Overview

URL cryptoprofit.no
IP46.30.215.159
ASNAS51468 One.com A/S
Location Denmark
Report completed2019-04-23 10:09:09 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 46.30.215.159


Last 10 reports on ASN: AS51468 One.com A/S

Date UQ / IDS / BL URL IP
2019-05-21 03:49:36 +0200
0 - 1 - 1 ktldb.com/downloads/SkypeSetup.exe 46.30.213.249
2019-05-21 02:30:11 +0200
0 - 0 - 2 solveiglonseth.no/ 46.30.215.206
2019-05-21 01:20:34 +0200
0 - 0 - 1 skoleindex.dk/7fi0mu2oL4t/DHL_Report_85735051 (...) 46.30.215.255
2019-05-21 00:14:02 +0200
0 - 1 - 0 www.rs-computer.com/rsc/ePass3003.exe 46.30.215.132
2019-05-20 23:30:20 +0200
0 - 0 - 3 interprofil.no/ 46.30.215.114
2019-05-20 23:17:54 +0200
0 - 0 - 2 oxfordadamsassociates.com/dkiljtX/DHL_Report_ (...) 46.30.213.135
2019-05-20 23:04:56 +0200
0 - 0 - 1 tatamontasje.no/ 46.30.213.37
2019-05-20 22:42:46 +0200
0 - 0 - 2 solveiglonseth.no/ 46.30.215.206
2019-05-20 22:40:38 +0200
0 - 0 - 4 dronetech.no/ 46.30.213.169
2019-05-20 22:05:55 +0200
0 - 0 - 3 flattjern.no/ 46.30.213.161

No other reports on domain: cryptoprofit.no



JavaScript

Executed Scripts (10)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 47, repeated: 1) - SHA256: 43b1828125d0fac945591388bb19229c2ddea1f2f3e0fccb71e5e6ac8f0b1a01

                                        < script src = "js/jquery-1.11.3.min.js" > < /script>
                                    


HTTP Transactions (67)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: cryptoprofit.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         46.30.215.159
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: max-age:600, public
Content-Length: 425
Expires: Tue, 23 Apr 2019 08:18:35 GMT
Last-Modified: Tue, 23 Apr 2019 08:08:35 GMT
Date: Tue, 23 Apr 2019 08:08:35 GMT
X-Varnish: 850780381
Age: 0
Via: 1.1 varnish (Varnish/6.2)
Accept-Ranges: bytes
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   425
Md5:    8687c91cd4d728d40bf7d214344bd57d
Sha1:   61e88e686a1c259271d0db91133dad789fe3506f
Sha256: 42638693a9406b83ac689982a4ce3868dad74fd537e800ec44f2c0c107582f2e
                                        
                                            GET /btcevolution HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cryptoprofit.no/

                                         
                                         67.199.248.10
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Tue, 23 Apr 2019 08:08:35 GMT
Content-Length: 186
Connection: keep-alive
Cache-Control: private, max-age=90
Location: https://tracking.wealthyboost.com/aff_c?offer_id=3&aff_id=2625&url_id=359&source=mobile
Set-Cookie: _bit=j3n88z-981951d13252d5cad9-00a; Domain=bit.ly; Expires=Sun, 20 Oct 2019 08:08:35 GMT


--- Additional Info ---
Magic:  HTML document text
Size:   186
Md5:    6311dbb40db1ecf9a258574ebc7fabd0
Sha1:   383e58fda3f33436ad142d2102af1a82a4bfaf24
Sha256: d0d65b5438e781c9817307805b6a2cff5ab1994310a77d228def19b2ae33dbc2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.201
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127298
Date: Tue, 23 Apr 2019 08:08:36 GMT
Etag: "5cbe1646-1d7"
Expires: Wed, 24 Apr 2019 19:30:14 GMT
Last-Modified: Mon, 22 Apr 2019 19:30:14 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963b.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 4JX0WWDzg1-2uMkQullXMJwGYfXLu6oDUYdQZdn_-cBM5fWm6t2vTA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    13afd4d60071fa44ea03ffc9f2d2cfaf
Sha1:   6ebf3b1b2305e987ba10c9482cca318fabaee516
Sha256: 7d40d4467014fa21a9681442be3952774dff05d7f5fc6a0416b4370231b93122
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.72
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Tue, 23 Apr 2019 08:08:36 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.8/2018-10-18)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 790yia6lLTJq-pYZQ5wTkqZ5SQ7EhtfpIl982zk-GzrMRL9N8LGerA==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    f85dfb7d31d69bfad8c4cf8a0f048f43
Sha1:   b7e9c3a93d440c43a053f716bded4cf81253816d
Sha256: 324977f5d529d0fdf0aa34dd546517f40de6ca7dafc460c4c437801d311cd1a2
                                        
                                            GET /aff_c?offer_id=3&aff_id=2625&url_id=359&source=mobile HTTP/1.1 
Host: tracking.wealthyboost.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cryptoprofit.no/

