Overview

URL clckads.com/?sid=35574&site_id=PEK2FGMHFV&conv_id=us7fzfy16jcvkzoch2ts
IP172.104.235.28
ASN
Location United States
Report completed2018-05-12 00:20:25 CEST
StatusLoading report..
urlQuery Alerts Fake software update


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-05-12 00:19:54 CEST 1  37.49.225.129 Client IP ET CURRENT_EVENTS SOCENG Fake Update/Installer ForceDL Template Nov 03 2017


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.104.235.28

Date UQ / IDS / BL URL IP
2018-09-09 18:10:52 +0200
0 - 0 - 0 lghtds.net/?conv_id=kJP25GLC00UGI01003AR1AAGK (...) 172.104.235.28
2018-08-06 22:52:36 +0200
0 - 0 - 0 sftasd.org/ 172.104.235.28
2018-07-31 13:00:16 +0200
0 - 0 - 0 clckads.org/?sid=42944&site_id=1744791&conv_i (...) 172.104.235.28
2018-07-10 11:46:56 +0200
0 - 0 - 0 sftwrads.com/ 172.104.235.28
2018-06-29 09:30:49 +0200
0 - 0 - 2 lghtds.net/?sid=37601 172.104.235.28
2018-06-23 10:51:09 +0200
0 - 0 - 2 lghtds.net/?sid=37601 172.104.235.28
2018-06-22 22:37:20 +0200
0 - 0 - 0 lghtds.net/?sid=41134&site_id=1895177&conv_id (...) 172.104.235.28
2018-06-08 19:25:07 +0200
0 - 0 - 0 clckads.org 172.104.235.28
2018-05-24 21:18:12 +0200
6 - 1 - 0 lghtds.net/?conv_id=kUS25G9C01J8K01003AR1AE1D (...) 172.104.235.28
2018-05-24 03:39:51 +0200
0 - 0 - 2 lghtds.net/?conv_id=kJP25G9C00UGI01008K61AAGL (...) 172.104.235.28

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2018-11-18 20:07:18 +0100
0 - 0 - 1 cdn.contentmobir.club/page/html/sam/hk/fb-spi (...) 143.204.51.60
2018-11-18 20:03:25 +0100
0 - 0 - 0 https://oercommons.s3.amazonaws.com/media/cou (...) 52.216.226.56
2018-11-18 20:02:07 +0100
0 - 0 - 1 https://www.learningtoolkit.club 190.97.167.206
2018-11-18 20:01:44 +0100
0 - 0 - 0 https://www.revivecivility.org/users/nfl-free (...) 23.185.0.3
2018-11-18 19:59:26 +0100
0 - 0 - 0 https://oercommons.s3.amazonaws.com/media/cou (...) 52.216.105.139
2018-11-18 19:52:11 +0100
0 - 0 - 3 wedding-biz.ru/ 194.58.56.29
2018-11-18 19:51:13 +0100
0 - 0 - 1 vitalmix.com.br/downloader/skin/AWB_013339290 (...) 50.116.86.19
2018-11-18 19:49:58 +0100
0 - 0 - 4 https://www.jshosting.date 212.32.255.7
2018-11-18 19:49:14 +0100
0 - 0 - 3 englishinfinity.skyrocketph.technology/wp-inc (...) 139.59.116.67
2018-11-18 19:47:44 +0100
0 - 2 - 0 astrante.fr/ 185.216.26.26

