Overview

URL paumanrunnes.gq/zu/index.html
IP195.20.48.2
ASNAS31624 Verotel International B.V.
Location Netherlands
Report completed2018-07-01 21:55:28 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-07-01 21:54:59 CEST 2 Client IP  35.186.233.234 ET POLICY HTTP Request to a *.tk domain
2018-07-01 21:54:59 CEST 2 Client IP  35.186.233.234 ET POLICY HTTP Request to a *.tk domain
2018-07-01 21:54:59 CEST 2 Client IP  35.186.233.234 ET POLICY HTTP Request to a *.tk domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-07-01 2 paumanrunnes.gq/zu/index.html Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 195.20.48.2

Date UQ / IDS / BL URL IP
2019-06-09 18:04:07 +0200
0 - 2 - 1 lola-147.cf/Cdscount0000000 195.20.48.2
2019-06-06 22:09:25 +0200
0 - 0 - 1 parsi-swingingpresympathy.gq/upload/8d95f7de3 (...) 195.20.48.2
2019-05-31 03:40:55 +0200
0 - 1 - 0 otoo-99.gq/pjx 195.20.48.2
2019-05-22 11:33:30 +0200
0 - 1 - 1 parsi-swingingpresympathy.gq/upload/8d95f7de3 (...) 195.20.48.2
2019-03-17 22:08:04 +0100
0 - 0 - 1 otoo-99.gq/xrr 195.20.48.2
2018-12-19 03:51:32 +0100
0 - 0 - 1 pigakix.gq/wpp 195.20.48.2
2018-10-19 08:35:53 +0200
0 - 3 - 0 pigakix.gq/wpp 195.20.48.2
2018-10-04 07:38:01 +0200
0 - 1 - 0 frederickcopen9isny.ga/ 195.20.48.2
2018-07-18 19:11:27 +0200
0 - 0 - 1 scoplit.ml/fear/duos/PvqDq929BSx_A_D_M1n_a.php 195.20.48.2
2018-07-02 06:51:20 +0200
0 - 5 - 1 paumanrunnes.gq/zu 195.20.48.2

Last 10 reports on ASN: AS31624 Verotel International B.V.

Date UQ / IDS / BL URL IP
2019-06-26 16:49:56 +0200
0 - 1 - 0 https://resolution-center-limited-policy-tld- (...) 195.20.51.108
2019-06-25 21:24:52 +0200
0 - 1 - 0 globalpay.tk 195.20.44.70
2019-06-25 20:48:27 +0200
0 - 0 - 0 helene.ga 195.20.55.54
2019-06-20 21:45:49 +0200
0 - 0 - 1 oberthurcs.gq 195.20.49.195
2019-06-20 21:34:18 +0200
0 - 1 - 1 midweekswifts.ga 195.20.54.29
2019-06-20 21:33:11 +0200
0 - 0 - 1 hdhsjjfjdgd.ga 195.20.53.4
2019-06-20 08:08:39 +0200
0 - 0 - 4 www.streamers.gq/ 195.20.55.36
2019-06-19 21:26:18 +0200
0 - 2 - 0 novelhypertensiontreatment.gq 195.20.55.185
2019-06-19 16:47:45 +0200
0 - 2 - 0 fortunetent.tk/ 195.20.44.53
2019-06-19 16:37:39 +0200
0 - 1 - 0 balliwood.ml 195.20.54.105

Last 1 reports on domain: paumanrunnes.gq

Date UQ / IDS / BL URL IP
2018-07-02 06:51:20 +0200
0 - 5 - 1 paumanrunnes.gq/zu 195.20.48.2


JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (35)


Request Response
                                        
                                            GET /zu/index.html HTTP/1.1 
Host: paumanrunnes.gq
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.20.48.2
HTTP/1.1 203 Non-Authoritative Information
Content-Type: text/html;charset=UTF-8
                                        
Server: nginx
Date: Sun, 01 Jul 2018 19:55:00 GMT
Content-Length: 653
Connection: keep-alive
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Set-Cookie: JSESSIONID=EED544379168BCD7264DB7BCA9C64819; Path=/; HttpOnly
X-Server: c68a60e9666f