                                         
                                         52.18.93.16
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Cache-Control: no-cache, no-store, must-revalidate
Date: Tue, 23 Apr 2019 08:08:36 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
P3P: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Server: nginx/1.13.12
Set-Cookie: aff_ran_url_3=359; expires=Wed, 24 Apr 2019 08:08:36 GMT; path=/; enc_aff_session_3=ENC03f37cd9c1cb17c99b0179861b2ae0009c5a74028ead7fcb448aeed49484f907c0efaf761d5f88ebda58492d8dc7b46882e5207bef4547e7c8c30040f6899213ad2ea48383802aefedf14cd71d495bb5b30d17f7a022da50026bd2b563966b0bca7ddc74e6a4583b9b4dafc9085f6856aab391d95fc316ecfc671f3c4226b4c798361c0b63f531668ad693c3f3c8ba2787fb3405c0ca7f886f528a5dff9c0384c129de9a15; expires=Thu, 23 May 2019 08:08:36 GMT; path=/; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIzLjAiLCJtb2JpbGVfY2FycmllciI6Ij8iLCJ1c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNi4xOyBFbi1VUzsgUnY6MS45LjIuMTMpIEdlY2tvLzIwMTAxMjAzIEZpcmVmb3gvMy42LjEzIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tdXMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoieGRzbCJ9; expires=Thu, 17 Mar 2022 18:48:36 GMT; path=/;
tracking_id: 1023187b378eea23e87ad9ed1635d3
X-Robots-Tag: noindex, nofollow
Content-Length: 402
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   402
Md5:    742c372553f387d8dc0c3d1bd70cbe4a
Sha1:   44eab730144d7a35cc1c61af7de707bcba83b02c
Sha256: 2d417b61eb20b6ad0f3b824b932f2ec7b80f6d6182b604d2d71d70e54aff8d55
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 279
Last-Modified: Mon, 22 Apr 2019 05:29:33 GMT
Server: Apache
Etag: CB5045498F8CBA7A94F110858849895A9B4E8C24
Cache-Control: max-age=601660,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp1
X-HW: 1556006917.dop010.fr8.t,1556006917.cds027.fr8.m,1556006917.cds142.fr8.c


--- Additional Info ---
Magic:  data
Size:   279
Md5:    110df7fbb469bbca22a41536b83eaece
Sha1:   cb5045498f8cba7a94f110858849895a9b4e8c24
Sha256: 337078bb19235d31e9487961c6b498e4ff45b2c136d44ee25219f838c82cb68d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 312
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Server: Apache
Etag: A52DD33C1D4DD68309BA88D4DCA900532A3D2B48
Cache-Control: max-age=302399,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp15
X-HW: 1556006917.dop010.fr8.t,1556006917.cds027.fr8.m,1556006917.cds142.fr8.c


--- Additional Info ---
Magic:  data
Size:   312
Md5:    fb85e276829e4fae4706282fff15577c
Sha1:   a52dd33c1d4dd68309ba88d4dca900532a3d2b48
Sha256: 9b60944a5bba6ba6bf505bb1d4acd4617c34bd8818f3e146055e16bd4ac8d22c
                                        
                                            GET /bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action= HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cryptoprofit.no/

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917; expires=Wed, 22-Apr-20 08:08:37 GMT; path=/; domain=.safeoffer.org; HttpOnly
Last-Modified: Thu, 28 Mar 2019 13:59:46 GMT
Vary: Accept-Encoding
X-Powered-By: centminmod
Strict-Transport-Security: max-age=31536000; includeSubdomains;
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c0f927cb0e-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8827
Md5:    b9e3f50c4f8ba45e412c053876b50ce3
Sha1:   e5d3ac38263aa6e9eb22483fe203f92896494d79
Sha256: 3bba550378af383be674b2b8f81fef5ba45f3f16b495f24cd92a8e325e18634b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 472
Last-Modified: Tue, 16 Apr 2019 19:46:13 GMT
Server: Apache
Etag: C0FCFFF5A624EC4C56B954905966DDE64722AB06
Cache-Control: max-age=594588,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp6
X-HW: 1556006917.dop010.fr8.t,1556006917.cds027.fr8.m,1556006917.cds142.fr8.c


--- Additional Info ---
Magic:  data
Size:   472
Md5:    21ba97dbe23c15dddd4e2fe8bfd17f02
Sha1:   c0fcfff5a624ec4c56b954905966dde64722ab06
Sha256: bbcba50116deed9cb380d20b956988623a3af7d37e152f298d6818860e923014
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.130.5
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 727
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Server: Apache
Etag: F39CA1D45BA10B1F168A65B694B94C7FD07B795E
Cache-Control: max-age=302365,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp1
X-HW: 1556006917.dop010.fr8.t,1556006917.cds027.fr8.m,1556006917.cds142.fr8.c


--- Additional Info ---
Magic:  data
Size:   727
Md5:    4685878186232095ef551a65a017269c
Sha1:   f39ca1d45ba10b1f168a65b694b94c7fd07b795e
Sha256: d77195a8c0a1fc5f8db4f7ff47a4937f8eec28c16c7eee15d67a7a27b97e550b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Etag: 661AA651701677495F84998D9AFA81AC2E1CC9B4
X-OCSP-Responder-ID: mcdpcaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=183579
Expires: Thu, 25 Apr 2019 11:08:16 GMT
Date: Tue, 23 Apr 2019 08:08:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    95e60e54eba7e7c1258b60cd47be2f45
Sha1:   661aa651701677495f84998d9afa81ac2e1cc9b4
Sha256: ed84bb7df34fbeeb8eb01c18fafe64a3e3ea2c07dd1c97dfc46cf8f0642f33a2
                                        
