Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0e9a8e8bfb...18.exe

windows7-x64

7

0e9a8e8bfb...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/05/2024, 13:15 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe

  • Size

    40KB

  • MD5

    0e9a8e8bfb73406e5cbc3e18520bd6af

  • SHA1

    f6888782e9ef509563e54292b9b50c46c934b263

  • SHA256

    b81326b4036b634fc4fa871d25cfb11ac9c80b010d521c6bf4e1c0cff0468fe2

  • SHA512

    359898dbd4acfe91a81019f264d5b8f33a14aabaf4ee67fda1fb14580e618eb332fe97d9e426bca933beb4028a3f1abe1af36e5615df55cc0755fbb1beea4ed8

  • SSDEEP

    768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHpqpu:aqk/Zdic/qjh8w19JDH9

Score
7/10
persistenceupx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • UPX packed file 16 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Windows directory 3 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Suspicious use of WriteProcessMemory
    PID:1608
    • C:\Windows\services.exe
      "C:\Windows\services.exe"
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      PID:1552

Network

  • flag-us
    DNS
    g.bing.com
    Remote address:
    8.8.8.8:53
    Request
    g.bing.com
    IN A
    Response
    g.bing.com
    IN CNAME
    g-bing-com.dual-a-0034.a-msedge.net
    g-bing-com.dual-a-0034.a-msedge.net
    IN CNAME
    dual-a-0034.a-msedge.net
    dual-a-0034.a-msedge.net
    IN A
    204.79.197.237
    dual-a-0034.a-msedge.net
    IN A
    13.107.21.237
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid=
    Remote address:
    204.79.197.237:443
    Request
    GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    set-cookie: MUID=13E1DFA009B466D22D7CCBD30854677E; domain=.bing.com; expires=Tue, 27-May-2025 13:15:38 GMT; path=/; SameSite=None; Secure; Priority=High;
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: E047024E0AF84A3383815FED93D44ABD Ref B: LON04EDGE1208 Ref C: 2024-05-02T13:15:38Z
    date: Thu, 02 May 2024 13:15:37 GMT
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid=
    Remote address:
    204.79.197.237:443
    Request
    GET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    cookie: MUID=13E1DFA009B466D22D7CCBD30854677E
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    set-cookie: MSPTC=Jpvx-piT7d5hdlELafZLuPNJYqfut7KsP4m8Wqa1lIA; domain=.bing.com; expires=Tue, 27-May-2025 13:15:38 GMT; path=/; Partitioned; secure; SameSite=None
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: EC7B8D9E782045F0ADE69D57AA760BB7 Ref B: LON04EDGE1208 Ref C: 2024-05-02T13:15:38Z
    date: Thu, 02 May 2024 13:15:37 GMT
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid=
    Remote address:
    204.79.197.237:443
    Request
    GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    cookie: MUID=13E1DFA009B466D22D7CCBD30854677E; MSPTC=Jpvx-piT7d5hdlELafZLuPNJYqfut7KsP4m8Wqa1lIA
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 073BAB47F6DC4AFEB75FA3E97E8AC02D Ref B: LON04EDGE1208 Ref C: 2024-05-02T13:15:38Z
    date: Thu, 02 May 2024 13:15:37 GMT
  • flag-us
    DNS
    13.86.106.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    13.86.106.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    77.190.18.2.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    77.190.18.2.in-addr.arpa
    IN PTR
    Response
    77.190.18.2.in-addr.arpa
    IN PTR
    a2-18-190-77deploystaticakamaitechnologiescom
  • flag-us
    DNS
    68.32.126.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    68.32.126.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    237.197.79.204.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    237.197.79.204.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    241.150.49.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    241.150.49.20.in-addr.arpa
    IN PTR
    Response
  • flag-nl
    GET
    https://www.bing.com/th?id=OADD2.10239381793954_1BHQ1BWFG78XLZOQQ&pid=21.2&c=16&roil=0.0049&roit=0&roir=0.9951&roib=1&w=24&h=24&dynsize=1&qlt=90
    Remote address:
    23.62.61.129:443
    Request
    GET /th?id=OADD2.10239381793954_1BHQ1BWFG78XLZOQQ&pid=21.2&c=16&roil=0.0049&roit=0&roir=0.9951&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/2.0
    host: www.bing.com
    accept: */*
    cookie: MUID=13E1DFA009B466D22D7CCBD30854677E; MSPTC=Jpvx-piT7d5hdlELafZLuPNJYqfut7KsP4m8Wqa1lIA
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-type: image/png
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}&ndcParam=QWthbWFp
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    content-length: 1299
    date: Thu, 02 May 2024 13:15:39 GMT
    alt-svc: h3=":443"; ma=93600
    x-cdn-traceid: 0.7d3d3e17.1714655739.f683c96
  • flag-us
    DNS
    88.156.103.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    88.156.103.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    129.61.62.23.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    129.61.62.23.in-addr.arpa
    IN PTR
    Response
    129.61.62.23.in-addr.arpa
    IN PTR
    a23-62-61-129deploystaticakamaitechnologiescom
  • flag-us
    DNS
    86.23.85.13.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    86.23.85.13.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    86.23.85.13.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    86.23.85.13.in-addr.arpa
    IN PTR
  • flag-us
    DNS
    15.164.165.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    15.164.165.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    142.53.16.96.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    142.53.16.96.in-addr.arpa
    IN PTR
    Response
    142.53.16.96.in-addr.arpa
    IN PTR
    a96-16-53-142deploystaticakamaitechnologiescom
  • flag-us
    DNS
    m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    m-ou.se
    IN MX
    Response
    m-ou.se
    IN MX
    aspmxlgooglecom
    m-ou.se
    IN MX
    alt1�'
    m-ou.se
    IN MX
    alt2�'
    m-ou.se
    IN MX
    aspmx2 googlemail�6
    m-ou.se
    IN MX
    aspmx3�z
    m-ou.se
    IN MX
    aspmx4�z
    m-ou.se
    IN MX
    aspmx5�z
  • flag-us
    DNS
    aspmx.l.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    aspmx.l.google.com
    IN A
    Response
    aspmx.l.google.com
    IN A
    74.125.193.26
  • flag-us
    DNS
    acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    acm.org
    IN MX
    Response
    acm.org
    IN MX
    mail mailroutenet
  • flag-us
    DNS
    mail.mailroute.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mail.mailroute.net
    IN A
    Response
    mail.mailroute.net
    IN A
    199.89.3.120
    mail.mailroute.net
    IN A
    199.89.1.120
  • flag-us
    DNS
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    cs.stanford.edu
    IN MX
    Response
    cs.stanford.edu
    IN MX
    �
    cs.stanford.edu
    IN MX
    smtp2�
    cs.stanford.edu
    IN MX
    smtp1�
  • flag-us
    DNS
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    cs.stanford.edu
    IN A
    Response
    cs.stanford.edu
    IN A
    171.64.64.64
  • flag-us
    DNS
    burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    burtleburtle.net
    IN MX
    Response
    burtleburtle.net
    IN MX
    mx�
  • flag-us
    DNS
    mx.burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mx.burtleburtle.net
    IN A
    Response
    mx.burtleburtle.net
    IN A
    65.254.254.52
    mx.burtleburtle.net
    IN A
    65.254.254.50
    mx.burtleburtle.net
    IN A
    65.254.254.51
  • flag-us
    DNS
    alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    alumni.caltech.edu
    IN MX
    Response
    alumni.caltech.edu
    IN MX
    alumni-caltech-edumail protectionoutlookcom
  • flag-us
    DNS
    alumni-caltech-edu.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    Response
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.9.11
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.42.10
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.40.24
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.194.12
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.10.2
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.194.15
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.194.4
  • flag-us
    DNS
    gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    gzip.org
    IN MX
    Response
    gzip.org
    IN MX
    �
  • flag-us
    DNS
    gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    gzip.org
    IN A
    Response
    gzip.org
    IN A
    85.187.148.2
  • flag-us
    DNS
    search.yahoo.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    search.yahoo.com
    IN A
    Response
    search.yahoo.com
    IN CNAME
    ds-global3.l7.search.ystg1.b.yahoo.com
    ds-global3.l7.search.ystg1.b.yahoo.com
    IN A
    212.82.100.137
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:31 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:31 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-s9WWQU14et2S7ZMO/GHHBg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:16:31 GMT
    x-envoy-upstream-service-time: 58
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/?fr=altavista
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /?fr=altavista HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Response
    HTTP/1.1 200 OK
    date: Thu, 02 May 2024 13:16:32 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    set-cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1; expires=Fri, 02-May-2025 13:16:32 GMT; Max-Age=31536000; path=/; domain=.search.yahoo.com
    secure_search_bypass: true
    x-frame-options: DENY
    content-security-policy: frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-b3Ti/95fYj2TovxVrxFy0Q==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com *.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: blob: https://*.aol.com https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://fun.games.com/ https://interactives.ap.org; media-src * blob:; object-src *; connect-src * blob:; font-src * data:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    cache-control: private
    content-length: 47483
    content-type: text/html; charset=UTF-8
    x-envoy-upstream-service-time: 57
    server: ATS
    Age: 0
    Connection: keep-alive
    Strict-Transport-Security: max-age=31536000
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-YV8PkW4j8WYBKpSl8nzOFQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:16:34 GMT
    x-envoy-upstream-service-time: 34
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-2oMp5wep8pGg6CP10Lq27A==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:16:31 GMT
    x-envoy-upstream-service-time: 11
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/?fr=altavista
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /?fr=altavista HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Response
    HTTP/1.1 200 OK
    date: Thu, 02 May 2024 13:16:32 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    set-cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1; expires=Fri, 02-May-2025 13:16:32 GMT; Max-Age=31536000; path=/; domain=.search.yahoo.com
    secure_search_bypass: true
    x-frame-options: DENY
    content-security-policy: frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-aU21G6EFEZp89ozN7sITZw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com *.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: blob: https://*.aol.com https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://fun.games.com/ https://interactives.ap.org; media-src * blob:; object-src *; connect-src * blob:; font-src * data:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    cache-control: private
    content-length: 47485
    content-type: text/html; charset=UTF-8
    x-envoy-upstream-service-time: 54
    server: ATS
    Age: 1
    Connection: keep-alive
    Strict-Transport-Security: max-age=31536000
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-us
    DNS
    search.lycos.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    search.lycos.com
    IN A
    Response
    search.lycos.com
    IN CNAME
    search-core2.bo3.lycos.com
    search-core2.bo3.lycos.com
    IN A
    209.202.254.10
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:31 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    Content-Length: 304
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:31 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    Content-Length: 302
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    DNS
    www.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    www.google.com
    IN A
    Response
    www.google.com
    IN A
    142.250.178.4
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+e-mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail&hl=en&q=EgS_ZdEnGK-kzrEGIjBMyg3311b6hBgIRJcnEMzB6o67Skx3T1IvQSDQ2NpA2ti4ZKSR4fRib64RXddb07cyAXJaAUM
    x-hallmonitor-challenge: CgwIr6TOsQYQ1pPJxAMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-yiPkfYKGMCGe8qo6xEqIcw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:31 GMT
    Server: gws
    Content-Length: 435
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwynDIKOSye5GMXucPUTi2fvX1ShPgb-CFJ_voO7zbd6dwtgHfs3Q; expires=Tue, 29-Oct-2024 13:16:31 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjC_8IvUg2OBB77FalUOnySRAjnCAbu23B5FuoAJE3znAKdDH013qBZAblpKe0yZAjYyAXJaAUM
    x-hallmonitor-challenge: CgwIsKTOsQYQ-4_B2wESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7k0CXBx7egTWQ1cMLKdacg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: gws
    Content-Length: 448
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyFKG8s-G92ljy5Z3YiRXURV5o5EgTGwoSLyQv-xWd35nLYEwpbLB0; expires=Tue, 29-Oct-2024 13:16:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjC_8IvUg2OBB77FalUOnySRAjnCAbu23B5FuoAJE3znAKdDH013qBZAblpKe0yZAjYyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjC_8IvUg2OBB77FalUOnySRAjnCAbu23B5FuoAJE3znAKdDH013qBZAblpKe0yZAjYyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:32 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3301
    X-XSS-Protection: 0
  • flag-us
    DNS
    137.100.82.212.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    137.100.82.212.in-addr.arpa
    IN PTR
    Response
    137.100.82.212.in-addr.arpa
    IN PTR
    ats1l7searchvipir2yahoocom
  • flag-us
    DNS
    4.178.250.142.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    4.178.250.142.in-addr.arpa
    IN PTR
    Response
    4.178.250.142.in-addr.arpa
    IN PTR
    lhr48s27-in-f41e100net
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjBLEFj0M6BN2zau_st24yGg22ErGoY9lbEJG3XTnkAOFRBXD1Vtj3guz7DA7bXqJlYyAXJaAUM
    x-hallmonitor-challenge: CgwIr6TOsQYQhrSCzAMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MBnu1AKR8x0YA_eSa7tqWQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:31 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyB_C3N3ZGHyjox8b95NVqqiRCUC0flhHRN9b1vGvaPffGkPVlLcg; expires=Tue, 29-Oct-2024 13:16:31 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail&hl=en&q=EgS_ZdEnGK-kzrEGIjBMyg3311b6hBgIRJcnEMzB6o67Skx3T1IvQSDQ2NpA2ti4ZKSR4fRib64RXddb07cyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail&hl=en&q=EgS_ZdEnGK-kzrEGIjBMyg3311b6hBgIRJcnEMzB6o67Skx3T1IvQSDQ2NpA2ti4ZKSR4fRib64RXddb07cyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:32 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3262
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    DNS
    www.altavista.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    www.altavista.com
    IN A
    Response
    www.altavista.com
    IN CNAME
    us.yhs4.search.yahoo.com
    us.yhs4.search.yahoo.com
    IN CNAME
    ds-global3.l7.search.ystg1.b.yahoo.com
    ds-global3.l7.search.ystg1.b.yahoo.com
    IN A
    212.82.100.137
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:16:31 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=email+cs.stanford.edu&kgs=0&kls=0&nbq=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=email+cs.stanford.edu&kgs=0&kls=0&nbq=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:16:32 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Content-Length: 1519
    Age: 1
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=email+burtleburtle.net&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=email+burtleburtle.net&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:16:33 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=acm.org+mail&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=acm.org+mail&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:16:34 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Content-Length: 1519
    Age: 0
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+acm.org&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+acm.org&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:16:35 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+burtleburtle.net&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+burtleburtle.net&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:34 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Content-Length: 1519
    Age: 0
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=e-mail+stanfordhealthcare.org&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=e-mail+stanfordhealthcare.org&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:35 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:35 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Content-Length: 1519
    Age: 0
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+m-ou.se&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+m-ou.se&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:35 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 3
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=email+stanfordchildrens.org&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=email+stanfordchildrens.org&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:36 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+cs.stanford.edu&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+cs.stanford.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:36 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Content-Length: 1519
    Age: 2
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mail+alumni.caltech.edu&kgs=0&kls=0&nbq=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mail+alumni.caltech.edu&kgs=0&kls=0&nbq=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:55 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=reply+gzip.org&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=reply+gzip.org&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:56 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjBLEFj0M6BN2zau_st24yGg22ErGoY9lbEJG3XTnkAOFRBXD1Vtj3guz7DA7bXqJlYyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjBLEFj0M6BN2zau_st24yGg22ErGoY9lbEJG3XTnkAOFRBXD1Vtj3guz7DA7bXqJlYyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:32 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
    Content-Length: 303
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:16:32 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    DNS
    10.254.202.209.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    10.254.202.209.in-addr.arpa
    IN PTR
    Response
    10.254.202.209.in-addr.arpa
    IN PTR
    search-core2bo3lycoscom
  • flag-us
    DNS
    11.97.55.23.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    11.97.55.23.in-addr.arpa
    IN PTR
    Response
    11.97.55.23.in-addr.arpa
    IN PTR
    a23-55-97-11deploystaticakamaitechnologiescom
  • flag-us
    DNS
    80.190.18.2.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    80.190.18.2.in-addr.arpa
    IN PTR
    Response
    80.190.18.2.in-addr.arpa
    IN PTR
    a2-18-190-80deploystaticakamaitechnologiescom
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgS_ZdEnGLGkzrEGIjB_NHpeHeGs2Kcsb_y4yOq8cdHpCeNlMdz5Khgity9jPBxEtqTlKExOX45DFIxchdEyAXJaAUM
    x-hallmonitor-challenge: CgsIsqTOsQYQ3u6QVRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5pxBire8s6ltCTosDhmL0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:34 GMT
    Server: gws
    Content-Length: 452
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hyo2G9NljbCD-2f_G_aMZP14gcaRuJOHEa6X_tXJXA3ZfYl8Em_kg; expires=Tue, 29-Oct-2024 13:16:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgS_ZdEnGLGkzrEGIjB_NHpeHeGs2Kcsb_y4yOq8cdHpCeNlMdz5Khgity9jPBxEtqTlKExOX45DFIxchdEyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgS_ZdEnGLGkzrEGIjB_NHpeHeGs2Kcsb_y4yOq8cdHpCeNlMdz5Khgity9jPBxEtqTlKExOX45DFIxchdEyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:34 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3313
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGLKkzrEGIjAr9w9MGsz63R7BJ9lzD4bHqi5EfHLw4kpED_H8rnE0Twqua3tr3AkcaWh_ILVcvc8yAXJaAUM
    x-hallmonitor-challenge: CgwIsqTOsQYQ6tCGnwESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-oskXeIOMGmKx6B8aTADMnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:34 GMT
    Server: gws
    Content-Length: 453
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwJkrTVm6CBy6_Vi4hwcAgTRLyBrd4VRntnsvTKAgtgsaqu4nOPbg; expires=Tue, 29-Oct-2024 13:16:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGLKkzrEGIjAr9w9MGsz63R7BJ9lzD4bHqi5EfHLw4kpED_H8rnE0Twqua3tr3AkcaWh_ILVcvc8yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGLKkzrEGIjAr9w9MGsz63R7BJ9lzD4bHqi5EfHLw4kpED_H8rnE0Twqua3tr3AkcaWh_ILVcvc8yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:34 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGLKkzrEGIjBXg4lwrAp0NxPpsgcieD0aeDoqViPTCyTRoOAoFBWgt1FySh-3_C5zaFicxZreKJgyAXJaAUM
    x-hallmonitor-challenge: CgwIsqTOsQYQ_czz4wISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-KRsdVNaHr3NF1zSQSoGIhA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:34 GMT
    Server: gws
    Content-Length: 435
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hwz8yA47fbWJM3j85mPyNAMb4RgtDnsorxB5aaZnVZitHHaAgLf5w; expires=Tue, 29-Oct-2024 13:16:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGLKkzrEGIjBXg4lwrAp0NxPpsgcieD0aeDoqViPTCyTRoOAoFBWgt1FySh-3_C5zaFicxZreKJgyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGLKkzrEGIjBXg4lwrAp0NxPpsgcieD0aeDoqViPTCyTRoOAoFBWgt1FySh-3_C5zaFicxZreKJgyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:34 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3262
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:34 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net
    Content-Length: 313
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:34 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    Content-Length: 303
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:16:34 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:16:34 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:34 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:16:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:16:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:34 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-kHDMR1h2CqX+BkUoRKTZAg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:16:35 GMT
    x-envoy-upstream-service-time: 38
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 1
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjDdZwR3h__nne-zpyc1kzuIgrhFdWiOYn0uPLAcxVtfemBHNR5iKnx86tYI5AFHarsyAXJaAUM
    x-hallmonitor-challenge: CgwIs6TOsQYQpsifnQESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ErUBArsBnxNGyMEJ7IClSg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:35 GMT
    Server: gws
    Content-Length: 453
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxE04cTD7QNFE50rxrBw6BH80QdhGoesl5VSO8TfYqFylntrkqQGQ; expires=Tue, 29-Oct-2024 13:16:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+gzip.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+gzip.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBmLF_fTkCyKrq3vV1DHtWOU2fEom0oq48t-FTrbrXlC0uCkpEJaUDM0DJ-twWwRpwyAXJaAUM