--- Additional Info ---
Magic:  HTML document text
Size:   653
Md5:    d0ec7a59d335d00cdad735da480ec9b7
Sha1:   35720415a3d1b82f20adb0a08614f00e5ce02a9a
Sha256: df17345dc035d0e3c652137d39f20ec78e4863ffff9bd9d5e451e53642fd6c45

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: paumanrunnes.gq
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: JSESSIONID=EED544379168BCD7264DB7BCA9C64819

                                         
                                         195.20.48.2
HTTP/1.1 429 Too Many Requests
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sun, 01 Jul 2018 19:55:00 GMT
Content-Length: 178
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    403214dab1dc8abd38496301eff419c1
Sha1:   b4c91f28fc64e602d63ae40f9e8ec23f2cd73c45
Sha256: ac061aeb038d56f49ccd10f7684c8f20b7a75d965279217bdd9665c65992bbc9
                                        
                                            GET /p/?d=PAUMANRUNNES.GQ&i=77.40.129.123&c=47&ro=0&ref=unknown&_=1530474899111 HTTP/1.1 
Host: domain.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paumanrunnes.gq/zu/index.html

                                         
                                         217.115.151.99
HTTP/1.0 302 Found
Content-Type: text/html; charset=ISO-8859-1
                                        
Date: Sun, 01 Jul 2018 19:54:59 GMT
Server: Apache/1.3.41 (Unix) mod_perl/1.30
Location: http://www.dot.tk/
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paumanrunnes.gq/zu/index.html

                                         
                                         35.186.233.234
HTTP/1.1 302 Found
                                        
Server: nginx/1.11.9
Transfer-Encoding: chunked
Set-Cookie: mydottk_languagenr=0; domain=.dot.tk; path=/; expires=Mon, 02-Jul-2018 19:54:59 GMT dottyLn=en; domain=.dot.tk; path=/; expires=Mon, 02-Jul-2018 19:54:59 GMT wwwLn=en; domain=.dot.tk; path=/; expires=Mon, 02-Jul-2018 19:54:59 GMT
Date: Sun, 01 Jul 2018 19:54:59 GMT
Location: http://www.dot.tk/en/index.html?lang=en
Via: 1.1 google


--- Additional Info ---
                                        
                                            GET /en/index.html?lang=en HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://paumanrunnes.gq/zu/index.html
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:17:26 GMT
Content-Length: 24164
X-GUploader-UploadID: AEnB2UpY49MRZpn3F8kc48ASvKOj1_4JqvKn5nF7AWCNGAtLLB9KD3slP81BAsm0P33LV6HNhF6RooksXy5EJ6OyUDuv5BtmRt39Yo7QRlaL18MHg-DEXwA
Expires: Sun, 01 Jul 2018 20:17:26 GMT
Last-Modified: Wed, 08 Feb 2017 16:12:54 GMT
Etag: "c18547c6af07588201e6fb4c5c305553"
x-goog-generation: 1486570374609937
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 24164
Content-Language: en
x-goog-hash: crc32c=A/RRCw==, md5=wYVHxq8HWIIB5vtMXDBVUw==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 2253
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   24164
Md5:    c18547c6af07588201e6fb4c5c305553
Sha1:   9469da6afe1f452401d990e3f4b582cb3b530304
Sha256: 993dbb4fcd63aa077b64b6196526201741baa8d71e956c0db7930a1032fa5899
                                        