                                            GET /app/build/css/build.min.css HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Mar 2019 09:47:08 GMT
Vary: Accept-Encoding
Etag: W/"5c94af1c-29c3"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c1ecabcb0e-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2224
Md5:    875bbb829845f3a5069eb51d9b2d6ef6
Sha1:   5b5d40b186d59dc6681e607a3d4f16c447b6bc2e
Sha256: 3ff027ad12ff7e13f57960d9d3ba5d514507f45ce9895f3d3f4876b768136d1d
                                        
                                            GET /ajax/libs/fancybox/3.3.5/jquery.fancybox.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=

                                         
                                         104.19.195.151
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 May 2018 09:19:47 GMT
Etag: W/"5afd4933-36f1"
Expires: Sun, 12 Apr 2020 08:08:37 GMT
Cache-Control: public, max-age=30672000
Vary: Accept-Encoding
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Served-In-Seconds: 0.006
CF-Cache-Status: HIT
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c2ae6c42b5-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3423
Md5:    fafe4a76b3ebd6c34f294b7112674a74
Sha1:   a8c6a90567deb309b42f5ee4578d34db7ecde5d2
Sha256: 2da65975291fd43793f6cd9612ba1c5073f5ef52b4ee04052bf2dcc89607aa99
                                        
                                            GET /ajax/libs/fancybox/3.3.5/jquery.fancybox.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=

                                         
                                         104.19.195.151
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 May 2018 09:19:06 GMT
Etag: W/"5afd490a-f02e"
Expires: Sun, 12 Apr 2020 08:08:37 GMT
Cache-Control: public, max-age=30672000
Vary: Accept-Encoding
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Served-In-Seconds: 0.009
CF-Cache-Status: HIT
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c2de8042b5-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20089
Md5:    9ee8f0c18853cdce33f7585f256732c5
Sha1:   1ca79f16be50e54d3739fa1ba5d27e923d8ce6a7
Sha256: 9358ef8ac8ae5b5f201d9a6d13c1bf59c455ceb3e23f526897adf5301be02b6b
                                        
                                            GET /bitcoinevolution/config.js HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 18 Mar 2019 16:24:59 GMT
Etag: W/"5c8fc65b-1da"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c2af18cb0e-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   304
Md5:    16f8acc54f3689375bc2008ba9f2dd04
Sha1:   861c57dec0592b05d585ab6785f46df5f4646bcb
Sha256: 1e51c920a5e9c0be3ab00686319697431068af66119eef80cfdf87f478565d8c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=134529
Date: Tue, 23 Apr 2019 08:08:37 GMT
Etag: "5cbe164f-1d7"
Expires: Wed, 24 Apr 2019 21:30:46 GMT
Last-Modified: Mon, 22 Apr 2019 19:30:23 GMT
Server: ECS (lcy/1D6F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    2d5f42e4ea5e8d231e8e151d8ecbeb93
Sha1:   51653ae338d48dcd8e26cf47b1d52660ba4c047c
Sha256: c0b429364c029f6787cf4f4464a0bc71af464bc2946d9c1a65df489eb3744e40
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=86592
Date: Tue, 23 Apr 2019 08:08:37 GMT
Etag: "5cbd6fe6-1d7"
Expires: Wed, 24 Apr 2019 08:11:49 GMT
Last-Modified: Mon, 22 Apr 2019 07:40:22 GMT
Server: ECS (lcy/1D5A)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    235875f42d6b4709f97d31aea044a667
Sha1:   d46201d8f6cc4156b13fd1b628b9e65b285c0531
Sha256: d49d4f81711e20dda6122b5ce0fb2774b86957d584d81f7d68f5e32edea7eec7
                                        
                                            GET /app/vendor/intl-tel-input/build/css/intlTelInput.css HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 18 Apr 2017 11:12:54 GMT
Vary: Accept-Encoding
Etag: W/"58f5f4b6-4807"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c22e6acaf6-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2900
Md5:    a42f535b11ba98fd14da0fc4b643c75d
Sha1:   52ac4226be2808bc7477c22099059beb47cd1afe
Sha256: 71c52d7bd556e397b6a49a1c62e695b62b237a3546feeb9c6a355c3098999ac7
                                        
                                            GET /bitcoinevolution/css/bootstrap.min.css HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Sep 2018 11:53:38 GMT
Vary: Accept-Encoding
Etag: W/"5baa21c2-1d970"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c2da77cad2-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19999
Md5:    487f909b9fab3d0f169825c84fecb1ff
Sha1:   d88c0a6ef36e14211a54e6244cc416626f0cfa19
Sha256: 1e6ac2cf2692e2f86af261206e3d4ba9e685d16f82247ff83866db402e77ef4a
                                        
