Overview

URL ads.shorte.st/ads.php?key=2ea5b261f06ca771033a5fa9e22493f1
IP78.140.188.188
ASNAS35415 Webzilla B.V.
Location Netherlands
Report completed2019-01-15 22:06:00 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-01-15 2 rotumal.com/4/1241630/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 78.140.188.188

Date UQ / IDS / BL URL IP
2019-02-22 14:56:06 +0100
0 - 0 - 1 ads.shorte.st/ads.php?key=2ea5b261f06ca771033 (...) 78.140.188.188
2019-02-08 09:21:35 +0100
0 - 0 - 0 https://cdn.shorte.st/link-converter.min.js 78.140.188.188
2019-01-27 19:21:00 +0100
0 - 0 - 1 ads.shorte.st/ads.php?key=2ea5b261f06ca771033 (...) 78.140.188.188
2019-01-18 08:18:09 +0100
0 - 1 - 1 ads.shorte.st/ads.php?key=2ea5b261f06ca771033 (...) 78.140.188.188
2018-11-30 19:23:56 +0100
0 - 0 - 1 ads.shorte.st/ads.php?key=bf822edaeefaa2a510a (...) 78.140.188.188
2018-11-13 14:44:01 +0100
0 - 0 - 0 shorte.st 78.140.188.188
2018-10-22 06:14:57 +0200
0 - 1 - 0 ads.shorte.st/ads.php?key=2ea5b261f06ca771033 (...) 78.140.188.188
2018-10-15 20:04:56 +0200
0 - 0 - 0 shorte.st 78.140.188.188
2018-10-15 13:17:39 +0200
0 - 0 - 0 cdn.shorte.st/link-converter.min.js 78.140.188.188
2018-10-15 13:11:31 +0200
0 - 0 - 0 ads.shorte.st/ads.php?key=2ea5b261f06ca771033 (...) 78.140.188.188

Last 10 reports on ASN: AS35415 Webzilla B.V.

Date UQ / IDS / BL URL IP
2019-07-01 09:07:51 +0200
0 - 0 - 0 https://pushazam.com 88.85.66.133
2019-07-01 02:08:27 +0200
0 - 0 - 0 Hilltopads.net 88.85.94.227
2019-06-30 18:03:30 +0200
0 - 0 - 0 https://comdexcipa.info/bI3JVK0LPM2NlOjPPQXRB (...) 88.85.94.232
2019-06-30 17:58:41 +0200
0 - 0 - 0 burporess.pro/bS3TVU0VPW2XlYjZPaXbBczdJemf9g0 (...) 88.85.94.229
2019-06-30 17:53:56 +0200
0 - 0 - 0 https://123freemovie.femvxitrquzretxzdq.info/ 88.85.94.236
2019-06-30 13:52:46 +0200
0 - 0 - 0 https://pornoid.notificationallow.com/ 88.85.94.227
2019-06-30 13:49:33 +0200
0 - 0 - 0 https://notificationallow.com/cbHNViz.aGEF5Lv (...) 88.85.94.227
2019-06-30 13:44:55 +0200
0 - 0 - 0 https://amliands.info/cBHlV/zVaREd5wvxdoGdlSm (...) 88.85.94.238
2019-06-30 13:23:27 +0200
0 - 0 - 1 https://deloplen.com/ 206.54.165.3
2019-06-30 13:16:32 +0200
0 - 0 - 0 https://eneritchmax.info/bF3GVH0IPJ2KlLjMPNXO (...) 88.85.94.237

No other reports on domain: shorte.st



JavaScript

Executed Scripts (7)


Executed Evals (2)

#1 JavaScript::Eval (size: 5318, repeated: 1) - SHA256: a6a76a343c867c0e8b0ef6339c7fec48580bc2c1e6c0ce80cd805151f90ad6f4

