Overview

URL trkur3.com/80346/37469
IP67.228.247.13
ASNAS36351 SoftLayer Technologies Inc.
Location United States
Report completed2019-04-22 17:59:43 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-22 2 redirectglobal.com/clk/c2FDWEtXZkdGNytTU1lvY1NxMDJkbVhFemtNNk9LaUhwcnZnd0t3 (...) Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 67.228.247.13

Date UQ / IDS / BL URL IP
2019-06-04 20:52:29 +0200
0 - 0 - 1 trkur1.com/411973/42687 67.228.247.13
2019-05-21 03:02:09 +0200
0 - 0 - 1 trcki.com/55747/43566?s1=aecCm5gEdcz1N9i2LH1x4b1 67.228.247.13
2019-04-26 05:15:39 +0200
0 - 1 - 0 cheapestonline.club/392803/39721 67.228.247.13
2019-04-10 14:11:33 +0200
0 - 0 - 0 blazelinks.xyz/225360/42275?s1=FbKbnS7xsYv4M2 (...) 67.228.247.13
2019-03-20 12:16:26 +0100
0 - 0 - 1 trkur1.com/182688/42963 67.228.247.13
2019-02-09 09:16:20 +0100
0 - 0 - 1 trkur5.com/369038/36403 67.228.247.13
2018-11-30 23:32:03 +0100
0 - 0 - 0 trkur3.com/306149/19396 67.228.247.13
2018-10-02 16:49:15 +0200
0 - 0 - 1 trkur1.com/ 67.228.247.13
2018-08-21 20:04:40 +0200
0 - 0 - 1 trkur2.com/342739/39687BnA1o6vKDCybhg7MLiihwd 67.228.247.13
2018-08-17 22:27:06 +0200
0 - 0 - 1 trkur1.com/342910/38267 67.228.247.13

Last 10 reports on ASN: AS36351 SoftLayer Technologies Inc.

Date UQ / IDS / BL URL IP
2019-07-01 07:04:06 +0200
0 - 0 - 0 freepaypalmoney.micro.blog/ 104.200.22.214
2019-06-30 01:23:43 +0200
0 - 0 - 0 lasvegasrealtyllc.com/agyuslvf/evps3b0s7oc 173.193.64.139
2019-06-30 01:01:37 +0200
0 - 0 - 0 openx.org 208.43.79.58
2019-06-30 00:55:43 +0200
0 - 0 - 0 www.sharehairdressers.com/ 159.8.24.77
2019-06-30 00:52:05 +0200
0 - 0 - 0 www.sharehairdressers.com/ 159.8.24.77
2019-06-30 00:43:05 +0200
0 - 1 - 0 p237431.cdaz.icu/bati/sa?cid=TOTALSPORTEK_ADB (...) 108.168.193.185
2019-06-30 00:40:37 +0200
0 - 0 - 0 https://www.mg-webs.com/ 198.252.100.133
2019-06-30 00:31:20 +0200
0 - 0 - 0 https://rumble.com/v7vfkx-abc.watchmarvels-ag (...) 169.50.62.153
2019-06-30 00:30:00 +0200
0 - 0 - 0 https://rumble.com/v7vfot-putlockerwatch-marv (...) 169.50.62.153
2019-06-27 17:16:37 +0200
0 - 0 - 0 spiritenv.com 75.126.220.28

Last 10 reports on domain: trkur3.com

Date UQ / IDS / BL URL IP
2018-12-13 12:49:35 +0100
0 - 0 - 1 trkur3.com/338334/40596 67.228.247.10
2018-11-30 23:32:03 +0100
0 - 0 - 0 trkur3.com/306149/19396 67.228.247.13
2018-08-07 17:15:35 +0200
0 - 0 - 1 trkur3.com/262955/39933 67.228.247.10
2018-07-26 19:32:26 +0200
0 - 0 - 0 trkur3.com/161567/29340 67.228.247.13
2018-07-25 01:23:58 +0200
0 - 0 - 0 trkur3.com/161567/29340 67.228.247.10
2018-07-25 01:12:26 +0200
0 - 0 - 0 trkur3.com/161567/29340 67.228.247.10
2018-07-25 01:07:23 +0200
0 - 0 - 0 trkur3.com/161567/26347 67.228.247.13
2018-01-23 22:39:24 +0100
2 - 0 - 0 trkur3.com/252543/19766-1435W39npvxngTy2qs4teC9xMq 67.228.247.11
2018-01-23 21:12:41 +0100
2 - 0 - 0 trkur3.com/252543/19766LFzdAyGUTtJz99M4QR3cqs 67.228.247.11
2017-11-04 09:16:24 +0100
0 - 0 - 1 trkur3.com/272375/35372?s1=cf1a3fda0 67.228.247.13