    x-hallmonitor-challenge: CgwIs6TOsQYQ-46P9gISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HS2rEMPLjFZ1DeLc6OqJlA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:35 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxQwppQB-iCvW2LjHt5O7gI8mCX6NowTUlT08LIrW1On-HIP-b5Fg; expires=Tue, 29-Oct-2024 13:16:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBYIW1m3zJ34L1DW16rU1BUOYO-wTNrlWMieWgKhyc1of4Kw8gcZ3Jggf7uECwPlHcyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBYIW1m3zJ34L1DW16rU1BUOYO-wTNrlWMieWgKhyc1of4Kw8gcZ3Jggf7uECwPlHcyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:35 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3319
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+m-ou.se&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+m-ou.se&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBYIW1m3zJ34L1DW16rU1BUOYO-wTNrlWMieWgKhyc1of4Kw8gcZ3Jggf7uECwPlHcyAXJaAUM
    x-hallmonitor-challenge: CgwIs6TOsQYQ_ayZ2QISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DDKzQe3Bhs0h7eMImtqSEA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:35 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyQiDiPW6pVSnsgkt6xw99rG__d_w9h9cq1fTIgEDlmU_E9RRnAqQ; expires=Tue, 29-Oct-2024 13:16:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjDdZwR3h__nne-zpyc1kzuIgrhFdWiOYn0uPLAcxVtfemBHNR5iKnx86tYI5AFHarsyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjDdZwR3h__nne-zpyc1kzuIgrhFdWiOYn0uPLAcxVtfemBHNR5iKnx86tYI5AFHarsyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:35 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:35 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-XRCpCHauLagJj6rDz5CwXw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:16:35 GMT
    x-envoy-upstream-service-time: 18
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-UL5sk73NI6eAuX9UoC31Qg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:35 GMT
    x-envoy-upstream-service-time: 17
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:16:35 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
    Content-Length: 320
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:16:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:16:36 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+e-mail&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+e-mail&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjAoA-1Qxf_yqwM_tsn14V8lNU6kKO-wNdkvtW3ZdHDGv3C9Sq8Fb42HU1Q4Q8U7_ScyAXJaAUM
    x-hallmonitor-challenge: CgsItKTOsQYQuYK7VRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_KCHMSVvELzlKc9rs6esSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:36 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hw2q5o7VjunkxZaxObiqfvnaA-tECkdyOpXVFp98ddG26vt7Y91ow; expires=Tue, 29-Oct-2024 13:16:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBmLF_fTkCyKrq3vV1DHtWOU2fEom0oq48t-FTrbrXlC0uCkpEJaUDM0DJ-twWwRpwyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBmLF_fTkCyKrq3vV1DHtWOU2fEom0oq48t-FTrbrXlC0uCkpEJaUDM0DJ-twWwRpwyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:36 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBOPBJOzofZWAPoF_CLTzAhRxPKazn1afraLQLjbOSAYTfillyyPGOFr1BOKHbmdWcyAXJaAUM
    x-hallmonitor-challenge: CgwItKTOsQYQscelgAESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gVjJ3mmtOCI1vASfO6cjgg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:36 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyVvnP8RQV-c7EYXw_meKHLAQ0OpavgR5eGJBM3-J4vT1xhicQDVg; expires=Tue, 29-Oct-2024 13:16:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D20&hl=en&q=EgS_ZdEnGLSkzrEGIjCbTkB9sImTTD2aLSKoGVEYeo8-LmjrMEVAjwBs9I6JzKbboxuC-0v1jxn6xk_D7WAyAXJaAUM
    x-hallmonitor-challenge: CgwItKTOsQYQspyogQMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-63Bn8dNxnq7XISUUVVnSWA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:36 GMT
    Server: gws
    Content-Length: 446
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzfMGvzjYnNyguSmDkAhDojAN7iNQl1MwwmnScfJ7UZ3xyIpvQ85Y0; expires=Tue, 29-Oct-2024 13:16:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjAoA-1Qxf_yqwM_tsn14V8lNU6kKO-wNdkvtW3ZdHDGv3C9Sq8Fb42HU1Q4Q8U7_ScyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjAoA-1Qxf_yqwM_tsn14V8lNU6kKO-wNdkvtW3ZdHDGv3C9Sq8Fb42HU1Q4Q8U7_ScyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:36 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGLSkzrEGIjDMF24hmNB6CdBXDpg218W6622CwGvkOx4z6MLCEkG4S3w-XcKO3hkemdBw67ZRK2YyAXJaAUM
    x-hallmonitor-challenge: CgwItKTOsQYQlqnpowISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BHhCfJrnEBwHKT5PiCjWLA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:36 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzkTRfxGE65DfYSq7K1N6bkSEpdrb0a2stRiYoflraSK8pWnD-BLqA; expires=Tue, 29-Oct-2024 13:16:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGLSkzrEGIjAOeo1II-cVSiSu1cgRWHK7u8xKlorcDESBSMtbX19cuhCA_dGcuktvfx6RfdoyliUyAXJaAUM
    x-hallmonitor-challenge: CgwItKTOsQYQr_ie0wMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4cf3xO4hJmihVTZk3H1p-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:16:36 GMT
    Server: gws
    Content-Length: 454
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyHWrkFzzEa07PEy6JdsZrfHFkQfY4m2hpcSlgNmScdVgNaM5zMG4c; expires=Tue, 29-Oct-2024 13:16:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D20&hl=en&q=EgS_ZdEnGLSkzrEGIjCbTkB9sImTTD2aLSKoGVEYeo8-LmjrMEVAjwBs9I6JzKbboxuC-0v1jxn6xk_D7WAyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D20&hl=en&q=EgS_ZdEnGLSkzrEGIjCbTkB9sImTTD2aLSKoGVEYeo8-LmjrMEVAjwBs9I6JzKbboxuC-0v1jxn6xk_D7WAyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:37 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3295
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBOPBJOzofZWAPoF_CLTzAhRxPKazn1afraLQLjbOSAYTfillyyPGOFr1BOKHbmdWcyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBOPBJOzofZWAPoF_CLTzAhRxPKazn1afraLQLjbOSAYTfillyyPGOFr1BOKHbmdWcyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:36 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGLSkzrEGIjDMF24hmNB6CdBXDpg218W6622CwGvkOx4z6MLCEkG4S3w-XcKO3hkemdBw67ZRK2YyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGLSkzrEGIjDMF24hmNB6CdBXDpg218W6622CwGvkOx4z6MLCEkG4S3w-XcKO3hkemdBw67ZRK2YyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:37 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3325
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGLSkzrEGIjAOeo1II-cVSiSu1cgRWHK7u8xKlorcDESBSMtbX19cuhCA_dGcuktvfx6RfdoyliUyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGLSkzrEGIjAOeo1II-cVSiSu1cgRWHK7u8xKlorcDESBSMtbX19cuhCA_dGcuktvfx6RfdoyliUyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:16:38 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3319
    X-XSS-Protection: 0
  • flag-us
    DNS
    79.190.18.2.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    79.190.18.2.in-addr.arpa
    IN PTR
    Response
    79.190.18.2.in-addr.arpa
    IN PTR
    a2-18-190-79deploystaticakamaitechnologiescom
  • flag-us
    DNS
    138.201.86.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    138.201.86.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    138.201.86.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    138.201.86.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    14.251.17.2.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    14.251.17.2.in-addr.arpa
    IN PTR
    Response
    14.251.17.2.in-addr.arpa
    IN PTR
    a2-17-251-14deploystaticakamaitechnologiescom
  • flag-us
    DNS
    alt1.aspmx.l.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    alt1.aspmx.l.google.com
    IN A
    Response
    alt1.aspmx.l.google.com
    IN A
    142.250.27.26
  • flag-us
    DNS
    alt1.aspmx.l.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    alt1.aspmx.l.google.com
    IN A
    Response
    alt1.aspmx.l.google.com
    IN A
    142.250.27.27
  • flag-us
    DNS
    acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    acm.org
    IN A
    Response
    acm.org
    IN A
    104.17.78.30
    acm.org
    IN A
    104.17.79.30
  • flag-us
    DNS
    smtp2.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp2.cs.stanford.edu
    IN A
    Response
    smtp2.cs.stanford.edu
    IN A
    171.64.64.26
  • flag-us
    DNS
    burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    burtleburtle.net
    IN A
    Response
    burtleburtle.net
    IN A
    65.254.227.224
  • flag-us
    DNS
    alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    alumni.caltech.edu
    IN A
    Response
    alumni.caltech.edu
    IN A
    75.2.70.75
    alumni.caltech.edu
    IN A
    99.83.190.102
  • flag-us
    DNS
    43.229.111.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    43.229.111.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    alt2.aspmx.l.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    alt2.aspmx.l.google.com
    IN A
    Response
    alt2.aspmx.l.google.com
    IN A
    142.250.153.27
  • flag-us
    DNS
    smtp1.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp1.cs.stanford.edu
    IN A
    Response
    smtp1.cs.stanford.edu
    IN A
    171.64.64.25
  • flag-us
    DNS
    mx.alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mx.alumni.caltech.edu
    IN A
    Response
  • flag-us
    DNS
    mx.alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mx.alumni.caltech.edu
    IN A
    Response
  • flag-us
    DNS
    mail.alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mail.alumni.caltech.edu
    IN A
    Response
  • flag-us
    DNS
    mail.alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mail.alumni.caltech.edu
    IN A
    Response
  • flag-us
    DNS
    smtp.alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp.alumni.caltech.edu
    IN A
    Response
  • flag-us
    DNS
    smtp.alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp.alumni.caltech.edu
    IN A
    Response
  • flag-us
    DNS
    mx.gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mx.gzip.org
    IN A
    Response
  • flag-us
    DNS
    mx.gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mx.gzip.org
    IN A
    Response
  • flag-us
    DNS
    outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    outlook.com
    IN MX
    Response
    outlook.com
    IN MX
     outlook-comolc protection�
  • flag-us
    DNS
    outlook-com.olc.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    outlook-com.olc.protection.outlook.com
    IN A
    Response
    outlook-com.olc.protection.outlook.com
    IN A
    52.101.41.5
    outlook-com.olc.protection.outlook.com
    IN A
    52.101.68.13
    outlook-com.olc.protection.outlook.com
    IN A
    52.101.42.15
    outlook-com.olc.protection.outlook.com
    IN A
    52.101.137.3
  • flag-us
    DNS
    mail.gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mail.gzip.org
    IN A
    Response
    mail.gzip.org
    IN CNAME
    gzip.org
    gzip.org
    IN A
    85.187.148.2
  • flag-us
    DNS
    stanfordchildrens.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordchildrens.org
    IN MX
    Response
    stanfordchildrens.org
    IN MX
    mxa-00039903gslbpphostedcom
    stanfordchildrens.org
    IN MX
    mxb-00039903�B
  • flag-us
    DNS
    mxa-00039903.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mxa-00039903.gslb.pphosted.com
    IN A
    Response
    mxa-00039903.gslb.pphosted.com
    IN A
    205.220.175.141
  • flag-us
    DNS
    mxa-00039903.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mxa-00039903.gslb.pphosted.com
    IN A
    Response
    mxa-00039903.gslb.pphosted.com
    IN A
    205.220.175.141
  • flag-us
    DNS
    tse1.mm.bing.net
    Remote address:
    8.8.8.8:53
    Request
    tse1.mm.bing.net
    IN A
    Response
    tse1.mm.bing.net
    IN CNAME
    mm-mm.bing.net.trafficmanager.net
    mm-mm.bing.net.trafficmanager.net
    IN CNAME
    dual-a-0001.a-msedge.net
    dual-a-0001.a-msedge.net
    IN A
    204.79.197.200
    dual-a-0001.a-msedge.net
    IN A
    13.107.21.200
  • flag-us
    DNS
    tse1.mm.bing.net
    Remote address:
    8.8.8.8:53
    Request
    tse1.mm.bing.net
    IN A
    Response
    tse1.mm.bing.net
    IN CNAME
    mm-mm.bing.net.trafficmanager.net
    mm-mm.bing.net.trafficmanager.net
    IN CNAME
    dual-a-0001.a-msedge.net
    dual-a-0001.a-msedge.net
    IN A
    204.79.197.200
    dual-a-0001.a-msedge.net
    IN A
    13.107.21.200
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239370255172_1LGH0N1M3BEVIZPTE&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    Remote address:
    204.79.197.200:443
    Request
    GET /th?id=OADD2.10239370255172_1LGH0N1M3BEVIZPTE&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 583094
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}&ndcParam=QUZE
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: F5DD2DF9462D4B81947FD12D2A9B9586 Ref B: LON04EDGE1220 Ref C: 2024-05-02T13:17:18Z
    date: Thu, 02 May 2024 13:17:18 GMT
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239360313430_12K7UVO7ZVIINTRIE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
    Remote address:
    204.79.197.200:443
    Request
    GET /th?id=OADD2.10239360313430_12K7UVO7ZVIINTRIE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 394521
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}&ndcParam=QUZE
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 3A79253F9035401D9C3B83C6C285FCE0 Ref B: LON04EDGE1220 Ref C: 2024-05-02T13:17:18Z
    date: Thu, 02 May 2024 13:17:18 GMT
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239370255173_1DU5CK10FBZ5UERKJ&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
    Remote address:
    204.79.197.200:443
    Request
    GET /th?id=OADD2.10239370255173_1DU5CK10FBZ5UERKJ&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 565422
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}&ndcParam=QUZE
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 4C87B9156DE240A5BF180E92461EBB94 Ref B: LON04EDGE1220 Ref C: 2024-05-02T13:17:18Z
    date: Thu, 02 May 2024 13:17:18 GMT
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239360313429_1X5GXWWD8KTODKAD6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    Remote address:
    204.79.197.200:443
    Request
    GET /th?id=OADD2.10239360313429_1X5GXWWD8KTODKAD6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 442324
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}&ndcParam=QUZE
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 0D69F7F5D2C9422FB190CAE890CAAE44 Ref B: LON04EDGE1220 Ref C: 2024-05-02T13:17:18Z
    date: Thu, 02 May 2024 13:17:18 GMT
  • flag-us
    DNS
    205.47.74.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    205.47.74.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    aspmx2.googlemail.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    aspmx2.googlemail.com
    IN A
    Response
    aspmx2.googlemail.com
    IN A
    142.250.27.26
  • flag-us
    DNS
    stanfordhealthcare.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordhealthcare.org
    IN MX
    Response
    stanfordhealthcare.org
    IN MX
    stanfordhealthcare-orgmail protectionoutlookcom
  • flag-us
    DNS
    stanfordhealthcare-org.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    Response
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.9.20
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.40.0
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.41.0
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.10.12
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.9.12
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.40.1
  • flag-us
    DNS
    stanfordhealthcare-org.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    Response
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.42.14
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.10.6
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.9.20
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.8.44
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.8.34
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.10.2
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:34 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
    Content-Length: 304
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:34 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org
    Content-Length: 316
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    DNS
    outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    outlook.com
    IN A
    Response
    outlook.com
    IN A
    52.96.222.194
    outlook.com
    IN A
    52.96.229.242
    outlook.com
    IN A
    52.96.91.34
    outlook.com
    IN A
    52.96.222.226
    outlook.com
    IN A
    52.96.228.130
    outlook.com
    IN A
    52.96.214.50
    outlook.com
    IN A
    52.96.223.2
    outlook.com
    IN A
    52.96.111.82
  • flag-us
    DNS
    smtp.gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp.gzip.org
    IN A
    Response
  • flag-us
    DNS
    smtp.gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp.gzip.org
    IN A
    Response
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+outlook.com&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+outlook.com&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjD3wPlwWg5FiDwLmyae2zBviBYXaG4Ixtuf4jrvfDe6S7kewZ_3QFqK1gAvgsbnaO0yAXJaAUM
    x-hallmonitor-challenge: CgwI7qTOsQYQ8dqFkgISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zXQrXzmY31BK9bqnaKFCMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:34 GMT
    Server: gws
    Content-Length: 451
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyIxuaudGPbpSZa_6bIV_I6lJ4Hfw7oZZQfaixJOgZomeWthJS-OIs; expires=Tue, 29-Oct-2024 13:17:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjD3wPlwWg5FiDwLmyae2zBviBYXaG4Ixtuf4jrvfDe6S7kewZ_3QFqK1gAvgsbnaO0yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjD3wPlwWg5FiDwLmyae2zBviBYXaG4Ixtuf4jrvfDe6S7kewZ_3QFqK1gAvgsbnaO0yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:34 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3310
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:34 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:34 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+outlook.com&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+outlook.com&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:34 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mail+gzip.org&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mail+gzip.org&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:35 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=cs.stanford.edu+mail&kgs=0&kls=0&nbq=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=cs.stanford.edu+mail&kgs=0&kls=0&nbq=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:37 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=cs.stanford.edu+mail&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=cs.stanford.edu+mail&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:40 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mail+m-ou.se&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mail+m-ou.se&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:40 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=stanfordchildrens.org+mailto&kgs=0&kls=0&nbq=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=stanfordchildrens.org+mailto&kgs=0&kls=0&nbq=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:40 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Content-Length: 1519
    Age: 2
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=email+stanfordhealthcare.org&kgs=0&kls=0
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=email+stanfordhealthcare.org&kgs=0&kls=0 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:55 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=stanford.edu+e-mail&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=stanford.edu+e-mail&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:56 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=stanfordhealthcare.org+mailto&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=stanfordhealthcare.org+mailto&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:57 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=e-mail+outlook.com&kgs=0&kls=0
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=e-mail+outlook.com&kgs=0&kls=0 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:57 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 2
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=mailto+stanfordchildrens.org&kgs=0&kls=0
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=mailto+stanfordchildrens.org&kgs=0&kls=0 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:58 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 1
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=email+cs.stanford.edu&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=email+cs.stanford.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:17:59 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=cs.stanford.edu+email&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=cs.stanford.edu+email&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:18:01 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=e-mail+stanfordchildrens.org&kgs=0&kls=0&nbq=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=e-mail+stanfordchildrens.org&kgs=0&kls=0&nbq=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:18:03 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 3
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=contact+mail+stanford.edu&kgs=0&kls=0&nbq=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=contact+mail+stanford.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 02 May 2024 13:18:03 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjAWLIoEJCLmG1A7g2RUA5qu7atQOrgpCv5vE_OC8muKRZrtQDeR512bmlrfXu_AmqwyAXJaAUM
    x-hallmonitor-challenge: CgwI7qTOsQYQlefvkgMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-32OI2ZeVAvh8aPKOA6Rq9A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:34 GMT
    Server: gws
    Content-Length: 453
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwBhKinJIRmTJhjhnCNKkNKeSN34x_d0q6p15HOsKV32RkyI-n6h_8; expires=Tue, 29-Oct-2024 13:17:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjAWLIoEJCLmG1A7g2RUA5qu7atQOrgpCv5vE_OC8muKRZrtQDeR512bmlrfXu_AmqwyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjAWLIoEJCLmG1A7g2RUA5qu7atQOrgpCv5vE_OC8muKRZrtQDeR512bmlrfXu_AmqwyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:34 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:34 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    Content-Length: 304
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+acm.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+acm.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjA3X8CsLQHslU5eA8ChCzPf50WbGzknwsYC-JbXYWqHqN9ACe_e3JrfDj6ok-UTK8YyAXJaAUM
    x-hallmonitor-challenge: CgsI76TOsQYQwojjLRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bz4BZam9Jnh7lxSX16Y2-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hy-OT5GE3oU10QkY9_D884LRecIOxUh2QZIswoxFDzEw5kJGQ9BiQ; expires=Tue, 29-Oct-2024 13:17:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjA3X8CsLQHslU5eA8ChCzPf50WbGzknwsYC-JbXYWqHqN9ACe_e3JrfDj6ok-UTK8YyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjA3X8CsLQHslU5eA8ChCzPf50WbGzknwsYC-JbXYWqHqN9ACe_e3JrfDj6ok-UTK8YyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:35 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+email&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+email&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bemail%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjB1yoyrabkMOouR1Q26MX5zzmFswHQvv1y_PwcW851JQAIUdzD61KO-kochlYEHtR4yAXJaAUM
    x-hallmonitor-challenge: CgwI76TOsQYQn8yvlwESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kWJ_GZxrc6H9F1KetDghQA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: gws
    Content-Length: 446