                                            GET /bitcoinevolution/css/main.css HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 27 Sep 2018 14:22:27 GMT
Vary: Accept-Encoding
Etag: W/"5bace7a3-4767"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c2da1bcada-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3693
Md5:    deb1417313cd7d9c0c0a657ad8ae4095
Sha1:   1a3c5a01e6046013193350f8e50429bfce534fc5
Sha256: c50a2c6dc2af0f889c6f1e0a2cadc9124b03e0d9db874fa18ae9081d93835efa
                                        
                                            GET /bitcoinevolution/img/logo.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Content-Length: 4351
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-10ff"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c2df24cafe-ARN


--- Additional Info ---
Magic:  PNG image, 369 x 65, 8-bit colormap, non-interlaced
Size:   4351
Md5:    cd40fccb270ac46fdfa813c1feb9b88d
Sha1:   529edcfaa57d6ac3850b544a6871c36afb6951ef
Sha256: 8fbd0c98dc38009a1bc43c49661e6960d296e9029fc740b4d23cf5ff3e383202
                                        
                                            GET /c98940a8d5.js HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=

                                         
                                         23.111.9.35
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: iDrJh0Gioqbw/MN5Vp9cztnCoL4C2ncjORDmqQRKQ7qfpo/z6tH8PuVdCtGSheGhmRdN5AGOA5I=
x-amz-request-id: EE89F8351616C778
Last-Modified: Sat, 14 Jan 2017 02:22:31 GMT
Etag: W/"afc675981da7bf3697cac4a245baccd4"
Server: NetDNA-cache/2.2
Cache-Control: max-age=0, private, must-revalidate
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3885
Md5:    353701ca810922be2a83fdba1f5b1fb9
Sha1:   5d0ffe0d4a58dd0eb3717c9d71f701a8abdd90a7
Sha256: 1c009d7b7fdddc34c823bb658391a34ced28d74488c88660d10cb360d1391764
                                        
                                            GET /bitcoinevolution/img/bitgo.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Content-Length: 2773
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-ad5"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c2ec1acb0a-ARN


--- Additional Info ---
Magic:  PNG image, 92 x 38, 8-bit colormap, non-interlaced
Size:   2773
Md5:    4e4673b4761febb5a4588d4cd29f7051
Sha1:   50e2942cc658c01ab4c23486fb46ccd9ec76e3b7
Sha256: b45af467027a09a6c13dcb6fb989d125acd7d96e639bbaca7521d874ae3bd0b1
                                        
                                            GET /bitcoinevolution/js/modernizr-2.8.3.min.js HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Sep 2018 11:53:38 GMT
Vary: Accept-Encoding
Etag: W/"5baa21c2-4304"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c42fd0cad2-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6946
Md5:    955d76bb0d6245f9e797e4c4a555593e
Sha1:   765c111985a8b85b07c8780eba0673b30b457b55
Sha256: b21eef288e31dd741473239f12d5a098258284d75b5b4fe212c6a788d22c98c7
                                        
                                            GET /app/build/js/build.min.js HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Apr 2019 11:22:33 GMT
Vary: Accept-Encoding
Etag: W/"5cb9af79-6596b"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c308accb0e-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   117979
Md5:    a786a781203497b8e63e4d8427670b44
Sha1:   272a38600c6510d93272d239e3870aa76470d022
Sha256: 15e36a59a695416777e002ad8c1c5112e564d389c570440614a5d5b78b3275f3
                                        
                                            GET /bitcoinevolution/js/bootstrap.min.js HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Sep 2018 11:53:38 GMT
Vary: Accept-Encoding
Etag: W/"5baa21c2-90b5"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c3fe2ecaf6-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9940
Md5:    52e9a2e1448de5f1e0800c6a721ab5c0
Sha1:   e7aec075ec52344d777ff5c792b1272cc8649c55
Sha256: 8f4b15bd10bfc4a0951416a1139b5f9b2773f77695a5bf1d1e08a8f6e5ef5768
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    cda7ff250d995386893a08966506f4be
Sha1:   2c3824e0470958180932b067ca7b14c38028da42
Sha256: c0b5f9bac89000aac02e2a8baf51b08f3880c43f0a2e1dbf30499239eff1588f
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /bitcoinevolution/js/main.js HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Sep 2018 11:53:38 GMT
Etag: W/"5baa21c2-4b3"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c44fcfcada-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   575
Md5:    b9df90ffb6df5695355419593d82a222
Sha1:   d058c4a7362584a115fed8ef7b120b49ec747450
Sha256: 61a79f684589c7e35365b2bc021c831a449bc2fb04862abcdbfe3bce6536e184
                                        
                                            GET /bitcoinevolution/img/norton.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Content-Length: 2640
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-a50"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c46cfdcafe-ARN


--- Additional Info ---
Magic:  PNG image, 80 x 43, 8-bit colormap, non-interlaced
Size:   2640
Md5:    13d83efab9862ccc2bca7e5c84e4c4cd
Sha1:   68d4b4146dee3e3fb3fa44a9df1708360b768cd3
Sha256: e8d549dca5636db862aedc5eba7adf669fa5b8e792d5de57d6783f68bfd4a333
                                        
                                            GET /bitcoinevolution/img/secure-trading.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Content-Length: 2516
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-9d4"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c47ac9cb0a-ARN