                                        function QCDone(d) {
    try {
        document.getElementById('ci_SW').value = d.SW
    } catch (e) {}
    try {
        document.getElementById('ci_SH').value = d.SH
    } catch (e) {}
    try {
        document.getElementById('ci_SAH').value = d.SAH
    } catch (e) {}
    try {
        document.getElementById('ci_WX').value = d.WX
    } catch (e) {}
    try {
        document.getElementById('ci_WY').value = d.WY
    } catch (e) {}
    try {
        document.getElementById('ci_WW').value = d.WW
    } catch (e) {}
    try {
        document.getElementById('ci_WH').value = d.WH
    } catch (e) {}
    try {
        document.getElementById('ci_CW').value = d.CW
    } catch (e) {}
    try {
        document.getElementById('ci_WIW').value = d.WIW
    } catch (e) {}
    try {
        document.getElementById('ci_WIH').value = d.WIH
    } catch (e) {}
    try {
        document.getElementById('ci_WFC').value = d.WFC
    } catch (e) {}
    try {
        document.getElementById('ci_PL').value = d.PL
    } catch (e) {}
    try {
        document.getElementById('ci_DRF').value = d.DRF
    } catch (e) {}
    try {
        document.getElementById('ci_NP').value = d.NP
    } catch (e) {}
    try {
        document.getElementById('ci_PT').value = d.PT
    } catch (e) {}
    try {
        document.getElementById('ci_NB').value = d.NB
    } catch (e) {}
    try {
        document.getElementById('ci_NG').value = d.NG
    } catch (e) {}
    try {
        document.getElementById('ci_DM').value = d.DM
    } catch (e) {}
    try {
        document.getElementById('ci_CF').value = d.CF
    } catch (e) {}
    try {
        document.getElementById('ci_NW').value = d.NW
    } catch (e) {}
    try {
        document.getElementById('ci_HIL').value = d.HIL
    } catch (e) {}
}
var QC = {};
try {
    QC.SW = window.screen.width;
    QC.SH = window.screen.height
} catch (e) {
    QC.SW = -1;
    QC.SH = -1
}
try {
    QC.SAH = window.screen.availHeight
} catch (e) {
    QC.SAH = -1
}
try {
    QC.WX = window.screenX;
    QC.WY = window.screenY
} catch (e) {
    QC.WX = -1;
    QC.WY = -1
}
try {
    QC.WW = window.outerWidth;
    QC.WH = window.outerHeight
} catch (e) {
    QC.WW = -1;
    QC.WH = -1
}
try {
    QC.WIW = window.innerWidth;
    QC.WIH = window.innerHeight
} catch (e) {
    QC.WIW = -1;
    QC.WIH = -1
}
try {
    QC.CW = document.documentElement.clientWidth
} catch (e) {
    QC.CW = -1
}
try {
    QC.WFC = window.top.frames.length
} catch (e) {
    QC.WFC = -1
}
try {
    QC.PL = document.location.href
} catch (e) {
    QC.PL = ''
}
try {
    QC.DRF = document.referrer
} catch (e) {
    QC.DRF = ''
}
try {
    QC.NP = (!(navigator.plugins instanceof PluginArray) || navigator.plugins.length == 0) ? 0 : 1
} catch (e) {
    QC.NP = -1
}
try {
    QC.PT = window.callPhantom !== undefined || window._phantom !== undefined ? 1 : 0
} catch (e) {
    QC.PT = -1
}
try {
    QC.NB = typeof navigator.sendBeacon === "function" ? 1 : 0
} catch (e) {
    QC.NB = -1
}
try {
    QC.NG = navigator.geolocation !== undefined ? 1 : 0
} catch (e) {
    QC.NG = -1
}
try {
    QC.NW = 'webdriver' in navigator ? 1 : 0
} catch (e) {
    QC.NW = -1
}
QC.CF = 0;
try {
    var FlashDetect = new function() {
        var self = this;
        self.installed = false;
        self.raw = "";
        self.major = -1;
        self.minor = -1;
        self.revision = -1;
        self.revisionStr = "";
        var activeXDetectRules = [{
            "name": "ShockwaveFlash.ShockwaveFlash.7",
            "version": function(obj) {
                return getActiveXVersion(obj)
            }
        }, {
            "name": "ShockwaveFlash.ShockwaveFlash.6",
            "version": function(obj) {
                var version = "6,0,21";
                try {
                    obj.AllowScriptAccess = "always";
                    version = getActiveXVersion(obj)
                } catch (err) {}
                return version
            }
        }, {
            "name": "ShockwaveFlash.ShockwaveFlash",
            "version": function(obj) {
                return getActiveXVersion(obj)
            }
        }];
        var getActiveXVersion = function(activeXObj) {
            var version = -1;
            try {
                version = activeXObj.GetVariable("\$version")
            } catch (err) {}
            return version
        };
        var getActiveXObject = function(name) {
            var obj = -1;
            try {
                obj = new ActiveXObject(name)
            } catch (err) {
                obj = {
                    activeXError: true
                }
            }
            return obj
        };
        var parseActiveXVersion = function(str) {
            var versionArray = str.split(",");
            return {
                "raw": str,
                "major": parseInt(versionArray[0].split(" ")[1], 10),
                "minor": parseInt(versionArray[1], 10),
                "revision": parseInt(versionArray[2], 10),
                "revisionStr": versionArray[2]
            }
        };
        var parseStandardVersion = function(str) {
            var descParts = str.split(/ +/);
            var majorMinor = descParts[2].split(/\./);
            var revisionStr = descParts[3];
            return {
                "raw": str,
                "major": parseInt(majorMinor[0], 10),
                "minor": parseInt(majorMinor[1], 10),
                "revisionStr": revisionStr,
                "revision": parseRevisionStrToInt(revisionStr)
            }
        };
        var parseRevisionStrToInt = function(str) {
            return parseInt(str.replace(/[a-zA-Z]/g, ""), 10) || self.revision
        };
        self.majorAtLeast = function(version) {
            return self.major >= version
        };
        self.minorAtLeast = function(version) {
            return self.minor >= version
        };
        self.revisionAtLeast = function(version) {
            return self.revision >= version
        };
        self.versionAtLeast = function(major) {
            var properties = [self.major, self.minor, self.revision];
            var len = Math.min(properties.length, arguments.length);
            for (i = 0; i < len; i++) {
                if (properties[i] >= arguments[i]) {
                    if (i + 1 < len && properties[i] == arguments[i]) {
                        continue
                    } else {
                        return true
                    }
                } else {
                    return false
                }
            }
        };
        self.FlashDetect = function() {
            if (navigator.plugins && navigator.plugins.length > 0) {
                var type = 'application/x-shockwave-flash';
                var mimeTypes = navigator.mimeTypes;
                if (mimeTypes && mimeTypes[type] && mimeTypes[type].enabledPlugin && mimeTypes[type].enabledPlugin.description) {
                    var version = mimeTypes[type].enabledPlugin.description;
                    var versionObj = parseStandardVersion(version);
                    self.raw = versionObj.raw;
                    self.major = versionObj.major;
                    self.minor = versionObj.minor;
                    self.revisionStr = versionObj.revisionStr;
                    self.revision = versionObj.revision;
                    self.installed = true
                }
            } else if (navigator.appVersion.indexOf("Mac") == -1 && window.execScript) {
                var version = -1;
                for (var i = 0; i < activeXDetectRules.length && version == -1; i++) {
                    var obj = getActiveXObject(activeXDetectRules[i].name);
                    if (!obj.activeXError) {
                        self.installed = true;
                        version = activeXDetectRules[i].version(obj);
                        if (version != -1) {
                            var versionObj = parseActiveXVersion(version);
                            self.raw = versionObj.raw;
                            self.major = versionObj.major;
                            self.minor = versionObj.minor;
                            self.revision = versionObj.revision;
                            self.revisionStr = versionObj.revisionStr
                        }
                    }
                }
            }
        }()
    };
    if (FlashDetect.major > 0) {
        QC.CF = 1
    }
} catch (e) {
    QC.CF = 2
}
try {
    QCDone(QC)
} catch (e) {
    console.log(e)
}
                                    