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HySFkGGT2GzOP1qHC9SBeGbp1yjHnVX4tLN5LdPpkIeASl3Snw2mpE; expires=Tue, 29-Oct-2024 13:17:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bemail%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjB1yoyrabkMOouR1Q26MX5zzmFswHQvv1y_PwcW851JQAIUdzD61KO-kochlYEHtR4yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bemail%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjB1yoyrabkMOouR1Q26MX5zzmFswHQvv1y_PwcW851JQAIUdzD61KO-kochlYEHtR4yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:35 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3295
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
    Content-Length: 315
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    DNS
    mxb-00039903.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mxb-00039903.gslb.pphosted.com
    IN A
    Response
    mxb-00039903.gslb.pphosted.com
    IN A
    205.220.175.141
  • flag-us
    DNS
    mxb-00039903.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mxb-00039903.gslb.pphosted.com
    IN A
    Response
    mxb-00039903.gslb.pphosted.com
    IN A
    205.220.163.142
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+outlook.com&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+outlook.com&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO-kzrEGIjDWJLwm6YIcZNtYOZmIO36gPAFQyJiLVAOeT0hueY3z7GJOX4OE5u4NaaeF0H-iTvsyAXJaAUM
    x-hallmonitor-challenge: CgwI76TOsQYQgIn-2wISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-mcxRg-F_GlSSKDxgthSJfQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: gws
    Content-Length: 450
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hz1V4lHS5hg_zTJRrZ-UvL9GktvdqyvMIKBtC1I7rolmDY2NF7APA; expires=Tue, 29-Oct-2024 13:17:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO-kzrEGIjDWJLwm6YIcZNtYOZmIO36gPAFQyJiLVAOeT0hueY3z7GJOX4OE5u4NaaeF0H-iTvsyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO-kzrEGIjDWJLwm6YIcZNtYOZmIO36gPAFQyJiLVAOeT0hueY3z7GJOX4OE5u4NaaeF0H-iTvsyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:35 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3307
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:35 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:35 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+gzip.org&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+gzip.org&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bgzip.org%26num%3D50&hl=en&q=EgS_ZdEnGO-kzrEGIjDMq7j0z5rXa9bnnJH1rfBLjTYERio4U_qMVloGMFAnY_SKV-zBY5pVFAM9BwjqsS0yAXJaAUM
    x-hallmonitor-challenge: CgsI8KTOsQYQxJjcZRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-m6aAX_8DP1YCIg3hccfEQQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:36 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwfPdKgTaGoGk6FYF7t8tVWhRtDBpVgVylqwvJrKCcKcMgDuNaqlw; expires=Tue, 29-Oct-2024 13:17:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bgzip.org%26num%3D50&hl=en&q=EgS_ZdEnGO-kzrEGIjDMq7j0z5rXa9bnnJH1rfBLjTYERio4U_qMVloGMFAnY_SKV-zBY5pVFAM9BwjqsS0yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bgzip.org%26num%3D50&hl=en&q=EgS_ZdEnGO-kzrEGIjDMq7j0z5rXa9bnnJH1rfBLjTYERio4U_qMVloGMFAnY_SKV-zBY5pVFAM9BwjqsS0yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:36 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3319
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:35 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-+HDVHsWgzFDkEPWtPv6qQQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:36 GMT
    x-envoy-upstream-service-time: 33
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:36 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    Content-Length: 312
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    Content-Length: 313
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    Content-Length: 312
    Keep-Alive: timeout=15, max=98
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBC1KlJHunAcf_H7GCIqGao4Sh-dsGx4tyOI8mJeNFkI0YIrgMIUvdvgOMUIqY6gPgyAXJaAUM
    x-hallmonitor-challenge: CgwI8KTOsQYQ9reSvAISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-aona7x725SWzglCuklatGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:36 GMT
    Server: gws
    Content-Length: 462
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hxad0cVAym93P2ZlQsmexEJxApwBSYngBympP9XrR1pSblwgKw_-w; expires=Tue, 29-Oct-2024 13:17:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBC1KlJHunAcf_H7GCIqGao4Sh-dsGx4tyOI8mJeNFkI0YIrgMIUvdvgOMUIqY6gPgyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBC1KlJHunAcf_H7GCIqGao4Sh-dsGx4tyOI8mJeNFkI0YIrgMIUvdvgOMUIqY6gPgyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:36 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3343
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:36 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:36 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:36 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-+693ddC6KZEfQ0hn35AmiQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:36 GMT
    x-envoy-upstream-service-time: 12
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+m-ou.se&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+m-ou.se&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjC7N2M1krk9X2YNX5lrKuqFjZZYKSSLb2k7_AysdgSs1ydmUJ3XtDFh-nuw-HQW8CQyAXJaAUM
    x-hallmonitor-challenge: CgwI8KTOsQYQjZvwjwMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-LdeV2FrTxQByVRcz9Jc0IQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:36 GMT
    Server: gws
    Content-Length: 446
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HylMp9n17pufMZswAkpBFjwimXy0QNKbH0R1xeWz3a0AVF6NQur39M; expires=Tue, 29-Oct-2024 13:17:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordchildrens.org+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordchildrens.org+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBsOuffSgtIaMIVTowQSQThQCIMbI2GUKZ0TSBnSXcLSVe3Hjy3UHlxD9YLKIW7-LsyAXJaAUM
    x-hallmonitor-challenge: CgwI8aTOsQYQgoWnhQESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xzDcIoycYeijiauQjySyIA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:37 GMT
    Server: gws
    Content-Length: 461
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hye12KqsGlmomKxIsj-1c3p8XSCuO9alKd0ezWAYseu_3lmKITs2A; expires=Tue, 29-Oct-2024 13:17:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBsOuffSgtIaMIVTowQSQThQCIMbI2GUKZ0TSBnSXcLSVe3Hjy3UHlxD9YLKIW7-LsyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBsOuffSgtIaMIVTowQSQThQCIMbI2GUKZ0TSBnSXcLSVe3Hjy3UHlxD9YLKIW7-LsyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:37 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3340
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:36 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGPCkzrEGIjBLKIEq2a-_IFbei5jvvvgajSNC2u9ZSm1tm_H9YwhG43EOisZEw9kHGBRP1fnXy14yAXJaAUM
    x-hallmonitor-challenge: CgsI8aTOsQYQ5-qqChIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-8i0wBnOR2PXoS1p8isfS9A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:37 GMT
    Server: gws
    Content-Length: 446
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzGgPE-Tf8qyNEnA42yI46zHUacY-rXdfLpueTSkuasMEiuNRMLZ4o; expires=Tue, 29-Oct-2024 13:17:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjC7N2M1krk9X2YNX5lrKuqFjZZYKSSLb2k7_AysdgSs1ydmUJ3XtDFh-nuw-HQW8CQyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjC7N2M1krk9X2YNX5lrKuqFjZZYKSSLb2k7_AysdgSs1ydmUJ3XtDFh-nuw-HQW8CQyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:37 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3295
    X-XSS-Protection: 0
  • flag-ie
    GET
    https://search.yahoo.com/search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-vRU149e5MWkdk0gW2HLTPg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:36 GMT
    x-envoy-upstream-service-time: 15
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 2
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGPCkzrEGIjBLKIEq2a-_IFbei5jvvvgajSNC2u9ZSm1tm_H9YwhG43EOisZEw9kHGBRP1fnXy14yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGPCkzrEGIjBLKIEq2a-_IFbei5jvvvgajSNC2u9ZSm1tm_H9YwhG43EOisZEw9kHGBRP1fnXy14yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:37 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3295
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:37 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-Hg4F4TiKZBMn/KwPKCMgxQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:37 GMT
    x-envoy-upstream-service-time: 37
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-68KYbT2QDr9bLLB4RQGFmQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:39 GMT
    x-envoy-upstream-service-time: 15
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=outlook.com+e-mail&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=outlook.com+e-mail&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Doutlook.com%2Be-mail%26num%3D50&hl=en&q=EgS_ZdEnGPOkzrEGIjBAxYzixfLVADiU-VkVgPyEfyKpB08jmwkiAFmKkDvp8iXAy5Dq9JJEsnmpTcZBv8wyAXJaAUM
    x-hallmonitor-challenge: CgwI86TOsQYQ2-_LqQESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-hfYYj6JmPbgbI3xw5hX-DA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: gws
    Content-Length: 450
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyrqrC0MMBoCoZ6g1-dgueEZDByyoNZvSl5Ud7Xe55n4GSRzHKPsQ; expires=Tue, 29-Oct-2024 13:17:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Doutlook.com%2Be-mail%26num%3D50&hl=en&q=EgS_ZdEnGPOkzrEGIjBAxYzixfLVADiU-VkVgPyEfyKpB08jmwkiAFmKkDvp8iXAy5Dq9JJEsnmpTcZBv8wyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Doutlook.com%2Be-mail%26num%3D50&hl=en&q=EgS_ZdEnGPOkzrEGIjBAxYzixfLVADiU-VkVgPyEfyKpB08jmwkiAFmKkDvp8iXAy5Dq9JJEsnmpTcZBv8wyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:39 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3307
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjCyuwsqqe_DRXvJQGW2zdgLaeyOoAo9bNDAuU-o0JPMcNyHz_E52v6UZX2jocfWb9kyAXJaAUM
    x-hallmonitor-challenge: CgwI86TOsQYQwKmm-AESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gHpybEqPdYtFhXceD_9Icg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hz70CMOW-WGqzeQ97sfGdeg9ds6xCMSo5qLXcDb_BgW7ctU3iGLWQ; expires=Tue, 29-Oct-2024 13:17:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjCyuwsqqe_DRXvJQGW2zdgLaeyOoAo9bNDAuU-o0JPMcNyHz_E52v6UZX2jocfWb9kyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjCyuwsqqe_DRXvJQGW2zdgLaeyOoAo9bNDAuU-o0JPMcNyHz_E52v6UZX2jocfWb9kyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:39 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:39 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    http://search.yahoo.com/search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:39 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-HP0YB/xUrMjZoQnXSLh2PA==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:39 GMT
    x-envoy-upstream-service-time: 35
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjBoBQfLIbN6WklufKW1Ekw5Qjr5EEuwChtACCWatgviakYtlBcmMqpPQUUn7RC1r7IyAXJaAUM
    x-hallmonitor-challenge: CgwI86TOsQYQkLOpzwMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zjyiijBdRCYj6bsA7xyhiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:39 GMT
    Server: gws
    Content-Length: 453
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyrmAHcJHWRzL8TGyXaBjhs6YY2ecm--DwXYql016zfu2Rhuhm047A; expires=Tue, 29-Oct-2024 13:17:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordchildrens.org+mailto&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordchildrens.org+mailto&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D50&hl=en&q=EgS_ZdEnGPSkzrEGIjDeey6vBvXZiOipytZf8_Vit7Hkal_v7bDQIBjDOLxry2wo52wQHBThFw7Rw_sHmLYyAXJaAUM
    x-hallmonitor-challenge: CgsI9KTOsQYQkJusaxIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CZQvwsx5jjpxGaPRF4Fkxw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:40 GMT
    Server: gws
    Content-Length: 460
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzAZXnNgt5hlPCuYuiLP6nanRcFf15PV2eCxSyapKtiQZAQlYIAL10; expires=Tue, 29-Oct-2024 13:17:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D50&hl=en&q=EgS_ZdEnGPSkzrEGIjDeey6vBvXZiOipytZf8_Vit7Hkal_v7bDQIBjDOLxry2wo52wQHBThFw7Rw_sHmLYyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D50&hl=en&q=EgS_ZdEnGPSkzrEGIjDeey6vBvXZiOipytZf8_Vit7Hkal_v7bDQIBjDOLxry2wo52wQHBThFw7Rw_sHmLYyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:40 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3337
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPOkzrEGIjBbAdokZtlA88lvBlisVCUnU_Y0Xc7oSfycPBeksOegJbfyHFPzAsIDe-po74aC7OMyAXJaAUM
    x-hallmonitor-challenge: CgsI9KTOsQYQzIfzHBIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-GqhAdGyqsm-joC436R_naw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:40 GMT
    Server: gws
    Content-Length: 444
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hw_K7GNAMFsnfZcyIAvlMpsEXfUBvk6gbmS5r4I_C77P1QEdUkv_Fc; expires=Tue, 29-Oct-2024 13:17:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjBoBQfLIbN6WklufKW1Ekw5Qjr5EEuwChtACCWatgviakYtlBcmMqpPQUUn7RC1r7IyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjBoBQfLIbN6WklufKW1Ekw5Qjr5EEuwChtACCWatgviakYtlBcmMqpPQUUn7RC1r7IyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:40 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPOkzrEGIjBbAdokZtlA88lvBlisVCUnU_Y0Xc7oSfycPBeksOegJbfyHFPzAsIDe-po74aC7OMyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPOkzrEGIjBbAdokZtlA88lvBlisVCUnU_Y0Xc7oSfycPBeksOegJbfyHFPzAsIDe-po74aC7OMyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:40 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3289
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPSkzrEGIjBD434GVM4UyhWrOo8DqP-iz95yCa3-PfvnuIU1k4WLqBFhiApUO0UlV6Bm0-gGAQkyAXJaAUM
    x-hallmonitor-challenge: CgwI9KTOsQYQ2Yr9kQISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ZTIwpdlTqlonE-b8HXMAnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:40 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxnvTNqS1JcjeoczLx2y3FltSGn4M-Ba41EE8dnm25aT3iA_R--eik; expires=Tue, 29-Oct-2024 13:17:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGPSkzrEGIjCcROjmQVt2oK9TnZebDiIXGp3BzL3WYaSPVqe0msiCTjlk-HLqW0JxLOY93kjhTWYyAXJaAUM
    x-hallmonitor-challenge: CgwI9KTOsQYQ2Zix2wMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YG0oFkJhiOSp7_Xn_zxEMw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: gws
    Content-Length: 452
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hwa3627d83xQBXBl7WX9k-oOQ6Eh-pF5ZqcQOZWeNhNOCkEZtxCJA; expires=Tue, 29-Oct-2024 13:17:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjDNkMsjNx5CE0PAL0h5f_KK-fe3uG_mk9Fojgi2cDCH6rA_HecVap91fJIxRtjpzDcyAXJaAUM
    x-hallmonitor-challenge: CgwI9aTOsQYQxaKI6gESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5Ub4qXnF9bwYN-PAp3Mwdg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hyg8Ess6TFwmWliNgK4nQaeFQdmFIE2edO2W0kDkfkLWGGq1lUetw; expires=Tue, 29-Oct-2024 13:17:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGPSkzrEGIjBjv5Ak0hxHe5M20c3Od0cQWZWduh-ZIG4Dravj09Uy1H7BxCvF9x1aDrad30qEp8gyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGPSkzrEGIjBjv5Ak0hxHe5M20c3Od0cQWZWduh-ZIG4Dravj09Uy1H7BxCvF9x1aDrad30qEp8gyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:41 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3262
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:40 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-lcOzzSfiQ6RnQttUvngKaQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:40 GMT
    x-envoy-upstream-service-time: 10
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-SrUtZu89IML5w2d/ygOewg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:41 GMT
    x-envoy-upstream-service-time: 52
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu&hl=en&q=EgS_ZdEnGPSkzrEGIjAARQgZyYShGK2cF_GqauEiRHcdZGZsUCtOQFyOe10p3MzOk4cty8HIVkO4vIS0YzoyAXJaAUM
    x-hallmonitor-challenge: CgwI9KTOsQYQydvXhgMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DWbYQPvcdbKvhIxQKm3N1g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:40 GMT
    Server: gws
    Content-Length: 443
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hx_T6OLdM35pjTOKS1Gko955PuNGFO8W89wkTMJYck8AyAo00IlZg; expires=Tue, 29-Oct-2024 13:17:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPSkzrEGIjBD434GVM4UyhWrOo8DqP-iz95yCa3-PfvnuIU1k4WLqBFhiApUO0UlV6Bm0-gGAQkyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPSkzrEGIjBD434GVM4UyhWrOo8DqP-iz95yCa3-PfvnuIU1k4WLqBFhiApUO0UlV6Bm0-gGAQkyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:40 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3325
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:40 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+acm.org
    Content-Length: 303
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    Content-Length: 310
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    Content-Length: 308
    Keep-Alive: timeout=15, max=98
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:40 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+acm.org
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGPSkzrEGIjBjv5Ak0hxHe5M20c3Od0cQWZWduh-ZIG4Dravj09Uy1H7BxCvF9x1aDrad30qEp8gyAXJaAUM
    x-hallmonitor-challenge: CgwI9aTOsQYQwI3zkgESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7sib-89_mHmJYk6a9a4z3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: gws
    Content-Length: 435
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwbOKMv3UdoBNKGU3t-P87QCqsE_G_Z3c6MHqtcaw6ac0wFNlgC24E; expires=Tue, 29-Oct-2024 13:17:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu&hl=en&q=EgS_ZdEnGPSkzrEGIjAARQgZyYShGK2cF_GqauEiRHcdZGZsUCtOQFyOe10p3MzOk4cty8HIVkO4vIS0YzoyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu&hl=en&q=EgS_ZdEnGPSkzrEGIjAARQgZyYShGK2cF_GqauEiRHcdZGZsUCtOQFyOe10p3MzOk4cty8HIVkO4vIS0YzoyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:41 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3286
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:41 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    http://search.yahoo.com/search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:41 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-uYsye2tH7qv/jwg67g1dgw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:41 GMT
    x-envoy-upstream-service-time: 15
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGPSkzrEGIjCcROjmQVt2oK9TnZebDiIXGp3BzL3WYaSPVqe0msiCTjlk-HLqW0JxLOY93kjhTWYyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGPSkzrEGIjCcROjmQVt2oK9TnZebDiIXGp3BzL3WYaSPVqe0msiCTjlk-HLqW0JxLOY93kjhTWYyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:41 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3313
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjAuJ0GdIURAN4FaZf0dZXCltwMjGV09ZiqorflO9_vciLrHs5GGuFY1cedah7yG1uYyAXJaAUM
    x-hallmonitor-challenge: CgwI9aTOsQYQu_e1qAMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-FXcJYUm4eRD9IhsvVH8hNg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: gws
    Content-Length: 462
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzqZH_9OpaxmOrI4UfhO_YuccEF86OYH3wP28KaEELIqrjekBEl2Lc; expires=Tue, 29-Oct-2024 13:17:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjDNkMsjNx5CE0PAL0h5f_KK-fe3uG_mk9Fojgi2cDCH6rA_HecVap91fJIxRtjpzDcyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjDNkMsjNx5CE0PAL0h5f_KK-fe3uG_mk9Fojgi2cDCH6rA_HecVap91fJIxRtjpzDcyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:41 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPWkzrEGIjC4gC6SuiM2yzbUc5IidnEr-UbM3e3gvuU7Ew8cVI8hyEwIFkp1X6y0Jz-XzaIA2NUyAXJaAUM
    x-hallmonitor-challenge: CgwI9aTOsQYQoYyP1AMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-EG5HJwhveuSCSmdRBNxGpA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: gws
    Content-Length: 444
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxEhKqfF65G_NYvJahuaN9TTdGTO1aXbNBLjM-Ob4_ZkPJYJDPM4fM; expires=Tue, 29-Oct-2024 13:17:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjAuJ0GdIURAN4FaZf0dZXCltwMjGV09ZiqorflO9_vciLrHs5GGuFY1cedah7yG1uYyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjAuJ0GdIURAN4FaZf0dZXCltwMjGV09ZiqorflO9_vciLrHs5GGuFY1cedah7yG1uYyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:42 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3343
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:41 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjD683x-Up8UY7wPa4aixX9AQkb0X5qQgGWI_LD8a5ijxx0HHIggLjDi8JWYEf11B_syAXJaAUM
    x-hallmonitor-challenge: CgwI9qTOsQYQu6bwqAESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-mcC5CeUpVWDMA3Q2yz7g7A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzlY4qaH-QHxAXSlICWAanxNWOHEpEnT9y_Ki_gMm3sZ6Da1cnlzk0; expires=Tue, 29-Oct-2024 13:17:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPWkzrEGIjC4gC6SuiM2yzbUc5IidnEr-UbM3e3gvuU7Ew8cVI8hyEwIFkp1X6y0Jz-XzaIA2NUyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPWkzrEGIjC4gC6SuiM2yzbUc5IidnEr-UbM3e3gvuU7Ew8cVI8hyEwIFkp1X6y0Jz-XzaIA2NUyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:42 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3289
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjDV-JYlz2_46iRr-sybNqVAUM9DYFQjSlnrszuEHkcKXtUWY85Emi5UpQPzjZyUCJMyAXJaAUM
    x-hallmonitor-challenge: CgwI9qTOsQYQid_zuAESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-O0guVK6nPrsJIw3W84tl_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: gws
    Content-Length: 453
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzaqY6ssiZv5rlTSJ4YBe-0xfKAlmqbOhbKhM4h9EV-ymeh6O0GzzE; expires=Tue, 29-Oct-2024 13:17:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjBvWnhpaq0zSV2GpPi3V7neCBTJXr95_TLgHto_hDz-c35d0Os3jXBy5OIGA4zj0b8yAXJaAUM
    x-hallmonitor-challenge: CgwI9qTOsQYQ0Ovs2wISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5WO6gSCrOJEdChuIg9jtJg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxxxNlBa4VFQtYcZRKQlbHV0pTn2_twaGyAV8vRX6uag-ebWGdpIKU; expires=Tue, 29-Oct-2024 13:17:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAGxWJrjxj1OQAn0x5SFxjFLf-c0r-wyFgshRzUXgjRZT8bnJw0w2hSOna_waCBcpYyAXJaAUM
    x-hallmonitor-challenge: CgwI9qTOsQYQld_s1QMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce--d3GFBWzmavQHiHwLrROPQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwrTdLmbIQJacDi0bHnARJGuHdE9xuoK6iZab_PYudQW4KMkkaMbA; expires=Tue, 29-Oct-2024 13:17:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAnhBB9X7AZku7L-MF9LIJ4Y1O0IT6EfjWDBZ7ZIcTBODukFqqqxjPoKHsyoqelVj8yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAnhBB9X7AZku7L-MF9LIJ4Y1O0IT6EfjWDBZ7ZIcTBODukFqqqxjPoKHsyoqelVj8yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:43 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3325
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:42 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-B4aJLU5BZxPN4KDth/lJ5w==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:42 GMT
    x-envoy-upstream-service-time: 13
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjD683x-Up8UY7wPa4aixX9AQkb0X5qQgGWI_LD8a5ijxx0HHIggLjDi8JWYEf11B_syAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjD683x-Up8UY7wPa4aixX9AQkb0X5qQgGWI_LD8a5ijxx0HHIggLjDi8JWYEf11B_syAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:42 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3325
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjDV-JYlz2_46iRr-sybNqVAUM9DYFQjSlnrszuEHkcKXtUWY85Emi5UpQPzjZyUCJMyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjDV-JYlz2_46iRr-sybNqVAUM9DYFQjSlnrszuEHkcKXtUWY85Emi5UpQPzjZyUCJMyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:42 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email
    Content-Length: 311
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+e-mail&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+e-mail&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAnhBB9X7AZku7L-MF9LIJ4Y1O0IT6EfjWDBZ7ZIcTBODukFqqqxjPoKHsyoqelVj8yAXJaAUM
