clicktime.symantec.com/3LdsVsXag8fpV3PVCMmMQFe7Vc?u=hcsa.ec/wp-admin/bin/qckj566e/QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ==
54.217.228.9 0 B URL clicktime.symantec.com/3LdsVsXag8fpV3PVCMmMQFe7Vc?u=hcsa.ec/wp-admin/bin/qckj566e/QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ==
IP 54.217.228.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3LdsVsXag8fpV3PVCMmMQFe7Vc?u=hcsa.ec/wp-admin/bin/qckj566e/QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ== HTTP/1.1
Host: clicktime.symantec.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 17 Oct 2023 13:31:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://hcsa.ec/wp-admin/bin/qckj566e/QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
TA-CODE: unknown
X-EventId: 5302217
X-HostId: 75aced786584ea2205839447396d1f75
hcsa.ec/wp-admin/bin/qckj566e/QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
192.254.185.26 0 B URL hcsa.ec/wp-admin/bin/qckj566e/QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
IP 192.254.185.26:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-admin/bin/qckj566e/QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ HTTP/1.1
Host: hcsa.ec
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Oct 2023 13:31:05 GMT
Server: Apache
refresh: 0;url=https://ridterapi.se/xlyuo/index.html#QWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
104.17.25.14 28 kB URL cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ridterapi.se
DNT: 1
Connection: keep-alive
Referer: https://ridterapi.se/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Oct 2023 13:31:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 28007
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942b1e-6d67"
last-modified: Thu, 22 Jun 2023 11:06:06 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3518928
expires: Sun, 06 Oct 2024 13:31:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Otmz2heW1gcAbYKRtDJUtkAJClBX59lWiQfad8gVGpo9sEakz0LRzu%2Ba7tK%2FbIcLp%2BLZxNrQ2DDlTPmCuNkdFaA0kCDXboXu47d7I56mPrP3lm7XDnBF7MXC38WSQn5YPPk2Ao1o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8178e661c9811c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8178e674de2fb500/1697549469341/yrGQ9WHUEitUbTY
104.17.3.184 226 kB URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8178e674de2fb500/1697549469341/yrGQ9WHUEitUbTY
IP 104.17.3.184:0
File type PNG image data, 91 x 70, 8-bit/color RGB, non-interlaced\012- data
Size 226 kB (225860 bytes)
Hash 26e73c4a7b7b07ad66feb44745366745
039c813b5bdc88f845d2349a776ab84d73d1618b
fb627d8a0aeff1740af1b45321a5bb7aef080800f36c5da67715d8c3b4935176
GET /cdn-cgi/challenge-platform/h/b/i/8178e674de2fb500/1697549469341/yrGQ9WHUEitUbTY HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zuddw/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:10 GMT
content-type: image/png
server: cloudflare
cf-ray: 8178e67cae79b500-OSL
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/jm/bf595700898facbb9d07b1d06bb555bf652e8c9fc71e0
188.114.96.1200 OK 4.1 kB URL GET HTTP/3 ipgroup-lnc.com/jm/bf595700898facbb9d07b1d06bb555bf652e8c9fc71e0
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type ASCII text, with very long lines (6357), with no line terminators
Hash 82ff6e77e3b8f004b23294185e108264
03c685b50fd4587427495348cd1231882a8c48d0
0e230a53a5d5abd125c2a8e1cdd97b32ddd84a9f7fd07c23bff95413886b05fa
GET /jm/bf595700898facbb9d07b1d06bb555bf652e8c9fc71e0 HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:13 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y9OwjB6bkvD2QKI7lqxKG56%2Fjvl15YWqdIrZvv%2BPWZBRV%2Fs6DMvDg4zoF2oVNP3vpYz%2Fj9EOoPsj0V1RggodRnbiIJ1PnpUzbnuSN85RSQb5cmL1%2FtreFQ3Hn%2BpqBfG8Ixg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e6879ac2b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST ipgroup-lnc.com/MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