#2 JavaScript::Eval (size: 613, repeated: 1) - SHA256: 7d79d7f17504a461320f713188b82fa5a1fdfd154969db17892e75294035c861

                                        var a;
var b;
var ix;
if (typeof window.innerWidth != 'undefined') {
    a = window.innerWidth;
    b = window.innerHeight
} else if (typeof document.documentElement != 'undefined' && typeof document.documentElement.clientWidth != 'undefined' && document.documentElement.clientWidth != 0) {
    a = document.documentElement.clientWidth;
    b = document.documentElement.clientHeight
} else {
    a = document.getElementsByTagName('body')[0].clientWidth;
    b = document.getElementsByTagName('body')[0].clientHeight
}
try {
    ix = window.self !== window.top ? 1 : 0
} catch (e) {
    ix = 2
}
document.getElementById('a').value = a;
document.getElementById('b').value = b;
document.getElementById('ix').value = ix;
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 4, repeated: 1) - SHA256: 023e33504ab909cf87a6f4e4e545090e40bdc0a2153e5b68b19f7fad2b737904

                                        2019
                                    


HTTP Transactions (26)


Request Response
                                        
                                            GET /ads.php?key=2ea5b261f06ca771033a5fa9e22493f1 HTTP/1.1 
Host: ads.shorte.st
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         78.140.188.188
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Transfer-Encoding: chunked
X-Powered-By: PHP/5.6.37-0+deb8u1
Cache-Control: max-age=0, must-revalidate, no-store, private, s-maxage=0
Location: https://rotumal.com/4/1241630/
Date: Tue, 15 Jan 2019 21:05:27 GMT
X-Server-ID: shn11
X-UA-Compatible: IE=Edge


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   5772
Md5:    b1c7457a0dd634505aa2f728b30dc4f9
Sha1:   54882cf406aea4f52cddd6ede00b59735b7b0cbf
Sha256: 9562b0c64426d0fc4a41f9a785754263b5e22ed873c27b2b0751b9d6ba4197fc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "01B5F93AE660BCDC03565128A981B571BCFF89823C1FAFDD955337D6E913073A"
Last-Modified: Sun, 13 Jan 2019 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=27545
Expires: Wed, 16 Jan 2019 04:44:32 GMT
Date: Tue, 15 Jan 2019 21:05:27 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    e4c6dca2c06511b805457213a40670c3
Sha1:   5a9f63f61390a9c2769b3cab7a7108f833557b7b
Sha256: 01b5f93ae660bcdc03565128a981b571bcff89823c1fafdd955337d6e913073a
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.113
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Mon, 14 Jan 2019 10:44:50 GMT
Etag: "b458400e4281cf747dc2a59c5f2d60db32793f58"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=5375
Expires: Tue, 15 Jan 2019 22:35:02 GMT
Date: Tue, 15 Jan 2019 21:05:27 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    bf1a59a68607376797d572ac9175714d
Sha1:   b458400e4281cf747dc2a59c5f2d60db32793f58
Sha256: bc590833fa94470cdd1c5375b17b89ff8e19197c3b8f0b553392f887145e7710
                                        
