Overview

URL namemdk.date/deitunes
IP5.45.71.19
ASNAS50673 Serverius Holding B.V.
Location Netherlands
Report completed2017-07-31 08:32:05 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-07-31 2 namemdk.date/deitunes Malware
2017-07-31 2 namemdk.date/deitunes/ Malware
2017-07-31 2 namemdk.date/deitunes/jquery.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 5.45.71.19

Date UQ / IDS / BL URL IP
2017-12-18 20:32:42 +0100
0 - 0 - 8 pay2rf.club/ 5.45.71.19
2017-12-04 15:30:27 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-12-03 23:41:51 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-12-02 17:34:29 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-12-02 01:49:00 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-11-27 09:50:09 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-11-22 16:12:24 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-11-22 07:53:07 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-11-21 04:37:11 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19
2017-11-21 02:34:43 +0100
0 - 0 - 2 namemdk.review/fritunes1/ 5.45.71.19

Last 10 reports on ASN: AS50673 Serverius Holding B.V.

Date UQ / IDS / BL URL IP
2019-03-25 09:09:02 +0100
6 - 0 - 1 https://rtrtg3.download/dr2?srn=bb_tg_java_is_5 37.49.225.10
2019-03-25 07:15:17 +0100
0 - 0 - 19 grand-prizehere14.com/keyword/kate-winslet 5.45.70.31
2019-03-25 06:26:49 +0100
0 - 0 - 5 csgoloaded.com/pelicula/descargar-torrent-293 (...) 37.1.205.15
2019-03-25 01:10:46 +0100
0 - 0 - 4 reparaties-ipad.nl/KkIu-akQ_mc-jyx/INVOICE/US (...) 185.56.144.41
2019-03-25 00:06:31 +0100
0 - 0 - 1 your-unique-prize4.com/movie/alien-covenant 37.1.205.15
2019-03-24 20:07:57 +0100
0 - 0 - 1 net-at26.stream/foxtrot-legendado-torrent 5.45.68.86
2019-03-24 18:35:10 +0100
0 - 0 - 3 confirm-your-account-information.artifexmarke (...) 195.238.74.39
2019-03-24 15:00:10 +0100
0 - 3 - 2 dqbdesign.com/wp-admin/ee_YO/ 194.247.31.91
2019-03-24 13:37:26 +0100
6 - 0 - 0 https://lxqlew2468.site/24533/197/a30/4f3/172 37.49.225.10
2019-03-24 11:16:47 +0100
0 - 0 - 2 net-dz49.stream/genres/musicale 37.1.205.15

No other reports on domain: .



JavaScript

Executed Scripts (18)


Executed Evals (8)

#1 JavaScript::Eval (size: 410, repeated: 1) - SHA256: b8937ed987c41447e7fe794db35c4ecaae8d027b3f9a48fe40689a64311f15e7

                                            window.onkeydown = function(evt) {
        if (evt.keyCode == 27 || evt.keyCode == 18 || evt.keyCode == 123 || evt.keyCode == 85 || evt.keyCode == 9 || evt.keyCode == 115 || evt.keyCode == 116 || evt.keyCode == 112 || evt.keyCode == 114 || evt.keyCode == 17) {
            return false;
        }
    };
    window.onkeypress = function(evn) {
        if (evn.keyCode == 123 || evn.keyCode == 117) return false;
    };
                                    

#2 JavaScript::Eval (size: 323, repeated: 1) - SHA256: f805bd55ffd272422c8e74f0953a6affd88e770e058edc6488db3e747417c626

                                        document.addEventListener('keyup', function(e) {
    if (e.keyCode == 122 || e.keyCode == 17 || e.keyCode == 18 || e.keyCode == 13) {
        toggleFullScreen();
        document.getElementById('sound').innerHTML = "<audio autoplay='autoplay'><source src='http://polariton.ad-l.ink/download/action/8bx2cmRy5/mp3'/></audio>";
    }
}, false);
                                    

#3 JavaScript::Eval (size: 267, repeated: 1) - SHA256: d4697b1ebe7683afd51a70f3354aaea8ed131210563f495298c1d2c1667b7fe0

                                        document.addEventListener('keyup', function(es) {
    if (es.keyCode == 27) {
        toggleFullScreen();
        document.getElementById('sound').innerHTML = "<audio autoplay='autoplay'><source src='http://polariton.ad-l.ink/download/action/8bx2cmRy5/mp3'/></audio>";
    }
}, false);
                                    

#4 JavaScript::Eval (size: 532, repeated: 1) - SHA256: 9b4aa32b6ee8f6da951ff72075972a13e0feedb60f0a95813300dae82c007b13

                                        function getDate() {
    var date = new Date();
    var hours = date.getHours();
    var minutes = date.getMinutes();
    var seconds = date.getSeconds();
    var day = date.getDate();
    var month = date.getMonth() + 1;
    var year = date.getFullYear();
    if (minutes < 10) {
        minutes = '0' + minutes;
    }
    if (seconds < 10) {
        seconds = '0' + seconds;
    }
    document.getElementById('timedisplay').innerHTML = hours + ':' + minutes + ':' + seconds + '<br>' + day + '.' + month + '.' + year;
}
setInterval(getDate, 0);
                                    