Last 10 reports on domain: clckads.com

Date UQ / IDS / BL URL IP
2018-01-12 16:52:30 +0100
2 - 0 - 1 clckads.com/?sid=21761 46.101.196.114
2018-01-08 15:59:05 +0100
2 - 0 - 1 clckads.com/?sid=21761 46.101.196.114
2017-12-29 03:48:04 +0100
2 - 0 - 1 clckads.com/?sid=21801 46.101.196.114
2017-12-26 03:35:55 +0100
2 - 0 - 1 clckads.com/?sid=21761 46.101.196.114
2017-12-23 07:17:22 +0100
2 - 0 - 1 clckads.com/?sid=21277 46.101.196.114
2017-12-23 02:48:03 +0100
2 - 0 - 1 clckads.com/?sid=21804 46.101.196.114
2017-12-23 00:03:31 +0100
2 - 0 - 1 clckads.com/?sid=15107 46.101.196.114
2017-12-22 12:10:32 +0100
2 - 0 - 1 clckads.com/?sid=21277 46.101.196.114
2017-12-21 20:47:02 +0100
2 - 0 - 1 clckads.com/?sid=21277 46.101.196.114
2017-12-21 20:44:11 +0100
2 - 0 - 2 clckads.com/?sid=15902 46.101.196.114


JavaScript

Executed Scripts (12)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (17)


Request Response
                                        
                                            GET /?sid=35574&site_id=PEK2FGMHFV&conv_id=us7fzfy16jcvkzoch2ts HTTP/1.1 
Host: clckads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.104.235.28
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Content-Language: en-US
Transfer-Encoding: chunked
Date: Fri, 11 May 2018 22:19:52 GMT
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   249
Md5:    aafe3cb1aefad0ac7a4275f03c9b1d37
Sha1:   19145e68e93629efa835fd021f045057b269d370
Sha256: 6ea072d61d012cc0eec6dd963532f1d138395cc11523fa01c45bd4c2d1c441f4
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: clckads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.104.235.28
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Last-Modified: Mon, 16 Apr 2018 09:35:02 GMT
Accept-Ranges: bytes
Content-Length: 946
Date: Fri, 11 May 2018 22:19:53 GMT
Connection: close


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   946
Md5:    0488faca4c19046b94d07c3ee83cf9d6
Sha1:   02fb8c5e4c3d113f310651a4d021aecc68f79d54
Sha256: a3fe67e3549fdbc5819762b43c7efd93b1caea734f87a33c909a4e4b2ba4e32b
                                        
                                            GET /dr2?srn=bb_zet_java_is_5&utm_source=bb_zet&utm_campaign=11579472&clickid=1623880478888514040 HTTP/1.1 
Host: zetbrtr1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clckads.com/?sid=35574&site_id=PEK2FGMHFV&conv_id=us7fzfy16jcvkzoch2ts

                                         
                                         37.49.225.129
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: http://zetbrtr1.com:80/idr?srn=bb_zet_java_is_5&utm_source=bb_zet&utm_campaign=11579472&clickid=1623880478888514040
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=0ehiaisyztft1jyfwqphu3tp; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:52 GMT
Content-Length: 244


--- Additional Info ---
Magic:  HTML document text
Size:   244
Md5:    45ca0f1b3a1771470375b68c124bb97c
Sha1:   a8f176336b2a7e934b935e825a8d77acb90525b1
Sha256: 9db6b4f30e592f00d28b5cb9c1d58e397735364c56ec27c0a52cd8b1ff701a67
                                        
                                            GET /idr?srn=bb_zet_java_is_5&utm_source=bb_zet&utm_campaign=11579472&clickid=1623880478888514040 HTTP/1.1 
Host: zetbrtr1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clckads.com/?sid=35574&site_id=PEK2FGMHFV&conv_id=us7fzfy16jcvkzoch2ts
Cookie: ASP.NET_SessionId=0ehiaisyztft1jyfwqphu3tp

                                         
                                         37.49.225.129
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: http://3q.disownshatchrif.download/438n/111519/smartrt/?srn=bb_zet_java_is_5&utm_source=bb_zet&utm_campaign=11579472&clickid=1623880478888514040&
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:52 GMT
Content-Length: 278


--- Additional Info ---
Magic:  HTML document text
Size:   278
Md5:    126d91137a396cd548061d2c31c4c835
Sha1:   adefb622e824b83367691f726d365cb1493c5f0d
Sha256: 2719ab8b2783d4848ad866c440092c5bae574ebd94bdeb269dd26b1d6bf6cffa
                                        
