Overview

URL www.gaznafto.ml/
IP195.161.41.135
ASNAS8342 OJSC RTComm.RU
Location Russian Federation
Report completed2018-05-05 18:58:29 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-05-05 18:57:55 CEST 2 Client IP  Internal IP ET INFO DNS Query for Suspicious .ml Domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 195.161.41.135

Date UQ / IDS / BL URL IP
2018-06-15 02:53:31 +0200
0 - 1 - 1 apksy.ga/Install_Apk.apk 195.161.41.135
2018-06-14 16:41:19 +0200
0 - 1 - 1 apksy.ga/Install_Apk.apk 195.161.41.135
2018-05-06 09:59:25 +0200
0 - 1 - 1 apkbox1.cf/INSTALLAPP.apk 195.161.41.135

Last 10 reports on ASN: AS8342 OJSC RTComm.RU

Date UQ / IDS / BL URL IP
2019-03-25 00:40:04 +0100
0 - 0 - 1 expedia-com.ru/New_arrival_Saturday_23_March_ (...) 81.177.140.54
2019-03-24 22:00:40 +0100
0 - 0 - 4 ton55.ru/ 81.177.135.201
2019-03-24 19:03:58 +0100
0 - 0 - 11 uputi.info/ 81.177.140.201
2019-03-24 18:24:24 +0100
0 - 0 - 1 better-1win.com/1WinBetter_ca.exe 81.177.141.23
2019-03-24 18:10:36 +0100
0 - 0 - 6 kifge43.ru/ 81.177.6.123
2019-03-24 18:04:56 +0100
0 - 0 - 1 xn--80aae8aujdld9c.xn--p1ai/Scan031.zip 81.177.139.53
2019-03-24 17:44:49 +0100
0 - 0 - 6 kifge43.ru/step/load0000.exe 81.177.6.123
2019-03-24 17:44:26 +0100
0 - 0 - 2 a4.doshimotai.ru/pxpx.exe 81.177.140.55
2019-03-24 16:47:23 +0100
0 - 0 - 2 h13.doshimotai.ru/OX5d.exe 81.177.140.55
2019-03-24 13:16:17 +0100
0 - 0 - 0 etrafik.ru/b/w/d/ajs.php?campaignid=1&what=22 (...) 81.177.139.91

No other reports on domain: gaznafto.ml



JavaScript

Executed Scripts (8)


Executed Evals (1)

#1 JavaScript::Eval (size: 3561, repeated: 1) - SHA256: 76067d77e066cb2fde2ebbb215b589a36c00e22a493027d662ecc84e31fc162e