--- Additional Info ---
Magic:  PNG image, 138 x 30, 8-bit colormap, non-interlaced
Size:   2516
Md5:    f4078b56c47b972507a2af6248f4afdc
Sha1:   ffaaf2656111961cf71db681249ee33a8b9a1128
Sha256: eb976f4d9afa2e5539aaa0ef270f9bccb2d7c55f9a2641fac9f9d3f4183f8b53
                                        
                                            GET /css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/css/main.css

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 23 Apr 2019 08:08:37 GMT
Date: Tue, 23 Apr 2019 08:08:37 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   588
Md5:    ad1b2c791646e64a351b35368ba8465e
Sha1:   243129b9160aca8be924e9d8ff173bb707b86710
Sha256: c769f3aa829c238c7a05698b8cd8010a867c0d9f3a88ddcb9c355cd124510993
                                        
                                            GET /bitcoinevolution/img/join3.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:37 GMT
Content-Length: 2157
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-86d"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c54bfacada-ARN


--- Additional Info ---
Magic:  PNG image, 62 x 71, 8-bit colormap, non-interlaced
Size:   2157
Md5:    7d6b69c2c84cfc05e23a936767f076c0
Sha1:   5539cc5045ee795c4a0eb349a99d52cbf9ca69ad
Sha256: 00d636a1cbc92e1d8a92d850afeed5a49e5113cb3bc070a85974a0633f2009ab
                                        
                                            GET /bitcoinevolution/img/join1.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 2885
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-b45"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c4c828cb0e-ARN


--- Additional Info ---
Magic:  PNG image, 71 x 71, 8-bit colormap, non-interlaced
Size:   2885
Md5:    30d61427762e21c32285a5df788e3711
Sha1:   f59218f442e3531fed4a051338c7a1dc51387098
Sha256: 4846d9e79cecc0056b676fb5cb2eea5b8405ff88b370c200c62a27141544406e
                                        
                                            GET /bitcoinevolution/img/join2.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 1328
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-530"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c4d9a2caf6-ARN


--- Additional Info ---
Magic:  PNG image, 71 x 71, 8-bit colormap, non-interlaced
Size:   1328
Md5:    7f7c10fc6d8cd238f5c6697fd5656462
Sha1:   6f2150298b2223d347573ab9bba5066fd5612c2e
Sha256: 4114b7cf7bcbc0c2c7a0c244083848ae583e4db1cf7fbe0b6d1311946148d54b
                                        
                                            GET /bitcoinevolution/img/mcafee.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 2650
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-a5a"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c4ca54cad2-ARN


--- Additional Info ---
Magic:  PNG image, 130 x 31, 8-bit colormap, non-interlaced
Size:   2650
Md5:    38c6d9ef18c6f97b6407ad48990fced2
Sha1:   2205ad5b7e39048ab516ecb59fe982b87fe21ffb
Sha256: 0b2ce7e5c4af52316ad8c348cb88a325ce2d1dfc47b857d3b4d065536d23b9be
                                        
                                            GET /bitcoinevolution/img/testimonialb.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 6246
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-1866"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:37 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c56e1ecb0a-ARN


--- Additional Info ---
Magic:  PNG image, 96 x 96, 8-bit colormap, non-interlaced
Size:   6246
Md5:    69466769fd949160fae62c61ad2d7360
Sha1:   d5aab5defea9b252516df6affa31cf70ce6f6b86
Sha256: ebdc818196992b71447d69a4cbcf7bd6543fd58b1471740d037cb85d8fc71d22
                                        
                                            GET /bitcoinevolution/img/testimoniald.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 6802
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-1a92"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c5dcdbcb0e-ARN


--- Additional Info ---
Magic:  PNG image, 96 x 96, 8-bit colormap, non-interlaced
Size:   6802
Md5:    86ddc04a39de29c7dd76656a11c6e9c3
Sha1:   fe0f7e45ded7c88b17fc722bf66a85b9b5fd5bf7
Sha256: 969e5c61070be993cc0150c1236eab2f69798416118f799443ff59993b07a431
                                        
                                            GET /bitcoinevolution/img/testimoniala.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 6316
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-18ac"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c54825cafe-ARN


--- Additional Info ---
Magic:  PNG image, 96 x 96, 8-bit colormap, non-interlaced
Size:   6316
Md5:    d6f4eee1a8380f1db9d5c11b061662bf
Sha1:   4cde7cf3fa9d2d02c1d95da8184609bb533f27d4
Sha256: 697e4e06290567e57f2c6b8ef83673beb31356f27dda7c383648ae855d89ff8a
                                        
                                            GET /bitcoinevolution/img/step1.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 4639
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-121f"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c5fe8ccaf6-ARN


--- Additional Info ---
Magic:  PNG image, 196 x 196, 8-bit colormap, non-interlaced
Size:   4639
Md5:    a0f9a0addc8a0c04452880081f2e147d
Sha1:   98e5dac428b701831f6278db0d1bae2b8794be19
Sha256: a561612255710034ed5fe2d7eadf0a7507135ce4a9718e00f48d253d5c5d07bc
                                        
                                            GET /bitcoinevolution/img/step2.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 5048
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-13b8"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c5ff11cad2-ARN