    x-hallmonitor-challenge: CgwI9qTOsQYQ9LqAtQMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-N_Um35jdwOTINiDpHLYccQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:42 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hx6kDxl8C_DrS39A-RHhBm9N1ekn2OZfUqriBly-hBglJ9g4BQ74Q; expires=Tue, 29-Oct-2024 13:17:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjBvWnhpaq0zSV2GpPi3V7neCBTJXr95_TLgHto_hDz-c35d0Os3jXBy5OIGA4zj0b8yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjBvWnhpaq0zSV2GpPi3V7neCBTJXr95_TLgHto_hDz-c35d0Os3jXBy5OIGA4zj0b8yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:42 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3322
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:42 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-h+DRB7CIiBq8IDNwaax9mw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:42 GMT
    x-envoy-upstream-service-time: 21
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-8HxvlhMo/JHsLkWtQ5QlFQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:43 GMT
    x-envoy-upstream-service-time: 12
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=alumni.caltech.edu+mail&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=alumni.caltech.edu+mail&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjAiXycCBLcim2X-O2XlzjnVn8d9aK5VqHaUai7WQYttNnRSN9ZoILgzRBNjYd6JPYIyAXJaAUM
    x-hallmonitor-challenge: CgwI96TOsQYQg9uF8gESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MGSCGnVE8nPgFdo_gADroA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwG1pYVOSBd5eB6rAM7r3J-rfbE0h64zSJdloQwULSUKwhQngMWRw; expires=Tue, 29-Oct-2024 13:17:43 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail&hl=en&q=EgS_ZdEnGPekzrEGIjCN0EDDvYAz10EEr4fv5-kfjvqqHYOIWwu9fsyaAWbC59HIWqImVxiku4gRDjaU31IyAXJaAUM
    x-hallmonitor-challenge: CgwI96TOsQYQjaCMyAMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-WU-GsOsgbz__wHTmifulNg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: gws
    Content-Length: 442
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hz18quyHAiOXDZKy4CRUH19WeJhZDrx0q7sMyy3TCBqU6r0cjaXQro; expires=Tue, 29-Oct-2024 13:17:43 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjDHDG9Cujxm62htqmemhOkR8LS8tqKwuktbbPy19U0ltIbjBUSHqMCgZmYcpUXTltMyAXJaAUM
    x-hallmonitor-challenge: CgwI-KTOsQYQ1vThxAESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RyZY1zsc63dIuBYHVMaSXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: gws
    Content-Length: 463
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzSDU5E6xf9eZn0EKOfUzMtUjm4YXmgBewaB5QICkLwkeQm3QvT-xs; expires=Tue, 29-Oct-2024 13:17:44 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordchildrens.org%26num%3D20&hl=en&q=EgS_ZdEnGPekzrEGIjB2gpmLryE_LVXUt1mjLYKYSODfwWGl9EOMXPLm4ufHa4CBO33YE7yHRzk6q0Ks2HQyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordchildrens.org%26num%3D20&hl=en&q=EgS_ZdEnGPekzrEGIjB2gpmLryE_LVXUt1mjLYKYSODfwWGl9EOMXPLm4ufHa4CBO33YE7yHRzk6q0Ks2HQyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:44 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3337
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAGxWJrjxj1OQAn0x5SFxjFLf-c0r-wyFgshRzUXgjRZT8bnJw0w2hSOna_waCBcpYyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAGxWJrjxj1OQAn0x5SFxjFLf-c0r-wyFgshRzUXgjRZT8bnJw0w2hSOna_waCBcpYyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:43 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3322
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanfordhealthcare.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanfordhealthcare.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjBUXvSNJrKkei55mWZ1JsarZiQVs23ZkgadpBDKQgjoJRx5O6xwOV1b03VyWf7i7yoyAXJaAUM
    x-hallmonitor-challenge: CgwI96TOsQYQiNXcgwISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SW0hNa4LSAbzRTzwDqvzXA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: gws
    Content-Length: 462
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hwor4pcAInxpDvXO3_0zPfr80DSp9b9IAI7xvbRNj6tnhUgMf10jlI; expires=Tue, 29-Oct-2024 13:17:43 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjAiXycCBLcim2X-O2XlzjnVn8d9aK5VqHaUai7WQYttNnRSN9ZoILgzRBNjYd6JPYIyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjAiXycCBLcim2X-O2XlzjnVn8d9aK5VqHaUai7WQYttNnRSN9ZoILgzRBNjYd6JPYIyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:43 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3325
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:43 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:43 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-ms31dTVo2vq8nQsqbGScdQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:43 GMT
    x-envoy-upstream-service-time: 12
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-hIPPgYwTwAv+yfVu7eAzVg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:44 GMT
    x-envoy-upstream-service-time: 14
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail
    Content-Length: 321
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:43 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
    Content-Length: 312
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjBUXvSNJrKkei55mWZ1JsarZiQVs23ZkgadpBDKQgjoJRx5O6xwOV1b03VyWf7i7yoyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjBUXvSNJrKkei55mWZ1JsarZiQVs23ZkgadpBDKQgjoJRx5O6xwOV1b03VyWf7i7yoyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:43 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3343
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanfordchildrens.org&num=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanfordchildrens.org&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordchildrens.org%26num%3D20&hl=en&q=EgS_ZdEnGPekzrEGIjB2gpmLryE_LVXUt1mjLYKYSODfwWGl9EOMXPLm4ufHa4CBO33YE7yHRzk6q0Ks2HQyAXJaAUM
    x-hallmonitor-challenge: CgsI-KTOsQYQ5djLXxIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-R_Febir3yh1v7tJZrRDRZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: gws
    Content-Length: 460
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hw3dHduDapS9tVGBWNn3x-vKFXUKX4Nl68dqF_bxSBPGvku_tLqQA; expires=Tue, 29-Oct-2024 13:17:44 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail&hl=en&q=EgS_ZdEnGPekzrEGIjCN0EDDvYAz10EEr4fv5-kfjvqqHYOIWwu9fsyaAWbC59HIWqImVxiku4gRDjaU31IyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail&hl=en&q=EgS_ZdEnGPekzrEGIjCN0EDDvYAz10EEr4fv5-kfjvqqHYOIWwu9fsyaAWbC59HIWqImVxiku4gRDjaU31IyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:44 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3283
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
    Content-Length: 311
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-ie
    GET
    http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:44 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:44 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-8z+pkzoAit9+0a8+sEoDwQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:44 GMT
    x-envoy-upstream-service-time: 13
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-cPr7nVdfIBRc44C/aGdKKA==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:45 GMT
    x-envoy-upstream-service-time: 118
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-eGLLf66M8Jykh0+9ehartw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:45 GMT
    x-envoy-upstream-service-time: 14
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+outlook.com&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+outlook.com&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBFeAf4HlLAzFeXZnD3XHWX_wJOT9K7rqJ5O2bc3zVV9DzYXq2vE7zRGhWubUXOP0kyAXJaAUM
    x-hallmonitor-challenge: CgwI-KTOsQYQm8rcgQISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Ral2sgZgNWU24K9n1UdI2Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: gws
    Content-Length: 449
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyWOC1-k_F6ULqkewTjHOm4HQiPvA-QOgsER2o7tjbjG2byCrV4BwA; expires=Tue, 29-Oct-2024 13:17:44 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+stanfordchildrens.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+stanfordchildrens.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bstanfordchildrens.org%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBseMwv32lxWrXyIaamAXC9qjGGjEj0c5DVEc0sMi68ouwEzimheyXLoXSH1yaYI-QyAXJaAUM
    x-hallmonitor-challenge: CgsI-aTOsQYQ_6G_BRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BjUPp1FDKfmDJt7LXqSVAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:45 GMT
    Server: gws
    Content-Length: 460
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwQga_cotFEIyNfyRYeDXLB6KIMfu2veEfRq646qnMCcd9buEUnNw; expires=Tue, 29-Oct-2024 13:17:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBwRQfiH0U0fCaqWWQKrOzL61h7LZP3yCZ3s-9Rlc2699AG4XtFh8RgF_Q6FkX7XIAyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBwRQfiH0U0fCaqWWQKrOzL61h7LZP3yCZ3s-9Rlc2699AG4XtFh8RgF_Q6FkX7XIAyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:45 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBwRQfiH0U0fCaqWWQKrOzL61h7LZP3yCZ3s-9Rlc2699AG4XtFh8RgF_Q6FkX7XIAyAXJaAUM
    x-hallmonitor-challenge: CgwI-KTOsQYQ0tToiQMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-KLs1pVkhR-NeHBeEKjxm3w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:44 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyH9XkAiRTRVJIdEAL2m3GTeYISh0Y0vIvjqjAUAA3nwCwfTdLvz_Y; expires=Tue, 29-Oct-2024 13:17:44 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjDHDG9Cujxm62htqmemhOkR8LS8tqKwuktbbPy19U0ltIbjBUSHqMCgZmYcpUXTltMyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjDHDG9Cujxm62htqmemhOkR8LS8tqKwuktbbPy19U0ltIbjBUSHqMCgZmYcpUXTltMyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:44 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3340
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:44 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBFeAf4HlLAzFeXZnD3XHWX_wJOT9K7rqJ5O2bc3zVV9DzYXq2vE7zRGhWubUXOP0kyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBFeAf4HlLAzFeXZnD3XHWX_wJOT9K7rqJ5O2bc3zVV9DzYXq2vE7zRGhWubUXOP0kyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:44 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3304
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:44 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjArjgqhNtNl7x6174eaB2PcF-gTKG2dn3uINl_RT-AJKrfoDwB5rLPfSew0HY-8WCMyAXJaAUM
    x-hallmonitor-challenge: CgwI-aTOsQYQh5WRqQESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-0bdIaLSu0Bkb506ru5nuzA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:45 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyEn_fovuvybBLqfJ964cPVvC3_BZoMs8Dhs-cmS8OHQSl8aWYkPA; expires=Tue, 29-Oct-2024 13:17:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM
    x-hallmonitor-challenge: CgwI-aTOsQYQ6qyTzwISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Q1oOEIm2dhjw708FbgRBXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:45 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzWlX1MSWN03hwwRfedR6bbb6oO8AAM7yn70hJDJbThNynaYlnGr60; expires=Tue, 29-Oct-2024 13:17:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+cs.stanford.edu&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+cs.stanford.edu&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPmkzrEGIjA_qTaGmLo0HYbEzmwR0cy2eYGTpOk4sdnfgHaFRnIefNYYLDmNwAgM43S1WAcuxcwyAXJaAUM
    x-hallmonitor-challenge: CgsI-qTOsQYQ08KELBIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4vjEzQ-f_a3PfHNLmh3Kvg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:46 GMT
    Server: gws
    Content-Length: 453
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hz5JwvbxQvRwuJpvMXzsOUg_pJ1WctuB9w90FhQcKenHByWMNhR2Q; expires=Tue, 29-Oct-2024 13:17:46 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:46 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3322
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:45 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM
    x-hallmonitor-challenge: CgwI-aTOsQYQpY6YggISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-aTiUP69ozVa5itd1hXZmWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:45 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwNVdSPzXLcaliHJDxoxdAlNvYGdpGrgqI0Zp8ydOTlD5Xng_VdPA; expires=Tue, 29-Oct-2024 13:17:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bstanfordchildrens.org%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBseMwv32lxWrXyIaamAXC9qjGGjEj0c5DVEc0sMi68ouwEzimheyXLoXSH1yaYI-QyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bstanfordchildrens.org%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBseMwv32lxWrXyIaamAXC9qjGGjEj0c5DVEc0sMi68ouwEzimheyXLoXSH1yaYI-QyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:45 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3337
    X-XSS-Protection: 0
  • flag-ie
    GET
    https://search.yahoo.com/search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-4Smlq76MKZitGLWchHAcXg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:45 GMT
    x-envoy-upstream-service-time: 14
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:45 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:45 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordhealthcare.org+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordhealthcare.org+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordhealthcare.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjBIFWnCTRMnWGUFtl2l-VEC3AW2IBkbQDPO9gKnSvyScMdNkUqXzCcq1ZpSRg9pVt4yAXJaAUM
    x-hallmonitor-challenge: CgwI-aTOsQYQsq28qAMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-KCNHkz6H5K02aVOZcH3R7A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:45 GMT
    Server: gws
    Content-Length: 462
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzF9VUfeCbT2_VpafGnVRVBqLuYdan8Z-eBOQzWH0n8Ed-tN9dj5bI; expires=Tue, 29-Oct-2024 13:17:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjArjgqhNtNl7x6174eaB2PcF-gTKG2dn3uINl_RT-AJKrfoDwB5rLPfSew0HY-8WCMyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjArjgqhNtNl7x6174eaB2PcF-gTKG2dn3uINl_RT-AJKrfoDwB5rLPfSew0HY-8WCMyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:45 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:46 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:46 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:45 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-BrXP9SBwXbEejYYb8i0F3w==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:46 GMT
    x-envoy-upstream-service-time: 12
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-DeEWAGpB3MtfaZSKpfUkew==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:56 GMT
    x-envoy-upstream-service-time: 11
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+acm.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+acm.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjATSAM5kji4VuVWvnbO8RmYNrhxyHSQ-bFSonxPW72wXIrhn4IBdbVQW0NJtUhQj2kyAXJaAUM
    x-hallmonitor-challenge: CgwI-qTOsQYQ-OjAngESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ViLQThswMI6H8xRwTKufXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:46 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hy5kJK93WvpZ2--JXj2btVP33nUL6MVcRZVbPTBNQ2VC8-Hsjaylw; expires=Tue, 29-Oct-2024 13:17:46 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:46 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3322
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPqkzrEGIjB3u0RNEB5RyOXSPOAqUr3pnXVSj3gBCR4p8-nBqepc3GgnhWQ5K-p5Q-BGLYokTckyAXJaAUM
    x-hallmonitor-challenge: CgwI-qTOsQYQjuuRyAISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QQoGtDPrf0FgSC1bYNskLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:46 GMT
    Server: gws
    Content-Length: 454
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hy5p75Myp72Bg6ijVIxMtHEFP8KBw1R-a6-OZ38DtjvYvup3pWTtQ; expires=Tue, 29-Oct-2024 13:17:46 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordhealthcare.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjBIFWnCTRMnWGUFtl2l-VEC3AW2IBkbQDPO9gKnSvyScMdNkUqXzCcq1ZpSRg9pVt4yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordhealthcare.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjBIFWnCTRMnWGUFtl2l-VEC3AW2IBkbQDPO9gKnSvyScMdNkUqXzCcq1ZpSRg9pVt4yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:46 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3343
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjDis6ZGc8mApvUN9kDvON0Nd_bvZPdg39ZR60wi7iuL0sbS_ZqJ3L-B4Ys4LE_Gg0AyAXJaAUM
    x-hallmonitor-challenge: CgwI-qTOsQYQ16jj7QISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Fb3sfPiw5AWMclcMBK-29g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:46 GMT
    Server: gws
    Content-Length: 456
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hw0z8HA1lwTuhKqCD5jusTmwFwms-zCt4iM7tWLuVqbb_SjcnFnFPA; expires=Tue, 29-Oct-2024 13:17:46 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjATSAM5kji4VuVWvnbO8RmYNrhxyHSQ-bFSonxPW72wXIrhn4IBdbVQW0NJtUhQj2kyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjATSAM5kji4VuVWvnbO8RmYNrhxyHSQ-bFSonxPW72wXIrhn4IBdbVQW0NJtUhQj2kyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:46 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPmkzrEGIjA_qTaGmLo0HYbEzmwR0cy2eYGTpOk4sdnfgHaFRnIefNYYLDmNwAgM43S1WAcuxcwyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPmkzrEGIjA_qTaGmLo0HYbEzmwR0cy2eYGTpOk4sdnfgHaFRnIefNYYLDmNwAgM43S1WAcuxcwyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:46 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3316
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPqkzrEGIjB3u0RNEB5RyOXSPOAqUr3pnXVSj3gBCR4p8-nBqepc3GgnhWQ5K-p5Q-BGLYokTckyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPqkzrEGIjB3u0RNEB5RyOXSPOAqUr3pnXVSj3gBCR4p8-nBqepc3GgnhWQ5K-p5Q-BGLYokTckyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:46 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3319
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjDis6ZGc8mApvUN9kDvON0Nd_bvZPdg39ZR60wi7iuL0sbS_ZqJ3L-B4Ys4LE_Gg0AyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjDis6ZGc8mApvUN9kDvON0Nd_bvZPdg39ZR60wi7iuL0sbS_ZqJ3L-B4Ys4LE_Gg0AyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:46 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3325
    X-XSS-Protection: 0
  • flag-us
    DNS
    aspmx3.googlemail.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    aspmx3.googlemail.com
    IN A
    Response
    aspmx3.googlemail.com
    IN A
    142.250.153.26
  • flag-us
    DNS
    stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanford.edu
    IN MX
    Response
    stanford.edu
    IN MX
    mxa-00000d07gslbpphostedcom
    stanford.edu
    IN MX
    mxb-00000d07�9
  • flag-us
    DNS
    mxa-00000d07.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mxa-00000d07.gslb.pphosted.com
    IN A
    Response
    mxa-00000d07.gslb.pphosted.com
    IN A
    67.231.157.125
  • flag-us
    DNS
    mxa-00000d07.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    mxa-00000d07.gslb.pphosted.com
    IN A
    Response
    mxa-00000d07.gslb.pphosted.com
    IN A
    67.231.149.169
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:55 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    Content-Length: 312
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    DNS
    stanfordhealthcare.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordhealthcare.org
    IN A
    Response
    stanfordhealthcare.org
    IN A
    52.205.1.99
    stanfordhealthcare.org
    IN A
    18.214.186.56
    stanfordhealthcare.org
    IN A
    34.204.164.4
    stanfordhealthcare.org
    IN A
    34.193.169.64
  • flag-us
    DNS
    stanfordhealthcare.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordhealthcare.org
    IN A
    Response
    stanfordhealthcare.org
    IN A
    34.193.169.64
    stanfordhealthcare.org
    IN A
    34.204.164.4
    stanfordhealthcare.org
    IN A
    18.214.186.56
    stanfordhealthcare.org
    IN A
    52.205.1.99
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:55 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:55 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:55 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:55 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:55 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email
    Content-Length: 318
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+gzip.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+gzip.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjBy7wEuvEeLb9wY1d8NR29T7Ibvoov8O3-VZJyYQHmdmqtMgl_g_x1AivMxqrnQjfwyAXJaAUM
    x-hallmonitor-challenge: CgwIhKXOsQYQjZDonwESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-jf7mAHMCMyguADFmDFeIxw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: gws
    Content-Length: 448
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwQzRMLk-ZwRM0GWh31C9c3s6kKzUyx5pZXF_yqolonPZArw-KFxf4; expires=Tue, 29-Oct-2024 13:17:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjDHHhea9Qt2oeBh_JYZbSqsRYpr_cYYmreuN2CpqF1rL-f2vsNVqbUhFdUj9HVdUMQyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjDHHhea9Qt2oeBh_JYZbSqsRYpr_cYYmreuN2CpqF1rL-f2vsNVqbUhFdUj9HVdUMQyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:56 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3343
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjDHHhea9Qt2oeBh_JYZbSqsRYpr_cYYmreuN2CpqF1rL-f2vsNVqbUhFdUj9HVdUMQyAXJaAUM
    x-hallmonitor-challenge: CgsIhKXOsQYQ2eWAfBIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HTWbHWxmYw5lZORr-Vw1xw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: gws
    Content-Length: 462
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzeimKxNL_QhtPvonDOg62KVVNadqB6-3yavz3fHOmuK0Yz0_EOUQ; expires=Tue, 29-Oct-2024 13:17:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanford.edu+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=stanford.edu+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCrysEltoMWa43DVx8osh8NuJFL3jzb-whR68MVdnha9K7ic-wVf308sXtm5itqxXAyAXJaAUM
    x-hallmonitor-challenge: CgwIhKXOsQYQko3C4AISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-j2tcGOSh-PlgtG_LaHaK-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: gws
    Content-Length: 452
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyJDR8Dlrwp5ErqPl8I5qDFpAaeR_20WFNLvKN2rTQvpTdazddKhg; expires=Tue, 29-Oct-2024 13:17:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCX5RBQqdwSMy5EZwDvMdFr3JVifLDeBKn_SIkdifqZWcsMsV_dnkA9QS8GrD4aM80yAXJaAUM
    x-hallmonitor-challenge: CgsIhaXOsQYQutXrQxIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-cazsmSga-nn8jQ3ZBH1LXQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:57 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hw0Z-zmLBkbPsxVQVAn0mZGBs6KBZgN4Zni2PYJpflP3pvPGQc_2A; expires=Tue, 29-Oct-2024 13:17:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCX5RBQqdwSMy5EZwDvMdFr3JVifLDeBKn_SIkdifqZWcsMsV_dnkA9QS8GrD4aM80yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCX5RBQqdwSMy5EZwDvMdFr3JVifLDeBKn_SIkdifqZWcsMsV_dnkA9QS8GrD4aM80yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:57 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:56 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:56 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-EfhxgX5vFDvCEgfeLzXQaQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:56 GMT
    x-envoy-upstream-service-time: 13
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjBy7wEuvEeLb9wY1d8NR29T7Ibvoov8O3-VZJyYQHmdmqtMgl_g_x1AivMxqrnQjfwyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjBy7wEuvEeLb9wY1d8NR29T7Ibvoov8O3-VZJyYQHmdmqtMgl_g_x1AivMxqrnQjfwyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:56 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3301
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+contact+email&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+contact+email&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bcontact%2Bemail%26num%3D50&hl=en&q=EgS_ZdEnGISlzrEGIjD7AaLfX9qJ3PkKgLrBEh4AKQ-PMn3YM8T3hDsO_ujxydCI4qRVnPsR1WHwSwNTzScyAXJaAUM
    x-hallmonitor-challenge: CgwIhKXOsQYQuKzKuwMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UC9q9cYVaEBUJLOum4VP3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: gws
    Content-Length: 463