                                            GET /css/reset.css HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:04:58 GMT
Content-Length: 3924
X-GUploader-UploadID: AEnB2Ur8wQgtFQ5pGymTVn45hScW6o9MnVFDZ5_S1t-yBcYdSPdTurhUS6RhZfjpCel3kkwvgPSxTapXXiHgzihpIg7J8lbz4Es1QOBq3Qj6bhd_BA2MOyo
Expires: Sun, 01 Jul 2018 20:04:58 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:36 GMT
Etag: "8219336bd4c8c7266d6ee6d8cbbc57fd"
x-goog-generation: 1465472196758000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3924
Content-Language: en
x-goog-hash: crc32c=Dlg3aQ==, md5=ghkza9TIxyZtbubYy7xX/Q==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 3001
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  ASCII C program text, with very long lines
Size:   3924
Md5:    8219336bd4c8c7266d6ee6d8cbbc57fd
Sha1:   bfbd30e06fe1a5f4fcd84b3f77327d4bc32e4c0b
Sha256: a3216d8151c1701c2bb64a7c24f19e05a2e73eef994f3bfb54cc85d4fd093ef0

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /ajax/libs/jquery/2.0.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29440
Date: Tue, 26 Jun 2018 12:04:39 GMT
Expires: Wed, 26 Jun 2019 12:04:39 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 460220


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29440
Md5:    28af7f5e92a03473c5dce4c935ce3050
Sha1:   33d1ea00351b34426b7cdab04c41038b403b2016
Sha256: ac81a37b4a51234bcd7d53ad9b26513ca6a07b50a9aa4060791d37e528984a0c
                                        
                                            GET /css/availability.css HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:45:59 GMT
Content-Length: 22354
X-GUploader-UploadID: AEnB2UqJzGeSlIwbq7G5xAb_Dmmz0mgYcEyRuC_GFKSbEuJKa-sCf3F_dOyOVqTFk99I4Pt9d8OO7LJk3LReQMYEOqshd7UiodsndzmM03yDM_SUtqGw8eE
Expires: Sun, 01 Jul 2018 20:45:59 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:37 GMT
Etag: "86d246c9551d66a032950723f08ac7e1"
x-goog-generation: 1465472197621000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 22354
Content-Language: en
x-goog-hash: crc32c=RNiRqw==, md5=htJGyVUdZqAylQcj8IrH4Q==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 540
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   22354
Md5:    86d246c9551d66a032950723f08ac7e1
Sha1:   3f1a791aaa19aa0e898c1a7aa74694f579d09a24
Sha256: 176859b8b2c7587c8f2f59fd68a1842641ca4bc3be58e2e15b88d162d1bdfada
                                        
                                            GET /js/rotatingbg.js HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:32:40 GMT
Content-Length: 1751
X-GUploader-UploadID: AEnB2UqFw3ztAWpFIF2uaehOLr0DCzg2WCj-Un6BCyBZOd2Md6895tRfxrUtLtcWWIlf9KZyHxUZF_okJ9UjmEHWGklRZtfwDcVOthgmXsp1czWXDp7uBE0
Expires: Sun, 01 Jul 2018 20:32:40 GMT
Last-Modified: Wed, 08 Feb 2017 16:12:54 GMT
Etag: "313c0f5d884c7f780d69abc422ea0e44"
x-goog-generation: 1486570374978085
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1751
Content-Language: en
x-goog-hash: crc32c=qQ23fg==, md5=MTwPXYhMf3gNaavEIuoORA==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 1339
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1751
Md5:    313c0f5d884c7f780d69abc422ea0e44
Sha1:   a662cc07beded0473e46739737ce322f28442c19
Sha256: 0d0529bb9ba7a196880355c2f59828de90a09733065e08c98cd8e4f6f3758ffd

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /css/style.css HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:04:59 GMT
Content-Length: 20287
X-GUploader-UploadID: AEnB2Uorirj_uQ4qmX0SaHc1SrlCRoxYinirbuO1Q3zneeS-Mbenwbg4CK6RPV0mOH8JvBzC9dkOMb8NQ_YZhedx8DftAKkVQo94k-VU_hG4KuEm1cM_M8o
Expires: Sun, 01 Jul 2018 20:04:59 GMT
Last-Modified: Wed, 08 Feb 2017 16:12:54 GMT
Etag: "1a4bc294c01009244e93bc9981945932"
x-goog-generation: 1486570374566291
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 20287
Content-Language: en
x-goog-hash: crc32c=QtS1mQ==, md5=GkvClMAQCSROk7yZgZRZMg==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Cache-Control: max-age=3600,public
Age: 3000