                                            GET /4/1241630/ HTTP/1.1 
Host: rotumal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         188.72.213.220
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Tue, 15 Jan 2019 21:05:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *
Pragma: no-cache, no-cache
Cache-Control: private, max-age=0, no-cache, no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 26 Jul 1997 05:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Set-Cookie: SeenToday=1; expires=Wed, 16-Jan-2019 21:05:27 GMT; Max-Age=86400; path=/ OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Wed, 16-Jan-2019 21:05:27 GMT; Max-Age=86400; path=/ oaidts=1547586327; expires=Wed, 15-Jan-2020 21:05:27 GMT; Max-Age=31536000; path=/ OAID=9777c328f59624b3934d2c6cc396e5c8; expires=Wed, 15-Jan-2020 21:05:27 GMT; Max-Age=31536000; path=/ OAID=9777c328f59624b3934d2c6cc396e5c8; expires=Wed, 15-Jan-2020 21:05:27 GMT; Max-Age=31536000; path=/ OFR=%7B%223008%22%3A1%7D; expires=Fri, 10-Jan-2020 21:05:27 GMT; Max-Age=31104000; path=/ exsdsf=1547586327 pbk3=b944021357be07be7aa84ef87b448c076646832663964618995; expires=Tue, 15-Jan-2019 21:15:27 GMT; Max-Age=600
P3P: CP="CUR ADM OUR NOR STA NID"
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4598
Md5:    612d8bf9e481952d67056db2aeab9cac
Sha1:   45c5fe0d2dfc08dc9c12beb34c8df61ce3b1697e
Sha256: d223913be06aba69f069105410fcab0f2dda02ae36efe580f985e17d39499ece

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 11 Jan 2019 03:06:50 GMT
Etag: 2850FA12AC0D162DFF607C7EFAF85845E7E1D981
X-OCSP-Responder-ID: mcdpcaocsp7
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=193867
Expires: Fri, 18 Jan 2019 02:56:34 GMT
Date: Tue, 15 Jan 2019 21:05:27 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    9c742cfb24ada46d50f750fc2c9f33a3
Sha1:   2850fa12ac0d162dff607c7efaf85845e7e1d981
Sha256: a9455f078e376bcb0e6e340a93330e31cb43275592a3d66d4aa83e6278315486
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 09 Jan 2019 12:16:54 GMT
Etag: 02F9B30EAEF0F028F6EE3427C3F699783E764EC5
X-OCSP-Responder-ID: mcdpcaocsp15
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=54089
Expires: Wed, 16 Jan 2019 12:06:56 GMT
Date: Tue, 15 Jan 2019 21:05:27 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    a6da0886648821eddccad7f6544afb68
Sha1:   02f9b30eaef0f028f6ee3427c3f699783e764ec5
Sha256: aec997fcd93eb53205a5e430f398e59a536a4b9ac5e29c15bfe3e643e07e072f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 09 Jan 2019 12:16:54 GMT
Etag: 95BE75F0E4AA813FC03A85A43139108C1DE1A2C8
X-OCSP-Responder-ID: mcdpcaocsp4
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=54035
Expires: Wed, 16 Jan 2019 12:06:02 GMT
Date: Tue, 15 Jan 2019 21:05:27 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c4f25816d60da7ce6a444604e3620dc9
Sha1:   95be75f0e4aa813fc03a85a43139108c1de1a2c8
Sha256: aa1656ba91b335c8a33ad9e319fc167365d343d443819d4a5b1cd5dcc8a5bdb7
                                        
                                            GET /sc.php?zoneid=1241630&bannerid=2409859&OXLCA=1&clickid=109147574362968066 HTTP/1.1 
Host: trecurlik.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://rotumal.com/4/1241630/

                                         
                                         88.85.66.185
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 15 Jan 2019 21:05:27 GMT
Content-Length: 43
Connection: keep-alive
Timing-Allow-Origin: *, *
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: SeenToday=1; expires=Wed, 16-Jan-2019 21:05:27 GMT; Max-Age=86400; path=/ OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Wed, 16-Jan-2019 21:05:27 GMT; Max-Age=86400; path=/ oaidts=1547586327; expires=Wed, 15-Jan-2020 21:05:27 GMT; Max-Age=31536000; path=/ OAID=a4a9f915b3149613105f0f4345fe42fd; expires=Wed, 15-Jan-2020 21:05:27 GMT; Max-Age=31536000; path=/ _OXLCA[2409859]=ple593-1241630; expires=Thu, 14-Feb-2019 21:05:27 GMT; Max-Age=2592000; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: rotumal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: SeenToday=1; OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; oaidts=1547586327; OAID=9777c328f59624b3934d2c6cc396e5c8; OFR=%7B%223008%22%3A1%7D

                                         
                                         188.72.213.220
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Tue, 15 Jan 2019 21:05:28 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
Pragma: public