188.114.96.1302 Found 5.5 kB URL User Request POST HTTP/3 ipgroup-lnc.com/MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ipgroup-lnc.com/MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ?__cf_chl_tk=MmF2xsc02.haZjFa2xLGlSr2TqVVI.X_NJ4irmTat5Q-1697549468-0-gaNycGzNDGU
Content-Type: application/x-www-form-urlencoded
Content-Length: 3574
Origin: https://ipgroup-lnc.com
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Tue, 17 Oct 2023 13:31:11 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
set-cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; path=/; expires=Wed, 16-Oct-24 13:31:11 GMT; domain=.ipgroup-lnc.com; HttpOnly; Secure; SameSite=None
PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SOxFzD8zmMybqSuE0HKuk0oy7N1CKEZGyy3%2FHfQlU9fk7asgjpUAclHgCTZTOKUiQYHg73G%2Ba1O9yhIXx8cZpB%2BC91MfJtJsMFfSPT5mjuJaazvDCzUAZKFb31gFHfz8%2ByI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e6839f20b511-OSL
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/api-as1f?email=Agency.services.nederland@nl.abnamro.com&data=background
188.114.96.1200 OK 176 B URL GET HTTP/3 ipgroup-lnc.com/api-as1f?email=Agency.services.nederland@nl.abnamro.com&data=background
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 7210e939155a0169ea391922da371c7c
c18582ff8a3b69eef0ffbba795b6d0f57396c6a6
4b24c5e9edb953368d91e209997b047a1afff93e496da9951c2034a78070b094
GET /api-as1f?email=Agency.services.nederland@nl.abnamro.com&data=background HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:14 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JuoKC%2FpUZpGLtpgW1kLiCtoGeYsKb%2FjSXii84TCMU8SUVlhvIjERJiAR3y%2BcCVRitS4LyBVJllN250zEUqCD%2BrUERr7UnVsTRTOwTtS2n%2FOLgUwHJihCHSY3fqcXScVkkN0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e68f8a98b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/favicon.ico
0.0.0.0 0 B URL GET ipgroup-lnc.com/favicon.ico
IP 0.0.0.0:0
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
GET ipgroup-lnc.com/o/bf595700898facbb9d07b1d06bb555bf652e8ca12e2ef
188.114.96.1200 OK 3.7 kB URL GET HTTP/3 ipgroup-lnc.com/o/bf595700898facbb9d07b1d06bb555bf652e8ca12e2ef
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3695), with no line terminators
Hash d633a913e6f3b1f45774b9874dfc85e0
5ba1344048578062c93cfddfdf8458477eaca476
c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
GET /o/bf595700898facbb9d07b1d06bb555bf652e8ca12e2ef HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:13 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1unjReXwuqI%2Fj2uwTkkaqWMgpUDfzRwhRNAb%2Fg%2BzQn1ZJY259PYSWkw19PPBtLf5inJxyitj0BAaSYXnEN3JSNghhWMDieNDZfGTz6ju0seJ5hHfdXaqRJCefo5eileTuu4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e68f7a88b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/e/bf595700898facbb9d07b1d06bb555bf652e8ca12e2f6
188.114.96.1200 OK 513 B URL GET HTTP/3 ipgroup-lnc.com/e/bf595700898facbb9d07b1d06bb555bf652e8ca12e2f6
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (529), with no line terminators
Hash adc405f5fd089662209870ca5d2106f7
3a8b776df84bf251afc6ddd802cc5bbeddfb0e36
e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
GET /e/bf595700898facbb9d07b1d06bb555bf652e8ca12e2f6 HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:13 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ciA3qTVX25mGPciDuIRPGo4TNJVgIWH5l4c0kw6U5olzNWVXZdwynqoTXydayx0Tx%2BnoT%2Fh6%2BlAEph3NGUYvqT%2FYbLnY57%2B4z%2BWmvY927L21QwwOs83amxk0xBErEw107TU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e68f7a8ab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET unpkg.com/axios/dist/axios.min.js