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   20287
Md5:    1a4bc294c01009244e93bc9981945932
Sha1:   01a125067639cb5966291b33a5a77f2c38b4be33
Sha256: 14b25cff57af5967c41fd02971a342972037a5096f7c665b505e4b2e488ac333

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /images.v2/logo.png HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:16:04 GMT
Content-Length: 9309
X-GUploader-UploadID: AEnB2UqZkex5DH7tf_D58MQJg5oYVJn8hrW_An3fazk3lfI_jMMZZtcibrfF3WIxjjixeMryRKbuSoqBDcPYphi0Qk3FZnQzpKnRqD4gPAnxbwvgkBNA4uU
Expires: Sun, 01 Jul 2018 20:16:04 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:46 GMT
Etag: "cf869c0a6dbfa71c1981c35d85fd8053"
x-goog-generation: 1465472206459000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9309
Content-Language: en
x-goog-hash: crc32c=i689kw==, md5=z4acCm2/pxwZgcNdhf2AUw==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Age: 2335
Cache-Control: max-age=3600,public


--- Additional Info ---
Magic:  PNG image, 300 x 200, 8-bit/color RGBA, non-interlaced
Size:   9309
Md5:    cf869c0a6dbfa71c1981c35d85fd8053
Sha1:   b47d8e7d26cf0fc2989e79ada637ecf4a3df4328
Sha256: 8e03bc9d923ade686eb09696983c7a6961f75595178fda35681f5f561b03c5d1
                                        
                                            GET /ui/1.11.2/jquery-ui.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         205.185.208.52
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Sun, 01 Jul 2018 19:54:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 143891
Last-Modified: Fri, 24 Oct 2014 00:16:08 GMT
Server: nginx
Vary: Accept-Encoding
Etag: W/"54499a48-7296c"
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
X-HW: 1530474899.dop004.sk1.t,1530474899.cds046.sk1.c


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   143891
Md5:    b16c26534e05df2834c69fba35b073a0
Sha1:   5fbce9a8b255a80d81bc75c0b283648e45892898
Sha256: 7eb74a6bab695443b33a2c66445e5b2543c5b03e17179f3125f7c4eae902b350
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Jun 2018 08:38:24 GMT
Etag: D8EA18B3AAE737467C21ACDB9CD61FE3691A752B
X-OCSP-Responder-ID: rmdccaocsp8
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=131579
Expires: Tue, 03 Jul 2018 08:27:58 GMT
Date: Sun, 01 Jul 2018 19:54:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    f38a60e92f45b99ab9496b6975de0222
Sha1:   d8ea18b3aae737467c21acdb9cd61fe3691a752b
Sha256: 943f9bf38cd8e45340f5b57f78da0e821813e88a83e72bfe3ae6ee88ccd1c58a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Jun 2018 01:16:20 GMT
Etag: DF61F7B861582E831C910D3AC34DEB392101D125
X-OCSP-Responder-ID: rmdccaocsp23
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=105096
Expires: Tue, 03 Jul 2018 01:06:35 GMT
Date: Sun, 01 Jul 2018 19:54:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    c4472b5fab7464cd44ce1271b09cc69e
Sha1:   df61f7b861582e831c910d3ac34deb392101d125
Sha256: 8e80cc0cd6ab2b89a6b5254c867ba353a32652db367a68e249913006ba44fe95
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Jun 2018 01:16:20 GMT
Etag: 7DC3F990792BA39EC52F61CF3501B846EAE66BF5
X-OCSP-Responder-ID: rmdccaocsp20
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=105028
Expires: Tue, 03 Jul 2018 01:05:27 GMT
Date: Sun, 01 Jul 2018 19:54:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7dac5f8c435b606117add4e1e2bdbede
Sha1:   7dc3f990792ba39ec52f61cf3501b846eae66bf5
Sha256: aa714e8e890a12d169aca06f03f0bffa88a240a164360a0e2a70448b37488a46
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 01 Jul 2018 19:54:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c9514453ee9c0ed7c6d9a72339909441
Sha1:   58b4491d25a331891e9d36e33158d91533135e4a
Sha256: 5d0a7bd5746334734916d5ce31f8e20f53d66e536c62f2acea57541068f29884
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 01 Jul 2018 19:54:59 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Date: Sun, 01 Jul 2018 19:54:59 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1518903977"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 4292
Last-Modified: Sat, 17 Feb 2018 21:46:17 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4292
Md5:    18902a41533d4e631e65a8d0c1f61282
Sha1:   c956a0dc434b90d06c2528b76c4e5273a30f9ac0
Sha256: 09b434cbaea55c0879a0598d4e3ae8b7ecd3a3a1edd8a995e600f4064ceb5454
                                        