--- Additional Info ---
                                        
                                            GET /?r=%2Fmb%2Fhan&pbk3=b944021357be07be7aa84ef87b448c076646832663964618995&empty=0&uuid=e123979e-578b-4292-a151-30434acdb5b0&ad_scheme=1&rotation_type=25&ppucounter=0&first_visit=0&on_test=1&offer_views=1&ab_test=2273&adparams=bm9qcz0w&ip=f3d5bb63c9dbdcfb475795d659c65a4e&zoneid=1241630&x=1176&y=754&sw=1176&sh=885&sah=855&wx=-4&wy=-4&ww=1184&wh=863&cw=1176&wiw=1176&wih=754&wfc=0&pl=https%3A%2F%2Frotumal.com%2F4%2F1241630%2F&drf=&np=1&pt=0&nb=0&ng=1&dm=undefined&cf=1&nw=0&hil=undefined&id=56635e959fe7482c511bc7e635ccf357&co=1&rf=0&hs=d01d492f13aec958676a3d4656a2a36c&ix=0&fs=1&sf_type=1&timeout=0 HTTP/1.1 
Host: rotumal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://rotumal.com/4/1241630/
Cookie: SeenToday=1; OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; oaidts=1547586327; OAID=9777c328f59624b3934d2c6cc396e5c8; OFR=%7B%223008%22%3A1%7D

                                         
                                         188.72.213.220
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Tue, 15 Jan 2019 21:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *, *
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Set-Cookie: f3d5bb63c9dbdcfb475795d659c65a4e=yuDK3MBnsV_i9u6is0tAB3HfSRB7g-yU5YhrOS4zqa0; expires=Tue, 22-Jan-2019 21:05:28 GMT; Max-Age=604800 OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Wed, 16-Jan-2019 21:05:28 GMT; Max-Age=86400; path=/ ppucnt=1; expires=Wed, 16-Jan-2019 21:05:28 GMT; Max-Age=86400; path=/ ppucntstart=1547586328; expires=Wed, 16-Jan-2019 21:05:28 GMT; Max-Age=86400; path=/ allcnt=1; expires=Wed, 15-Jan-2020 21:05:28 GMT; Max-Age=31536000; path=/ OAID=9777c328f59624b3934d2c6cc396e5c8; expires=Wed, 15-Jan-2020 21:05:28 GMT; Max-Age=31536000; path=/ OFR=%7B%223008%22%3A2%7D; expires=Fri, 10-Jan-2020 21:05:28 GMT; Max-Age=31104000; path=/ _OACCAP[1692151]=1; expires=Wed, 15-Jan-2020 21:05:28 GMT; Max-Age=31536000; path=/ _OACBLOCK[1692151]=1547586328; expires=Thu, 14-Feb-2019 21:05:28 GMT; Max-Age=2592000; path=/ _OXCCLK[1692151]=1; expires=Wed, 15-Jan-2020 21:05:28 GMT; Max-Age=31536000; path=/ _OXPCLK[158092]=1; expires=Wed, 15-Jan-2020 21:05:28 GMT; Max-Age=31536000; path=/
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://www.elemperador.pw/efe22582-ca62-4d79-a5bb-0a1aa9925a77?siteid=1241630&visitor_id=109147579505184768
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "781D9E66A4A2553FB73BC14BAB716757FE93CFDE7770175594BF9B19D92926CD"
Last-Modified: Sun, 13 Jan 2019 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3352
Expires: Tue, 15 Jan 2019 22:01:21 GMT
Date: Tue, 15 Jan 2019 21:05:29 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    e180d0361b6ec62752790615792684cb
Sha1:   2ff29b18ed0d473c7ed838b0f2511147ce16563f
Sha256: 781d9e66a4a2553fb73bc14bab716757fe93cfde7770175594bf9b19d92926cd
                                        
                                            GET /efe22582-ca62-4d79-a5bb-0a1aa9925a77?siteid=1241630&visitor_id=109147579505184768 HTTP/1.1 
Host: www.elemperador.pw
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://rotumal.com/4/1241630/

                                         
                                         52.29.251.15
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Tue, 15 Jan 2019 21:05:29 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://www.videodownloadconverter.com/index.jhtml?partner=HJxpt093&s1=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&s2=wB3Q02PP0NA6LDMJHRL2T7SO&s3=NO&s4=1241630
Pragma: no-cache
Set-Cookie: efe22582-ca62-4d79-a5bb-0a1aa9925a77-v4=efe22582-ca62-4d79-a5bb-0a1aa9925a77;domain=www.elemperador.pw;path=/;HttpOnly cc-v4=4Gcu4yhAmWi2d%2Fh1tH%2BE4MPeWOxGWJeKTzymkMUUCwNkfHeAuaqRu2QWXeNZUc%2BYBfx%2BWvL1KzKujkM9RaydMjfMOzP2gQ3N4jWDr5x4QeitZ4rYyci%2F25jFCh9uX01QNKUIPKX2A4qz8mjQbdD3OA%3D%3D;Max-Age=31536000;Expires=Wed, 15-Jan-2020 21:05:29 GMT;domain=www.elemperador.pw;path=/;HttpOnly