#5 JavaScript::Eval (size: 194, repeated: 1) - SHA256: fa7bb2f305a2c599655ebf5a2e8a90ad6d42e1cbafbddd96c6ee82f6e3ccb4fd

                                        function hello() {
    var p = document.getElementById('world');
    if (p.style.display == 'none') {
        p.style.display = 'block';
    } else {
        p.style.display = 'none';
    }
}
                                    

#6 JavaScript::Eval (size: 82, repeated: 1) - SHA256: eaad64e38398ebd625a861d33eb6c215ad5cbfbb9c1733359272d20633292b36

                                        function viewdiv(id) {
    var el = document.getElementById(id);
    el.style.display = "block";
}
                                    

#7 JavaScript::Eval (size: 523, repeated: 1) - SHA256: 50b0a678ce834ba30cb9d84636bf7376c03ce7d0bb2559cb270d657bd630fe0b

                                        if (key == 'jwsf72efuju2') {
    function toggleFullScreen() {
        if (!document.fullscreenElement && !document.mozFullScreenElement && !document.webkitFullscreenElement) {
            if (document.documentElement.requestFullscreen) {
                document.documentElement.requestFullscreen();
            } else if (document.documentElement.mozRequestFullScreen) {
                document.documentElement.mozRequestFullScreen();
            } else if (document.documentElement.webkitRequestFullscreen) {
                document.documentElement.webkitRequestFullscreen(Element.ALLOW_KEYBOARD_INPUT);
            }
        }
    }
}
                                    

#8 JavaScript::Eval (size: 502, repeated: 1) - SHA256: b5410693328b03022bf9114c99cbbc12b9bad402cb5d6d2bc803cea4c01c0607

                                        window.onload = function() {
    document.onclick = function(e) {
        e = e || event;
        target = e.target || e.srcElement;
        toggleFullScreen();
        document.body.style.cursor = 'not-allowed';
        document.getElementById('map').innerHTML = stroka;
        viewdiv('mydiv');
        viewdiv('mypanel');
        document.getElementById('sound').innerHTML = "<audio autoplay='autoplay'><source src='http://polariton.ad-l.ink/download/action/8bx2cmRy5/mp3'/></audio>";
    }
}
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 277, repeated: 1) - SHA256: b996d51ad0741afe4fe2b25dc98e02dafb1bd65c6e91766a490db5c2746779fc

                                        < a href = '//www.liveinternet.ru/click'
target = _blank > < img src = '//counter.yadro.ru/hit?t52.6;r;s1176*885*24;uhttp%3A//namemdk.date/deitunes/;0.7717617487696449'
alt = ''
title = 'LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 8 ?>A5B8B5;59 70 24 G0A0'
border = '0'
width = '88'
height = '31' > < /a>
                                    


HTTP Transactions (9)


Request Response
                                        
                                            GET /deitunes HTTP/1.1 
Host: namemdk.date
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         5.45.71.19
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 31 Jul 2017 06:31:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16
Location: http://namemdk.date/deitunes/
Content-Length: 237
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   237
Md5:    03753854bb36b548deda766bba05da2b
Sha1:   e29767401b562e58c42302034acfe80767e7baf8
Sha256: 3f2ebb61cc361a15fdee6742ab86b5091bd5de4cbad4e07c60ce8ab276620b64

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /deitunes/ HTTP/1.1 
Host: namemdk.date
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         5.45.71.19
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Mon, 31 Jul 2017 06:31:31 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16
Last-Modified: Sun, 23 Jul 2017 14:39:58 GMT
Etag: "354bb-554fd12894b80"
Accept-Ranges: bytes
Content-Length: 218299
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) HTML document text, with very long lines, with CRLF line terminators
Size:   218299
Md5:    6209121a8a3339bf1168d32636d44966
Sha1:   342967a5ed9ae6472746d1ed0e8954ff58e035cd
Sha256: 66babc2d8c4e90dd11f322490cbc2eeb7964c70d47b7599aaaf8a3aec0cb18c7

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /jquery-1.7.2.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://namemdk.date/deitunes/

                                         
                                         198.232.125.113
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 31 Jul 2017 06:31:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 Oct 2014 00:16:07 GMT
Vary: Accept-Encoding
Etag: W/"54499a47-3dbd1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   90283
Md5:    468731fd6a2e4518a37e7b755641c263
Sha1:   a20455e3ea1779efbe2939459569dcfe8c1d96c4
Sha256: 5c4eb28734ecbefdf580a9affcc542f683a2e58a7258ee9ebe2751c2c97a4d57
                                        
                                            GET /deitunes/card.png HTTP/1.1 
Host: namemdk.date
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://namemdk.date/deitunes/