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxzcieP-AJp_UqEQKR8F_wnGBzcbzTe1F0EjJhGkgbuBOHKKcmqLg; expires=Tue, 29-Oct-2024 13:17:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCrysEltoMWa43DVx8osh8NuJFL3jzb-whR68MVdnha9K7ic-wVf308sXtm5itqxXAyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCrysEltoMWa43DVx8osh8NuJFL3jzb-whR68MVdnha9K7ic-wVf308sXtm5itqxXAyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:57 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3313
    X-XSS-Protection: 0
  • flag-us
    DNS
    stanfordchildrens.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordchildrens.org
    IN A
    Response
    stanfordchildrens.org
    IN A
    52.175.201.253
  • flag-us
    DNS
    stanfordchildrens.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordchildrens.org
    IN A
    Response
    stanfordchildrens.org
    IN A
    52.175.201.253
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:56 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu
    Content-Length: 308
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:58 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
    Content-Length: 311
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-ie
    GET
    http://search.yahoo.com/search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:56 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:57 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:57 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    https://search.yahoo.com/search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-dZIXVGAhhYEjapRtV1VbXQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:57 GMT
    x-envoy-upstream-service-time: 26
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 1
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-qrOxiNA+MghcNwljaphOzw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:57 GMT
    x-envoy-upstream-service-time: 10
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 2
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bcontact%2Bemail%26num%3D50&hl=en&q=EgS_ZdEnGISlzrEGIjD7AaLfX9qJ3PkKgLrBEh4AKQ-PMn3YM8T3hDsO_ujxydCI4qRVnPsR1WHwSwNTzScyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bcontact%2Bemail%26num%3D50&hl=en&q=EgS_ZdEnGISlzrEGIjD7AaLfX9qJ3PkKgLrBEh4AKQ-PMn3YM8T3hDsO_ujxydCI4qRVnPsR1WHwSwNTzScyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:57 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3340
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIWlzrEGIjA3zyup7UrwSX5i8U4r9kbFVvrURDK5jSJn73LGWHR86ikYWLajZdHK0Unje408eYAyAXJaAUM
    x-hallmonitor-challenge: CgwIhaXOsQYQt_zx8QESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ZKYtkoqq_7wWc8OiDZNeig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:57 GMT
    Server: gws
    Content-Length: 448
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxQX1xG6kQR4iqltrlwLm4phd9vBiyH8A_OpwjS4E93bcKVob86zw; expires=Tue, 29-Oct-2024 13:17:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org&hl=en&q=EgS_ZdEnGIWlzrEGIjBQQAUcyJY-pTcosa37A98KJ19OWnBEMUbqV8-c6aHSVSyBQfLWOiXrZAilVNw7uDwyAXJaAUM
    x-hallmonitor-challenge: CgwIhaXOsQYQ_LeHjQMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5WIvMMMbol5vlqBh7zAAVA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:57 GMT
    Server: gws
    Content-Length: 433
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hw6MgvJ-R683GDDx6VJ1qHI32wg2-gcVj_NfhA1N8K9OWUSvTteXA; expires=Tue, 29-Oct-2024 13:17:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjDtXgHCnrlsTHAt01VXC_caRUMI58NRIqzHv-OaJqMnZSoJgKwbsQ7DPdSf_NlSdE4yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjDtXgHCnrlsTHAt01VXC_caRUMI58NRIqzHv-OaJqMnZSoJgKwbsQ7DPdSf_NlSdE4yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:57 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3295
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjDtXgHCnrlsTHAt01VXC_caRUMI58NRIqzHv-OaJqMnZSoJgKwbsQ7DPdSf_NlSdE4yAXJaAUM
    x-hallmonitor-challenge: CgwIhaXOsQYQ4tGaugISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-c61L-SIna_uZPvINceFPoQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:57 GMT
    Server: gws
    Content-Length: 446
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzW2K7M4GMMASs_BbE8H9f5pa6I6YQVAxEAPvkHUjq29Amg7Xx6QlU; expires=Tue, 29-Oct-2024 13:17:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIWlzrEGIjA3zyup7UrwSX5i8U4r9kbFVvrURDK5jSJn73LGWHR86ikYWLajZdHK0Unje408eYAyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIWlzrEGIjA3zyup7UrwSX5i8U4r9kbFVvrURDK5jSJn73LGWHR86ikYWLajZdHK0Unje408eYAyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:57 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3301
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjBJE2MnccRFaYAD1hz1ZMSNjz-9uztIJ060JKPXGH1Oe_z5dwlYCAXfShRfl6ZllFQyAXJaAUM
    x-hallmonitor-challenge: CgwIhqXOsQYQ2KzXiQESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-l9g9Ah0H_Zp0IPCHEN53TA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:58 GMT
    Server: gws
    Content-Length: 446
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwWQyedFvbUJyCz-CQI1iud8XvO6PiXbZ1KKJJls0xvFNrOFTy3Pys; expires=Tue, 29-Oct-2024 13:17:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjBJE2MnccRFaYAD1hz1ZMSNjz-9uztIJ060JKPXGH1Oe_z5dwlYCAXfShRfl6ZllFQyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjBJE2MnccRFaYAD1hz1ZMSNjz-9uztIJ060JKPXGH1Oe_z5dwlYCAXfShRfl6ZllFQyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:58 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3295
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:58 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:58 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:57 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org&hl=en&q=EgS_ZdEnGIWlzrEGIjBQQAUcyJY-pTcosa37A98KJ19OWnBEMUbqV8-c6aHSVSyBQfLWOiXrZAilVNw7uDwyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org&hl=en&q=EgS_ZdEnGIWlzrEGIjBQQAUcyJY-pTcosa37A98KJ19OWnBEMUbqV8-c6aHSVSyBQfLWOiXrZAilVNw7uDwyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:57 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3256
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+burtleburtle.net&num=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+burtleburtle.net&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAzVeC4-awTTf7LE8Y5LBvzrMhvxPnGIUAAcffm3GUwc59aQwQa0xNU3sbBmVL0IQkyAXJaAUM
    x-hallmonitor-challenge: CgwIhqXOsQYQsOuQhAISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ehYRf6YRJ5xjvKMkWDvHkw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:58 GMT
    Server: gws
    Content-Length: 454
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hzwip1ceWVvokReJm7MoX-OP2QQ0vmNLavlJZxirQDo8Rw8Nn9owg; expires=Tue, 29-Oct-2024 13:17:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAzVeC4-awTTf7LE8Y5LBvzrMhvxPnGIUAAcffm3GUwc59aQwQa0xNU3sbBmVL0IQkyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAzVeC4-awTTf7LE8Y5LBvzrMhvxPnGIUAAcffm3GUwc59aQwQa0xNU3sbBmVL0IQkyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:58 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3319
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:58 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-HanbonuM2JbclolkPZw4vQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:58 GMT
    x-envoy-upstream-service-time: 12
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:59 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:59 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=20
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAhkdPvO2m0AWLOg0yC0yR1rgauInQBUkE-KYdLOLt_W5vus8_2tN-WDD2Vax6jFrIyAXJaAUM
    x-hallmonitor-challenge: CgwIhqXOsQYQ7NOVwgMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-29Jo2tbVlA2qpZKsnoyvjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:58 GMT
    Server: gws
    Content-Length: 454
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hwtc9Nveq0E-jyUaPL-gA3tPD7bNMFYU6gNYfeGlhruzyKZeiE9Tg; expires=Tue, 29-Oct-2024 13:17:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAhkdPvO2m0AWLOg0yC0yR1rgauInQBUkE-KYdLOLt_W5vus8_2tN-WDD2Vax6jFrIyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAhkdPvO2m0AWLOg0yC0yR1rgauInQBUkE-KYdLOLt_W5vus8_2tN-WDD2Vax6jFrIyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:58 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3319
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:58 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-rCRLSiwIQUPIXNA0E5w5hQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:58 GMT
    x-envoy-upstream-service-time: 17
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIalzrEGIjDQRq8-5EP34NL-S4jq83oUTbldkAId2wmAS89FSzgZOxc82prcw8ZTSAJ0edyP0-EyAXJaAUM
    x-hallmonitor-challenge: CgsIh6XOsQYQkLDvSBIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-TIiOYOj1T_PMPDLvuOXQbw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:59 GMT
    Server: gws
    Content-Length: 454
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hw2xTVuMFcoyovJO7Wz0gNwW6m-mtfMO6C5Zyl0vZD2fSBGs3dRhe8; expires=Tue, 29-Oct-2024 13:17:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIalzrEGIjDQRq8-5EP34NL-S4jq83oUTbldkAId2wmAS89FSzgZOxc82prcw8ZTSAJ0edyP0-EyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIalzrEGIjDQRq8-5EP34NL-S4jq83oUTbldkAId2wmAS89FSzgZOxc82prcw8ZTSAJ0edyP0-EyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:59 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3319
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:17:59 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:17:59 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:59 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-6t7kJDP8/5p+nYQDJ+rQgg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:59 GMT
    x-envoy-upstream-service-time: 12
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-02GexC/nYUVfueUR8u7hrg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:59 GMT
    x-envoy-upstream-service-time: 12
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-rakKQj2p4S3fMShac1ZBkQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:18:03 GMT
    x-envoy-upstream-service-time: 14
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIelzrEGIjC3OMvUk8HCBWtmKwY-03dKtRH-ucBeOut4BMDgklfyHI5ubpMPaKqgSF_7XwJ_C_AyAXJaAUM
    x-hallmonitor-challenge: CgwIh6XOsQYQ5tySlQISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-OpCS2d_8TrhunQPFQsrpTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:17:59 GMT
    Server: gws
    Content-Length: 444
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwJ8-8NoNwzxo7T0-AdxPAgfziQq7Tc1SYspoXHsgAiRSfXmPVGazw; expires=Tue, 29-Oct-2024 13:17:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIelzrEGIjC3OMvUk8HCBWtmKwY-03dKtRH-ucBeOut4BMDgklfyHI5ubpMPaKqgSF_7XwJ_C_AyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIelzrEGIjC3OMvUk8HCBWtmKwY-03dKtRH-ucBeOut4BMDgklfyHI5ubpMPaKqgSF_7XwJ_C_AyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:17:59 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3289
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:59 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    http://search.yahoo.com/search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:17:59 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-reaLV+Y2zbcsYjWJv8a1/Q==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:17:59 GMT
    x-envoy-upstream-service-time: 14
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDNCvtkEcFk3nflpQcVneeYr018-zu6YMqvtzFZtnMbHletujlttWznDangiNI2F6AyAXJaAUM
    x-hallmonitor-challenge: CgwIiaXOsQYQ6L7H5wESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-I4vmCD0cPUVYbEbymgd8Cw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:01 GMT
    Server: gws
    Content-Length: 447
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HxW2_-JgivulRN9inv6cDgkrqWt-rFaAPcUJSvbbfmkmkU3IFYBi2s; expires=Tue, 29-Oct-2024 13:18:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDNCvtkEcFk3nflpQcVneeYr018-zu6YMqvtzFZtnMbHletujlttWznDangiNI2F6AyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDNCvtkEcFk3nflpQcVneeYr018-zu6YMqvtzFZtnMbHletujlttWznDangiNI2F6AyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:01 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3298
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+stanfordhealthcare.org&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+stanfordhealthcare.org&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDcQH5zfTHOL-_3mFU1SIGx_OgPUwufk49tQKsMyVzSEHJVipok5zCqPE6WSIYHOgAyAXJaAUM
    x-hallmonitor-challenge: CgwIiaXOsQYQrpLpogMSBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1Uz4AnWEqFLmEAsdbdjVPA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:01 GMT
    Server: gws
    Content-Length: 460
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwXkXo31MCfdIETqQhuf94b7otuA1vUPv8PH2gst_N-lqAr3nszxS0; expires=Tue, 29-Oct-2024 13:18:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDcQH5zfTHOL-_3mFU1SIGx_OgPUwufk49tQKsMyVzSEHJVipok5zCqPE6WSIYHOgAyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDcQH5zfTHOL-_3mFU1SIGx_OgPUwufk49tQKsMyVzSEHJVipok5zCqPE6WSIYHOgAyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:01 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3337
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:18:01 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    Content-Length: 308
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanford.edu+mailto&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=stanford.edu+mailto&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjBdDE9CNvglz8eNV09PqQ4KCAlZe01Ohkiv3X6trhsXcqBZWFfa2xfhoybJMYGRJ3YyAXJaAUM
    x-hallmonitor-challenge: CgsIiqXOsQYQ9ufaWRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-qWaJruqvPgxe7nDu9r_ckg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: gws
    Content-Length: 452
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hwkv8wd34jSsfj-oqepGErLGpaFXrFRUru071KN457njfjUhVGn4Is; expires=Tue, 29-Oct-2024 13:18:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjBdDE9CNvglz8eNV09PqQ4KCAlZe01Ohkiv3X6trhsXcqBZWFfa2xfhoybJMYGRJ3YyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjBdDE9CNvglz8eNV09PqQ4KCAlZe01Ohkiv3X6trhsXcqBZWFfa2xfhoybJMYGRJ3YyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:02 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3313
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+cs.stanford.edu&num=50
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+cs.stanford.edu&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGIqlzrEGIjC6hWdWshrlQE5y1imF4kh7o5r5tfsQ9Y-YS2IBn9UkFS_GCsRw4kf8ZYVkO-uzcewyAXJaAUM
    x-hallmonitor-challenge: CgwIiqXOsQYQ7bbFmQESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kjvdSyN1tnzOCHI_WiwOtA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: gws
    Content-Length: 464
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzO-2qjCDqgUyXHECZEomFAJQsO1vdJghdMdQ2kay9-_B_iTh0MfA; expires=Tue, 29-Oct-2024 13:18:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGIqlzrEGIjC6hWdWshrlQE5y1imF4kh7o5r5tfsQ9Y-YS2IBn9UkFS_GCsRw4kf8ZYVkO-uzcewyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGIqlzrEGIjC6hWdWshrlQE5y1imF4kh7o5r5tfsQ9Y-YS2IBn9UkFS_GCsRw4kf8ZYVkO-uzcewyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:02 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3343
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail
    Content-Length: 315
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-ie
    GET
    http://search.yahoo.com/search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:18:03 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+m-ou.se&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+m-ou.se&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCtMRcSGPcaGkRcKdhSMwyDh39N3zN4jEQeEQwyQf6o2Gf9oaOXjKwrvT0S8L2k_jcyAXJaAUM
    x-hallmonitor-challenge: CgwIiqXOsQYQs7iP6gISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-OAvCStteEUtCDpBLsVfc8A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:02 GMT
    Server: gws
    Content-Length: 446
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HyIbMG7ci4jObDsM57GDCAV69KN-ACcJ_nEQ69tGjnildhlVfNAZU0; expires=Tue, 29-Oct-2024 13:18:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCtMRcSGPcaGkRcKdhSMwyDh39N3zN4jEQeEQwyQf6o2Gf9oaOXjKwrvT0S8L2k_jcyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCtMRcSGPcaGkRcKdhSMwyDh39N3zN4jEQeEQwyQf6o2Gf9oaOXjKwrvT0S8L2k_jcyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:02 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3295
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org&hl=en&q=EgS_ZdEnGIqlzrEGIjA9FVagAlMoAWhLiRa2XLsS-KAaLOiUIkcW2PwJSKRgZaVrQqWlbRJ874QS_zVvfzYyAXJaAUM
    x-hallmonitor-challenge: CgsIi6XOsQYQlKHFKRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-o-wiUuwMp7HwQ8deoKbqIA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: gws
    Content-Length: 436
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HySmQxnwC-aE4_P9BJxhpgd1ruyAa2F29RMwCAD7Po3qmx2fl8WkRo; expires=Tue, 29-Oct-2024 13:18:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjC_zTokx7RniSUPIz7KY9msWf4iBzgjV53fGqWhOj5hhQwP_9qGIeAxUYYRIH_QX6IyAXJaAUM
    x-hallmonitor-challenge: CgwIi6XOsQYQzvWxzgESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ozG9GkKr_z9Sra7LhgeETg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: gws
    Content-Length: 452
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HzU0KLzs7fnzkv8GqnLuii-xTYaxKk1sOiXNp-kUmg3D_CilhX9sg; expires=Tue, 29-Oct-2024 13:18:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM
    x-hallmonitor-challenge: CgwIi6XOsQYQj7_H2QISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6G-SfzzLphqk99xG8gelGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwyO7DLLr3xS-G_O8VJkLmKUDMqLF4VmfNj8MbBIq6kwMC_10FLLg; expires=Tue, 29-Oct-2024 13:18:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:03 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3322
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCSeFZqCcbr9FvsKAZuqcYjZCHFXrL4iTaS6aRDU63bTkys2NmbgtBPL9zinlSMFb4yAXJaAUM
    x-hallmonitor-challenge: CgsIi6XOsQYQ3sqRNRIEv2XRJw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gYKTszU5KsZ7Y7P1EHwpyA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: gws
    Content-Length: 452
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hx-Sbgw4WT_BDf2y8t6QaQnZz25y1MJKETZZ-0NgfbuNRWLw4elhg; expires=Tue, 29-Oct-2024 13:18:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org&hl=en&q=EgS_ZdEnGIqlzrEGIjA9FVagAlMoAWhLiRa2XLsS-KAaLOiUIkcW2PwJSKRgZaVrQqWlbRJ874QS_zVvfzYyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org&hl=en&q=EgS_ZdEnGIqlzrEGIjA9FVagAlMoAWhLiRa2XLsS-KAaLOiUIkcW2PwJSKRgZaVrQqWlbRJ874QS_zVvfzYyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:03 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3265
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto
    Content-Length: 319
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCSeFZqCcbr9FvsKAZuqcYjZCHFXrL4iTaS6aRDU63bTkys2NmbgtBPL9zinlSMFb4yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCSeFZqCcbr9FvsKAZuqcYjZCHFXrL4iTaS6aRDU63bTkys2NmbgtBPL9zinlSMFb4yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:03 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3313
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 02 May 2024 13:18:03 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjC_zTokx7RniSUPIz7KY9msWf4iBzgjV53fGqWhOj5hhQwP_9qGIeAxUYYRIH_QX6IyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjC_zTokx7RniSUPIz7KY9msWf4iBzgjV53fGqWhOj5hhQwP_9qGIeAxUYYRIH_QX6IyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:03 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3313
    X-XSS-Protection: 0
  • flag-ie
    GET
    http://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 02 May 2024 13:18:03 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ltv_pid=altavista&ltv_new=1&ltv_ts=1714655792&ltv_sts=1714655792&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-TFJQG3C8331nFDE/BnZzKQ==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self'; connect-src * blob:; font-src * font:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 02 May 2024 13:18:03 GMT
    x-envoy-upstream-service-time: 13
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+outlook.com&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+outlook.com&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjBXtgghabGMbBUwtfJwo_X1T4e6NNlE5iN3wAwzbmZzCEaedhzB7sZmFoPCxVse8DsyAXJaAUM
    x-hallmonitor-challenge: CgwIjKXOsQYQnc2xkwESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-A_DnzIWoS0d1jwdFOGNPQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:04 GMT
    Server: gws
    Content-Length: 451
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hxp-g_YzfNCU81knBybNCGy7b75roi9OU__tSOxe5qFj8kpPbPmdxI; expires=Tue, 29-Oct-2024 13:18:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+burtleburtle.net&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+burtleburtle.net&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGIylzrEGIjApbqGGcMecS_urvRNxwbRbWj7AQFXU1JSxRUaa6z1X1EeWLJD-LZ9EP5v6WiKiLlIyAXJaAUM
    x-hallmonitor-challenge: CgwIjKXOsQYQosrJoQISBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-r-NkUyxpzptIMoGKzYih4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:04 GMT
    Server: gws
    Content-Length: 465
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6HwOzxXUGvm416indnYnLwy6Ny7dDziZov-qdOX1aCeEyM5NDBMCe5U; expires=Tue, 29-Oct-2024 13:18:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGIylzrEGIjApbqGGcMecS_urvRNxwbRbWj7AQFXU1JSxRUaa6z1X1EeWLJD-LZ9EP5v6WiKiLlIyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGIylzrEGIjApbqGGcMecS_urvRNxwbRbWj7AQFXU1JSxRUaa6z1X1EeWLJD-LZ9EP5v6WiKiLlIyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:04 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3346
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM
    x-hallmonitor-challenge: CgwIjKXOsQYQmaOstQESBL9l0Sc
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-90xAktqi7ajieFa4Itnbfg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 02 May 2024 13:18:04 GMT
    Server: gws
    Content-Length: 455
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AQTF6Hy7Syw2fkF8LB83bWQr1xizC19eguZaN18qvGCVJwdCoeAdGAsv5A; expires=Tue, 29-Oct-2024 13:18:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjBXtgghabGMbBUwtfJwo_X1T4e6NNlE5iN3wAwzbmZzCEaedhzB7sZmFoPCxVse8DsyAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjBXtgghabGMbBUwtfJwo_X1T4e6NNlE5iN3wAwzbmZzCEaedhzB7sZmFoPCxVse8DsyAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:04 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3310
    X-XSS-Protection: 0
  • flag-us
    DNS
    stanfordhealthcare-org.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    Response
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.10.5
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.11.7
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.41.6
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.9.5
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.42.13
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.194.15
  • flag-us
    DNS
    stanfordhealthcare-org.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    Response
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.10.5
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.11.7
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.41.6
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.9.5
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.42.13
    stanfordhealthcare-org.mail.protection.outlook.com
    IN A
    52.101.194.15
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    Remote address:
    142.250.178.4:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 02 May 2024 13:18:04 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3322
    X-XSS-Protection: 0
  • 16.113.41.36:1034
    services.exe
    260 B
     5
  • 204.79.197.237:443
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid=
    tls, http2
    2.0kB
     9.2kB
     21
    19