--- Additional Info ---
                                        
                                            GET /index.jhtml?partner=HJxpt093&s1=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&s2=wB3Q02PP0NA6LDMJHRL2T7SO&s3=NO&s4=1241630 HTTP/1.1 
Host: www.videodownloadconverter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.113.235.138
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Tue, 15 Jan 2019 21:05:28 GMT
Server: Apache-Coyote/1.1
X-Frame-Options: DENY
P3P: CP='CURa ADMa DEVa PSA PSD OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
Expires: -1
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Language: en-NO
Set-Cookie: userSegment=""; Domain=.videodownloadconverter.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ sessionData="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"; Version=1; Domain=.videodownloadconverter.com; Path=/ org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en_NO; Path=/ anx="xracl=HJxpt093&xckoid=&xgds=&lv=1547586329314&adfi=&xad=&xmvte=&xmt=&add=&adc=&xit=&adn=&adm=&xlang=en&adp=&xmvtv=&xmvtt=&adt=&xose=&xckid=&xrm=&xrp=%5EHJ%5Expw141%5ETTAB02%5Eno&xica=xpt093&xrs=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&xrt=TTAB02&adap=&xnt=dsl&xriad=&xft=&nv=1&fv=1547586329314&xuer=1&ob=-&xrct=CPA&oc=-&od=none&xgc=false&sn=dubprdsndlbfe87.dub.jabodo.com&ok=-&om=-&xrco=HJ&xrkw=&xrca=xpw141&op=-&xrcc=no&xsee=&os=-&surveyUrl=&xkw=&xtc=&g=-&xct=&xiad=&xbkw=&tbGuid=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&xg=&xeid=khjpojamndoobgfcfnkjfncgjlcebpel&xh=7996&xi=MANUAL_OTHER&xtp=vhigh&adti=&xn=&xp=vicinio&xtt=template_responsive&xpp=%5EHJ%5Expw141%5ETTAB02%5Eno&xs=41810&xt=rxs&xpt=&xu=&xcid=38f400fed6704fb78d2ee4a035179dd7"; Version=1; Domain=.videodownloadconverter.com; Max-Age=7776000; Expires=Mon, 15-Apr-2019 21:05:29 GMT; Path=/ ltm-1d=rd119o00000000000000000000ffff0a904c71o80; expires=Wed, 16-Jan-2019 21:04:53 GMT; path=/
Via: 1.1 www.mapsgalaxy.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   30190
Md5:    788ecab8910c57852e4991424ae292f2
Sha1:   f92ea57efe1315d5cf1676b619052753a1639beb
Sha256: 7a5d8a66aa8015a25d3cebf2fb886c54ddb6478a3023ea1f6bde8dc75b6e0819
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.videodownloadconverter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sessionData="wX2RBaqmWBOyzxQSiaKi0XO08brZBeFzKHN4wUrK1swrcDaeh8LvuZRUdOvkSv36xuQWljAedxSdh+SiFsGi4GdAVfzkzlYG4CTcB7Amczf5J8v4vQNQAIBJnfgkI3VAzA1vmu79LES8A15yGbQLVJ00ib5+7e7d3gEM42hd22cuwQifoMztWxG/LdhV7UHUt76Vsxp7KHiq1Y1fAey0BoxtFLrUyeCyP5dMT6jPWbTTPF3IPkcqSicr7mJzepQBLjA4SbXvg9TwqQ0gCi8dSCuYEF8M+PgVxAmWqPuA08766IIfY1gxuSqUWv3bypeu2Tu6coHrdA2ZC556M+DqAlxjRfSoDCXrwN9IkGN+EmRhaSSXSJPiVi503Ytejkzs0nofPOgaiDd9pc2w1YjoiOXDYxtymZh2lSNR/Ht66Vd95Bqy9n5+RizskJ8DXsvJfl2xjPasjkSMpLsyZKVLKG+/CRLVXCHuj2Z0f8rzsEtZrFe6auMGhpaX2Gvz7MNk+mvhbMrHIj/GptHPmuqfEUS6KG8q562nu5ErL8HPZ5/NeN9CV0WtrpAI4Ue2CNpZl2Ne93BZscxuLhWZ2IIsP2ba7/bDfR7sddMrQ+oTa8wYDKPf+ylRZFbCl9iAfghyJbH+vx+L215CBLBUUfP+wH8446LnZkMtZnOJ+dL6IIxD2rbr19C6cjnRcnTspus9C/tpoCc597wpTJVBYqG+Gi8QNU9LidhpTwbnFXPoOjsTA0/FO3kdT/EEO2baOaRLh498lEoxFyrWm9EJivqYSFKgF4ljaF0AwX+AMqy3XTPeXs7HfI8hrfnAA0+J4csZJcMEExHvEEk3yf2ByrLJrC9BgUomN7jmQutb2urdBU2IdLCWOBCjKeza0S9tw1yO74p+g04r0uzbqTvVo/tJ7gP5sipSX9YiDJDq+6RuY7CnqruJL08xBJAhI7h4Xh4tH2387TpWOHh5yKEbOfDzhw=="; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en_NO; anx="xracl=HJxpt093&xckoid=&xgds=&lv=1547586329314&adfi=&xad=&xmvte=&xmt=&add=&adc=&xit=&adn=&adm=&xlang=en&adp=&xmvtv=&xmvtt=&adt=&xose=&xckid=&xrm=&xrp=%5EHJ%5Expw141%5ETTAB02%5Eno&xica=xpt093&xrs=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&xrt=TTAB02&adap=&xnt=dsl&xriad=&xft=&nv=1&fv=1547586329314&xuer=1&ob=-&xrct=CPA&oc=-&od=none&xgc=false&sn=dubprdsndlbfe87.dub.jabodo.com&ok=-&om=-&xrco=HJ&xrkw=&xrca=xpw141&op=-&xrcc=no&xsee=&os=-&surveyUrl=&xkw=&xtc=&g=-&xct=&xiad=&xbkw=&tbGuid=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&xg=&xeid=khjpojamndoobgfcfnkjfncgjlcebpel&xh=7996&xi=MANUAL_OTHER&xtp=vhigh&adti=&xn=&xp=vicinio&xtt=template_responsive&xpp=%5EHJ%5Expw141%5ETTAB02%5Eno&xs=41810&xt=rxs&xpt=&xu=&xcid=38f400fed6704fb78d2ee4a035179dd7"; ltm-1d=rd119o00000000000000000000ffff0a904c71o80