                                        jQuery.easing['jswing'] = jQuery.easing['swing'];
jQuery.extend(jQuery.easing, {
    def: 'easeOutQuad',
    swing: function(x, t, b, c, d) {
        return jQuery.easing[jQuery.easing.def](x, t, b, c, d)
    },
    easeInQuad: function(x, t, b, c, d) {
        return c * (t /= d) * t + b
    },
    easeOutQuad: function(x, t, b, c, d) {
        return -c * (t /= d) * (t - 2) + b
    },
    easeInOutQuad: function(x, t, b, c, d) {
        if ((t /= d / 2) < 1) return c / 2 * t * t + b;
        return -c / 2 * ((--t) * (t - 2) - 1) + b
    },
    easeInCubic: function(x, t, b, c, d) {
        return c * (t /= d) * t * t + b
    },
    easeOutCubic: function(x, t, b, c, d) {
        return c * ((t = t / d - 1) * t * t + 1) + b
    },
    easeInOutCubic: function(x, t, b, c, d) {
        if ((t /= d / 2) < 1) return c / 2 * t * t * t + b;
        return c / 2 * ((t -= 2) * t * t + 2) + b
    },
    easeInQuart: function(x, t, b, c, d) {
        return c * (t /= d) * t * t * t + b
    },
    easeOutQuart: function(x, t, b, c, d) {
        return -c * ((t = t / d - 1) * t * t * t - 1) + b
    },
    easeInOutQuart: function(x, t, b, c, d) {
        if ((t /= d / 2) < 1) return c / 2 * t * t * t * t + b;
        return -c / 2 * ((t -= 2) * t * t * t - 2) + b
    },
    easeInQuint: function(x, t, b, c, d) {
        return c * (t /= d) * t * t * t * t + b
    },
    easeOutQuint: function(x, t, b, c, d) {
        return c * ((t = t / d - 1) * t * t * t * t + 1) + b
    },
    easeInOutQuint: function(x, t, b, c, d) {
        if ((t /= d / 2) < 1) return c / 2 * t * t * t * t * t + b;
        return c / 2 * ((t -= 2) * t * t * t * t + 2) + b
    },
    easeInSine: function(x, t, b, c, d) {
        return -c * Math.cos(t / d * (Math.PI / 2)) + c + b
    },
    easeOutSine: function(x, t, b, c, d) {
        return c * Math.sin(t / d * (Math.PI / 2)) + b
    },
    easeInOutSine: function(x, t, b, c, d) {
        return -c / 2 * (Math.cos(Math.PI * t / d) - 1) + b
    },
    easeInExpo: function(x, t, b, c, d) {
        return (t == 0) ? b : c * Math.pow(2, 10 * (t / d - 1)) + b
    },
    easeOutExpo: function(x, t, b, c, d) {
        return (t == d) ? b + c : c * (-Math.pow(2, -10 * t / d) + 1) + b
    },
    easeInOutExpo: function(x, t, b, c, d) {
        if (t == 0) return b;
        if (t == d) return b + c;
        if ((t /= d / 2) < 1) return c / 2 * Math.pow(2, 10 * (t - 1)) + b;
        return c / 2 * (-Math.pow(2, -10 * --t) + 2) + b
    },
    easeInCirc: function(x, t, b, c, d) {
        return -c * (Math.sqrt(1 - (t /= d) * t) - 1) + b
    },
    easeOutCirc: function(x, t, b, c, d) {
        return c * Math.sqrt(1 - (t = t / d - 1) * t) + b
    },
    easeInOutCirc: function(x, t, b, c, d) {
        if ((t /= d / 2) < 1) return -c / 2 * (Math.sqrt(1 - t * t) - 1) + b;
        return c / 2 * (Math.sqrt(1 - (t -= 2) * t) + 1) + b
    },
    easeInElastic: function(x, t, b, c, d) {
        var s = 1.70158;
        var p = 0;
        var a = c;
        if (t == 0) return b;
        if ((t /= d) == 1) return b + c;
        if (!p) p = d * .3;
        if (a < Math.abs(c)) {
            a = c;
            var s = p / 4
        } else var s = p / (2 * Math.PI) * Math.asin(c / a);
        return -(a * Math.pow(2, 10 * (t -= 1)) * Math.sin((t * d - s) * (2 * Math.PI) / p)) + b
    },
    easeOutElastic: function(x, t, b, c, d) {
        var s = 1.70158;
        var p = 0;
        var a = c;
        if (t == 0) return b;
        if ((t /= d) == 1) return b + c;
        if (!p) p = d * .3;
        if (a < Math.abs(c)) {
            a = c;
            var s = p / 4
        } else var s = p / (2 * Math.PI) * Math.asin(c / a);
        return a * Math.pow(2, -10 * t) * Math.sin((t * d - s) * (2 * Math.PI) / p) + c + b
    },
    easeInOutElastic: function(x, t, b, c, d) {
        var s = 1.70158;
        var p = 0;
        var a = c;
        if (t == 0) return b;
        if ((t /= d / 2) == 2) return b + c;
        if (!p) p = d * (.3 * 1.5);
        if (a < Math.abs(c)) {
            a = c;
            var s = p / 4
        } else var s = p / (2 * Math.PI) * Math.asin(c / a);
        if (t < 1) return -.5 * (a * Math.pow(2, 10 * (t -= 1)) * Math.sin((t * d - s) * (2 * Math.PI) / p)) + b;
        return a * Math.pow(2, -10 * (t -= 1)) * Math.sin((t * d - s) * (2 * Math.PI) / p) * .5 + c + b
    },
    easeInBack: function(x, t, b, c, d, s) {
        if (s == undefined) s = 1.70158;
        return c * (t /= d) * t * ((s + 1) * t - s) + b
    },
    easeOutBack: function(x, t, b, c, d, s) {
        if (s == undefined) s = 1.70158;
        return c * ((t = t / d - 1) * t * ((s + 1) * t + s) + 1) + b
    },
    easeInOutBack: function(x, t, b, c, d, s) {
        if (s == undefined) s = 1.70158;
        if ((t /= d / 2) < 1) return c / 2 * (t * t * (((s *= (1.525)) + 1) * t - s)) + b;
        return c / 2 * ((t -= 2) * t * (((s *= (1.525)) + 1) * t + s) + 2) + b
    },
    easeInBounce: function(x, t, b, c, d) {
        return c - jQuery.easing.easeOutBounce(x, d - t, 0, c, d) + b
    },
    easeOutBounce: function(x, t, b, c, d) {
        if ((t /= d) < (1 / 2.75)) {
            return c * (7.5625 * t * t) + b
        } else if (t < (2 / 2.75)) {
            return c * (7.5625 * (t -= (1.5 / 2.75)) * t + .75) + b
        } else if (t < (2.5 / 2.75)) {
            return c * (7.5625 * (t -= (2.25 / 2.75)) * t + .9375) + b
        } else {
            return c * (7.5625 * (t -= (2.625 / 2.75)) * t + .984375) + b
        }
    },
    easeInOutBounce: function(x, t, b, c, d) {
        if (t < d / 2) return jQuery.easing.easeInBounce(x, t * 2, 0, c, d) * .5 + b;
        return jQuery.easing.easeOutBounce(x, t * 2 - d, 0, c, d) * .5 + c * .5 + b
    }
});
                                    