--- Additional Info ---
Magic:  PNG image, 196 x 196, 8-bit colormap, non-interlaced
Size:   5048
Md5:    463df8af4e2271dfd3a67d47ff82c8ec
Sha1:   0af7f2dae5ed162373f6597f8f60b21970fcd64e
Sha256: dad22d13f4b85aac43cca7c36b68eccef5b878b0bd7ab15923d2145ef3a19eef
                                        
                                            GET /bitcoinevolution/img/testimonialc.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 6161
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-1811"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c58cdfcada-ARN


--- Additional Info ---
Magic:  PNG image, 96 x 96, 8-bit colormap, non-interlaced
Size:   6161
Md5:    acf981675559d1db3208db65676b09a2
Sha1:   8c292c463ba0c7a831a29c4ece31b6b7ac6ca5c8
Sha256: 7510dfa790fe8c0c78e4cce75ce67c753198debfd1a05db59dd1e545fdf417d2
                                        
                                            GET /bitcoinevolution/img/q.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 757
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-2f5"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c61dcccb0e-ARN


--- Additional Info ---
Magic:  PNG image, 47 x 47, 8-bit colormap, non-interlaced
Size:   757
Md5:    cd7492abfc9b24a797b1c4738946ef1d
Sha1:   cc19a0001742bc79a0b22878fda4505384340534
Sha256: 95fba2a1fbd51eca6ba329436b1b9a7d7e461ce5f2f97ca23834fe802767b2e8
                                        
                                            GET /bitcoinevolution/img/section4bg.jpg HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/css/main.css
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 15413
Connection: keep-alive
Last-Modified: Tue, 25 Sep 2018 11:53:38 GMT
Etag: "5baa21c2-3c35"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c66efbcb0e-ARN


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   15413
Md5:    a282fe22b2093d5b38da8f0d66d57602
Sha1:   51f24bc9fef538e4e0f6832b1e1e463f0e7b1958
Sha256: c4aafa329dc41779090ee5cbd6a4db8f835213c97c58353654b91c1d9623b86a
                                        
                                            GET /bitcoinevolution/img/star-icon.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 3923
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-f53"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c64809caf6-ARN


--- Additional Info ---
Magic:  PNG image, 119 x 129, 8-bit colormap, non-interlaced
Size:   3923
Md5:    53ff96216decee2bde54800f9f874e30
Sha1:   33b3521a41f1b714c2e987cf66c3cac9dd583495
Sha256: 8e98fb02a212c53a9514a47bcd790cd1b63c8711278f0a4e0e277d13d79c6cd7
                                        
                                            GET /bitcoinevolution/img/money-icon.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 3320
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-cf8"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c64896cad2-ARN


--- Additional Info ---
Magic:  PNG image, 150 x 150, 8-bit colormap, non-interlaced
Size:   3320
Md5:    4121d7f254df9ebabc37eb8d6997fc8d
Sha1:   0e12be7e8b5408679d8f612517ac730ac1f88cd1
Sha256: d80e6932c1adc3cec0afdb3e4281422d7fd259e5d2a4bc52e519ebc2ea4a840b
                                        
                                            GET /bitcoinevolution/img/step3.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 5316
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-14c4"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c5f83fcb0a-ARN


--- Additional Info ---
Magic:  PNG image, 196 x 196, 8-bit colormap, non-interlaced
Size:   5316
Md5:    605f62663988571baaa6cffe4d2648d2
Sha1:   b4a72e799b686be882b67d312345e2eb693e197b
Sha256: 71a98f3dbb63afe0487cb730d12f32f6f73ceecffa2b58c1d063a0a3fedc8deb
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d9a9e5ec7b1a86f192270e140a0f67af
Sha1:   81f2feba8a30dbe70eb2732cec822dc349a369c7
Sha256: f32d8285a570e520f2306d77ea173e3f19424cb6769424431cde49907ff60056
                                        
                                            GET /bitcoinevolution/img/howitworks.jpg HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/css/main.css
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 7639
Connection: keep-alive
Last-Modified: Tue, 25 Sep 2018 11:53:38 GMT
Etag: "5baa21c2-1dd7"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c6c87fcb0e-ARN


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7639
Md5:    4cff09cc1ca8130716490af508d7528a
Sha1:   f06adf25384033aa851ae2985928fa43045e1866
Sha256: 14799da75028a42827c043fcc3979bb1adf01629530285f8eb87aae9235442ca
                                        
                                            GET /bitcoinevolution/img/bg.jpg HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/css/main.css
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 181496
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-2c4f8"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c66853cada-ARN


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   181496
Md5:    78647c19c1c49de76904d460fc3f7fd8
Sha1:   a91797c5616fd73d1e572127241bbc8b9d1e56de
Sha256: 030898d20f53579cc5452d46f828d8cab1bebc6bbfc7180c079fe4160fae7632
                                        
                                            GET /s/roboto/v19/KFOlCnqEu92Fr1MmYUtfBBc-.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20392
Date: Fri, 19 Apr 2019 15:23:13 GMT
Expires: Sat, 18 Apr 2020 15:23:13 GMT
Last-Modified: Mon, 25 Mar 2019 20:14:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 319525
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   20392
Md5:    bb1e4dc6333675d11ada2e857e7f95d7
Sha1:   3e2625fe48669f4ad48823e8c18e6fb14b74c5a0
Sha256: e8586f9db7c0503a984c944ad2f1f783bf6051aea2a066bc21fdedc8fe7fa68a
                                        