                                         
                                         74.113.235.138
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Tue, 15 Jan 2019 21:05:28 GMT
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
Etag: W/"894-1547481326000"
Last-Modified: Mon, 14 Jan 2019 15:55:26 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Via: 1.1 www.mapsgalaxy.com
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   241
Md5:    10af52d67c177dd2fc61524bd07cabca
Sha1:   37d1ecf0cff3542641d0fa2ad6f06319d32649ca
Sha256: c74f5beb2d7aa15817ecab15f17291f37764c39d3d68e387dd127890ccccd2c2
                                        
                                            GET /images/anx/anemone-1.2.7.js HTTP/1.1 
Host: ak.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videodownloadconverter.com/index.jhtml?partner=HJxpt093&s1=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&s2=wB3Q02PP0NA6LDMJHRL2T7SO&s3=NO&s4=1241630

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Apache
Last-Modified: Mon, 08 Jul 2013 20:02:48 GMT
Etag: "774114-a236-4e105874e8a00"
Accept-Ranges: bytes
Content-Length: 41526
Cache-Control: max-age=79300
Expires: Wed, 16 Jan 2019 19:07:10 GMT
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  Lisp/Scheme program text
Size:   41526
Md5:    843306a0d584c6fa394cb0b531456405
Sha1:   14815f83128de371fb1e87f5d24701a1cf2aaa46
Sha256: b61f1dc82835d8bc3b6332443358eb5b9c41a5f4b0672497cdf06ac0a8bbfdfa
                                        
                                            GET /unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported HTTP/1.1 
Host: hp.myway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.videodownloadconverter.com/index.jhtml?partner=HJxpt093&s1=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&s2=wB3Q02PP0NA6LDMJHRL2T7SO&s3=NO&s4=1241630

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                        
Server: Apache
X-Application-Context: application:prod:8081
Last-Modified: Fri, 14 Apr 2017 18:45:10 GMT
Etag: "be996e-fa3-54d24d74f1980"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1344
Expires: Tue, 15 Jan 2019 21:05:30 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1344
Md5:    0a8720b569c0a80ca5111c4890d13f8a
Sha1:   4ce16481d2b0ca5ea50f34fd890fa5c7a567fac5
Sha256: 3f660794b724c1a26864d177f464247e4a4a3a8bdcb22ea9261e7ad37f4f688c
                                        
                                            GET /images/vicinio/chrome/spent/images/favicon/__COBRAND__.ico HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Last-Modified: Mon, 13 Jun 2016 04:00:00 GMT
Etag: "a109e3-47e-ec1b7000"
Accept-Ranges: bytes
Content-Length: 1150
Cache-Control: max-age=233564024
Expires: Thu, 11 Jun 2026 03:59:14 GMT
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    cc9becf51e20cba5c8a0bd600e1dc588
Sha1:   81c38090b7e51988227a63afe82816d0273f9749
Sha256: 65018cf229b50ef80816ffd62865b7a1c71ad9f1ce9a7c0ae898b87b8ed683d9
                                        
                                            GET /images/webtooltab/search/google.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Tue, 01 Dec 2015 15:54:44 GMT
Etag: "3d2bcd-d8a-2d233900"
Accept-Ranges: bytes
Content-Length: 3466
Cache-Control: max-age=216758899
Expires: Fri, 28 Nov 2025 15:53:49 GMT
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 97 x 33, 8-bit/color RGBA, non-interlaced
Size:   3466
Md5:    953f6562d9c856bbe67943b342ef3812
Sha1:   423d9ef5d57b4c8b318103b2bbc4e5be8359800a
Sha256: 089f2a53201e9ec91ba795d1c4a785b4c61b819702761436396d3380ff7015c4
                                        
                                            GET /images/webtooltab/assets/myway.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Wed, 27 Apr 2016 19:14:11 GMT
Etag: "97207b-1a43-36f0a6c0"
Accept-Ranges: bytes
Content-Length: 6723
Cache-Control: max-age=229558275
Expires: Sat, 25 Apr 2026 19:16:45 GMT
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 156 x 36, 8-bit/color RGBA, non-interlaced
Size:   6723
Md5:    522f52df77af55b88144d6d1a8056df8
Sha1:   77cd1afa0f072b70de215b5b0fab562fbc9a98f3
Sha256: 2a3c8d7f7c0e9957c0a615558839d535423fbd7b9babd5edf46a828d211aac7c
                                        