Executed Writes (0)



HTTP Transactions (22)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 6290
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
X-Powered-By: PHP/5.6.30


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   6290
Md5:    e314e1e6ac36b545bca026806bb128d0
Sha1:   33b86f320b83f830794870be8bd472e781817196
Sha256: 1088fe2332304896d646975e51efaea9e209945be788d23fb7c3caae27819c47
                                        
                                            GET /images/kotir_0003.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 468
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:21:00 GMT
Etag: "1d4-56a5d5a1e6f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 934 x 52, 8-bit/color RGBA, non-interlaced
Size:   468
Md5:    3c9ce6972954fe1f6522574f41c239ca
Sha1:   6bb1457ee0e097cc953100a5a07e337676b2c85a
Sha256: c0aa62bbf96d9e8e77bd7e238964860f639c698612cc8859d4827f52ddd6324b
                                        
                                            GET /images/index_0002.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 1440
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:20:44 GMT
Etag: "5a0-56a5d592a4b00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 310 x 40, 8-bit/color RGBA, non-interlaced
Size:   1440
Md5:    4d1e4f83ab3c8b0a340f27676af27977
Sha1:   c909da0b11d93749dc9ea832da1be4736d8a065b
Sha256: 648e216fb4a16ab149f044aba16617fab4bd71b54a672b87ae30211dd9d5b250
                                        
                                            GET /images/kotir_0004.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 470
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:21:00 GMT
Etag: "1d6-56a5d5a1e6f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 934 x 52, 8-bit/color RGBA, non-interlaced
Size:   470
Md5:    de37a6004e70e50820c795193bab5d1f
Sha1:   bd3cb38b172ceaa61126fc2ef2dc6184fd5d3f21
Sha256: 8c0b1cfa5b37bef880774b714e22d8551afba0306e01bf77d03b7e9023a6a471
                                        
                                            GET /images/kotir_0005.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 468
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:21:00 GMT
Etag: "1d4-56a5d5a1e6f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 934 x 52, 8-bit/color RGBA, non-interlaced
Size:   468
Md5:    3c9ce6972954fe1f6522574f41c239ca
Sha1:   6bb1457ee0e097cc953100a5a07e337676b2c85a
Sha256: c0aa62bbf96d9e8e77bd7e238964860f639c698612cc8859d4827f52ddd6324b
                                        