                                            GET /bitcoinevolution/js/jquery-1.11.3.min.js HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Sep 2018 11:53:38 GMT
Vary: Accept-Encoding
Etag: W/"5baa21c2-176d5"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c97d0fcaf6-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33538
Md5:    8a06322db2a2a5be4695df9c52e4d937
Sha1:   61fd61c4c4757c386885d65459476c572eb41a23
Sha256: c630fb6c4898067ebe6bed5c06f58120125d53fb34b7d10d148da0b5d631c0af
                                        
                                            GET /s/roboto/v19/KFOjCnqEu92Fr1Mu51TzBic6CsI.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 21588
Date: Fri, 19 Apr 2019 15:10:22 GMT
Expires: Sat, 18 Apr 2020 15:10:22 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 320296
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   21588
Md5:    81f57861ed4ac74741f5671e1dff2fd9
Sha1:   ac3993e9edc4c30c97fe670aa1e8a7088aa69e31
Sha256: eec142608e8b417e2acb6e5301a750047a04e2c5a6563223caae499e19ea08ee
                                        
                                            GET /s/oswald/v17/TK3iWkUHHAIjg752GT8A.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19124
Date: Fri, 19 Apr 2019 15:26:05 GMT
Expires: Sat, 18 Apr 2020 15:26:05 GMT
Last-Modified: Wed, 27 Mar 2019 20:57:29 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 319353
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   19124
Md5:    e613eabfb2bb866105713c7d80fcee49
Sha1:   b15b5e9262d42a8c333025ab33ea830582ecc388
Sha256: eb763a59ee5af1fb82e8fcd579af09adaa25b4ed59d6bd0ad84e1c68f1a3beb5
                                        
                                            GET /s/roboto/v19/KFOlCnqEu92Fr1MmWUlfBBc-.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20356
Date: Fri, 19 Apr 2019 15:14:31 GMT
Expires: Sat, 18 Apr 2020 15:14:31 GMT
Last-Modified: Mon, 25 Mar 2019 20:13:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 320048
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   20356
Md5:    adcde98f1d584de52060ad7b16373da3
Sha1:   0a9b76d81989a7a45336ebd7b48ed25803f344b9
Sha256: 806ea46c426af8fc24e5cf42a210228739696933d36299eb28aee64f69fc71f1
                                        
                                            GET /s/roboto/v19/KFOmCnqEu92Fr1Mu4mxM.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20268
Date: Fri, 19 Apr 2019 15:36:18 GMT
Expires: Sat, 18 Apr 2020 15:36:18 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 318741
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   20268
Md5:    60fa3c0614b8fb2f394fa29944c21540
Sha1:   42c8ae79841c592a26633f10ee9a26c75bcf9273
Sha256: c1dc87f99c7ff228806117d58f085c6c573057fa237228081802b7d8d3cf7684
                                        
                                            GET /bitcoinevolution/img/footer-logo.png HTTP/1.1 
Host: safeoffer.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=
Cookie: __cfduid=deb8d111648094dbb45e85226381cb69c1556006917

                                         
                                         104.24.105.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 23 Apr 2019 08:08:38 GMT
Content-Length: 2479
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 17:28:19 GMT
Etag: "5c587633-9af"
X-Powered-By: centminmod
Expires: Thu, 23 May 2019 08:08:38 GMT
Cache-Control: max-age=2592000, public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cbe59c62ba3cafe-ARN


--- Additional Info ---
Magic:  PNG image, 176 x 31, 8-bit colormap, non-interlaced
Size:   2479
Md5:    872114fe7371a39914275709cf7f62fa
Sha1:   33a87e669a192d151f4d7f747693c92fec6380cf
Sha256: e6e3105a07a1d4414356eeb5edcf0d902410d2b73d00e925b5e8dc679aa716b2
                                        
                                            GET /c98940a8d5.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=

                                         
                                         23.111.9.35
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 23 Apr 2019 08:08:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: hBDuULfIgC6M4+uCV/pk5COhQRc+F1Nqo38vvYyjfic/BV7IaprIwtSbEC+iykDRAUrtVpRnnDU=
x-amz-request-id: E9EAC79E311E52DB
Last-Modified: Sat, 14 Jan 2017 02:22:31 GMT
Etag: W/"95f740f04be0bab36e6af3e0b8a17bcf"
Server: NetDNA-cache/2.2
Cache-Control: max-age=0, private, must-revalidate
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   380
Md5:    1f4ef27e0ac114fb6657aa6fcdb2efcc
Sha1:   6d3c73b44fbe85377aac27406ff722eab4bf192f
Sha256: 40f8796c9adf50ec72ee165b668f129227a7cdbd77ae30518fa090d0ca90061d
                                        