                                            GET /images/webtooltab/chiclets/firefoxinstall.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 06 Apr 2017 14:16:14 GMT
Etag: "6f62a8-df1-26cc4780"
Accept-Ranges: bytes
Content-Length: 3569
Cache-Control: max-age=259261756
Expires: Sun, 04 Apr 2027 14:14:46 GMT
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 43 x 43, 8-bit/color RGBA, non-interlaced
Size:   3569
Md5:    755905933d8c299437cdad1f07cd3f3f
Sha1:   ff71686d372c5e29cafda3ea1aff551b20405947
Sha256: 23adfa67077f73c4b3ad84cdf45423f3b3cb9b3f8a0d1e4d1f2516ce3a264f1f
                                        
                                            GET /images/webtooltab/chiclets/chromeinstall.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 06 Apr 2017 14:16:20 GMT
Etag: "6f62a7-d71-2727d500"
Accept-Ranges: bytes
Content-Length: 3441
Cache-Control: max-age=259262010
Expires: Sun, 04 Apr 2027 14:19:00 GMT
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 43 x 43, 8-bit/color RGBA, non-interlaced
Size:   3441
Md5:    536faf1a976f41810d17399800ff20d2
Sha1:   1aac76d1a968392c3eedd84ce25c4dda6e8d4a75
Sha256: 85bcdd2eb3d0e03b18242cfd1fff0224c2c60b7b83ddf48221870a9f039e8d51
                                        
                                            GET /unsupported/myway/scripts/4e6ca3d5.app.js HTTP/1.1 
Host: hp.myway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Server: Apache
X-Application-Context: application:prod:8081
Last-Modified: Fri, 14 Apr 2017 18:45:11 GMT
Etag: "be9972-6270-54d24d75e5bc0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7790
Expires: Tue, 15 Jan 2019 21:05:30 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Tue, 15 Jan 2019 21:05:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7790
Md5:    2b0a47209489eec4a89768b918681246
Sha1:   99bde60b9744ce9923df49aa6aea9d6a53ea121c
Sha256: 512e5061cc4f163411e69f52438fbd3fb94a1526d4f07952b92911978a778a8d
                                        
                                            GET /unsupported/myway/styles/8c8a8c1a.app.css HTTP/1.1 
Host: hp.myway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: text/css;charset=utf-8
                                        
Server: Apache
X-Application-Context: application:prod:8081
Last-Modified: Fri, 14 Apr 2017 18:45:11 GMT
Etag: "be9970-11e4-54d24d75e5bc0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1320
Expires: Tue, 15 Jan 2019 21:05:31 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Tue, 15 Jan 2019 21:05:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1320
Md5:    7067cf74d0b71cfeda9d97e5b1328a79
Sha1:   69d49b1e5e419c6d7637d5adac909e8e92510ba3
Sha256: 0389282e062e4f42e1e84459a75d5f031eed83dacbd79a76c091fb3d2fc2280c
                                        
                                            GET /anx.gif?anxuu=E7DAB557-F733-4F70-B946-4BD4F25940A7&anxa=WebTooltab&anxv=Wtt-Unsupported-Page-1.0.0&anxd=-&anxsn=&anxu=http%3A%2F%2Fhp.myway.com%2Funsupported%2Fmyway%2Findex.html&anxlv=0&anxrd=www.videodownloadconverter.com&anxrp=index.jhtml&anxrk=-&anxrm=referral&anxrb=-&anxrc=-&anxrs=-&anxsq=2&pageType=tab&anxe=PageView&anxr=1803587864 HTTP/1.1 
Host: anx.tb.ask.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         74.113.233.187
HTTP/1.1 204 No Content
                                        
Server: nginx/1.0.10
Date: Tue, 15 Jan 2019 21:05:31 GMT
Connection: close
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, max-age=0


--- Additional Info ---
                                        
                                            GET /images/webtooltab/assets/logos/%5EHJ%5Expw141%5ETTAB02%5Eno.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5EHJ%5Expw141%5ETTAB02%5Eno&n=7857ABBC&ptb=1A6D3F4A-3715-4EE7-AB1F-5A3C483A6A7D&si=vol_9225325b-0778-4b3a-80bd-ad6f5b882333&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Content-Length: 362
Date: Tue, 15 Jan 2019 21:05:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   362
Md5:    edcfd5568343ac30b95c917a2034e8dd
Sha1:   82d994705f5b232b07e15f63905d867a83e116fa
Sha256: c602091dab126dc3f9a11369fefe9f38c4aa861b212a087b2e0f95676021f621
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: rotumal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: SeenToday=1; OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; oaidts=1547586327; OAID=9777c328f59624b3934d2c6cc396e5c8; OFR=%7B%223008%22%3A2%7D; f3d5bb63c9dbdcfb475795d659c65a4e=yuDK3MBnsV_i9u6is0tAB3HfSRB7g-yU5YhrOS4zqa0; ppucnt=1; ppucntstart=1547586328; allcnt=1; _OACCAP[1692151]=1; _OACBLOCK[1692151]=1547586328; _OXCCLK[1692151]=1; _OXPCLK[158092]=1

                                         
                                         188.72.213.220
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Tue, 15 Jan 2019 21:05:31 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
Pragma: public


--- Additional Info ---