                                            GET /images/kotir_0006.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 470
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:21:00 GMT
Etag: "1d6-56a5d5a1e6f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 934 x 52, 8-bit/color RGBA, non-interlaced
Size:   470
Md5:    de37a6004e70e50820c795193bab5d1f
Sha1:   bd3cb38b172ceaa61126fc2ef2dc6184fd5d3f21
Sha256: 8c0b1cfa5b37bef880774b714e22d8551afba0306e01bf77d03b7e9023a6a471
                                        
                                            GET /images/pdv_0001.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 537
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:21:00 GMT
Etag: "219-56a5d5a1e6f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 90 x 22, 8-bit/color RGBA, non-interlaced
Size:   537
Md5:    ec912ef499f5ec9173266a1b724d77d3
Sha1:   a9ee4232194f1439404ddeb30f396ea72afd7a09
Sha256: bf9907eb5816f1ce66e1e31bcda2bf2fbef0573500db03115d57d1fda20856eb
                                        
                                            GET /images/g55.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 2442
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Mon, 26 Feb 2018 09:10:54 GMT
Etag: "98a-56619e31b8380"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 39 x 55, 8-bit/color RGBA, non-interlaced
Size:   2442
Md5:    981679857a40e2cba6c37e6afcd7c923
Sha1:   8386ae58aba6579239e66a25a037dc73ea396727
Sha256: aaabf7b16b9b0592cde3d1beed427bed0492cec2cb1931279ecc1cc88e47d7f5
                                        
                                            GET /images/n55.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 2952
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Mon, 26 Feb 2018 09:11:14 GMT
Etag: "b88-56619e44cb080"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 37 x 55, 8-bit/color RGBA, non-interlaced
Size:   2952
Md5:    3d7634716efe756ef6a9e15ecae66f44
Sha1:   7971436b0753717382888b6897c937c2ae1a5ad9
Sha256: a926545a9736d25b1b8bc2f49c976411ebe3cd0e063a7957f1f3df2df91cbd45
                                        
                                            GET /images/parners.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 48869
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Mon, 26 Feb 2018 12:42:37 GMT
Etag: "bee5-5661cd843e940"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 830 x 125, 8-bit/color RGB, non-interlaced
Size:   48869
Md5:    c08f53181d60d194d638e4526f3bca66
Sha1:   b8ad422f1fe8e3c2f3666a494afa6748beaa399c
Sha256: 6cb47493cdc9c8c97a1b0f80e49f669d5dbf8cbc2f1c63ae99c7c67c2a201594
                                        
                                            GET /fancybox/jquery.fancybox-1.3.4.css HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 8852
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Wed, 28 Mar 2018 05:28:36 GMT
Etag: "2294-5687247570900"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   8852
Md5:    cf5fb82ab39708e595f30a87c396df6a
Sha1:   39aad1759b040e3b2dda71e1d156892c3e42c37b
Sha256: 41fa493a8c1610513e7dd727caf0ffc0db88928f88c2cd8eb57b79e598032c0e
                                        
                                            GET /css/gaznafto.ml_PAY.css HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 1995
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:21:00 GMT
Etag: "7cb-56a5d5a1e6f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1995
Md5:    604ccf48ab7ea7bc7dd0e3ca6168fdeb
Sha1:   34afddba989871398ba8877d4f8974295e430332
Sha256: fcc4613b17aa2c7f956471fadfb0598e6d9bb6182aefdd7f4bd9d0e95983dfab
                                        
                                            GET /css/index.css HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 16414
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:20:44 GMT
Etag: "401e-56a5d592a4b00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   16414
Md5:    b2ed57b90e6dcb841fa4876c0dbdbeae
Sha1:   01f71cf104cc514a353a9fce08d9636d5bc75f12
Sha256: 4369f3c84cfb158da3e81fc7ee1e0da58e96911a115de5a3d223c304e82e9263
                                        
                                            GET /js/jquery-1.12.4.min.js HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 97163
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:21:00 GMT
Etag: "17b8b-56a5d5a1e6f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   97163
Md5:    4f252523d4af0b478c810c2547a63e19
Sha1:   5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
Sha256: 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
                                        