                                            GET /438n/111519/smartrt/?srn=bb_zet_java_is_5&utm_source=bb_zet&utm_campaign=11579472&clickid=1623880478888514040& HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clckads.com/?sid=35574&site_id=PEK2FGMHFV&conv_id=us7fzfy16jcvkzoch2ts

                                         
                                         37.49.225.129
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: /111519/2133/gnp/4zpu
Server: Microsoft-IIS/8.5
P3P: CP='Potato'
Set-Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:52 GMT
Content-Length: 138


--- Additional Info ---
Magic:  HTML document text
Size:   138
Md5:    fb3cd9058b4ea34fa73221cff5243e4b
Sha1:   072e7e30e6c9f943bf416f3de33b4fc69683cbbd
Sha256: 0f9e2563eb83fe3d6756df1d74f49c29d70a2415a309894afd32cd02c592c6be
                                        
                                            GET /111519/2133/gnp/4zpu HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clckads.com/?sid=35574&site_id=PEK2FGMHFV&conv_id=us7fzfy16jcvkzoch2ts
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 32814


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   32814
Md5:    517baad67e7f18fd6ad4684e8291a1bb
Sha1:   d35636269398cce85fe5c7f186aeb65a02316a19
Sha256: 9d017684c28a89b6114b32eb89688f89a0f03c4ffea1b978998eb0902f10abeb

Alerts:
  urlquery:
    - Fake software update
    - Fake software update
    - Fake software update
  IDS:
    - ET CURRENT_EVENTS SOCENG Fake Update/Installer ForceDL Template Nov 03 2017
                                        
                                            GET /ajax/libs/jquery/1.8.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu

                                         
                                         216.58.207.202
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33396
Date: Wed, 09 May 2018 05:33:58 GMT
Expires: Thu, 09 May 2019 05:33:58 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 233156


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33396
Md5:    dcbc552778305133e394afce2e9bf721
Sha1:   3fbecf315de38a54bf0c7cff631c6f8c1bb25505
Sha256: c2c6434e716fdb0254ffd7b34dcbc5b24fd22d511d41cca99f84b75ed6bc3ff2
                                        
                                            GET /Content/installer_css?v=_JfUKt2235VBDROysvy-geeSoFUQLeERl3VNLwRqVjg1 HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Cache-Control: public
Expires: Sat, 11 May 2019 22:19:56 GMT
Last-Modified: Fri, 11 May 2018 22:19:56 GMT
Vary: User-Agent
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 2731


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   2731
Md5:    38e525c5a8563c0b7f57f6aa424700ba
Sha1:   dc6bc76ce37b7aae2938cfcb9229dfcd01b7f226
Sha256: 3bb9273a426a0f38f2a206c579db0d24f1b3e8bd1951d7998b18b21e8efad1a8
                                        
                                            GET /Content/base_css?v=1d-1cfSqt6lOwl5heyrpAxjL1U7gghxeKvIiUv6U_MQ1 HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Cache-Control: public
Expires: Sat, 11 May 2019 22:19:46 GMT
Last-Modified: Fri, 11 May 2018 22:19:46 GMT
Vary: User-Agent
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 14851


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   14851
Md5:    177b8d19866d188bd800a3dd738c0a29
Sha1:   ccc87fcaf026331e478fb5e1960b5ea0ac34f0ec
Sha256: 2d7dd4d6e3748957bac988c43c39edc346b24cfa888d8756085992d731a6fafd
                                        
                                            GET /Scripts/dl.min.js HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Last-Modified: Thu, 03 May 2018 14:53:32 GMT
Accept-Ranges: bytes
Etag: "0fe1a81eee2d31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 863


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   863
Md5:    455457d0198a9924620c0fd498baae33
Sha1:   3d6e3f572c049ffa5cdc02c998544d937637f1e9
Sha256: 6ea0aa8f71f8148a32b07c732115e973d5d9e40fe1211e7577e39c0e9990c1a9
                                        