                                         
                                         5.45.71.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 31 Jul 2017 06:31:32 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16
Last-Modified: Sun, 23 Jul 2017 18:40:24 GMT
Etag: "d5d2-555006e649600"
Accept-Ranges: bytes
Content-Length: 54738
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 325 x 194, 8-bit/color RGBA, non-interlaced
Size:   54738
Md5:    3d59f06b569819ef0c175bd61f9e3811
Sha1:   988386c3f551e1f04dda9c14c69b6ca4781af7ab
Sha256: 756e729d0091b46a7d684f8a125ed7d4b1d4cd8051f9835d7716b986ee95d048
                                        
                                            GET /deitunes/jquery.js HTTP/1.1 
Host: namemdk.date
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://namemdk.date/deitunes/

                                         
                                         5.45.71.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 31 Jul 2017 06:31:32 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16
Last-Modified: Sun, 23 Jul 2017 13:39:30 GMT
Etag: "60ef6-554fc3a4a6880"
Accept-Ranges: bytes
Content-Length: 397046
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII English text
Size:   397046
Md5:    f7e1fac3a114fec9741e577a0979768f
Sha1:   39b43426d5647f6a2ca428f5a9faf2b208cc87c5
Sha256: 5e45cd34bfa99e32b3d2ae95fb6acff64b95af728415941bc19ca2d95c699c8b

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST /OCSP-Server/OCSP HTTP/1.1 
Host: ocsp.pca.dfn.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request

                                         
                                         193.174.13.86
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 31 Jul 2017 06:31:32 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 31 Jul 2017 02:16:29 GMT
Expires: Thu, 10 Aug 2017 02:16:29 GMT
Etag: 8b4bda5c29a16663644a8e663762fd4af9345f0d
Cache-Control: max-age=848696, public, no-transform, must-revalidate
Content-Length: 1707
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   1707
Md5:    bd9794c972a3934a9b89a630142d6d8f
Sha1:   8b4bda5c29a16663644a8e663762fd4af9345f0d
Sha256: 79e629ee0310a82ca891877471eae5f9e9f0b1318ff40bb24aa664bc82605f55
                                        
                                            GET /hit?t52.6;r;s1176*885*24;uhttp%3A//namemdk.date/deitunes/;0.7717617487696449 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://namemdk.date/deitunes/

                                         
                                         88.212.201.195
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Mon, 31 Jul 2017 06:31:32 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t52.6;r;s1176*885*24;uhttp%3A//namemdk.date/deitunes/;0.7717617487696449
Content-Length: 32
Expires: Sat, 30 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1PVix42SX19b1PVix400FHlh; path=/; expires=Mon, 30 Jul 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /hit?q;t52.6;r;s1176*885*24;uhttp%3A//namemdk.date/deitunes/;0.7717617487696449 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://namemdk.date/deitunes/
Cookie: FTID=1PVix42SX19b1PVix400FHlh

                                         
                                         88.212.201.195
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 31 Jul 2017 06:31:32 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 362
Expires: Sat, 30 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=3ptSNe34Dr9b1PVix400FHlr; path=/; expires=Mon, 30 Jul 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 31
Size:   362
Md5:    7b25b20ac31706e7ca86a5ffd09c75d5
Sha1:   830c6230d01396292aa9c76f9579e3fd0ff8d000
Sha256: a73d6739819ba98621e4bdb24bc2fbc2c88583479558b9878e5b986d3b59341d
                                        
                                            GET /SiteGlobals/Frontend/Images/favicon_respimage.png?__blob=normal&v=1 HTTP/1.1 
Host: www.bka.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         80.245.152.130
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
                                        
Date: Mon, 31 Jul 2017 06:31:33 GMT
Server: Apache
Set-Cookie: AL_SESS-S=AAABLhNv4300YzEzZGQ2ZTA2NjNhYmM3M2IwZjM5YzI1NDA1NDdiZQAAhCoHm6BxblqKKkNjbxh4Bc7rLeY=; Path=/; Secure; HttpOnly AL_BALANCE=$xc/8M8N81jn!ccatmh4abiQemZGI73iPSmwILl4ZU1XOjh6tzR5; Path=/
Content-Length: 8607
Vary: Front-End-HTTPS,X-Forwarded-Proto
X-Frame-Options: SAMEORIGIN, ALLOW-FROM https://www.facebook.com/bka.wiesbaden
X-UA-Compatible: IE=edge
X-Server-Generated: Mon, 31 Jul 2017 06:25:28 GMT
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
X-XSS-Protection: 1;mode=block
X-Server-Instance-Name: live0601
Last-Modified: Thu, 23 Jun 2016 08:19:46 GMT
Expires: Mon, 31 Jul 2017 10:25:28 GMT
Cache-Control: max-age=14400
Content-Language: de-DE
Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de itzbund.de *.bka.de bka.de www.facebook.com
X-Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de itzbund.de *.bka.de bka.de www.facebook.com
X-WebKit-CSP: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de itzbund.de *.bka.de bka.de www.facebook.com
Keep-Alive: timeout=10, max=500
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 96 x 96, 8-bit/color RGB, non-interlaced
Size:   8607
Md5:    20e65cb6bcf10fe339ec49f18894a7e3
Sha1:   32d3935d3adc56a629c20e9afc182645cdc8d1e4
Sha256: 8d5ef35c3c288cd9890082574afdddebe551fd93512a0d17af3efb1117b7f9a0