                                            GET /images/l135.gif HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 86145
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Mon, 26 Feb 2018 09:33:13 GMT
Etag: "15081-5661a32eb0840"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 184 x 135
Size:   86145
Md5:    474b5e8572efbe99d666c87429236549
Sha1:   0ad5d8652467202669304a318f162d55669ed132
Sha256: 0f3b7aee26e76b89b05cd516df7b29e12ad426ffd20271adb6709ffad68434c1
                                        
                                            GET /fancybox/jquery.mousewheel-3.0.4.pack.js HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 1279
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Tue, 25 Apr 2017 09:56:30 GMT
Etag: "4ff-54dfabce76f80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   1279
Md5:    3b0a821567b463e70bcc1e90ed2bc9b6
Sha1:   2db79bca5a365b8f631a995662e4fcb80468cb48
Sha256: 1b6d02f909ccab91a8a6b820a8e231e8581a3dffbe3acf9ec435f7871e7a019f
                                        
                                            GET /ic.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 3068
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Mon, 26 Feb 2018 10:47:56 GMT
Etag: "bfc-5661b3e202f00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 60 x 60, 8-bit/color RGBA, non-interlaced
Size:   3068
Md5:    0068a0f50d7d1196662b6d1b464bb5d3
Sha1:   255084f38a23ef0dced91d2da757e918c5ec25e7
Sha256: 43c3c86a54e423b502cc60b11d1669bdca0ebc73e3de558df11e8c92ee239e0b
                                        
                                            GET /fancybox/jquery.easing-1.3.pack.js HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 6717
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Tue, 25 Apr 2017 09:56:30 GMT
Etag: "1a3d-54dfabce76f80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  UTF-8 Unicode C program text, with very long lines
Size:   6717
Md5:    def257dbb0ab805c4996fd8abb1a6b49
Sha1:   55d99c8d1e3e5867724a274df57ad05e3168a5cc
Sha256: 9a7f76fdc1930049302dff8d3cb5e6e0cbfcf8feb6d1b1a06ef16a7445b05111
                                        
                                            GET /direct.js HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 6945
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Thu, 01 Mar 2018 07:53:18 GMT
Etag: "1b21-56655271cb780"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   6945
Md5:    fa6aec89df6fa73d95999aa7e649eba3
Sha1:   21f7a9c59fce62203f84cfbe0fd82a9316ca8497
Sha256: 93a06f8862e1767ce976d29e70997bf8262414f312ab453ff101192d96a8e708
                                        
                                            GET /images/sd970.png HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 212010
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Mon, 26 Feb 2018 09:45:11 GMT
Etag: "33c2a-5661a5db6d7c0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 970 x 374, 8-bit/color RGB, non-interlaced
Size:   212010
Md5:    b90be0728760f6e6398f27f5f1dd6a98
Sha1:   a46b24dab8af58d8d31e40333a507b5524f56bf8
Sha256: b84073de8351a4b304eca2732711b4e359f17b6cde07b1943b97a56ffc0b9d4b
                                        
                                            GET /js/index.js HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 2510
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Sat, 21 Apr 2018 15:20:44 GMT
Etag: "9ce-56a5d592a4b00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  UTF-8 Unicode HTML document text, with CRLF line terminators
Size:   2510
Md5:    5c230cb6f87e007a5a1e4d98b88e1b7e
Sha1:   74c439c4d5da58ab70eeb9cb5001f82f43c47497
Sha256: 42182d7c8d84e8f467fc87bd91ba6b66c94f9cd157a94f032ac33156473fe2e0
                                        
                                            GET /fancybox/jquery.fancybox-1.3.4.pack.js HTTP/1.1 
Host: www.gaznafto.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gaznafto.ml/

                                         
                                         195.161.41.135
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 05 May 2018 16:57:56 GMT
Content-Length: 15416
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) PHP/5.6.30
Last-Modified: Tue, 25 Apr 2017 09:56:30 GMT
Etag: "3c38-54dfabce76f80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C program text, with very long lines, with CRLF, LF line terminators
Size:   15416
Md5:    1f84dfb3da43e30fad60cf42d4eb4abd
Sha1:   397dfbf33b4a8b0873c4200a245db42c1af386cd
Sha256: 6b7c5096ce030bf9d0a410c48ba1accf1694bb4137eb917431968a5a70dea5eb