JavaScript

Executed Scripts (10)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (31)


Request Response
                                        
                                            GET /80346/37469 HTTP/1.1 
Host: trkur3.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.228.247.10
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
X-Powered-By: PHP/5.3.27
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 364
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 22 Apr 2019 15:59:10 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   364
Md5:    c6c48bd04306039bd66126c4da82b2cb
Sha1:   38d7d27645c5e0d1961701d56a862493e97333b1
Sha256: 1ecfc92f620dd041e9d607ff3d7a3a5603016c6c221c8bca873a4d9bdc656eb5
                                        
                                            GET /redirect/action/1IiN2MywuJSQ2NjwiKHNmf3BlZ2E_eQ_Pyi?uc=2584245674&s1=80346 HTTP/1.1 
Host: aff.adsbreak.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.187.181
HTTP/1.1 301 Moved Permanently
                                        
Date: Mon, 22 Apr 2019 15:59:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 22 Apr 2019 16:59:11 GMT
Location: https://aff.adsbreak.com/redirect/action/1IiN2MywuJSQ2NjwiKHNmf3BlZ2E_eQ_Pyi?uc=2584245674&s1=80346
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4cb8cdaebd65d141-GOT


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: trkur3.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.228.247.10
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 29 Apr 2019 15:59:11 GMT
Etag: "57e-4f1876db-6c8abe422a36c18f;;;"
Last-Modified: Thu, 19 Jan 2012 20:02:35 GMT
Content-Length: 1406
Date: Mon, 22 Apr 2019 15:59:11 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1406
Md5:    4bc8a795a4cdc652bf30bdbfd164489e
Sha1:   791d68953cf0e73fd6015fa64eadf7d2e73b6ccc
Sha256: 55e6e4f19555e11ecbeb7ca9aedb43c644af505961b8667e548cded50072c4eb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=103867
Date: Mon, 22 Apr 2019 15:59:11 GMT
Etag: "5cbcd78a-1d7"
Expires: Tue, 23 Apr 2019 20:50:18 GMT
Last-Modified: Sun, 21 Apr 2019 20:50:18 GMT
Server: nginx
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    81c672636ba5b62d971bc8bec92a2504
Sha1:   8b3517ddf92a1461cffe04433725ca66fbc4f49a
Sha256: 6c5c29da2ea6d6e4cc0b42a7f6b8f6c6b9e8e381632037493f3d258e9143783d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=170423
Date: Mon, 22 Apr 2019 15:59:11 GMT
Etag: "5cbdcb51-5bd"
Expires: Wed, 24 Apr 2019 15:19:34 GMT
Last-Modified: Mon, 22 Apr 2019 14:10:25 GMT
Server: ECS (lcy/1D69)
X-Cache: HIT
Content-Length: 1469


--- Additional Info ---
Magic:  data
Size:   1469
Md5:    c58631748527d3049faa6feae3bdeb92
Sha1:   1a75ddb765af16d03d13df6ec1feca2c669fe635
Sha256: 32c08c9213dab63fa51a9beb5e62910f5b7eb4692c27789d4fd0eb3ee5acb8c6
                                        
                                            GET /redirect/action/1IiN2MywuJSQ2NjwiKHNmf3BlZ2E_eQ_Pyi?uc=2584245674&s1=80346 HTTP/1.1 
Host: aff.adsbreak.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.187.181
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 22 Apr 2019 15:59:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d6bc3fb5a9e034fe7b96c2151966ad4f41555948751; expires=Tue, 21-Apr-20 15:59:11 GMT; path=/; domain=.adsbreak.com; HttpOnly; Secure
Location: https://redirectglobal.com/clk/c2FDWEtXZkdGNytTU1lvY1NxMDJkbVhFemtNNk9LaUhwcnZnd0t3VER5SzZYZE4rTlFYR2Q3TTFrcmxXdEdUVXYxUmhxNE5pamJvUFljSyttWnVqWEhMOWlvbDhiVWc3R0l4MTAxa3pjZmxMOEVnVWJhamNaN1pndzZiR3ZrQ28wR3ptZTNTalQwTjVLblh2aVhVd0RBPT0
Cache-Control: no-cache, must-revalidate, max-age=0
Access-Control-Allow-Origin: *
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdb0fc67d135-GOT


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Apr 2019 15:59:11 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 279
Last-Modified: Wed, 17 Apr 2019 10:35:05 GMT
Server: Apache
Etag: 7081D5DDB73929143F66794B20AA7213AF89D44E
Cache-Control: max-age=302214,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp2
X-HW: 1555948751.dop033.fr8.t,1555948751.cds075.fr8.m,1555948751.cds061.fr8.c


--- Additional Info ---
Magic:  data
Size:   279
Md5:    f96f2a1a106b49aafd31f077dc04c33f
Sha1:   7081d5ddb73929143f66794b20aa7213af89d44e
Sha256: 4e80c0373dd68f1aa156477b6711f3b37a0624a4f8a1cf91dbe51daf822d3a70
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Apr 2019 15:59:11 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 312
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Server: Apache
Etag: A52DD33C1D4DD68309BA88D4DCA900532A3D2B48
Cache-Control: max-age=302371,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp5
X-HW: 1555948751.dop033.fr8.t,1555948751.cds075.fr8.m,1555948751.cds061.fr8.c


--- Additional Info ---
Magic:  data
Size:   312
Md5:    fb85e276829e4fae4706282fff15577c
Sha1:   a52dd33c1d4dd68309ba88d4dca900532a3d2b48
Sha256: 9b60944a5bba6ba6bf505bb1d4acd4617c34bd8818f3e146055e16bd4ac8d22c
                                        
                                            GET /clk/c2FDWEtXZkdGNytTU1lvY1NxMDJkbVhFemtNNk9LaUhwcnZnd0t3VER5SzZYZE4rTlFYR2Q3TTFrcmxXdEdUVXYxUmhxNE5pamJvUFljSyttWnVqWEhMOWlvbDhiVWc3R0l4MTAxa3pjZmxMOEVnVWJhamNaN1pndzZiR3ZrQ28wR3ptZTNTalQwTjVLblh2aVhVd0RBPT0 HTTP/1.1 
Host: redirectglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.31.83.183
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=db95d3457cdb3a7ed5f85931979be73d41555948751; expires=Tue, 21-Apr-20 15:59:11 GMT; path=/; domain=.redirectglobal.com; HttpOnly; Secure GEO_8870098d4be191faae8e249218b64f9a342541c2=676026; expires=Mon, 22-Apr-2019 16:59:13 GMT; Max-Age=3600 click-1ca-676026=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2; expires=Sat, 19-Oct-2019 15:59:13 GMT; Max-Age=15552000; path=/conversion msv-48-2cbbf-b80-a0-2-0=1294500219; expires=Tue, 23-Apr-2019 15:59:13 GMT; Max-Age=86400
Charset: UTF-8
Content-Encoding: UTF-8
P3P: CP="NOI CURa ADMa PSA OUR NOR OTC"
Pragma: no-cache
Cache-Control: no-cache, no-cache, must-revalidate, max-age=0
X-Robots-Tag: noindex, nofollow, nocache, noarchive
googlebot: noindex, nofollow, nocache, noarchive
Access-Control-Allow-Origin: *
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdb3acead0ff-TXL


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   2890
Md5:    6339c31f85abe7acc879986c9ffe2277
Sha1:   23dc964f00e0e80105f2c17aa24816a15a467c3a
Sha256: b31e57619823c78d5e209a4e591679bcc46fc197877dea03731d324da4fdcd3e

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /background_loader/getJS/exittraffic.js HTTP/1.1 
Host: www.redirectglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://redirectglobal.com/clk/c2FDWEtXZkdGNytTU1lvY1NxMDJkbVhFemtNNk9LaUhwcnZnd0t3VER5SzZYZE4rTlFYR2Q3TTFrcmxXdEdUVXYxUmhxNE5pamJvUFljSyttWnVqWEhMOWlvbDhiVWc3R0l4MTAxa3pjZmxMOEVnVWJhamNaN1pndzZiR3ZrQ28wR3ptZTNTalQwTjVLblh2aVhVd0RBPT0
Cookie: __cfduid=db95d3457cdb3a7ed5f85931979be73d41555948751

                                         
                                         104.31.82.183
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: public, max-age=14400, no-cache, must-revalidate, max-age=0
Pragma: pragma
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdbbcc55d10b-TXL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   864
Md5:    4a358987d677e83141ba057d82cf64c2
Sha1:   73010372daf1e047aafa3293e742984f1c84dadf
Sha256: 636f31d6b9278731d930788fd2e52e9cb87c14a61f8e169403e7a0daaad4af7a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 280
Last-Modified: Mon, 15 Apr 2019 21:12:36 GMT
Server: Apache
Etag: 94F2F4857A9C23F54ED3E3271DB925C96E2D020C
Cache-Control: max-age=539458,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp3
X-HW: 1555948753.dop033.fr8.t,1555948751.cds075.fr8.m,1555948753.cds014.fr8.c


--- Additional Info ---
Magic:  data
Size:   280
Md5:    2c5346e9ff5933b3cb7bc160e9366c1a
Sha1:   94f2f4857a9c23f54ed3e3271db925c96e2d020c
Sha256: 2907a889872e9a6cb9090536fb122b9e1e38b94be5d16ae74d2ef554a8720888
                                        
                                            GET /cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2 HTTP/1.1 
Host: kuku.games
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://redirectglobal.com/clk/c2FDWEtXZkdGNytTU1lvY1NxMDJkbVhFemtNNk9LaUhwcnZnd0t3VER5SzZYZE4rTlFYR2Q3TTFrcmxXdEdUVXYxUmhxNE5pamJvUFljSyttWnVqWEhMOWlvbDhiVWc3R0l4MTAxa3pjZmxMOEVnVWJhamNaN1pndzZiR3ZrQ28wR3ptZTNTalQwTjVLblh2aVhVd0RBPT0

                                         
                                         104.18.34.57
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=ddf9c1895ff1aad90ad3108c90103f3241555948753; expires=Tue, 21-Apr-20 15:59:13 GMT; path=/; domain=.kuku.games; HttpOnly; Secure
Last-Modified: Wed, 13 Mar 2019 08:29:26 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdbd9886d14d-GOT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   432
Md5:    6b89abd27f2aec6390a8696fb2fc8fb3
Sha1:   08261cb8a89cdac1cbb31747dc88a79d68c6cc38
Sha256: 31b0d0f8e99e8a9e8f465da17f6b755622f015d2d948041e1b4014315d3e2d19
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 472
Last-Modified: Tue, 16 Apr 2019 19:46:13 GMT
Server: Apache
Etag: C0FCFFF5A624EC4C56B954905966DDE64722AB06
Cache-Control: max-age=603158,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1555948753.dop033.fr8.t,1555948751.cds075.fr8.m,1555948753.cds014.fr8.c


--- Additional Info ---
Magic:  data
Size:   472
Md5:    21ba97dbe23c15dddd4e2fe8bfd17f02
Sha1:   c0fcfff5a624ec4c56b954905966dde64722ab06
Sha256: bbcba50116deed9cb380d20b956988623a3af7d37e152f298d6818860e923014
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 727
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Server: Apache
Etag: F39CA1D45BA10B1F168A65B694B94C7FD07B795E
Cache-Control: max-age=302255,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1555948753.dop033.fr8.t,1555948751.cds075.fr8.m,1555948753.cds014.fr8.c


--- Additional Info ---
Magic:  data
Size:   727
Md5:    4685878186232095ef551a65a017269c
Sha1:   f39ca1d45ba10b1f168a65b694b94c7fd07b795e
Sha256: d77195a8c0a1fc5f8db4f7ff47a4937f8eec28c16c7eee15d67a7a27b97e550b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Etag: 661AA651701677495F84998D9AFA81AC2E1CC9B4
X-OCSP-Responder-ID: mcdpcaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=241743
Expires: Thu, 25 Apr 2019 11:08:16 GMT
Date: Mon, 22 Apr 2019 15:59:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    95e60e54eba7e7c1258b60cd47be2f45
Sha1:   661aa651701677495f84998d9afa81ac2e1cc9b4
Sha256: ed84bb7df34fbeeb8eb01c18fafe64a3e3ea2c07dd1c97dfc46cf8f0642f33a2
                                        
                                            GET /cple/config.js HTTP/1.1 
Host: kuku.games
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2
Cookie: __cfduid=ddf9c1895ff1aad90ad3108c90103f3241555948753

                                         
                                         104.18.34.57
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Mar 2019 10:23:18 GMT
Vary: Accept-Encoding
Etag: W/"5c88da16-7a31"
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Encoding: gzip
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdbe3988d14d-GOT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8215
Md5:    2c818f44b311b25ecb804b4c6ec02de4
Sha1:   b58776356bb00142b2c245b878f7c68391254fc2
Sha256: 5107cdc1f0e53e4654b6fdeeaca06bf289a38d7d5fd530b11caf7eb7a39d2f3d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    443b7c98b108d5b1aeebb774cf5f2450
Sha1:   61cbe0b85ebc6133631c1b0dfe3fad72aaf5bb49
Sha256: ca3cdd5c424a71fc54b44a840d2d864e41622904c9e8e2445fedd1288ff04dac
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=156115
Date: Mon, 22 Apr 2019 15:59:13 GMT
Etag: "5cbda3a4-118"
Expires: Wed, 24 Apr 2019 11:21:08 GMT
Last-Modified: Mon, 22 Apr 2019 11:21:08 GMT
Server: nginx
Content-Length: 280


--- Additional Info ---
Magic:  data
Size:   280
Md5:    31f13c2c7b7e9841932fb4f8674f9d66
Sha1:   2f313a753bcf8f06edeed820c489c3019fb94a59
Sha256: d98ee2d53ebd355e85cba31d03d9c36820cec6d7ab3648fce2ccd167da6a6dd2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=140777
Date: Mon, 22 Apr 2019 15:59:13 GMT
Etag: "5cbd588e-5bd"
Expires: Wed, 24 Apr 2019 07:05:30 GMT
Last-Modified: Mon, 22 Apr 2019 06:00:46 GMT
Server: ECS (lcy/1D1F)
X-Cache: HIT
Content-Length: 1469


--- Additional Info ---
Magic:  data
Size:   1469
Md5:    4724a507a9b9499fdb0cb09945d2f785
Sha1:   fabbb25ddd3061f9e7201854f246129eaa3b26c8
Sha256: dcf719729a4a68c0f4f7fc041c5c24e7751bcbd676370dcee5763c6c8da38fc2
                                        
                                            GET /cple/app.js HTTP/1.1 
Host: kuku.games
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2
Cookie: __cfduid=ddf9c1895ff1aad90ad3108c90103f3241555948753

                                         
                                         104.18.34.57
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 13 Aug 2017 14:07:12 GMT
Etag: W/"59905d10-3dd"
Cache-Control: no-cache, must-revalidate, max-age=0
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4cb8cdbef989d145-GOT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   522
Md5:    476335fb079c9f48b86c28e78557c12d
Sha1:   e7d64e96ec94f45bfd4d30796ff9206b76911179
Sha256: 48aaec30d4b6320a7770a614b6cd0372359ca5942b1ac86febeed506377ad70d
                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 30306
Date: Fri, 19 Apr 2019 15:21:07 GMT
Expires: Sat, 18 Apr 2020 15:21:07 GMT
Last-Modified: Fri, 24 Mar 2017 20:55:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 261486
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30306
Md5:    fc3fc31e5e7c0933dc18e562c1c071bf
Sha1:   a44c31323f6bd29e583cc585036e6eb39f7014a6
Sha256: ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
                                        
                                            GET /ajax/libs/angular-ui-utils/0.1.1/angular-ui-utils.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2

                                         
                                         104.19.195.151
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 22 Apr 2019 15:59:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 May 2018 09:15:30 GMT
Etag: W/"5afd4832-5b33"
Expires: Sat, 11 Apr 2020 15:59:13 GMT
Cache-Control: public, max-age=30672000
Vary: Accept-Encoding
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Served-In-Seconds: 0.019
CF-Cache-Status: HIT
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdc05994427f-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8476
Md5:    ccd5460b129490b4d0fad2341106753d
Sha1:   b4f37dd9cf00b90cc310e116ffb14b449c54f11a
Sha256: f2513507dd41a40e50d9e23d21e2bba89bd8e45ad32300f735ae3f2f8a093d46
                                        
                                            GET /load.php HTTP/1.1 
Host: rekcol.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2

                                         
                                         104.31.95.93
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Date: Mon, 22 Apr 2019 15:59:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dd24a9091861d2dcaf5bc6ca9eba445e71555948754; expires=Tue, 21-Apr-20 15:59:14 GMT; path=/; domain=.rekcol.com; HttpOnly; Secure
Last-Modified: Wed, 13 Mar 2019 15:19:31 GMT
Vary: Accept-Encoding
Etag: W/"5c891f83-3e00"
Cache-Control: no-cache, must-revalidate, max-age=0
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdc08894d117-TXL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3247
Md5:    48e43278014353f76791af8f208873ca
Sha1:   5802eb4f9fa6fc4e32c94b56b9846776a4906c5d
Sha256: c94f3a78c2c7b8e76348fb414182ce44ba24c673ee00cb90b2c46d1250845b05
                                        