104.16.125.175302 Found 32 kB URL GET HTTP/2 unpkg.com/axios/dist/axios.min.js
IP 104.16.125.175:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 17 Oct 2023 13:31:11 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.5.1/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HCYX02BR2AMBNX6FH7N5XMCS-arn
cf-cache-status: HIT
age: 345
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8178e687af900b65-OSL
X-Firefox-Spdy: h2
GET unpkg.com/axios@1.5.1/dist/axios.min.js
104.16.125.175200 OK 32 kB URL GET HTTP/2 unpkg.com/axios@1.5.1/dist/axios.min.js
IP 104.16.125.175:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32298)
Hash b4e8e6b83fc60626095def7101d7e380
4f8ac96d204d91d68150a702ba03b6ebe17656a5
fd688b0ff9f17567ad22bf34a05ed17ee78750b9965418309c821eb3f55cc38f
GET /axios@1.5.1/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ipgroup-lnc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Oct 2023 13:31:11 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7e51-T4rJbSBNkdaBUKcCugO26+F2VqU"
via: 1.1 fly.io
fly-request-id: 01HB9C4VK0YVC7B1781H8FGGEK-fra
cf-cache-status: HIT
age: 1796399
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8178e687cf9f0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET ipgroup-lnc.com/APP-BPUUJ3/bf595700898facbb9d07b1d06bb555bf652e8ca12e1b3
188.114.96.1200 OK 105 kB URL GET HTTP/3 ipgroup-lnc.com/APP-BPUUJ3/bf595700898facbb9d07b1d06bb555bf652e8ca12e1b3
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105369 bytes)
Hash 8e6b0f88563f9c33f78bce65cf287df7
ef7765cd2a7d64ed27dd7344702597aff6f8c397
a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a
GET /APP-BPUUJ3/bf595700898facbb9d07b1d06bb555bf652e8ca12e1b3 HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:13 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=liJFG4myLlGpZt2XqZN98n1It388DV2Ff5zrzxifnjmMuqgzDH8UdA1k%2B8kYsGJINW2AKEyw4SybnWAFH%2FMCtFeAZRp3fzB2YDDHlZRAw40%2B9RttWz2FyhXggIETUKdMT4U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e68f8a9ab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/ASSETS/img/LIMG-652e8ca188e82.css
188.114.96.1200 OK 1.6 kB URL GET HTTP/3 ipgroup-lnc.com/ASSETS/img/LIMG-652e8ca188e82.css
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type PNG image data, 108 x 24, 8-bit colormap, non-interlaced\012- data
Hash ee236805d05e24861ce1b6b0e7d94b8d
d46828cf9df268ddaf62facf15590a447116aeb8
175986272200fb72da9a598d30016bbda9ddcaa9e6e3f07eb94bc74196d4b805
GET /ASSETS/img/LIMG-652e8ca188e82.css HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:14 GMT
content-type: image/png
content-length: 1637
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:14 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UCKljii5TFzWHHhqEOW5ywW6O2smHvn6gVJ1BH3XL4qEPj1zaFy%2F72OIaDl4tkPBSKGOGvSSfZ6RUESsJ5vs6%2BGYGhsqByGcsfVTShEP5SrzlCP2LYAAabGR%2FdJIzFZGN7I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8178e691cce4b511-OSL
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/ic/bf595700898facbb9d07b1d06bb555bf652e8ca12e1b0
188.114.96.1200 OK 17 kB URL GET HTTP/3 ipgroup-lnc.com/ic/bf595700898facbb9d07b1d06bb555bf652e8ca12e1b0
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ic/bf595700898facbb9d07b1d06bb555bf652e8ca12e1b0 HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: image/x-icon
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:13 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sHO0km7XArBN0rhwcLZD3ZPWzo2h0A7pjpOJ%2FlD8FvjSR43zgn5vZigQLmlvrLRArWdgbCpp4VU70E5v7CkjaRqMCyZKGK5A%2Fyy79ZO3xLN%2B5JDYE89cP0SxqbK9LvN92ow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e6930de3b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