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid=

    HTTP Response

    204

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid=

    HTTP Response

    204

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=97ff37788eb349c3a794e6fdc50191b7&localId=w:46E47B74-24CC-2EFE-1CD6-2420DE88614A&deviceId=6896200266776642&anid=

    HTTP Response

    204
  • 23.62.61.129:443
    https://www.bing.com/th?id=OADD2.10239381793954_1BHQ1BWFG78XLZOQQ&pid=21.2&c=16&roil=0.0049&roit=0&roir=0.9951&roib=1&w=24&h=24&dynsize=1&qlt=90
    tls, http2
    1.5kB
     6.6kB
     17
    12

    HTTP Request

    GET https://www.bing.com/th?id=OADD2.10239381793954_1BHQ1BWFG78XLZOQQ&pid=21.2&c=16&roil=0.0049&roit=0&roir=0.9951&roib=1&w=24&h=24&dynsize=1&qlt=90

    HTTP Response

    200
  • 192.168.1.35:1034
    services.exe
    260 B
     5
  • 16.57.234.64:1034
    services.exe
    260 B
     5
  • 74.125.193.26:25
    aspmx.l.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 199.89.3.120:25
    mail.mailroute.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.64:25
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 65.254.254.52:25
    mx.burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.64:25
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 52.101.9.11:25
    alumni-caltech-edu.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 85.187.148.2:25
    gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    619 B
     648 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    618 B
     647 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    7.0kB
     140.6kB
     121
    118

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/?fr=altavista

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 212.82.100.137:443
    https://search.yahoo.com/?fr=altavista
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    4.9kB
     102.9kB
     87
    84

    HTTP Request

    GET https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/?fr=altavista

    HTTP Response

    200
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    610 B
     774 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

    HTTP Response

    301
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    608 B
     770 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjC_8IvUg2OBB77FalUOnySRAjnCAbu23B5FuoAJE3znAKdDH013qBZAblpKe0yZAjYyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.7kB
     6.6kB
     12
    9

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+e-mail

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjC_8IvUg2OBB77FalUOnySRAjnCAbu23B5FuoAJE3znAKdDH013qBZAblpKe0yZAjYyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail&hl=en&q=EgS_ZdEnGK-kzrEGIjBMyg3311b6hBgIRJcnEMzB6o67Skx3T1IvQSDQ2NpA2ti4ZKSR4fRib64RXddb07cyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail&hl=en&q=EgS_ZdEnGK-kzrEGIjBMyg3311b6hBgIRJcnEMzB6o67Skx3T1IvQSDQ2NpA2ti4ZKSR4fRib64RXddb07cyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.4kB
     14
    10

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

    HTTP Response

    302
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.7kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail

    HTTP Response

    404
  • 212.82.100.137:80
    http://www.altavista.com/web/results?q=reply+gzip.org&kgs=0&kls=0&nbq=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    6.3kB
     31.4kB
     46
    45

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=email+cs.stanford.edu&kgs=0&kls=0&nbq=20

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=email+burtleburtle.net&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=acm.org+mail&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+acm.org&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+burtleburtle.net&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=e-mail+stanfordhealthcare.org&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+m-ou.se&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=email+stanfordchildrens.org&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+cs.stanford.edu&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mail+alumni.caltech.edu&kgs=0&kls=0&nbq=20

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=reply+gzip.org&kgs=0&kls=0&nbq=50

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjBLEFj0M6BN2zau_st24yGg22ErGoY9lbEJG3XTnkAOFRBXD1Vtj3guz7DA7bXqJlYyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    861 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGK-kzrEGIjBLEFj0M6BN2zau_st24yGg22ErGoY9lbEJG3XTnkAOFRBXD1Vtj3guz7DA7bXqJlYyAXJaAUM

    HTTP Response

    429
  • 199.89.3.120:25
    mail.mailroute.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    609 B
     772 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     18.3kB
     24
    19

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgS_ZdEnGLGkzrEGIjB_NHpeHeGs2Kcsb_y4yOq8cdHpCeNlMdz5Khgity9jPBxEtqTlKExOX45DFIxchdEyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.2kB
     5.2kB
     9
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgS_ZdEnGLGkzrEGIjB_NHpeHeGs2Kcsb_y4yOq8cdHpCeNlMdz5Khgity9jPBxEtqTlKExOX45DFIxchdEyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGLKkzrEGIjAr9w9MGsz63R7BJ9lzD4bHqi5EfHLw4kpED_H8rnE0Twqua3tr3AkcaWh_ILVcvc8yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGLKkzrEGIjAr9w9MGsz63R7BJ9lzD4bHqi5EfHLw4kpED_H8rnE0Twqua3tr3AkcaWh_ILVcvc8yAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGLKkzrEGIjBXg4lwrAp0NxPpsgcieD0aeDoqViPTCyTRoOAoFBWgt1FySh-3_C5zaFicxZreKJgyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGLKkzrEGIjBXg4lwrAp0NxPpsgcieD0aeDoqViPTCyTRoOAoFBWgt1FySh-3_C5zaFicxZreKJgyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.0kB
     1.4kB
     8
    5

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+burtleburtle.net

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    706 B
     647 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    700 B
     641 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    3.2kB
     52.9kB
     50
    47

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBYIW1m3zJ34L1DW16rU1BUOYO-wTNrlWMieWgKhyc1of4Kw8gcZ3Jggf7uECwPlHcyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.7kB
     6.7kB
     12
    9

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+gzip.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBYIW1m3zJ34L1DW16rU1BUOYO-wTNrlWMieWgKhyc1of4Kw8gcZ3Jggf7uECwPlHcyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjDdZwR3h__nne-zpyc1kzuIgrhFdWiOYn0uPLAcxVtfemBHNR5iKnx86tYI5AFHarsyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+m-ou.se&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjDdZwR3h__nne-zpyc1kzuIgrhFdWiOYn0uPLAcxVtfemBHNR5iKnx86tYI5AFHarsyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    713 B
     654 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    4.8kB
     81.5kB
     73
    70

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    626 B
     846 B
     6
    5

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.8kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBmLF_fTkCyKrq3vV1DHtWOU2fEom0oq48t-FTrbrXlC0uCkpEJaUDM0DJ-twWwRpwyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+e-mail&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBmLF_fTkCyKrq3vV1DHtWOU2fEom0oq48t-FTrbrXlC0uCkpEJaUDM0DJ-twWwRpwyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjAoA-1Qxf_yqwM_tsn14V8lNU6kKO-wNdkvtW3ZdHDGv3C9Sq8Fb42HU1Q4Q8U7_ScyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.7kB
     6.7kB
     13
    10

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjAoA-1Qxf_yqwM_tsn14V8lNU6kKO-wNdkvtW3ZdHDGv3C9Sq8Fb42HU1Q4Q8U7_ScyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D20&hl=en&q=EgS_ZdEnGLSkzrEGIjCbTkB9sImTTD2aLSKoGVEYeo8-LmjrMEVAjwBs9I6JzKbboxuC-0v1jxn6xk_D7WAyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     8.5kB
     15
    12

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D20&hl=en&q=EgS_ZdEnGLSkzrEGIjCbTkB9sImTTD2aLSKoGVEYeo8-LmjrMEVAjwBs9I6JzKbboxuC-0v1jxn6xk_D7WAyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBOPBJOzofZWAPoF_CLTzAhRxPKazn1afraLQLjbOSAYTfillyyPGOFr1BOKHbmdWcyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    907 B
     4.7kB
     9
    6

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGLOkzrEGIjBOPBJOzofZWAPoF_CLTzAhRxPKazn1afraLQLjbOSAYTfillyyPGOFr1BOKHbmdWcyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGLSkzrEGIjDMF24hmNB6CdBXDpg218W6622CwGvkOx4z6MLCEkG4S3w-XcKO3hkemdBw67ZRK2YyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    870 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGLSkzrEGIjDMF24hmNB6CdBXDpg218W6622CwGvkOx4z6MLCEkG4S3w-XcKO3hkemdBw67ZRK2YyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGLSkzrEGIjAOeo1II-cVSiSu1cgRWHK7u8xKlorcDESBSMtbX19cuhCA_dGcuktvfx6RfdoyliUyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    920 B
     3.8kB
     9
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGLSkzrEGIjAOeo1II-cVSiSu1cgRWHK7u8xKlorcDESBSMtbX19cuhCA_dGcuktvfx6RfdoyliUyAXJaAUM

    HTTP Response

    429
  • 16.69.10.81:1034
    services.exe
    260 B
     5
  • 142.250.27.26:25
    alt1.aspmx.l.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 104.17.78.30:25
    acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.26:25
    smtp2.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 65.254.227.224:25
    burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.26:25
    smtp2.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 75.2.70.75:25
    alumni.caltech.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 85.187.148.2:25
    gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 104.17.78.30:25
    acm.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 4.240.78.15:1034
    services.exe
    260 B
     5
  • 142.250.153.27:25
    alt2.aspmx.l.google.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.64:25
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.25:25
    smtp1.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 65.254.254.52:25
    mx.burtleburtle.net
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.25:25
    smtp1.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 52.101.41.5:25
    outlook-com.olc.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 85.187.148.2:25
    mail.gzip.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 205.220.175.141:25
    mxa-00039903.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 204.79.197.200:443
    tse1.mm.bing.net
    tls, http2
    1.2kB
     8.1kB
     16
    14
  • 204.79.197.200:443
    tse1.mm.bing.net
    tls, http2
    1.2kB
     8.1kB
     16
    14
  • 204.79.197.200:443
    tse1.mm.bing.net
    tls, http2
    1.2kB
     8.1kB
     16
    14
  • 204.79.197.200:443
    https://tse1.mm.bing.net/th?id=OADD2.10239360313429_1X5GXWWD8KTODKAD6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    tls, http2
    73.6kB
     2.1MB
     1499
    1497

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239370255172_1LGH0N1M3BEVIZPTE&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239360313430_12K7UVO7ZVIINTRIE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239370255173_1DU5CK10FBZ5UERKJ&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239360313429_1X5GXWWD8KTODKAD6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

    HTTP Response

    200

    HTTP Response

    200

    HTTP Response

    200

    HTTP Response

    200
  • 16.48.65.121:1034
    services.exe
    260 B
     5
  • 171.64.64.26:25
    smtp2.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 142.250.27.26:25
    aspmx2.googlemail.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.64:25
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 171.64.64.64:25
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 52.101.9.20:25
    stanfordhealthcare-org.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.0kB
     1.4kB
     8
    5

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org

    HTTP Response

    301
  • 52.96.222.194:25
    outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjD3wPlwWg5FiDwLmyae2zBviBYXaG4Ixtuf4jrvfDe6S7kewZ_3QFqK1gAvgsbnaO0yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+outlook.com&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjD3wPlwWg5FiDwLmyae2zBviBYXaG4Ixtuf4jrvfDe6S7kewZ_3QFqK1gAvgsbnaO0yAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.7kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

    HTTP Response

    404
  • 212.82.100.137:80
    http://www.altavista.com/web/results?q=contact+mail+stanford.edu&kgs=0&kls=0&nbq=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    7.3kB
     36.8kB
     52
    51

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+outlook.com&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mail+gzip.org&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=cs.stanford.edu+mail&kgs=0&kls=0&nbq=20

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=cs.stanford.edu+mail&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mail+m-ou.se&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=stanfordchildrens.org+mailto&kgs=0&kls=0&nbq=20

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=email+stanfordhealthcare.org&kgs=0&kls=0

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=stanford.edu+e-mail&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=stanfordhealthcare.org+mailto&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=e-mail+outlook.com&kgs=0&kls=0

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=mailto+stanfordchildrens.org&kgs=0&kls=0

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=email+cs.stanford.edu&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=cs.stanford.edu+email&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=e-mail+stanfordchildrens.org&kgs=0&kls=0&nbq=20

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=contact+mail+stanford.edu&kgs=0&kls=0&nbq=50

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjAWLIoEJCLmG1A7g2RUA5qu7atQOrgpCv5vE_OC8muKRZrtQDeR512bmlrfXu_AmqwyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjAWLIoEJCLmG1A7g2RUA5qu7atQOrgpCv5vE_OC8muKRZrtQDeR512bmlrfXu_AmqwyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+stanfordchildrens.org

    HTTP Response

    404
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    610 B
     774 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjA3X8CsLQHslU5eA8ChCzPf50WbGzknwsYC-JbXYWqHqN9ACe_e3JrfDj6ok-UTK8YyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+acm.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjA3X8CsLQHslU5eA8ChCzPf50WbGzknwsYC-JbXYWqHqN9ACe_e3JrfDj6ok-UTK8YyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bemail%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjB1yoyrabkMOouR1Q26MX5zzmFswHQvv1y_PwcW851JQAIUdzD61KO-kochlYEHtR4yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+email&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bemail%26num%3D100&hl=en&q=EgS_ZdEnGO6kzrEGIjB1yoyrabkMOouR1Q26MX5zzmFswHQvv1y_PwcW851JQAIUdzD61KO-kochlYEHtR4yAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

    HTTP Response

    404
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    621 B
     796 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO-kzrEGIjDWJLwm6YIcZNtYOZmIO36gPAFQyJiLVAOeT0hueY3z7GJOX4OE5u4NaaeF0H-iTvsyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+outlook.com&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGO-kzrEGIjDWJLwm6YIcZNtYOZmIO36gPAFQyJiLVAOeT0hueY3z7GJOX4OE5u4NaaeF0H-iTvsyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.7kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

    HTTP Response

    404
  • 205.220.175.141:25
    mxb-00039903.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    710 B
     651 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=outlook.com+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bgzip.org%26num%3D50&hl=en&q=EgS_ZdEnGO-kzrEGIjDMq7j0z5rXa9bnnJH1rfBLjTYERio4U_qMVloGMFAnY_SKV-zBY5pVFAM9BwjqsS0yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+gzip.org&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bgzip.org%26num%3D50&hl=en&q=EgS_ZdEnGO-kzrEGIjDMq7j0z5rXa9bnnJH1rfBLjTYERio4U_qMVloGMFAnY_SKV-zBY5pVFAM9BwjqsS0yAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    703 B
     644 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.8kB
     41.8kB
     41
    38

    HTTP Request

    GET https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.5kB
     2.1kB
     10
    6

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBC1KlJHunAcf_H7GCIqGao4Sh-dsGx4tyOI8mJeNFkI0YIrgMIUvdvgOMUIqY6gPgyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.4kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBC1KlJHunAcf_H7GCIqGao4Sh-dsGx4tyOI8mJeNFkI0YIrgMIUvdvgOMUIqY6gPgyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    712 B
     653 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

    HTTP Response

    404
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    3.0kB
     46.7kB
     45
    42

    HTTP Request

    GET https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBsOuffSgtIaMIVTowQSQThQCIMbI2GUKZ0TSBnSXcLSVe3Hjy3UHlxD9YLKIW7-LsyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     6.7kB
     13
    10

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+m-ou.se&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordchildrens.org+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjBsOuffSgtIaMIVTowQSQThQCIMbI2GUKZ0TSBnSXcLSVe3Hjy3UHlxD9YLKIW7-LsyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    717 B
     658 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjC7N2M1krk9X2YNX5lrKuqFjZZYKSSLb2k7_AysdgSs1ydmUJ3XtDFh-nuw-HQW8CQyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPCkzrEGIjC7N2M1krk9X2YNX5lrKuqFjZZYKSSLb2k7_AysdgSs1ydmUJ3XtDFh-nuw-HQW8CQyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.8kB
     38.7kB
     40
    37

    HTTP Request

    GET https://search.yahoo.com/search?p=alumni.caltech.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGPCkzrEGIjBLKIEq2a-_IFbei5jvvvgajSNC2u9ZSm1tm_H9YwhG43EOisZEw9kHGBRP1fnXy14yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    860 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGPCkzrEGIjBLKIEq2a-_IFbei5jvvvgajSNC2u9ZSm1tm_H9YwhG43EOisZEw9kHGBRP1fnXy14yAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    719 B
     660 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    4.7kB
     76.9kB
     71
    68

    HTTP Request

    GET https://search.yahoo.com/search?p=e-mail+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 171.64.64.64:25
    cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    260 B
     5
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Doutlook.com%2Be-mail%26num%3D50&hl=en&q=EgS_ZdEnGPOkzrEGIjBAxYzixfLVADiU-VkVgPyEfyKpB08jmwkiAFmKkDvp8iXAy5Dq9JJEsnmpTcZBv8wyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=outlook.com+e-mail&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Doutlook.com%2Be-mail%26num%3D50&hl=en&q=EgS_ZdEnGPOkzrEGIjBAxYzixfLVADiU-VkVgPyEfyKpB08jmwkiAFmKkDvp8iXAy5Dq9JJEsnmpTcZBv8wyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjCyuwsqqe_DRXvJQGW2zdgLaeyOoAo9bNDAuU-o0JPMcNyHz_E52v6UZX2jocfWb9kyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjCyuwsqqe_DRXvJQGW2zdgLaeyOoAo9bNDAuU-o0JPMcNyHz_E52v6UZX2jocfWb9kyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    704 B
     645 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    719 B
     660 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.9kB
     41.4kB
     42
    39

    HTTP Request

    GET https://search.yahoo.com/search?p=email+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D50&hl=en&q=EgS_ZdEnGPSkzrEGIjDeey6vBvXZiOipytZf8_Vit7Hkal_v7bDQIBjDOLxry2wo52wQHBThFw7Rw_sHmLYyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     6.8kB
     13
    10

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordchildrens.org+mailto&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordchildrens.org%2Bmailto%26num%3D50&hl=en&q=EgS_ZdEnGPSkzrEGIjDeey6vBvXZiOipytZf8_Vit7Hkal_v7bDQIBjDOLxry2wo52wQHBThFw7Rw_sHmLYyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjBoBQfLIbN6WklufKW1Ekw5Qjr5EEuwChtACCWatgviakYtlBcmMqpPQUUn7RC1r7IyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPOkzrEGIjBoBQfLIbN6WklufKW1Ekw5Qjr5EEuwChtACCWatgviakYtlBcmMqpPQUUn7RC1r7IyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPOkzrEGIjBbAdokZtlA88lvBlisVCUnU_Y0Xc7oSfycPBeksOegJbfyHFPzAsIDe-po74aC7OMyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    858 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPOkzrEGIjBbAdokZtlA88lvBlisVCUnU_Y0Xc7oSfycPBeksOegJbfyHFPzAsIDe-po74aC7OMyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGPSkzrEGIjBjv5Ak0hxHe5M20c3Od0cQWZWduh-ZIG4Dravj09Uy1H7BxCvF9x1aDrad30qEp8gyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     8.1kB
     15
    12

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org&hl=en&q=EgS_ZdEnGPSkzrEGIjBjv5Ak0hxHe5M20c3Od0cQWZWduh-ZIG4Dravj09Uy1H7BxCvF9x1aDrad30qEp8gyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    700 B
     641 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    4.9kB
     84.8kB
     76
    73

    HTTP Request

    GET https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPSkzrEGIjBD434GVM4UyhWrOo8DqP-iz95yCa3-PfvnuIU1k4WLqBFhiApUO0UlV6Bm0-gGAQkyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPSkzrEGIjBD434GVM4UyhWrOo8DqP-iz95yCa3-PfvnuIU1k4WLqBFhiApUO0UlV6Bm0-gGAQkyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.5kB
     2.1kB
     10
    6

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+acm.org

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+acm.org
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    19

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+acm.org

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+acm.org

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu&hl=en&q=EgS_ZdEnGPSkzrEGIjAARQgZyYShGK2cF_GqauEiRHcdZGZsUCtOQFyOe10p3MzOk4cty8HIVkO4vIS0YzoyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu&hl=en&q=EgS_ZdEnGPSkzrEGIjAARQgZyYShGK2cF_GqauEiRHcdZGZsUCtOQFyOe10p3MzOk4cty8HIVkO4vIS0YzoyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    714 B
     655 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    711 B
     652 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.7kB
     37.9kB
     39
    36

    HTTP Request

    GET https://search.yahoo.com/search?p=cs.stanford.edu+mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGPSkzrEGIjCcROjmQVt2oK9TnZebDiIXGp3BzL3WYaSPVqe0msiCTjlk-HLqW0JxLOY93kjhTWYyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    866 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGPSkzrEGIjCcROjmQVt2oK9TnZebDiIXGp3BzL3WYaSPVqe0msiCTjlk-HLqW0JxLOY93kjhTWYyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjDNkMsjNx5CE0PAL0h5f_KK-fe3uG_mk9Fojgi2cDCH6rA_HecVap91fJIxRtjpzDcyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjDNkMsjNx5CE0PAL0h5f_KK-fe3uG_mk9Fojgi2cDCH6rA_HecVap91fJIxRtjpzDcyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjAuJ0GdIURAN4FaZf0dZXCltwMjGV09ZiqorflO9_vciLrHs5GGuFY1cedah7yG1uYyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjAuJ0GdIURAN4FaZf0dZXCltwMjGV09ZiqorflO9_vciLrHs5GGuFY1cedah7yG1uYyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.5kB
     16.9kB
     25
    18

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.4kB
     14
    10

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com

    HTTP Response

    302
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPWkzrEGIjC4gC6SuiM2yzbUc5IidnEr-UbM3e3gvuU7Ew8cVI8hyEwIFkp1X6y0Jz-XzaIA2NUyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net&hl=en&q=EgS_ZdEnGPWkzrEGIjC4gC6SuiM2yzbUc5IidnEr-UbM3e3gvuU7Ew8cVI8hyEwIFkp1X6y0Jz-XzaIA2NUyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAnhBB9X7AZku7L-MF9LIJ4Y1O0IT6EfjWDBZ7ZIcTBODukFqqqxjPoKHsyoqelVj8yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     8.2kB
     16
    13