                                            GET /s/roboto/v19/KFOlCnqEu92Fr1MmSU5fBBc-.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20348
Date: Fri, 19 Apr 2019 15:30:45 GMT
Expires: Sat, 18 Apr 2020 15:30:45 GMT
Last-Modified: Mon, 25 Mar 2019 20:11:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 319075
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   20348
Md5:    b00849e00f4c2331cddd8ffb44a6720b
Sha1:   5b7820fec8f9810e291e1eb98764979830ed6621
Sha256: 76b05400fff9da5b43862e3713099e3913916a629560265ed24b19d031227cbf
                                        
                                            GET /releases/v4.7.0/css/font-awesome-css.min.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://use.fontawesome.com/c98940a8d5.css

                                         
                                         23.111.9.35
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 23 Apr 2019 08:08:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Last-Modified: Tue, 25 Oct 2016 17:21:58 GMT
Etag: W/"36082410df2ef7f83932219089dc1443"
Cache-Control: max-age=31556926
Server: NetDNA-cache/2.2
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7691
Md5:    987c31a3ea61688c3ff2239675a96095
Sha1:   1c3b798e9a35e756b46d58b2519aba626d96daac
Sha256: c861a5483604d8ee9976f0568249c590d481baba8207a47c81cb2ac87579c4a6
                                        
                                            GET /s/oswald/v17/TK3hWkUHHAIjg75-ohoTus9E.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19544
Date: Fri, 19 Apr 2019 15:33:57 GMT
Expires: Sat, 18 Apr 2020 15:33:57 GMT
Last-Modified: Wed, 27 Mar 2019 20:58:11 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 318883
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   19544
Md5:    9684f548a73e767a806b9d10203b1895
Sha1:   34c7671427ca509bf31b29851b8f4a2b221be718
Sha256: 1e30bb838670b6379ed43763fd77e22c9e1290b284ae589486e65c40ae52d74f
                                        
                                            GET /s/oswald/v17/TK3hWkUHHAIjg75-6hwTus9E.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i,900,900i|Oswald:400,500,600,700|Roboto:300,300i,400,400i,700,700i,900,900i
Origin: https://safeoffer.org

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19444
Date: Fri, 19 Apr 2019 15:21:21 GMT
Expires: Sat, 18 Apr 2020 15:21:21 GMT
Last-Modified: Wed, 27 Mar 2019 20:57:58 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 319639
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   19444
Md5:    cca81d89abf28b171ea7dd11e9f920f7
Sha1:   f0efbea1b7ee62f0e23d1488fc66271ccd49b7f7
Sha256: 39773d62dfa35b0c9e855cbad9354eba156afdd6881248824691c702fa6e2f7f
                                        
                                            GET /releases/v4.7.0/fonts/fontawesome-webfont.woff HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://use.fontawesome.com/c98940a8d5.css
Origin: https://safeoffer.org

                                         
                                         23.111.9.35
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Tue, 23 Apr 2019 08:08:41 GMT
Content-Length: 98024
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Last-Modified: Mon, 17 Jul 2017 16:24:48 GMT
Etag: "fee66e712a8a08eef5805a46892932ad"
Cache-Control: max-age=31556926
Server: NetDNA-cache/2.2
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
X-Cache: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  data
Size:   98024
Md5:    fee66e712a8a08eef5805a46892932ad
Sha1:   28b782240b3e76db824e12c02754a9731a167527
Sha256: ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: cryptoprofit.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         46.30.215.159
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: max-age:600, public
Content-Length: 449
Expires: Tue, 23 Apr 2019 08:18:41 GMT
Last-Modified: Tue, 23 Apr 2019 08:08:41 GMT
Date: Tue, 23 Apr 2019 08:08:41 GMT
X-Varnish: 932258249
Age: 0
Via: 1.1 varnish (Varnish/6.2)
Accept-Ranges: bytes
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   449
Md5:    1663e42178a9ee83898de9262da32dc0
Sha1:   700741773e9873876f0bf70a5818798a972706ad
Sha256: 195de2f62bbe819bde59f27e086d94434d5524b63d30fb3d4ca528c203281238
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: cryptoprofit.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Range: bytes=0-
If-Range: Tue, 23 Apr 2019 08:08:41 GMT

                                         
                                         46.30.215.159
HTTP/1.1 206 Partial Content
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: max-age:600, public
Content-Length: 449
Expires: Tue, 23 Apr 2019 08:18:41 GMT
Last-Modified: Tue, 23 Apr 2019 08:08:41 GMT
Date: Tue, 23 Apr 2019 08:08:41 GMT
X-Varnish: 870304427 932258250
Age: 2
Via: 1.1 varnish (Varnish/6.2)
Content-Range: bytes 0-448/449
Accept-Ranges: bytes
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   449
Md5:    1663e42178a9ee83898de9262da32dc0
Sha1:   700741773e9873876f0bf70a5818798a972706ad
Sha256: 195de2f62bbe819bde59f27e086d94434d5524b63d30fb3d4ca528c203281238
                                        
                                            GET /7.1.0/video-js.css HTTP/1.1 
Host: vjs.zencdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /7.1.0/video.js HTTP/1.1 
Host: vjs.zencdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://safeoffer.org/bitcoinevolution/?oid=3&qze=2625&hitid=1023187b378eea23e87ad9ed1635d3&aff_sub=&saf=&cvu=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&htmlPx={htmlPx}&action=

                                         
                                         0.0.0.0
                                        


--- Additional Info ---