
Size:   6045
Md5:    fc87af3e544fa64a996c1714007aa651
Sha1:   1857bfd0ca6eba2ad8a12a9be9cbdc84ba383388
Sha256: d0a6430059aa71891d0aee12dc8fba88876200ffb2f4d504cbfc1ddc830e8db9

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/the7-css/custom.css?ver=696bebee065a HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Thu, 31 Dec 2020 09:16:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 29594
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   29594
Md5:    c92630342f06bea5cdac60fbf657e01b
Sha1:   de38fc248f2c9958c9e51f7338a228019e4a602f
Sha256: d588650c57751442fd0317241fbe184fcd4218e5bf405ec9448ece99083e9a47

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.9.5 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:33:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 7593
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   7593
Md5:    9e6e501727608f5bfc462d5f8b805ce2
Sha1:   efa72e0820336504512b0982bde3ec8233dd6fe1
Sha256: efb77a62e4a9d1892d5e2b6e8ed9cb5055217181aed8994a7aa50f9faca90c9c

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.4 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 46006
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (42889)
Size:   46006
Md5:    4999242b6da452e6c2fe23776e35b4b7
Sha1:   f1e66c124c6e1e1be8bd365f89e265a957b13ab8
Sha256: 8efd8f5269d3c004608aa408908180657f7250dadfdd37c27dc9d68cfa7fe611

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7/js-lite/above-the-fold.min.js?ver=9.5.1.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 4701
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8825)
Size:   4701
Md5:    395ee32350a6b76f69e5e8cfcad8c2d5
Sha1:   63dbb614215f0633dde4b2179ae7dfe05a18f335
Sha256: 906200dbd70b8115793857f3ef9e61b6b63c8cb9159f7794c656bdb49406c2a9

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7/js-lite/main.min.js?ver=9.5.1.1 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 90754
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32087)
Size:   90754
Md5:    60637b13ca8bec34a41ade90089a9b1d
Sha1:   ec959b543ae6574452006ec992a14fdd971e4c1c
Sha256: 057cbac82b46928955f5afe6f9f0bbfc300f66dffe8b25257c525e18baef86dd

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2020/12/rsz_1logo_helalfood.png HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: image/png
                                            
cache-control: public, max-age=10368000,public
expires: Thu, 06 Apr 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-length: 15511
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
vary: User-Agent,Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 71, 8-bit/color RGBA, non-interlaced\012- data
Size:   15511
Md5:    a699373d817f9c11a12057a316a3b160
Sha1:   d2d7d361e70c70157745f2e17c52683f2ae85625
Sha256: 3518bcc2210ec3058f08903003cab78065e1a4597ec5bde1c52207f25c4d7f12

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2020/12/Float-logo.png HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: image/png
                                            
cache-control: public, max-age=10368000,public
expires: Thu, 06 Apr 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-length: 8778
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
vary: User-Agent,Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 130 x 46, 8-bit/color RGBA, non-interlaced\012- data
Size:   8778
Md5:    a87440ce42a14571ffd8adc7d6b13e2f
Sha1:   fb3754bc5a3e39b2457512056e8110f987bfc55f
Sha256: f54294306f3984c331156cfb8dcd9dc2c4b1e7d0c0741ea4caf7cb12b8f40551

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/dt-the7/images/backgrounds/patterns/full/gplaypattern.jpg HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/wp-content/uploads/the7-css/custom.css?ver=696bebee065a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: image/jpeg
                                            
cache-control: public, max-age=10368000,public
expires: Thu, 06 Apr 2023 17:42:37 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-length: 5321
date: Wed, 07 Dec 2022 17:42:37 GMT
server: LiteSpeed
vary: User-Agent,Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 188x178, components 3\012- data
Size:   5321
Md5:    13aa11a3e8575ecd33efa0029dad76d3
Sha1:   139862597faefc8d205e83aac336c0721156b560
Sha256: cb5f55032a1651d978a4284183e1f754583744c12415eb9749af386842f5f8dc

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=9.5.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: font/ttf
                                            
cache-control: public, max-age=10368000,public
expires: Thu, 06 Apr 2023 17:42:37 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 23988
date: Wed, 07 Dec 2022 17:42:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, the7-default-font\012- data
Size:   23988
Md5:    7b9dee27b22ce0feb2d019d345e28b0c
Sha1:   056dcaa31bd26cd3e995de7aebb73b7235c49fae
Sha256: affc7ba6b4594657ac440d52b00ae0bd83e01c610af24a755196b72bbf4cccc9

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /teut/?QBOT.zip HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
x-powered-by: PHP/8.0.26
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://helalfoodbv.nl/wp-json/>; rel="https://api.w.org/"
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3519), with CRLF, LF line terminators
Size:   27988
Md5:    b374b2ed977d23d96bc5097582e7fa6f
Sha1:   665c94edeb60e4a48da641568f2726749827ec2a
Sha256: 40a63677677e7e3f587f16c44067fd16c8e0d72528e6abf666492b24471ec667

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://helalfoodbv.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 598123
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2020/12/favicon.png HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: image/png
                                            
cache-control: public, max-age=10368000,public
expires: Thu, 06 Apr 2023 17:42:37 GMT
last-modified: Sat, 26 Dec 2020 11:19:11 GMT
accept-ranges: bytes
content-length: 1220
date: Wed, 07 Dec 2022 17:42:37 GMT
server: LiteSpeed
vary: User-Agent,Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   1220
Md5:    511c3d739009ca834884aa1069c6f4ea
Sha1:   d570019190668753019daacf4ab759aaeaa4e5cb
Sha256: 477ee22b0ffaf0f641dfd684eef740611df0e0ea14b3e982f191bbc632e39fc2

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-KVBG4JR9KV&gtm=2oebu0&_p=1571558122&cid=2012479935.1670434957&ul=en-us&sr=1280x1024&_s=1&sid=1670434956&sct=1&seg=0&dl=https%3A%2F%2Fhelalfoodbv.nl%2Fteut%2F%3FQBOT.zip&dt=Pagina%20niet%20gevonden%20-%20Helal%20Food%20BV&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://helalfoodbv.nl
Connection: keep-alive
Referer: https://helalfoodbv.nl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://helalfoodbv.nl
date: Wed, 07 Dec 2022 17:42:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 17:42:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Roboto:400,600,700%7CRoboto+Condensed:400,600,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 17:42:36 GMT
date: Wed, 07 Dec 2022 17:42:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.4 HTTP/1.1 
Host: helalfoodbv.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://helalfoodbv.nl/teut/?QBOT.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.56.146.30
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
cache-control: public, max-age=31536000,public
expires: Thu, 07 Dec 2023 17:42:36 GMT
last-modified: Sat, 26 Dec 2020 11:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent,Accept-Encoding
content-length: 83093
date: Wed, 07 Dec 2022 17:42:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed