Overview

URL lghtds.net/?conv_id=kUS25G9C01J8K01003AR1AE1D00IOAWF0TPC1V174d1Z062J00IOA00&sid=37854&site_id=19210_lDYeCWcrtsZtciELfe7V
IP172.104.235.28
ASN
Location United States
Report completed2018-05-24 21:18:12 CEST
StatusLoading report..
urlQuery Alerts Fake software update


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-05-24 21:17:40 CEST 1  37.49.225.129 Client IP ET CURRENT_EVENTS SOCENG Fake Update/Installer ForceDL Template Nov 03 2017


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.104.235.28

Date UQ / IDS / BL URL IP
2018-09-09 18:10:52 +0200
0 - 0 - 0 lghtds.net/?conv_id=kJP25GLC00UGI01003AR1AAGK (...) 172.104.235.28
2018-08-06 22:52:36 +0200
0 - 0 - 0 sftasd.org/ 172.104.235.28
2018-07-31 13:00:16 +0200
0 - 0 - 0 clckads.org/?sid=42944&site_id=1744791&conv_i (...) 172.104.235.28
2018-07-10 11:46:56 +0200
0 - 0 - 0 sftwrads.com/ 172.104.235.28
2018-06-29 09:30:49 +0200
0 - 0 - 2 lghtds.net/?sid=37601 172.104.235.28
2018-06-23 10:51:09 +0200
0 - 0 - 2 lghtds.net/?sid=37601 172.104.235.28
2018-06-22 22:37:20 +0200
0 - 0 - 0 lghtds.net/?sid=41134&site_id=1895177&conv_id (...) 172.104.235.28
2018-06-08 19:25:07 +0200
0 - 0 - 0 clckads.org 172.104.235.28
2018-05-24 03:39:51 +0200
0 - 0 - 2 lghtds.net/?conv_id=kJP25G9C00UGI01008K61AAGL (...) 172.104.235.28
2018-05-12 00:20:25 +0200
6 - 1 - 0 clckads.com/?sid=35574&site_id=PEK2FGMHFV&con (...) 172.104.235.28

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2018-11-16 19:38:13 +0100
0 - 0 - 0 taobao289.com 103.90.172.20
2018-11-16 19:35:44 +0100
0 - 0 - 1 https://cfspart-impots-gouv-remboursement-fr. (...) 162.241.2.107
2018-11-16 19:35:24 +0100
0 - 0 - 0 tballie7272orileyoriley.tumblr.com 66.6.32.21
2018-11-16 19:29:04 +0100
0 - 1 - 0 https://www.threehappyday.xyz/1030/amazon/ama (...) 139.162.160.215
2018-11-16 19:26:33 +0100
0 - 1 - 70 www.madephone.com/feature-android-phone-c-790 (...) 196.196.14.53
2018-11-16 19:19:08 +0100
0 - 0 - 1 ventas.security-bc.club/ 185.158.251.189
2018-11-16 19:18:42 +0100
0 - 0 - 0 159.65.108.150 159.65.108.150
2018-11-16 19:16:42 +0100
0 - 0 - 0 www.lihenoginmonol.com 34.242.158.244
2018-11-16 19:11:53 +0100
0 - 0 - 0 adobe.seenfiretoolkit.com 143.204.47.97
2018-11-16 19:11:41 +0100
0 - 0 - 0 SutAchalaYmerA.info 194.36.173.5

Last 10 reports on domain: lghtds.net

Date UQ / IDS / BL URL IP
2018-09-09 18:10:52 +0200
0 - 0 - 0 lghtds.net/?conv_id=kJP25GLC00UGI01003AR1AAGK (...) 172.104.235.28
2018-06-29 09:30:49 +0200
0 - 0 - 2 lghtds.net/?sid=37601 172.104.235.28
2018-06-23 10:51:09 +0200
0 - 0 - 2 lghtds.net/?sid=37601 172.104.235.28
2018-06-22 22:37:20 +0200
0 - 0 - 0 lghtds.net/?sid=41134&site_id=1895177&conv_id (...) 172.104.235.28
2018-05-24 03:39:51 +0200
0 - 0 - 2 lghtds.net/?conv_id=kJP25G9C00UGI01008K61AAGL (...) 172.104.235.28
2018-02-22 21:46:28 +0100
0 - 0 - 0 lghtds.net/?sid=32722&site_id=55098 46.101.196.114
2018-02-22 21:41:32 +0100
0 - 0 - 0 lghtds.net 46.101.196.114
2017-11-02 00:21:29 +0100
0 - 1 - 0 lghtds.net/?sid=10800 67.207.74.6
2017-10-26 04:43:06 +0200
0 - 1 - 0 lghtds.net/?sid=10814 67.207.74.6
2017-10-23 21:52:01 +0200
0 - 1 - 1 lghtds.net/?sid=10814 67.207.74.6


JavaScript

Executed Scripts (12)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (17)


Request Response
                                        
                                            GET /?conv_id=kUS25G9C01J8K01003AR1AE1D00IOAWF0TPC1V174d1Z062J00IOA00&sid=37854&site_id=19210_lDYeCWcrtsZtciELfe7V HTTP/1.1 
Host: lghtds.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.104.235.28
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Content-Language: en-US
Transfer-Encoding: chunked
Date: Thu, 24 May 2018 19:17:39 GMT
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   252
Md5:    c0385ff096e680f91b75e1782d96fa21
Sha1:   d8020f3709d7f9859e10d4ce9e49341667eedb67
Sha256: 1419ac310e9065269676dc16384d8d875576e211c2be83129f9b48f5c0b2067f
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: lghtds.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.104.235.28
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Last-Modified: Mon, 16 Apr 2018 09:35:02 GMT
Accept-Ranges: bytes
Content-Length: 946
Date: Thu, 24 May 2018 19:17:39 GMT
Connection: close


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   946
Md5:    0488faca4c19046b94d07c3ee83cf9d6
Sha1:   02fb8c5e4c3d113f310651a4d021aecc68f79d54
Sha256: a3fe67e3549fdbc5819762b43c7efd93b1caea734f87a33c909a4e4b2ba4e32b
                                        
                                            GET /dr2?srn=bb_zet_java_is_3&utm_source=bb_zet&utm_campaign=15586935&clickid=5249241229162613675 HTTP/1.1 
Host: rtrza2.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://lghtds.net/?conv_id=kUS25G9C01J8K01003AR1AE1D00IOAWF0TPC1V174d1Z062J00IOA00&sid=37854&site_id=19210_lDYeCWcrtsZtciELfe7V

                                         
                                         37.49.227.13
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: http://wvtuzubandoline.download/affiliate/?affid=OTVmNDFiMDRjNjkwNDkxMWFlMTZiOGZlMDg3MzBlZmJKRwgJUwBvTgZCZlpVT1BuCBZuBURNEghvS1hGQgYDX1tXOU5UFhZBF1tmU1VUQVAIAl8LUw1TXQYBBAYWBgoLWl4PUAxXAgBaBA0BBgsIAFdXBwdRDlFQFkxEDgZWUFQLAlAFAVcIDVsDDgEBDQ
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=qxtq1yhlm2tifbggrlepq5wo; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:38 GMT
Content-Length: 356


--- Additional Info ---
Magic:  HTML document text
Size:   356
Md5:    f369634210eea9e1ee5a28a49637efcb
Sha1:   f4480f29e938e9a024a865f302273a00124c0eaa
Sha256: 0c4aaa906d8a7480b8ec3cfd10ee5acc98b743afb1adb7ff0efc0427d9b5819f
                                        
                                            GET /affiliate/?affid=OTVmNDFiMDRjNjkwNDkxMWFlMTZiOGZlMDg3MzBlZmJKRwgJUwBvTgZCZlpVT1BuCBZuBURNEghvS1hGQgYDX1tXOU5UFhZBF1tmU1VUQVAIAl8LUw1TXQYBBAYWBgoLWl4PUAxXAgBaBA0BBgsIAFdXBwdRDlFQFkxEDgZWUFQLAlAFAVcIDVsDDgEBDQ HTTP/1.1 
Host: wvtuzubandoline.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://lghtds.net/?conv_id=kUS25G9C01J8K01003AR1AE1D00IOAWF0TPC1V174d1Z062J00IOA00&sid=37854&site_id=19210_lDYeCWcrtsZtciELfe7V

                                         
                                         37.49.227.13
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: http://wjxh9.fiqqekiwiridise.download/aff/?affid=OTVmNDFiMDRjNjkwNDkxMWFlMTZiOGZlMDg3MzBlZmJKRwgJUwBvTgZCZlpVT1BuCBZuBURNEghvS1hGQgYDX1tXOU5UFhZBF1tmU1VUQVAIAl8LUw1TXQYBBAYWBgoLWl4PUAxXAgBaBA0BBgsIAFdXBwdRDlFQFkxEDgZWUFQLAlAFAVcIDVsDDgEBDQ&
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=ovgmfhx0qk0ai5wge2gyk0wr; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:39 GMT
Content-Length: 361


--- Additional Info ---
Magic:  HTML document text
Size:   361
Md5:    bca2c8bb921764a7f78a5a1e9d72542e
Sha1:   7e074b7ad022f6c492a74e8d30bdfcc08fb6c6da
Sha256: 57f002dd69d280c7f0e7108f35981fbb68d065adfa57ac727a60fdcf4443feec
                                        
                                            GET /aff/?affid=OTVmNDFiMDRjNjkwNDkxMWFlMTZiOGZlMDg3MzBlZmJKRwgJUwBvTgZCZlpVT1BuCBZuBURNEghvS1hGQgYDX1tXOU5UFhZBF1tmU1VUQVAIAl8LUw1TXQYBBAYWBgoLWl4PUAxXAgBaBA0BBgsIAFdXBwdRDlFQFkxEDgZWUFQLAlAFAVcIDVsDDgEBDQ& HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://lghtds.net/?conv_id=kUS25G9C01J8K01003AR1AE1D00IOAWF0TPC1V174d1Z062J00IOA00&sid=37854&site_id=19210_lDYeCWcrtsZtciELfe7V

                                         
                                         37.49.225.129
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: /241217/2168/pqpg9j/rwy
Server: Microsoft-IIS/8.5
P3P: CP='Potato'
Set-Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:39 GMT
Content-Length: 140


--- Additional Info ---
Magic:  HTML document text
Size:   140
Md5:    20c3a354d6e3e32b38bbf95d7d38ac02
Sha1:   3c8e19f09e3350850cc49cd9f96860d5e5c37d26
Sha256: 4f1963b138d6f2855fba0620affd0ab32d0b478e45f52605675dde20241bcef8
                                        
                                            GET /ajax/libs/jquery/1.8.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33396
Date: Thu, 22 Feb 2018 23:13:53 GMT
Expires: Fri, 22 Feb 2019 23:13:53 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 7848227


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33396
Md5:    dcbc552778305133e394afce2e9bf721
Sha1:   3fbecf315de38a54bf0c7cff631c6f8c1bb25505
Sha256: c2c6434e716fdb0254ffd7b34dcbc5b24fd22d511d41cca99f84b75ed6bc3ff2
                                        
                                            GET /241217/2168/pqpg9j/rwy HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://lghtds.net/?conv_id=kUS25G9C01J8K01003AR1AE1D00IOAWF0TPC1V174d1Z062J00IOA00&sid=37854&site_id=19210_lDYeCWcrtsZtciELfe7V
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:39 GMT
Content-Length: 32816


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   32816
Md5:    1a76a6a16f8e4c16cb7f5bdd11b763be
Sha1:   78a3d1b3982b7a040cfb1da64a7f95daf20cdfd2
Sha256: f4c9436db53855b01d93d9495396f11fc0ae57a78c60dedc384ec0fc1d74056d

Alerts:
  urlquery:
    - Fake software update
    - Fake software update
    - Fake software update
  IDS:
    - ET CURRENT_EVENTS SOCENG Fake Update/Installer ForceDL Template Nov 03 2017
                                        
                                            GET /Scripts/dl.min.js HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Last-Modified: Thu, 17 May 2018 01:00:12 GMT
Accept-Ranges: bytes
Etag: "0f690687aedd31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:39 GMT
Content-Length: 863


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   863
Md5:    455457d0198a9924620c0fd498baae33
Sha1:   3d6e3f572c049ffa5cdc02c998544d937637f1e9
Sha256: 6ea0aa8f71f8148a32b07c732115e973d5d9e40fe1211e7577e39c0e9990c1a9
                                        
                                            GET /Content/installer_css?v=_JfUKt2235VBDROysvy-geeSoFUQLeERl3VNLwRqVjg1 HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Cache-Control: public
Expires: Fri, 24 May 2019 19:17:39 GMT
Last-Modified: Thu, 24 May 2018 19:17:39 GMT
Vary: User-Agent
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:39 GMT
Content-Length: 2731


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   2731
Md5:    38e525c5a8563c0b7f57f6aa424700ba
Sha1:   dc6bc76ce37b7aae2938cfcb9229dfcd01b7f226
Sha256: 3bb9273a426a0f38f2a206c579db0d24f1b3e8bd1951d7998b18b21e8efad1a8
                                        
                                            GET /Content/base_css?v=1d-1cfSqt6lOwl5heyrpAxjL1U7gghxeKvIiUv6U_MQ1 HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Cache-Control: public
Expires: Fri, 24 May 2019 19:17:39 GMT
Last-Modified: Thu, 24 May 2018 19:17:39 GMT
Vary: User-Agent
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:39 GMT
Content-Length: 14851


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   14851
Md5:    177b8d19866d188bd800a3dd738c0a29
Sha1:   ccc87fcaf026331e478fb5e1960b5ea0ac34f0ec
Sha256: 2d7dd4d6e3748957bac988c43c39edc346b24cfa888d8756085992d731a6fafd
                                        
                                            GET /Scripts/helpers?v=jl0dnMa1Mj7nUjzvl4qPSaf1uYI7zmel6ZBZGpQuj0I1 HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Cache-Control: public
Expires: Fri, 24 May 2019 19:17:39 GMT
Last-Modified: Thu, 24 May 2018 19:17:39 GMT
Vary: User-Agent
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:40 GMT
Content-Length: 7681


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   7681
Md5:    4e604ddd6c7525e79c82d43aac09b4ec
Sha1:   c74dbfab4c1bcbcc9c483561a49c4ef6fad17a7a
Sha256: 62fd34d2c1be2bb0bb61b54e12f72f5700df265a7ea418bbc0d1785e227630e6
                                        
                                            GET /Content/images/installer_button.jpg HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/Content/installer_css?v=_JfUKt2235VBDROysvy-geeSoFUQLeERl3VNLwRqVjg1
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Cache-Control: max-age=1800
Last-Modified: Thu, 13 Mar 2014 00:23:06 GMT
Accept-Ranges: bytes
Etag: "0d16567523ecf1:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:40 GMT
Content-Length: 1851


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1851
Md5:    5d211f9206495b550cc4269be5da405c
Sha1:   9f24ea514edebf87aacfec4981fbf18e7700972e
Sha256: c85ebc9d6fa2c83f4cc94114d30a2d61cc207375478a7e0374590967fe1aa0d3
                                        
                                            GET /Content/images/firefox_download_hint.png HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=1800
Last-Modified: Wed, 12 Mar 2014 21:33:18 GMT
Accept-Ranges: bytes
Etag: "063e0ae3a3ecf1:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:40 GMT
Content-Length: 72129


--- Additional Info ---
Magic:  PNG image, 840 x 326, 8-bit/color RGBA, non-interlaced
Size:   72129
Md5:    9417a22237c973c9193ad093a0aff6ec
Sha1:   79a6722ae541d87e2812bc5dc4d022e5d9174983
Sha256: 0c1d593b4d1ad9c8049eb8c1b1770dcc645ad1d5127c8764f034e0fb45561f23
                                        
                                            GET /Content/images/jv_background_nologo.png HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=1800
Last-Modified: Mon, 27 Nov 2017 17:14:28 GMT
Accept-Ranges: bytes
Etag: "0726b2ea367d31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:40 GMT
Content-Length: 17797


--- Additional Info ---
Magic:  PNG image, 507 x 376, 8-bit/color RGBA, non-interlaced
Size:   17797
Md5:    9730ff9a0069e534eb6f739ab191f02b
Sha1:   7d1b41c9fc689bafb6030ed576d0ab00dc370f14
Sha256: 6687e3eceec082a8068c2028b09c9b2f05ede065847eb374d32007edd8c788d8
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: max-age=1800
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:40 GMT
Content-Length: 1245


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1245
Md5:    5343c1a8b203c162a3bf3870d9f50fd4
Sha1:   04b5b886c20d88b57eea6d8ff882624a4ac1e51d
Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
                                        
                                            POST /Download/Refresh?lpm_id=2168&page=/241217/2168/pqpg9j/rwy HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: http://wjxh9.fiqqekiwiridise.download/241217/2168/pqpg9j/rwy
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Cache-Control: private
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:40 GMT
Content-Length: 951


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   951
Md5:    f822202ad40677cbfb9bded37d833e73
Sha1:   8df84a14a0c82ddb1f9d694e5c07f423ca513cf2
Sha256: e356a2d537525946ffdeb95c103827468a7d83aeeac4358438fa379f4c7c1c15
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: wjxh9.fiqqekiwiridise.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASP.NET_SessionId=1jowpmvplbus14w1h1u5wxwc

                                         
                                         37.49.225.129
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: max-age=1800
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Thu, 24 May 2018 19:17:41 GMT
Content-Length: 1245


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1245
Md5:    5343c1a8b203c162a3bf3870d9f50fd4
Sha1:   04b5b886c20d88b57eea6d8ff882624a4ac1e51d
Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f