                                            GET /css?family=Lato:400,300,100,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sun, 01 Jul 2018 19:54:59 GMT
Date: Sun, 01 Jul 2018 19:54:59 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   267
Md5:    c19afbae780ee2fe8eac1f4df92c4430
Sha1:   2ea8d0445eb1f296ee6cef2adda4df8c87b25f5c
Sha256: 4f4a041e6f1e1576d1e9ee6e41de110a32ece8633b52d9a31edcdfacf9d70b60
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Jun 2018 13:30:47 GMT
Etag: 72574D18D9470D9B314D1470682E00900B10F709
X-OCSP-Responder-ID: rmdccaocsp18
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=149145
Expires: Tue, 03 Jul 2018 13:20:44 GMT
Date: Sun, 01 Jul 2018 19:54:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8eb96a748dd39d5e38876f2f87256b03
Sha1:   72574d18d9470d9b314d1470682e00900b10f709
Sha256: 1f4a5912fd49de5bc486f3abda4ed3c629491125617aa82e8bb0d0c9d7a292ec
                                        
                                            GET /includes/domains/fn-available.js HTTP/1.1 
Host: my.freenom.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         52.212.70.141
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.10.3
Date: Sun, 01 Jul 2018 19:55:00 GMT
Content-Length: 3274
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache="set-cookie"
Content-Encoding: gzip
Etag: "4738-52fd0319366c0-gzip"
Last-Modified: Wed, 06 Apr 2016 12:35:15 GMT
Set-Cookie: AWSELB=BB755F330E44FE27E970EAECFCC78F629EB1F82E68CB93B56D804F0F511C3B74F1C430525E0202DF70A8B5C0D9E31B198842717239B5BA9B18B99F611C4B22E5CA841ED9EF;PATH=/
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3274
Md5:    03953330cebf856bbbbbc2cca2903aad
Sha1:   473eb6841d3fe8e2236cdff333d6561534f08cd7
Sha256: c9e483ae5483b33f06ca62651b9aae16e762a331c47606dc0f6f5ed292b8b0ca
                                        
                                            GET /external/jsrender.min.js HTTP/1.1 
Host: my.freenom.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         52.212.70.141
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.10.3
Date: Sun, 01 Jul 2018 19:55:00 GMT
Content-Length: 16069
Connection: keep-alive
x-amz-id-2: avYALoaHwAMFrilq3tsz357MHzatIzIQ0LL9PxuxNflp8Aq2T0S8LbiC3CbiBNP7EM2xnWD11io=
x-amz-request-id: 60C08DA6F9A1E813
Last-Modified: Wed, 16 Mar 2016 12:40:52 GMT
Etag: "36e17e14ff43dfd5349677522b3821a3"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C++ program text, with very long lines
Size:   16069
Md5:    36e17e14ff43dfd5349677522b3821a3
Sha1:   1eef675b40347067eefb8fd55e9b899fa9cd4216
Sha256: 5bf5e6b88eefc8f7ef5f4c00f9496657f3be732fd74c10a895d9a24c9a753e48
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: paumanrunnes.gq
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: JSESSIONID=EED544379168BCD7264DB7BCA9C64819

                                         
                                         195.20.48.2
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sun, 01 Jul 2018 19:55:03 GMT
Content-Length: 2048
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Server: 75c40ea02c46
Cache-Control: no-cache