188.114.96.1403 Forbidden 6.5 kB URL User Request GET HTTP/2 ipgroup-lnc.com/MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6536), with no line terminators
Hash 6be298b0620db23fd1164c540471a0e2
4502063105f2446b12cb35bebf58cf4e39664911
b0a6dded735c9695bc9361c817c3f106eb0f5ffb70a2632ca7b9790c8e8edebe
GET /MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ridterapi.se/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 17 Oct 2023 13:31:08 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ekE39etmDeEZeuzFFneJU9N9onvlN1ZyBaaZzstsx599HuyRM2ejPSSwthXHGH%2FJDJHYry0XOx%2FlKgZOiOB6yW%2B54LoqWd1pWNcGQEX%2F9VIgUolr84SC%2F7pAxTctAsx6hwo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8178e671bd055699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
188.114.96.1200 OK 5.5 kB URL User Request GET HTTP/3 ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
IP 188.114.96.1:443
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5541), with no line terminators
Hash a8ff3fbd17929175c76778258690ce7a
9d67b0927986e0c34db4e0eb802369a4c9b92ddb
d797a069fafb5afb5d479a91689d0c4d31262b81c98e951ee5be273aabfee0af
GET /beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7 HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ipgroup-lnc.com/MQWdlbmN5LnNlcnZpY2VzLm5lZGVybGFuZEBubC5hYm5hbXJvLmNvbQ?__cf_chl_tk=MmF2xsc02.haZjFa2xLGlSr2TqVVI.X_NJ4irmTat5Q-1697549468-0-gaNycGzNDGU
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:11 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oXQvXkAsb3zDoIV%2FvOsnChxv2gCQkK7L7WiEGcSM4Df47oH3vMOriKJtspFIQocLfi5P3ychr9l7lbm1lbHo4p5NApktl2AIbYkR2X%2BpZ%2FBsCyFCPD9Kg1m0culHoxyLIbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e68689feb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/jq/bf595700898facbb9d07b1d06bb555bf652e8c9fc71dc
188.114.96.1200 OK 86 kB URL GET HTTP/3 ipgroup-lnc.com/jq/bf595700898facbb9d07b1d06bb555bf652e8c9fc71dc
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jq/bf595700898facbb9d07b1d06bb555bf652e8c9fc71dc HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:12 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:11 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jQvtyUZT2QmfuL%2Bvsr%2BckCqK8gdMNBNnVJhemqt9SVHbCivHXs9nlTlQyfxljaixalE%2BOJNZwwqQdHTjbBBJajIECPbNurmSvERfE2rsesljxytswgxfWVIHvsDda4Fugdg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e6878abfb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/2
188.114.96.1200 OK 39 kB IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2 HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2FXrh6qCRxtFMu3wWJJpVXXuLuRbUUU68E%2Bd8OySDEYPBKr2%2BSMzF5djMQ0EyjiNadBxGeYdc%2Bv5wkVIX7C3PDXONe1%2BOu176G9k9VY3nZK8R2XOoZFnf%2BafA22rlPRxrwA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e68f1a40b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET aadcdn.msauthimages.net/c1c6b6c8-8ergmzth7ds5ou4mhvgiluqbq7lyrxv0d6ptotbgt4g/logintenantbranding/0/illustration?ts=636371849062562709
152.199.23.72200 OK 223 kB URL GET HTTP/2 aadcdn.msauthimages.net/c1c6b6c8-8ergmzth7ds5ou4mhvgiluqbq7lyrxv0d6ptotbgt4g/logintenantbranding/0/illustration?ts=636371849062562709
IP 152.199.23.72:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1211x1024, components 3\012- data
Size 223 kB (223301 bytes)
Hash 5c2ea97b4b22ffecec6f902e2162cfea
92ac65ecc2991d6e53d7de4a754371a8daf00152
7bcd0749198d6d7824231afe9b61d754f1aa708e4be47157a73aab80ee95847a
GET /c1c6b6c8-8ergmzth7ds5ou4mhvgiluqbq7lyrxv0d6ptotbgt4g/logintenantbranding/0/illustration?ts=636371849062562709 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 9692
cache-control: public, max-age=86400
content-md5: XC6pe0si/+zsb5AuIWLP6g==
content-type: image/*
date: Tue, 17 Oct 2023 13:31:14 GMT