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Be-mail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAnhBB9X7AZku7L-MF9LIJ4Y1O0IT6EfjWDBZ7ZIcTBODukFqqqxjPoKHsyoqelVj8yAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    721 B
     662 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    3.1kB
     49.4kB
     46
    43

    HTTP Request

    GET https://search.yahoo.com/search?p=contact+email+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+outlook.com

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjD683x-Up8UY7wPa4aixX9AQkb0X5qQgGWI_LD8a5ijxx0HHIggLjDi8JWYEf11B_syAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    870 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPWkzrEGIjD683x-Up8UY7wPa4aixX9AQkb0X5qQgGWI_LD8a5ijxx0HHIggLjDi8JWYEf11B_syAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjDV-JYlz2_46iRr-sybNqVAUM9DYFQjSlnrszuEHkcKXtUWY85Emi5UpQPzjZyUCJMyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    867 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjDV-JYlz2_46iRr-sybNqVAUM9DYFQjSlnrszuEHkcKXtUWY85Emi5UpQPzjZyUCJMyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    617 B
     788 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjBvWnhpaq0zSV2GpPi3V7neCBTJXr95_TLgHto_hDz-c35d0Os3jXBy5OIGA4zj0b8yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+e-mail&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjBvWnhpaq0zSV2GpPi3V7neCBTJXr95_TLgHto_hDz-c35d0Os3jXBy5OIGA4zj0b8yAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    754 B
     649 B
     7
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    4.8kB
     78.1kB
     74
    71

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mail

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+email

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordchildrens.org%26num%3D20&hl=en&q=EgS_ZdEnGPekzrEGIjB2gpmLryE_LVXUt1mjLYKYSODfwWGl9EOMXPLm4ufHa4CBO33YE7yHRzk6q0Ks2HQyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     8.2kB
     16
    13

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=alumni.caltech.edu+mail&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordchildrens.org%26num%3D20&hl=en&q=EgS_ZdEnGPekzrEGIjB2gpmLryE_LVXUt1mjLYKYSODfwWGl9EOMXPLm4ufHa4CBO33YE7yHRzk6q0Ks2HQyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAGxWJrjxj1OQAn0x5SFxjFLf-c0r-wyFgshRzUXgjRZT8bnJw0w2hSOna_waCBcpYyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    869 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPakzrEGIjAGxWJrjxj1OQAn0x5SFxjFLf-c0r-wyFgshRzUXgjRZT8bnJw0w2hSOna_waCBcpYyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjAiXycCBLcim2X-O2XlzjnVn8d9aK5VqHaUai7WQYttNnRSN9ZoILgzRBNjYd6JPYIyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanfordhealthcare.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Bmail%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjAiXycCBLcim2X-O2XlzjnVn8d9aK5VqHaUai7WQYttNnRSN9ZoILgzRBNjYd6JPYIyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    705 B
     646 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     18.4kB
     25
    20

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mail

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    719 B
     660 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    5.1kB
     91.4kB
     81
    78

    HTTP Request

    GET https://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.1kB
     1.5kB
     8
    5

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjBUXvSNJrKkei55mWZ1JsarZiQVs23ZkgadpBDKQgjoJRx5O6xwOV1b03VyWf7i7yoyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    876 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjBUXvSNJrKkei55mWZ1JsarZiQVs23ZkgadpBDKQgjoJRx5O6xwOV1b03VyWf7i7yoyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.4kB
     14
    10

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail

    HTTP Response

    302
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail&hl=en&q=EgS_ZdEnGPekzrEGIjCN0EDDvYAz10EEr4fv5-kfjvqqHYOIWwu9fsyaAWbC59HIWqImVxiku4gRDjaU31IyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanfordchildrens.org&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail&hl=en&q=EgS_ZdEnGPekzrEGIjCN0EDDvYAz10EEr4fv5-kfjvqqHYOIWwu9fsyaAWbC59HIWqImVxiku4gRDjaU31IyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.7kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+contact+mail

    HTTP Response

    404
  • 192.163.86.8:1034
    services.exe
    260 B
     5
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    617 B
     788 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    714 B
     655 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    714 B
     655 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     18.3kB
     24
    19

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

    HTTP Response

    404
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    6.8kB
     116.6kB
     108
    105

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBwRQfiH0U0fCaqWWQKrOzL61h7LZP3yCZ3s-9Rlc2699AG4XtFh8RgF_Q6FkX7XIAyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     6.7kB
     13
    10

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+outlook.com&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+stanfordchildrens.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBwRQfiH0U0fCaqWWQKrOzL61h7LZP3yCZ3s-9Rlc2699AG4XtFh8RgF_Q6FkX7XIAyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjDHDG9Cujxm62htqmemhOkR8LS8tqKwuktbbPy19U0ltIbjBUSHqMCgZmYcpUXTltMyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPekzrEGIjDHDG9Cujxm62htqmemhOkR8LS8tqKwuktbbPy19U0ltIbjBUSHqMCgZmYcpUXTltMyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    721 B
     662 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBFeAf4HlLAzFeXZnD3XHWX_wJOT9K7rqJ5O2bc3zVV9DzYXq2vE7zRGhWubUXOP0kyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    909 B
     3.8kB
     9
    6

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBFeAf4HlLAzFeXZnD3XHWX_wJOT9K7rqJ5O2bc3zVV9DzYXq2vE7zRGhWubUXOP0kyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    716 B
     657 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=burtleburtle.net+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     8.2kB
     16
    13

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+cs.stanford.edu&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    680 B
     667 B
     5
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=contact+mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bstanfordchildrens.org%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBseMwv32lxWrXyIaamAXC9qjGGjEj0c5DVEc0sMi68ouwEzimheyXLoXSH1yaYI-QyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bstanfordchildrens.org%26num%3D100&hl=en&q=EgS_ZdEnGPikzrEGIjBseMwv32lxWrXyIaamAXC9qjGGjEj0c5DVEc0sMi68ouwEzimheyXLoXSH1yaYI-QyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.7kB
     38.0kB
     39
    36

    HTTP Request

    GET https://search.yahoo.com/search?p=stanfordhealthcare.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.7kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjArjgqhNtNl7x6174eaB2PcF-gTKG2dn3uINl_RT-AJKrfoDwB5rLPfSew0HY-8WCMyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.4kB
     5.3kB
     12
    9

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanfordhealthcare.org+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjArjgqhNtNl7x6174eaB2PcF-gTKG2dn3uINl_RT-AJKrfoDwB5rLPfSew0HY-8WCMyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    720 B
     661 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    4.5kB
     73.4kB
     68
    65

    HTTP Request

    GET https://search.yahoo.com/search?p=contact+mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+acm.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjC14E3vCSLjyaXU0RCPNEZi4zpej0lgVOh1C_0VlJgoCYQ1djSUnFKN6TxbzOCZmNgyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordhealthcare.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjBIFWnCTRMnWGUFtl2l-VEC3AW2IBkbQDPO9gKnSvyScMdNkUqXzCcq1ZpSRg9pVt4yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanfordhealthcare.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGPmkzrEGIjBIFWnCTRMnWGUFtl2l-VEC3AW2IBkbQDPO9gKnSvyScMdNkUqXzCcq1ZpSRg9pVt4yAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjATSAM5kji4VuVWvnbO8RmYNrhxyHSQ-bFSonxPW72wXIrhn4IBdbVQW0NJtUhQj2kyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.4kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bacm.org%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjATSAM5kji4VuVWvnbO8RmYNrhxyHSQ-bFSonxPW72wXIrhn4IBdbVQW0NJtUhQj2kyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPmkzrEGIjA_qTaGmLo0HYbEzmwR0cy2eYGTpOk4sdnfgHaFRnIefNYYLDmNwAgM43S1WAcuxcwyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    913 B
     3.8kB
     9
    6

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPmkzrEGIjA_qTaGmLo0HYbEzmwR0cy2eYGTpOk4sdnfgHaFRnIefNYYLDmNwAgM43S1WAcuxcwyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPqkzrEGIjB3u0RNEB5RyOXSPOAqUr3pnXVSj3gBCR4p8-nBqepc3GgnhWQ5K-p5Q-BGLYokTckyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    868 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGPqkzrEGIjB3u0RNEB5RyOXSPOAqUr3pnXVSj3gBCR4p8-nBqepc3GgnhWQ5K-p5Q-BGLYokTckyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjDis6ZGc8mApvUN9kDvON0Nd_bvZPdg39ZR60wi7iuL0sbS_ZqJ3L-B4Ys4LE_Gg0AyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    870 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGPqkzrEGIjDis6ZGc8mApvUN9kDvON0Nd_bvZPdg39ZR60wi7iuL0sbS_ZqJ3L-B4Ys4LE_Gg0AyAXJaAUM

    HTTP Response

    429
  • 171.64.64.25:25
    smtp1.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    208 B
     4
  • 142.250.153.26:25
    aspmx3.googlemail.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    208 B
     4
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    618 B
     790 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

    HTTP Response

    301
  • 67.231.157.125:25
    mxa-00000d07.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    208 B
     4
  • 52.205.1.99:25
    stanfordhealthcare.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    208 B
     4
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     5.8kB
     16
    11

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

    HTTP Response

    302
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

    HTTP Response

    404
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    624 B
     802 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjDHHhea9Qt2oeBh_JYZbSqsRYpr_cYYmreuN2CpqF1rL-f2vsNVqbUhFdUj9HVdUMQyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+gzip.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjDHHhea9Qt2oeBh_JYZbSqsRYpr_cYYmreuN2CpqF1rL-f2vsNVqbUhFdUj9HVdUMQyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     18.3kB
     24
    19

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCX5RBQqdwSMy5EZwDvMdFr3JVifLDeBKn_SIkdifqZWcsMsV_dnkA9QS8GrD4aM80yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     8.1kB
     15
    12

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+stanfordhealthcare.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanford.edu+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCX5RBQqdwSMy5EZwDvMdFr3JVifLDeBKn_SIkdifqZWcsMsV_dnkA9QS8GrD4aM80yAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     18.3kB
     24
    19

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    709 B
     650 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=stanford.edu+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    720 B
     661 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.8kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+email

    HTTP Response

    404
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    3.0kB
     46.0kB
     44
    41

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+stanfordchildrens.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjBy7wEuvEeLb9wY1d8NR29T7Ibvoov8O3-VZJyYQHmdmqtMgl_g_x1AivMxqrnQjfwyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    862 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIOlzrEGIjBy7wEuvEeLb9wY1d8NR29T7Ibvoov8O3-VZJyYQHmdmqtMgl_g_x1AivMxqrnQjfwyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCrysEltoMWa43DVx8osh8NuJFL3jzb-whR68MVdnha9K7ic-wVf308sXtm5itqxXAyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+contact+email&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGISlzrEGIjCrysEltoMWa43DVx8osh8NuJFL3jzb-whR68MVdnha9K7ic-wVf308sXtm5itqxXAyAXJaAUM

    HTTP Response

    429
  • 52.175.201.253:25
    stanfordchildrens.org
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    208 B
     4
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.0kB
     1.4kB
     8
    5

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    715 B
     656 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.7kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+stanford.edu

    HTTP Response

    404
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    4.9kB
     82.5kB
     77
    73

    HTTP Request

    GET https://search.yahoo.com/search?p=burtleburtle.net+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bcontact%2Bemail%26num%3D50&hl=en&q=EgS_ZdEnGISlzrEGIjD7AaLfX9qJ3PkKgLrBEh4AKQ-PMn3YM8T3hDsO_ujxydCI4qRVnPsR1WHwSwNTzScyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    877 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bcontact%2Bemail%26num%3D50&hl=en&q=EgS_ZdEnGISlzrEGIjD7AaLfX9qJ3PkKgLrBEh4AKQ-PMn3YM8T3hDsO_ujxydCI4qRVnPsR1WHwSwNTzScyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjDtXgHCnrlsTHAt01VXC_caRUMI58NRIqzHv-OaJqMnZSoJgKwbsQ7DPdSf_NlSdE4yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.7kB
     6.6kB
     12
    9

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjDtXgHCnrlsTHAt01VXC_caRUMI58NRIqzHv-OaJqMnZSoJgKwbsQ7DPdSf_NlSdE4yAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIWlzrEGIjA3zyup7UrwSX5i8U4r9kbFVvrURDK5jSJn73LGWHR86ikYWLajZdHK0Unje408eYAyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS_ZdEnGIWlzrEGIjA3zyup7UrwSX5i8U4r9kbFVvrURDK5jSJn73LGWHR86ikYWLajZdHK0Unje408eYAyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjBJE2MnccRFaYAD1hz1ZMSNjz-9uztIJ060JKPXGH1Oe_z5dwlYCAXfShRfl6ZllFQyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D50&hl=en&q=EgS_ZdEnGIWlzrEGIjBJE2MnccRFaYAD1hz1ZMSNjz-9uztIJ060JKPXGH1Oe_z5dwlYCAXfShRfl6ZllFQyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    699 B
     640 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org&hl=en&q=EgS_ZdEnGIWlzrEGIjBQQAUcyJY-pTcosa37A98KJ19OWnBEMUbqV8-c6aHSVSyBQfLWOiXrZAilVNw7uDwyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    847 B
     3.7kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org&hl=en&q=EgS_ZdEnGIWlzrEGIjBQQAUcyJY-pTcosa37A98KJ19OWnBEMUbqV8-c6aHSVSyBQfLWOiXrZAilVNw7uDwyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAzVeC4-awTTf7LE8Y5LBvzrMhvxPnGIUAAcffm3GUwc59aQwQa0xNU3sbBmVL0IQkyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+burtleburtle.net&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAzVeC4-awTTf7LE8Y5LBvzrMhvxPnGIUAAcffm3GUwc59aQwQa0xNU3sbBmVL0IQkyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    709 B
     650 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    3.3kB
     55.1kB
     51
    48

    HTTP Request

    GET https://search.yahoo.com/search?p=e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200
  • 171.64.64.26:25
    smtp2.cs.stanford.edu
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    208 B
     4
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAhkdPvO2m0AWLOg0yC0yR1rgauInQBUkE-KYdLOLt_W5vus8_2tN-WDD2Vax6jFrIyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgS_ZdEnGIalzrEGIjAhkdPvO2m0AWLOg0yC0yR1rgauInQBUkE-KYdLOLt_W5vus8_2tN-WDD2Vax6jFrIyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    719 B
     660 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.8kB
     41.3kB
     41
    38

    HTTP Request

    GET https://search.yahoo.com/search?p=mail+stanfordhealthcare.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIalzrEGIjDQRq8-5EP34NL-S4jq83oUTbldkAId2wmAS89FSzgZOxc82prcw8ZTSAJ0edyP0-EyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIalzrEGIjDQRq8-5EP34NL-S4jq83oUTbldkAId2wmAS89FSzgZOxc82prcw8ZTSAJ0edyP0-EyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.8kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

    HTTP Response

    404
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    714 B
     655 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    6.3kB
     110.7kB
     96
    94

    HTTP Request

    GET https://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIelzrEGIjC3OMvUk8HCBWtmKwY-03dKtRH-ucBeOut4BMDgklfyHI5ubpMPaKqgSF_7XwJ_C_AyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgS_ZdEnGIelzrEGIjC3OMvUk8HCBWtmKwY-03dKtRH-ucBeOut4BMDgklfyHI5ubpMPaKqgSF_7XwJ_C_AyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    706 B
     647 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 67.231.157.125:25
    mxa-00000d07.gslb.pphosted.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    208 B
     4
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    709 B
     650 B
     6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=stanford.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    3.4kB
     55.4kB
     53
    49

    HTTP Request

    GET https://search.yahoo.com/search?p=reply+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDNCvtkEcFk3nflpQcVneeYr018-zu6YMqvtzFZtnMbHletujlttWznDangiNI2F6AyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDNCvtkEcFk3nflpQcVneeYr018-zu6YMqvtzFZtnMbHletujlttWznDangiNI2F6AyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDcQH5zfTHOL-_3mFU1SIGx_OgPUwufk49tQKsMyVzSEHJVipok5zCqPE6WSIYHOgAyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.4kB
     5.4kB
     12
    9

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+stanfordhealthcare.org&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bstanfordhealthcare.org%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjDcQH5zfTHOL-_3mFU1SIGx_OgPUwufk49tQKsMyVzSEHJVipok5zCqPE6WSIYHOgAyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    614 B
     782 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.4kB
     14
    10

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu

    HTTP Response

    302
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjBdDE9CNvglz8eNV09PqQ4KCAlZe01Ohkiv3X6trhsXcqBZWFfa2xfhoybJMYGRJ3YyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     6.2kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=stanford.edu+mailto&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dstanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS_ZdEnGImlzrEGIjBdDE9CNvglz8eNV09PqQ4KCAlZe01Ohkiv3X6trhsXcqBZWFfa2xfhoybJMYGRJ3YyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGIqlzrEGIjC6hWdWshrlQE5y1imF4kh7o5r5tfsQ9Y-YS2IBn9UkFS_GCsRw4kf8ZYVkO-uzcewyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.4kB
     5.4kB
     12
    9

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+cs.stanford.edu&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS_ZdEnGIqlzrEGIjC6hWdWshrlQE5y1imF4kh7o5r5tfsQ9Y-YS2IBn9UkFS_GCsRw4kf8ZYVkO-uzcewyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    621 B
     796 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail

    HTTP Response

    301
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    780 B
     669 B
     7
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=stanfordhealthcare.org+contact+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     18.4kB
     25
    20

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+stanford.edu

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.3kB
     18.7kB
     27
    21

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=alumni.caltech.edu+e-mail

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCtMRcSGPcaGkRcKdhSMwyDh39N3zN4jEQeEQwyQf6o2Gf9oaOXjKwrvT0S8L2k_jcyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+m-ou.se&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bm-ou.se%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCtMRcSGPcaGkRcKdhSMwyDh39N3zN4jEQeEQwyQf6o2Gf9oaOXjKwrvT0S8L2k_jcyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     8.1kB
     15
    12

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org&hl=en&q=EgS_ZdEnGIqlzrEGIjA9FVagAlMoAWhLiRa2XLsS-KAaLOiUIkcW2PwJSKRgZaVrQqWlbRJ874QS_zVvfzYyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.2kB
     10
    7

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org&hl=en&q=EgS_ZdEnGIqlzrEGIjA9FVagAlMoAWhLiRa2XLsS-KAaLOiUIkcW2PwJSKRgZaVrQqWlbRJ874QS_zVvfzYyAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    625 B
     804 B
     6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto

    HTTP Response

    301
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCSeFZqCcbr9FvsKAZuqcYjZCHFXrL4iTaS6aRDU63bTkys2NmbgtBPL9zinlSMFb4yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    866 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIqlzrEGIjCSeFZqCcbr9FvsKAZuqcYjZCHFXrL4iTaS6aRDU63bTkys2NmbgtBPL9zinlSMFb4yAXJaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.2kB
     18.7kB
     26
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=stanfordhealthcare.org+mailto

    HTTP Response

    404
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjC_zTokx7RniSUPIz7KY9msWf4iBzgjV53fGqWhOj5hhQwP_9qGIeAxUYYRIH_QX6IyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    866 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bstanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjC_zTokx7RniSUPIz7KY9msWf4iBzgjV53fGqWhOj5hhQwP_9qGIeAxUYYRIH_QX6IyAXJaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    661 B
     648 B
     5
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    tls, http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    2.9kB
     46.4kB
     42
    40

    HTTP Request

    GET https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGIylzrEGIjApbqGGcMecS_urvRNxwbRbWj7AQFXU1JSxRUaa6z1X1EeWLJD-LZ9EP5v6WiKiLlIyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.8kB
     6.8kB
     13
    10

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+outlook.com&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+burtleburtle.net&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS_ZdEnGIylzrEGIjApbqGGcMecS_urvRNxwbRbWj7AQFXU1JSxRUaa6z1X1EeWLJD-LZ9EP5v6WiKiLlIyAXJaAUM

    HTTP Response

    429
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjBXtgghabGMbBUwtfJwo_X1T4e6NNlE5iN3wAwzbmZzCEaedhzB7sZmFoPCxVse8DsyAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    1.3kB
     5.3kB
     11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Boutlook.com%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjBXtgghabGMbBUwtfJwo_X1T4e6NNlE5iN3wAwzbmZzCEaedhzB7sZmFoPCxVse8DsyAXJaAUM

    HTTP Response

    429
  • 52.101.10.5:25
    stanfordhealthcare-org.mail.protection.outlook.com
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    104 B
     2
  • 142.250.178.4:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM
    http
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    869 B
     3.8kB
     8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS_ZdEnGIulzrEGIjCht1Nrs1RCBiRsZinKYeouSjAPiIfRMh0CxtryUcmE0klsm6ZtnX4-HdDrLOozN68yAXJaAUM

    HTTP Response

    429
  • 4.240.78.16:1034
    services.exe
    104 B
     2
  • 8.8.8.8:53
    g.bing.com
    dns
    56 B
     151 B
     1
    1

    DNS Request

    g.bing.com

    DNS Response

    204.79.197.237
    13.107.21.237

  • 8.8.8.8:53
    13.86.106.20.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    13.86.106.20.in-addr.arpa