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   2048
Md5:    9d88adf1b48d0395e690bd17e5625851
Sha1:   1874190d30c93ca117b3b1d65f150be38ec55a56
Sha256: 817d5d40f1addc3a4247e62aaf58400a7a81830addc9692b2ba65dd5068f02c8
                                        
                                            GET /ajax/libs/jquery/1.6.4/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /ajax/libs/jquery/1.6.4/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 32222
Date: Thu, 07 Jun 2018 09:20:16 GMT
Expires: Fri, 07 Jun 2019 09:20:16 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 2111704
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32222
Md5:    a015b68cda88f520df0928508a54a7c0
Sha1:   a848deb0d23d4d7d9284713d63c166b83224ef79
Sha256: cbbe607200143bcb0190054543cd723ec1317aac43ab5f03a291dc9ab6163074
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sun, 01 Jul 2018 18:19:59 GMT
Expires: Sun, 01 Jul 2018 20:19:59 GMT
Last-Modified: Fri, 18 May 2018 01:10:24 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14386
Age: 5722
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14386
Md5:    b3de885583a477d4e31568948d6bebd7
Sha1:   2ce8d853244dde551c41d5207d6f71c567bde8c6
Sha256: e1bb5aa555a0d875e2a67884ceaa0629e08994a8aabadc2fac5b6915793dbf75
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 01 Jul 2018 19:55:21 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    7eb5f3eb1c2a4effe5c4db73d4af4280
Sha1:   ea114ab54fd68f4ce138ef436bd88cb9477fb2d0
Sha256: 92e11d77fa5f48c0097cd9aeab93e76b54045786b69a4a78ade107f1c2f4dc77
                                        
                                            GET /r/collect?v=1&_v=j68&a=417848127&t=pageview&_s=1&dl=http%3A%2F%2Fwww.dot.tk%2Fen%2Findex.html%3Flang%3Den&dr=http%3A%2F%2Fpaumanrunnes.gq%2Fzu%2Findex.html&ul=en-us&de=UTF-8&dt=Dot%20TK%20-%20Find%20a%20new%20FREE%20domain&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=1788249504&gjid=1943837834&cid=1691490033.1530474922&tid=UA-29857775-3&_gid=1961360227.1530474922&_r=1&z=36164747 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Sun, 01 Jul 2018 19:55:21 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /s/lato/v14/S6u9w4BMUTPHh7USSwiPHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,300,100,700
Origin: http://www.dot.tk

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29852
Date: Fri, 22 Jun 2018 15:25:04 GMT
Expires: Sat, 22 Jun 2019 15:25:04 GMT
Last-Modified: Wed, 11 Oct 2017 18:24:02 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 793817
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   29852
Md5:    ba2452bdc790a4fee05202eac3c092b3
Sha1:   6382414b3b2df2fb2946e09d5909e27afdadb7dd
Sha256: 8084a57f30a2d3d730b5d25b8d2ccb18369d90d333144231704418d555c20c0f
                                        
                                            GET /images.v2/030.jpg HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.dot.tk/en/index.html?lang=en
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en; _ga=GA1.2.1691490033.1530474922; _gid=GA1.2.1961360227.1530474922; _gat=1

                                         
                                         35.186.233.234
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:23:38 GMT
Content-Length: 440783
X-GUploader-UploadID: AEnB2UqRkjKRUFTV_bUBHeBqjqCGRT7qZBAjebMkQZH-ltENGz8PpwbA36YVi6xEjBFD9cni9Bzm7GXYcVA9uLzYT5rX8cEJSzSNVErm4uhScLbbD7lM7NI
Expires: Sun, 01 Jul 2018 20:23:38 GMT
Last-Modified: Thu, 09 Jun 2016 11:36:47 GMT
Etag: "ad9b137efee915874af760118171fc7b"
x-goog-generation: 1465472207929000
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 440783
Content-Language: en
x-goog-hash: crc32c=b0q34g==, md5=rZsTfv7pFYdK92ARgXH8ew==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Via: 1.1 google
Cache-Control: max-age=3600,public
Age: 1903