                                            GET /Scripts/helpers?v=jl0dnMa1Mj7nUjzvl4qPSaf1uYI7zmel6ZBZGpQuj0I1 HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Cache-Control: public
Expires: Sat, 11 May 2019 22:19:56 GMT
Last-Modified: Fri, 11 May 2018 22:19:56 GMT
Vary: User-Agent
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 7681


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   7681
Md5:    4e604ddd6c7525e79c82d43aac09b4ec
Sha1:   c74dbfab4c1bcbcc9c483561a49c4ef6fad17a7a
Sha256: 62fd34d2c1be2bb0bb61b54e12f72f5700df265a7ea418bbc0d1785e227630e6
                                        
                                            GET /Content/images/installer_button.jpg HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/Content/installer_css?v=_JfUKt2235VBDROysvy-geeSoFUQLeERl3VNLwRqVjg1
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Cache-Control: max-age=1800
Last-Modified: Thu, 13 Mar 2014 00:23:06 GMT
Accept-Ranges: bytes
Etag: "0d16567523ecf1:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 1851


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1851
Md5:    5d211f9206495b550cc4269be5da405c
Sha1:   9f24ea514edebf87aacfec4981fbf18e7700972e
Sha256: c85ebc9d6fa2c83f4cc94114d30a2d61cc207375478a7e0374590967fe1aa0d3
                                        
                                            GET /Content/images/firefox_download_hint.png HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=1800
Last-Modified: Wed, 12 Mar 2014 21:33:18 GMT
Accept-Ranges: bytes
Etag: "063e0ae3a3ecf1:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 72129


--- Additional Info ---
Magic:  PNG image, 840 x 326, 8-bit/color RGBA, non-interlaced
Size:   72129
Md5:    9417a22237c973c9193ad093a0aff6ec
Sha1:   79a6722ae541d87e2812bc5dc4d022e5d9174983
Sha256: 0c1d593b4d1ad9c8049eb8c1b1770dcc645ad1d5127c8764f034e0fb45561f23
                                        
                                            GET /Content/images/jv_background_nologo.png HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=1800
Last-Modified: Mon, 27 Nov 2017 17:14:28 GMT
Accept-Ranges: bytes
Etag: "0726b2ea367d31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 17797


--- Additional Info ---
Magic:  PNG image, 507 x 376, 8-bit/color RGBA, non-interlaced
Size:   17797
Md5:    9730ff9a0069e534eb6f739ab191f02b
Sha1:   7d1b41c9fc689bafb6030ed576d0ab00dc370f14
Sha256: 6687e3eceec082a8068c2028b09c9b2f05ede065847eb374d32007edd8c788d8
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: max-age=1800
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 1245


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1245
Md5:    5343c1a8b203c162a3bf3870d9f50fd4
Sha1:   04b5b886c20d88b57eea6d8ff882624a4ac1e51d
Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
                                        
                                            POST /Download/Refresh?lpm_id=2133&page=/111519/2133/gnp/4zpu HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: http://3q.disownshatchrif.download/111519/2133/gnp/4zpu
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

                                         
                                         37.49.225.129
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Cache-Control: private
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 3.0
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:54 GMT
Content-Length: 951


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   951
Md5:    0c0c099e025001ff37477554ab990c4a
Sha1:   77e9cab86234ad9581827227e624c41b8666be07
Sha256: fc1c326802bfa5771af6ec05aa7b43310091362a1c421ed04b13d1e5b8e4ebdb
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 3q.disownshatchrif.download
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASP.NET_SessionId=oxjcj2shcwue0bbkhrxzz3lq

                                         
                                         37.49.225.129
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: max-age=1800
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0
Date: Fri, 11 May 2018 22:19:56 GMT
Content-Length: 1245


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1245
Md5:    5343c1a8b203c162a3bf3870d9f50fd4
Sha1:   04b5b886c20d88b57eea6d8ff882624a4ac1e51d
Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f