                                            GET /ajax/libs/angularjs/1.2.25/angular.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 39946
Date: Fri, 19 Apr 2019 15:11:01 GMT
Expires: Sat, 18 Apr 2020 15:11:01 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 262093
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   39946
Md5:    656718141c10198005f6f56458d473a4
Sha1:   b72500998d35a356128e28ce1e66eeaca3a42c7d
Sha256: a78be1c893b63c1fe3a35877efd970e925241b5757dc0a09bb4ffb617b8c723d
                                        
                                            GET /ajax/libs/angularjs/1.2.25/angular-route.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 1873
Date: Fri, 19 Apr 2019 15:37:15 GMT
Expires: Sat, 18 Apr 2020 15:37:15 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 260519
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1873
Md5:    2802e85434b6c3400f366151fa7554d0
Sha1:   5d5d58b2f3bc243ccd3e5bdcc041fde637a00e7d
Sha256: 1fa7a057365f3ccabd7596d6b407bf8f18eb59c6b04644f0a8a9b8a1df3b6c2f
                                        
                                            GET /cple/controllers.js HTTP/1.1 
Host: kuku.games
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2
Cookie: __cfduid=ddf9c1895ff1aad90ad3108c90103f3241555948753

                                         
                                         104.18.34.57
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 22 Apr 2019 15:59:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Mar 2019 10:23:18 GMT
Vary: Accept-Encoding
Etag: W/"5c88da16-24ce"
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Encoding: gzip
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdc0784ad139-GOT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2471
Md5:    4972f2ff8429e872d023e6bece004789
Sha1:   64080c6b1d89726f9de4d185b6c14527521b34bd
Sha256: 9c98705685dad357b91f33f0b17f1e7429fb6344a106f38720ee41d0f38cf5f0
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: redirectglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=db95d3457cdb3a7ed5f85931979be73d41555948751

                                         
                                         104.31.83.183
HTTP/1.1 204 No Content
                                        
Date: Mon, 22 Apr 2019 15:59:14 GMT
Connection: keep-alive
Cache-Control: no-cache, must-revalidate, max-age=0
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4cb8cdc21dc9d0ff-TXL


--- Additional Info ---
                                        
                                            GET /cple/t/galaxys10/index.html HTTP/1.1 
Host: kuku.games
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: application/json, text/plain, */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2
Cookie: __cfduid=ddf9c1895ff1aad90ad3108c90103f3241555948753

                                         
                                         104.18.34.57
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Mon, 22 Apr 2019 15:59:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 06 Mar 2019 14:50:14 GMT
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate, max-age=0
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdc21dd2d14d-GOT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20300
Md5:    6f95130ada868218153e0634a6fe6c03
Sha1:   2babc0cd7a6017f921931ca81ed25e21792727eb
Sha256: e69ff8ad71619087808c166423d018c3f9e686831375e89e9bbd074eb181e066
                                        
                                            GET /cple/t/galaxys10/en-slide5.png HTTP/1.1 
Host: kuku.games
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://kuku.games/cple/?t=galaxys10&p=d&l=en&partner=kuku&uc=18042230_1d_2_48_676026_15dc_160_5cbde4d1_4d28817b_2944_0_0_64_64_0_2_2
Cookie: __cfduid=ddf9c1895ff1aad90ad3108c90103f3241555948753

                                         
                                         104.18.34.57
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 22 Apr 2019 15:59:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 06 Mar 2019 14:45:44 GMT
Vary: Accept-Encoding
Etag: W/"5c7fdd18-4f129"
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Encoding: gzip
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb8cdc3df03d145-GOT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   322798
Md5:    8eb79cce077b9507d3dc77af933f4be4
Sha1:   82dc31b3e962e662f61dd4b51d97809349981d81
Sha256: b0aab134557815f7af50cda1ce8c722e8f5fe6b2a65efded38119424ea4719be
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: redirectglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=db95d3457cdb3a7ed5f85931979be73d41555948751

                                         
                                         104.31.83.183
HTTP/1.1 204 No Content
                                        
Date: Mon, 22 Apr 2019 15:59:17 GMT
Connection: keep-alive
Cache-Control: no-cache, must-revalidate, max-age=0
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4cb8cdd4dcabd0ff-TXL


--- Additional Info ---