fwlmtbbasqsedhtbrmbq.dynserv.org/
200 OK 2.3 kB URL User Request GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/
IP
ASN #51177 THC Projects SRL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7885edff3f967b0dcef0bd623bcf63a8
4aaf79b84e6d5b8f2e80faed09b433caa70fb334
32c8fb2dce6797ed863bab9c22a570fa4e6a25c1ce67d6a46eb7f509e05da23d
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET / HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
X-Powered-By: PHP/5.4.16
Content-Length: 2298
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/skel.min.js
200 OK 9.1 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/skel.min.js
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
File type ASCII text, with very long lines (9033)
Hash df4f8930f3747bbadcdeb7dfe326ed73
475a99682e46ad061915a11a9adb3fad82258d3c
afa9ae8eec6cb530d00256d71c700f9f0d72d298bd50f3af7f4450aa9aed2c98
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/assets/js/skel.min.js HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:44 GMT
ETag: "237c-5f0d2754549d3"
Accept-Ranges: bytes
Content-Length: 9084
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/util.js
200 OK 12 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/util.js
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Hash 31f3e8b0cbedca627878a2b6d868bc14
3ece9010adc07dd3dc27ced0e22e7ac8bcd16e14
b5424d77c6e517893b9adc5a6cf11428e58461ad9768ad056d918ff1d295c5f6
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/assets/js/util.js HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:44 GMT
ETag: "2e47-5f0d27547da11"
Accept-Ranges: bytes
Content-Length: 11847
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/main.js
200 OK 1.4 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/main.js
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
File type HTML document, ASCII text
Hash 0382741a5dc85b9e01c2cf37a2ddbfcc
f27ab7842a2377674774e906a81f6cb2241312b6
e810b4a858fd3557ec06e7f645b03d05e93ff67b5ad2a4214b1ad0674f7c202a
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/assets/js/main.js HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:45 GMT
ETag: "57a-5f0d2754d025b"
Accept-Ranges: bytes
Content-Length: 1402
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/css/main.css
200 OK 49 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/css/main.css
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
File type Unicode text, UTF-8 text, with very long lines (493)
Hash 23d9aa9147d2d8b601a57d27b744f132
80c116ab20ab22976f363861dd02510e0468e6d7
3b0806ba002321ebb6b85f2a1e3173a6d2dc39913ede583f86fd0a52364aeb06
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/assets/css/main.css HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:44 GMT
ETag: "c0c5-5f0d2753d991c"
Accept-Ranges: bytes
Content-Length: 49349
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/jquery.min.js
200 OK 96 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/js/jquery.min.js
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
File type ASCII text, with very long lines (32038)
Hash 895323ed2f7258af4fae2c738c8aea49
276c87ff3e1e3155679c318938e74e5c1b76d809
ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/assets/js/jquery.min.js HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:45 GMT
ETag: "176d5-5f0d2754a6e36"
Accept-Ranges: bytes
Content-Length: 95957
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
472 B IP
Hash c699ce1e772308ecf6366febe5960a8a
537ebf215a921d1d955fbb71bd1f5de8d6073653
37750111f787a4da6a50b19a9fbf5b23a2f8d8e0220dfad4d166b5a07ce450f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 18 May 2023 13:43:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/css/font-awesome.min.css
200 OK 30 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/css/font-awesome.min.css
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
File type ASCII text, with very long lines (30240)
Hash 7e3f3c12c932a397bafadb7dfda07ebb
a3ee202873390015bbebdce1d4a150c8208043c5
b952b7cf4dd78b5a73326ac7eaf18b9e9ffd06cadff2a54fbe5eaba7c8a42d30
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/assets/css/font-awesome.min.css HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/css/main.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:44 GMT
ETag: "76c3-5f0d275402d41"
Accept-Ranges: bytes
Content-Length: 30403
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
fonts.googleapis.com/css?family=Raleway:100,300,600
200 OK 1.0 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Raleway:100,300,600
IP
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT
File type gzip compressed data, max compression\012- data
Hash c0f37bc34b7508f1d7d373dd880010ff
89975a8217beb4d54717debfd15bdf71c579a5ef
40fb21dda32b3bc5ce1f3656befd16310e9c3f0128e1b82d25acf85303d7d79c
GET /css?family=Raleway:100,300,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 May 2023 13:43:31 GMT
date: Thu, 18 May 2023 13:43:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 5d7428ecf442c44c5aa8470b02b92a6c
c6ba2e9add1b02059f0091998397f7063a928bf0
b1e65e42bbc45457fd8219b7fa671101ee0887722bba9b729968c0c8e1d4817a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 18 May 2023 13:43:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 5d7428ecf442c44c5aa8470b02b92a6c
c6ba2e9add1b02059f0091998397f7063a928bf0
b1e65e42bbc45457fd8219b7fa671101ee0887722bba9b729968c0c8e1d4817a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 18 May 2023 13:43:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 5d7428ecf442c44c5aa8470b02b92a6c
c6ba2e9add1b02059f0091998397f7063a928bf0
b1e65e42bbc45457fd8219b7fa671101ee0887722bba9b729968c0c8e1d4817a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 18 May 2023 13:43:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://fwlmtbbasqsedhtbrmbq.dynserv.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 May 2023 10:39:52 GMT
expires: Wed, 15 May 2024 10:39:52 GMT
cache-control: public, max-age=31536000
age: 183819
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://fwlmtbbasqsedhtbrmbq.dynserv.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 May 2023 10:39:52 GMT
expires: Wed, 15 May 2024 10:39:52 GMT
cache-control: public, max-age=31536000
age: 183819
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://fwlmtbbasqsedhtbrmbq.dynserv.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 May 2023 10:39:52 GMT
expires: Wed, 15 May 2024 10:39:52 GMT
cache-control: public, max-age=31536000
age: 183819
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 5d7428ecf442c44c5aa8470b02b92a6c
c6ba2e9add1b02059f0091998397f7063a928bf0
b1e65e42bbc45457fd8219b7fa671101ee0887722bba9b729968c0c8e1d4817a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 18 May 2023 13:43:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fwlmtbbasqsedhtbrmbq.dynserv.org/design/images/banner.jpg
200 OK 449 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/images/banner.jpg
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2016:08:17 16:18:05], baseline, precision 8, 1920x1910, components 3\012- data
Size 449 kB (449306 bytes)
Hash 0b01fc09af1a67160397ebbd676c7b5a
bba772e11c1292bb18393da252e1b492fcf06de3
d024d9c4c03d1cca10615fd0015045da431dc0f23fd2b538997d50ffda484ffc
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/images/banner.jpg HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/css/main.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:46 GMT
ETag: "6db1a-5f0d2756043f6"
Accept-Ranges: bytes
Content-Length: 449306
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL GET HTTP/1.1 fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /design/assets/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/design/assets/css/font-awesome.min.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Tue, 27 Dec 2022 17:19:43 GMT
ETag: "118d8-5f0d27535e47c"
Accept-Ranges: bytes
Content-Length: 71896
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
fwlmtbbasqsedhtbrmbq.dynserv.org/favicon.ico
404 Not Found 0 B URL GET HTTP/1.0 fwlmtbbasqsedhtbrmbq.dynserv.org/favicon.ico
IP
ASN #51177 THC Projects SRL
Requested by http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.dynserv .org Domain
GET /favicon.ico HTTP/1.1
Host: fwlmtbbasqsedhtbrmbq.dynserv.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://fwlmtbbasqsedhtbrmbq.dynserv.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 404 Not Found
Date: Thu, 18 May 2023 13:43:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
X-Powered-By: PHP/5.4.16
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
84.234.96.80
142.250.74.106