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   440783
Md5:    ad9b137efee915874af760118171fc7b
Sha1:   44f8491b68ffce85e6ff8e4ad1a4b38e68952e23
Sha256: d6b2eef17abd6764bd1c2ebd3a30c544cfb9ffb3ac7c5d3a640d3ff2ac0e0028
                                        
                                            GET /s/lato/v14/S6u9w4BMUTPHh6UVSwiPHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,300,100,700
Origin: http://www.dot.tk

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27848
Date: Wed, 27 Jun 2018 11:07:42 GMT
Expires: Thu, 27 Jun 2019 11:07:42 GMT
Last-Modified: Wed, 11 Oct 2017 18:24:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 377260
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   27848
Md5:    96759e32fdc800c78b527a3e53fe2be6
Sha1:   e12403cfe60f852a8fbbe05d84d58d33c6c2a6b9
Sha256: 60c05ee47e768315541e487d11b92eec54a7f5336f84cecc8b5825c87bb70053
                                        
                                            GET /font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css
Origin: http://www.dot.tk

                                         
                                         209.197.3.15
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Sun, 01 Jul 2018 19:55:22 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Etag: "1518903988"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 44433
Last-Modified: Sat, 17 Feb 2018 21:46:28 GMT
X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   44433
Md5:    122359bdfee05a5b4ce0f19b244e85bb
Sha1:   35d57f1553391ddfdb1525ffd37ca902f79d2d7e
Sha256: 3e8f404d881f687fdcc53a1a7f8c59d3bdfa201c14e3d8470fb55eb99c4fdc4a
                                        
                                            GET /s/lato/v14/S6uyw4BMUTPHjx4wWA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,300,100,700
Origin: http://www.dot.tk

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28412
Date: Thu, 28 Jun 2018 11:15:04 GMT
Expires: Fri, 28 Jun 2019 11:15:04 GMT
Last-Modified: Wed, 11 Oct 2017 18:23:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 290418
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   28412
Md5:    62fb51e9e645f63599238881b9de15dd
Sha1:   82b144e3c8b4ff40aeca34ddf7bc35985311b90e
Sha256: 5aeb07f9980663c2501c9620371e11ae7aa6e320d94dd753d0ef56d8308c74b3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en; _ga=GA1.2.1691490033.1530474922; _gid=GA1.2.1961360227.1530474922; _gat=1

                                         
                                         35.186.233.234
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.11.9
Date: Sun, 01 Jul 2018 19:55:22 GMT
Content-Length: 185
Location: http://www.dot.tk/
Via: 1.1 google


--- Additional Info ---
Magic:  HTML document text
Size:   185
Md5:    d1c1428bc0662ffe1841e05e006406f8
Sha1:   d78d57d3ef1731a52e3ca18e385980e3c5e9bdf1
Sha256: d93ecffa2aa7610bc7b83d9f7e0fa1f486055e8fb5751d9073058d60d8d16063
                                        
                                            GET / HTTP/1.1 
Host: www.dot.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: mydottk_languagenr=0; dottyLn=en; wwwLn=en; _ga=GA1.2.1691490033.1530474922; _gid=GA1.2.1961360227.1530474922; _gat=1

                                         
                                         35.186.233.234
HTTP/1.1 302 Found
                                        
Server: nginx/1.11.9
Transfer-Encoding: chunked
Set-Cookie: mydottk_languagenr=0; domain=.dot.tk; path=/; expires=Mon, 02-Jul-2018 19:55:23 GMT dottyLn=en; domain=.dot.tk; path=/; expires=Mon, 02-Jul-2018 19:55:23 GMT wwwLn=en; domain=.dot.tk; path=/; expires=Mon, 02-Jul-2018 19:55:23 GMT
Date: Sun, 01 Jul 2018 19:55:23 GMT
Location: http://www.dot.tk/en/index.html?lang=en
Via: 1.1 google


--- Additional Info ---