etag: 0x8D4D8D3386FC6D3
last-modified: Tue, 01 Aug 2017 11:48:26 GMT
server: ECAcc (ska/F6D5)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 982118cf-601e-005b-65e7-002b4e000000
x-ms-version: 2009-09-19
content-length: 223301
X-Firefox-Spdy: h2
GET ridterapi.se/xlyuo/index.html
188.114.97.1200 OK 1.3 kB URL User Request GET HTTP/2 ridterapi.se/xlyuo/index.html
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectridterapi.se
Fingerprint29:7B:5F:28:47:11:8E:18:C9:42:82:27:97:E0:ED:9E:35:9E:86:2A
ValiditySun, 15 Oct 2023 13:33:28 GMT - Sat, 13 Jan 2024 13:33:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1379), with no line terminators
Hash 4abefa99ec74b202eb58b900b7c0d5a4
04f741b639864e238488db7b0e1432770c68c2e3
54cc1e24047006f2629e93a26c39f0760c29029edec3e7c07cfb5842ed5e0c10
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /xlyuo/index.html HTTP/1.1
Host: ridterapi.se
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Oct 2023 13:31:05 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=0, public
expires: Tue, 17 Oct 2023 13:31:05 GMT
x-powered-by: WP Rocket/2.10.12
x-varnish: 5129874005
age: 0
via: 1.1 webcache2 (Varnish/trunk)
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B%2BwPaFyPEuSeWxcBFXjniV0aRU%2F1x%2F%2BZ8zaG%2FE%2Bqt6SVAgltPhak7FNLsxP3Q2U4wxDTDa5WaC8sYSc4r53I631hTq2bK%2BdznBftTDbykK1rjgHG9fcZYNNMho2S6Zo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e6604e8656cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ipgroup-lnc.com/boot/bf595700898facbb9d07b1d06bb555bf652e8c9fc71df
188.114.96.1200 OK 51 kB URL GET HTTP/3 ipgroup-lnc.com/boot/bf595700898facbb9d07b1d06bb555bf652e8c9fc71df
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /boot/bf595700898facbb9d07b1d06bb555bf652e8c9fc71df HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 24 Oct 2023 13:31:13 GMT
last-modified: Wed, 11 Oct 2023 18:20:10 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FHBtx7cS2h5I3eFygeXFvotTDQlGu5jym7qRLzY8x0MZc%2BIkZga2n%2BtuW2bY4aKccZMQy4m7%2B72uOE1JLmV8svleZCMg1tabKw32RuDcG4KRfqvGdosftf%2BLR17lNsSEzok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e6879ac0b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ipgroup-lnc.com/api-as1f?email=Agency.services.nederland@nl.abnamro.com&data=logo
188.114.96.1200 OK 85 B URL GET HTTP/3 ipgroup-lnc.com/api-as1f?email=Agency.services.nederland@nl.abnamro.com&data=logo
IP 188.114.96.1:443
Requested by https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Certificate IssuerLet's Encrypt
Subjectipgroup-lnc.com
FingerprintFE:8C:96:9E:4F:C9:21:ED:7F:5E:13:D2:35:ED:B5:E6:37:47:7F:1E
ValidityMon, 09 Oct 2023 14:10:49 GMT - Sun, 07 Jan 2024 14:10:48 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash ffd3560a2138015afb6ebc50888127b5
994d29dfc35c757e9562b992fbc070952170c6a7
f4fa83928637aa8b9eb2328cb4e2575dcd54cd288d72bfc2d84608cf1736b0a6
GET /api-as1f?email=Agency.services.nederland@nl.abnamro.com&data=logo HTTP/1.1
Host: ipgroup-lnc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipgroup-lnc.com/beebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a5PASbeebb091955c06fa68b3eb8afc0bae51652e8c9fbb2a7
Cookie: cf_clearance=IwcMgqq.4krIWdSQJMGyqJ5rj8l1QLTGZReuXHkzF7A-1697549468-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=eafc68b9c382732e8d268c7bfe054f5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Oct 2023 13:31:13 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0HL4RT%2B0cI34tE3hSoiF2GgnQcHkquiVznE4RvNU542PGJw5YBUIu1fu%2FZvAuU%2FeWOBikfRCEM7WuikBv5jB8zcKLxKGd%2BBJzB7aQnSQszLAj%2BThlJDNLtXmgywoa%2Fa6j9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8178e68f7a91b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400