  • 8.8.8.8:53
    77.190.18.2.in-addr.arpa
    dns
    70 B
     133 B
     1
    1

    DNS Request

    77.190.18.2.in-addr.arpa

  • 8.8.8.8:53
    68.32.126.40.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    68.32.126.40.in-addr.arpa

  • 8.8.8.8:53
    237.197.79.204.in-addr.arpa
    dns
    73 B
     143 B
     1
    1

    DNS Request

    237.197.79.204.in-addr.arpa

  • 8.8.8.8:53
    241.150.49.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    241.150.49.20.in-addr.arpa

  • 8.8.8.8:53
    88.156.103.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    88.156.103.20.in-addr.arpa

  • 8.8.8.8:53
    129.61.62.23.in-addr.arpa
    dns
    71 B
     135 B
     1
    1

    DNS Request

    129.61.62.23.in-addr.arpa

  • 8.8.8.8:53
    86.23.85.13.in-addr.arpa
    dns
    140 B
     144 B
     2
    1

    DNS Request

    86.23.85.13.in-addr.arpa

    DNS Request

    86.23.85.13.in-addr.arpa

  • 8.8.8.8:53
    15.164.165.52.in-addr.arpa
    dns
    72 B
     146 B
     1
    1

    DNS Request

    15.164.165.52.in-addr.arpa

  • 8.8.8.8:53
    142.53.16.96.in-addr.arpa
    dns
    71 B
     135 B
     1
    1

    DNS Request

    142.53.16.96.in-addr.arpa

  • 8.8.8.8:53
    m-ou.se
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    53 B
     232 B
     1
    1

    DNS Request

    m-ou.se

  • 8.8.8.8:53
    aspmx.l.google.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    64 B
     80 B
     1
    1

    DNS Request

    aspmx.l.google.com

    DNS Response

    74.125.193.26

  • 8.8.8.8:53
    acm.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    53 B
     87 B
     1
    1

    DNS Request

    acm.org

  • 8.8.8.8:53
    mail.mailroute.net
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    64 B
     96 B
     1
    1

    DNS Request

    mail.mailroute.net

    DNS Response

    199.89.3.120
    199.89.1.120

  • 8.8.8.8:53
    cs.stanford.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    61 B
     121 B
     1
    1

    DNS Request

    cs.stanford.edu

  • 8.8.8.8:53
    cs.stanford.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    61 B
     77 B
     1
    1

    DNS Request

    cs.stanford.edu

    DNS Response

    171.64.64.64

  • 8.8.8.8:53
    burtleburtle.net
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    62 B
     81 B
     1
    1

    DNS Request

    burtleburtle.net

  • 8.8.8.8:53
    mx.burtleburtle.net
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    65 B
     113 B
     1
    1

    DNS Request

    mx.burtleburtle.net

    DNS Response

    65.254.254.52
    65.254.254.50
    65.254.254.51

  • 8.8.8.8:53
    alumni.caltech.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    64 B
     126 B
     1
    1

    DNS Request

    alumni.caltech.edu

  • 8.8.8.8:53
    alumni-caltech-edu.mail.protection.outlook.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    92 B
     204 B
     1
    1

    DNS Request

    alumni-caltech-edu.mail.protection.outlook.com

    DNS Response

    52.101.9.11
    52.101.42.10
    52.101.40.24
    52.101.194.12
    52.101.10.2
    52.101.194.15
    52.101.194.4

  • 8.8.8.8:53
    gzip.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    54 B
     70 B
     1
    1

    DNS Request

    gzip.org

  • 8.8.8.8:53
    gzip.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    54 B
     70 B
     1
    1

    DNS Request

    gzip.org

    DNS Response

    85.187.148.2

  • 8.8.8.8:53
    search.yahoo.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    62 B
     121 B
     1
    1

    DNS Request

    search.yahoo.com

    DNS Response

    212.82.100.137

  • 8.8.8.8:53
    search.lycos.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    62 B
     109 B
     1
    1

    DNS Request

    search.lycos.com

    DNS Response

    209.202.254.10

  • 8.8.8.8:53
    www.google.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    60 B
     76 B
     1
    1

    DNS Request

    www.google.com

    DNS Response

    142.250.178.4

  • 8.8.8.8:53
    137.100.82.212.in-addr.arpa
    dns
    73 B
     119 B
     1
    1

    DNS Request

    137.100.82.212.in-addr.arpa

  • 8.8.8.8:53
    4.178.250.142.in-addr.arpa
    dns
    72 B
     110 B
     1
    1

    DNS Request

    4.178.250.142.in-addr.arpa

  • 8.8.8.8:53
    www.altavista.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    63 B
     157 B
     1
    1

    DNS Request

    www.altavista.com

    DNS Response

    212.82.100.137

  • 8.8.8.8:53
    10.254.202.209.in-addr.arpa
    dns
    73 B
     113 B
     1
    1

    DNS Request

    10.254.202.209.in-addr.arpa

  • 8.8.8.8:53
    11.97.55.23.in-addr.arpa
    dns
    70 B
     133 B
     1
    1

    DNS Request

    11.97.55.23.in-addr.arpa

  • 8.8.8.8:53
    80.190.18.2.in-addr.arpa
    dns
    70 B
     133 B
     1
    1

    DNS Request

    80.190.18.2.in-addr.arpa

  • 8.8.8.8:53
    79.190.18.2.in-addr.arpa
    dns
    70 B
     133 B
     1
    1

    DNS Request

    79.190.18.2.in-addr.arpa

  • 8.8.8.8:53
    138.201.86.20.in-addr.arpa
    dns
    144 B
     316 B
     2
    2

    DNS Request

    138.201.86.20.in-addr.arpa

    DNS Request

    138.201.86.20.in-addr.arpa

  • 8.8.8.8:53
    14.251.17.2.in-addr.arpa
    dns
    70 B
     133 B
     1
    1

    DNS Request

    14.251.17.2.in-addr.arpa

  • 8.8.8.8:53
    alt1.aspmx.l.google.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    138 B
     170 B
     2
    2

    DNS Request

    alt1.aspmx.l.google.com

    DNS Request

    alt1.aspmx.l.google.com

    DNS Response

    142.250.27.26

    DNS Response

    142.250.27.27

  • 8.8.8.8:53
    acm.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    53 B
     85 B
     1
    1

    DNS Request

    acm.org

    DNS Response

    104.17.78.30
    104.17.79.30

  • 8.8.8.8:53
    smtp2.cs.stanford.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    67 B
     83 B
     1
    1

    DNS Request

    smtp2.cs.stanford.edu

    DNS Response

    171.64.64.26

  • 8.8.8.8:53
    burtleburtle.net
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    62 B
     78 B
     1
    1

    DNS Request

    burtleburtle.net

    DNS Response

    65.254.227.224

  • 8.8.8.8:53
    alumni.caltech.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    64 B
     96 B
     1
    1

    DNS Request

    alumni.caltech.edu

    DNS Response

    75.2.70.75
    99.83.190.102

  • 8.8.8.8:53
    43.229.111.52.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    43.229.111.52.in-addr.arpa

  • 8.8.8.8:53
    alt2.aspmx.l.google.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    69 B
     85 B
     1
    1

    DNS Request

    alt2.aspmx.l.google.com

    DNS Response

    142.250.153.27

  • 8.8.8.8:53
    smtp1.cs.stanford.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    67 B
     83 B
     1
    1

    DNS Request

    smtp1.cs.stanford.edu

    DNS Response

    171.64.64.25

  • 8.8.8.8:53
    mx.alumni.caltech.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    134 B
     290 B
     2
    2

    DNS Request

    mx.alumni.caltech.edu

    DNS Request

    mx.alumni.caltech.edu

  • 8.8.8.8:53
    mail.alumni.caltech.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    138 B
     294 B
     2
    2

    DNS Request

    mail.alumni.caltech.edu

    DNS Request

    mail.alumni.caltech.edu

  • 8.8.8.8:53
    smtp.alumni.caltech.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    138 B
     294 B
     2
    2

    DNS Request

    smtp.alumni.caltech.edu

    DNS Request

    smtp.alumni.caltech.edu

  • 8.8.8.8:53
    mx.gzip.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    114 B
     248 B
     2
    2

    DNS Request

    mx.gzip.org

    DNS Request

    mx.gzip.org

  • 8.8.8.8:53
    outlook.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    57 B
     100 B
     1
    1

    DNS Request

    outlook.com

  • 8.8.8.8:53
    outlook-com.olc.protection.outlook.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    84 B
     148 B
     1
    1

    DNS Request

    outlook-com.olc.protection.outlook.com

    DNS Response

    52.101.41.5
    52.101.68.13
    52.101.42.15
    52.101.137.3

  • 8.8.8.8:53
    mail.gzip.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    59 B
     89 B
     1
    1

    DNS Request

    mail.gzip.org

    DNS Response

    85.187.148.2

  • 8.8.8.8:53
    stanfordchildrens.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    67 B
     142 B
     1
    1

    DNS Request

    stanfordchildrens.org

  • 8.8.8.8:53
    mxa-00039903.gslb.pphosted.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    152 B
     184 B
     2
    2

    DNS Request

    mxa-00039903.gslb.pphosted.com

    DNS Request

    mxa-00039903.gslb.pphosted.com

    DNS Response

    205.220.175.141

    DNS Response

    205.220.175.141

  • 8.8.8.8:53
    tse1.mm.bing.net
    dns
    124 B
     346 B
     2
    2

    DNS Request

    tse1.mm.bing.net

    DNS Request

    tse1.mm.bing.net

    DNS Response

    204.79.197.200
    13.107.21.200

    DNS Response

    204.79.197.200
    13.107.21.200

  • 8.8.8.8:53
    205.47.74.20.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    205.47.74.20.in-addr.arpa

  • 8.8.8.8:53
    aspmx2.googlemail.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    67 B
     83 B
     1
    1

    DNS Request

    aspmx2.googlemail.com

    DNS Response

    142.250.27.26

  • 8.8.8.8:53
    stanfordhealthcare.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    68 B
     134 B
     1
    1

    DNS Request

    stanfordhealthcare.org

  • 8.8.8.8:53
    stanfordhealthcare-org.mail.protection.outlook.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    192 B
     384 B
     2
    2

    DNS Request

    stanfordhealthcare-org.mail.protection.outlook.com

    DNS Request

    stanfordhealthcare-org.mail.protection.outlook.com

    DNS Response

    52.101.9.20
    52.101.40.0
    52.101.41.0
    52.101.10.12
    52.101.9.12
    52.101.40.1

    DNS Response

    52.101.42.14
    52.101.10.6
    52.101.9.20
    52.101.8.44
    52.101.8.34
    52.101.10.2

  • 8.8.8.8:53
    outlook.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    57 B
     185 B
     1
    1

    DNS Request

    outlook.com

    DNS Response

    52.96.222.194
    52.96.229.242
    52.96.91.34
    52.96.222.226
    52.96.228.130
    52.96.214.50
    52.96.223.2
    52.96.111.82

  • 8.8.8.8:53
    smtp.gzip.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    118 B
     252 B
     2
    2

    DNS Request

    smtp.gzip.org

    DNS Request

    smtp.gzip.org

  • 8.8.8.8:53
    mxb-00039903.gslb.pphosted.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    152 B
     184 B
     2
    2

    DNS Request

    mxb-00039903.gslb.pphosted.com

    DNS Request

    mxb-00039903.gslb.pphosted.com

    DNS Response

    205.220.175.141

    DNS Response

    205.220.163.142

  • 8.8.8.8:53
    aspmx3.googlemail.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    67 B
     83 B
     1
    1

    DNS Request

    aspmx3.googlemail.com

    DNS Response

    142.250.153.26

  • 8.8.8.8:53
    stanford.edu
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    58 B
     133 B
     1
    1

    DNS Request

    stanford.edu

  • 8.8.8.8:53
    mxa-00000d07.gslb.pphosted.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    152 B
     184 B
     2
    2

    DNS Request

    mxa-00000d07.gslb.pphosted.com

    DNS Request

    mxa-00000d07.gslb.pphosted.com

    DNS Response

    67.231.157.125

    DNS Response

    67.231.149.169

  • 8.8.8.8:53
    stanfordhealthcare.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    136 B
     264 B
     2
    2

    DNS Request

    stanfordhealthcare.org

    DNS Request

    stanfordhealthcare.org

    DNS Response

    52.205.1.99
    18.214.186.56
    34.204.164.4
    34.193.169.64

    DNS Response

    34.193.169.64
    34.204.164.4
    18.214.186.56
    52.205.1.99

  • 8.8.8.8:53
    stanfordchildrens.org
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    134 B
     166 B
     2
    2

    DNS Request

    stanfordchildrens.org

    DNS Request

    stanfordchildrens.org

    DNS Response

    52.175.201.253

    DNS Response

    52.175.201.253

  • 8.8.8.8:53
    stanfordhealthcare-org.mail.protection.outlook.com
    dns
    0e9a8e8bfb73406e5cbc3e18520bd6af_JaffaCakes118.exe
    192 B
     384 B
     2
    2

    DNS Request

    stanfordhealthcare-org.mail.protection.outlook.com

    DNS Request

    stanfordhealthcare-org.mail.protection.outlook.com

    DNS Response

    52.101.10.5
    52.101.11.7
    52.101.41.6
    52.101.9.5
    52.101.42.13
    52.101.194.15

    DNS Response

    52.101.10.5
    52.101.11.7
    52.101.41.6
    52.101.9.5
    52.101.42.13
    52.101.194.15

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\5ACXXH1H\5EBN3FAB.htm
    Filesize

    175KB

    MD5

    ae5a019cde88822d3f33d34b01739a7e

    SHA1

    b9e44f2444b316db85d378c51d0e735e8df2f8c7

    SHA256

    2118e993a3afa4f94183eec7bb99ff7815cac71bb51105854b929121ea8f03a1

    SHA512

    1dd0c5fca184b915b8a1567e30cfd8159184d49b4e5cbf4317a5df46e29a708d1596779cacfd8e907b2ca82156f0528799ebc901a0b7282e342d88a19f6693bf

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\5ACXXH1H\search[1].htm
    Filesize

    25B

    MD5

    8ba61a16b71609a08bfa35bc213fce49

    SHA1

    8374dddcc6b2ede14b0ea00a5870a11b57ced33f

    SHA256

    6aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1

    SHA512

    5855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\KQH3BVSD\results[2].htm
    Filesize

    1KB

    MD5

    211da0345fa466aa8dbde830c83c19f8

    SHA1

    779ece4d54a099274b2814a9780000ba49af1b81

    SHA256

    aec2ac9539d1b0cac493bbf90948eca455c6803342cc83d0a107055c1d131fd5

    SHA512

    37fd7ef6e11a1866e844439318ae813059106fbd52c24f580781d90da3f64829cf9654acac0dd0f2098081256c5dcdf35c70b2cbef6cbe3f0b91bd2d8edd22ca

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\KQH3BVSD\searchVR1DHJ14.htm
    Filesize

    126KB

    MD5

    cb065172cc8e05c8fe9d0a48781fcef5

    SHA1

    50699a6524299f722349845fb93e3e101c5d7c32

    SHA256

    56163fe0e3557c5767aad82c46e395334816e823cb8955741aa138ff4a242b5c

    SHA512

    7cf7d8cef5d526ebca04414b0fcee4609474e386dd53527e977ab4c87e091d1386434d0bcd1ad902e2f0848ed8f0fe5a118bd3c7261bef92bdfacdfab57d18b1

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\KQH3BVSD\search[2].htm
    Filesize

    163KB

    MD5

    f1ec3e77c685d29e4551893d4a1e6027

    SHA1

    d85a35e7e0d1ece9c22efd551981ad2a4bc5138e

    SHA256

    988b46f713ce694f0f4b346d78ee1c420685aab89bd74669e8bcbd2fd5ac2e03

    SHA512

    ae1e6c3f94aee037d3b822314adf86fd15f6903372961cea71cf1481354687140f0f61b19bde0ff883dbba87942c22bbd76e13cb0adbd333816ac99653f5d120

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\KQH3BVSD\search[5].htm
    Filesize

    133KB

    MD5

    2a5cb579190217bb5a37743f8e836820

    SHA1

    d39617627b5023ed6397d6eeb1a4e64591a88ec7

    SHA256

    60a53a54fcbce898787c97847bfee4f61502ebbc83c063e30f719a4df2d4de52

    SHA512

    fcb47ee111194f024185655a79d7e9638a86270894325d3adac3005e1cd4eb17b5ae4b1b5de52cc3fc737e6d153d10599986977abc6e3b27662d69bd5b20ccf3

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\KQH3BVSD\search[6].htm
    Filesize

    110KB

    MD5

    17e24935a9460cec70a82d8dc0335e0e

    SHA1

    48b70d981c081539f7b5720f5ba035cd3c07463a

    SHA256

    0888b16ce4228276636a0da9f51ada413697d9acc6bc4ce287f9d2ef1b0eb1b5

    SHA512

    f293109a8bd9e39e260615a7aea45d1e42cb02c571fd371a6d683dc34d5d37afbe342716c8a684f72ba516e6252d99a839a6b371a1e2f99eefb56364147dba42

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\KQH3BVSD\search[9].htm
    Filesize

    114KB

    MD5

    52e61ca28506f212452ad1188165463c

    SHA1

    d793a3289f82e0eb331194ca72982807a3c361d2

    SHA256

    94f7ae2edb26181d3c07d1388891dd1f74d62d1a85092d623579bca253c6b3b8

    SHA512

    930d281765e07916cb188ef61426bf3a264e93bfac06ef1a3b25f12916ecd5a600528475f9387e257b4515483c7e2e35dae551ba16d302a826f95e10ab876bf8

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LYH0CKVD\results[3].htm
    Filesize

    1KB

    MD5

    ee4aed56584bf64c08683064e422b722

    SHA1

    45e5ba33f57c6848e84b66e7e856a6b60af6c4a8

    SHA256

    a4e6ba8c1fe3df423e6f17fcbeeaa7e90e2bd2fffe8f98ff4b3e6ed970e32c61

    SHA512

    058f023cb934a00c8f1c689001438c9bdd067d923ddcbe7a951f54d3ca82218803e0e81fbc9af5c56375ff7961deed0359af1ffa7335d41379ee97d01a76ded6

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LYH0CKVD\search[5].htm
    Filesize

    102KB

    MD5

    44d400187773a6708cd7e40e43bb23b4

    SHA1

    c0977164f83ced7d15195b0393ad6d0059225154

    SHA256

    1799c7637bc8c77cb2c7851534b26688b6a1856d18ba12a4fb5d94ce969ed912

    SHA512

    1f2e23945b98f9b88ef760da9a8451f8438cd12c43873924076ed0269019e66dc05a3c0aa886fc817c8a2e0b11827866a7e5e546d64595c3211b27fa4013472d

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LYH0CKVD\search[7].htm
    Filesize

    121KB

    MD5

    ecee9c327fb0d4920bfadae9eb9d2dc8

    SHA1

    72510cecf9e2d321979817fa6aee209a76aadc26

    SHA256

    559233c104b099fe8e36971e3a5ed8eba07cfea10de77656db74ca37280399de

    SHA512

    ae02635e02a953919d845572c4973f7016c9c0fa1e3285c4e99a5fe3fc3c2b28fb5709ffde7f353aca342cf32b2a8eeca6fe29693285db84595ec1a32ce85f7b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\tmpA3E.tmp
    Filesize

    40KB

    MD5

    3dbeadc2b91b3b15f805df597c836d30

    SHA1

    9a9976bfd117dfa648310a50388f38973b78d93b

    SHA256

    ae187b3b9ff50703d2f0664196481643490767d4a888f379515186af06856d29

    SHA512

    60744a79320e7433ab77cfad855b4e778d85c15d4bbea64511639156a2edb3787707fdd9da39ca914afe6d6865e7d0d33731b1c5b2135e97654a9fe76a77266c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\zincite.log
    Filesize

    1KB

    MD5

    4a6b04aca60181ad2816d7554a4e9b93

    SHA1

    f400cad6b096c018ed73fa75fec4476374cb1d38

    SHA256

    3218ef285dfb5c892896f34df2113046ef93184631a3e174f35028c8e9f4cf6c

    SHA512

    2750c929fc4c9bb08c67bf2fe20e9d46acdc691351353c2705a79ff2a8698e128ded74c0c0974a508cb396e28fff418bb91656278a45498b1dd251d0e16f29fc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\zincite.log
    Filesize

    1KB

    MD5

    0b526dc1ee24feb48e2ef6718debef29

    SHA1

    ba6b964ddc53b0af6653af5ef216c38b0747f5f5

    SHA256

    b92090a74dc00203fc9dbafac3b0feaa317ec1960ce88b4a08711a8a31bc5fa0

    SHA512

    54f18801562d65982ec65fb219b5ab89507a321f4b1b90f062d34a4c2bbf639b1d300636797f209838741d6f1179ba6b41d5e429f340f715e270bd34a5b76cd9

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\zincite.log
    Filesize

    1KB

    MD5

    29ed50e9b6d2e05863be3329954a6829

    SHA1

    4979b4892bceadb6e81dd2dc15d31fc36f3704a3

    SHA256

    6272c251a9eceba8db031a68591f9f7cc5c8b1e849c99b6e4bf63ad24d3d0ea9

    SHA512

    220a28e1d213cffa9d0e7c2eb4c81d2cdd49b1765ed18bdb3f211e42954b8565d1d01d242aec399fec1dfe88102f397ae0c719acd5932cd11808d2d11df88d62

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\zincite.log
    Filesize

    1KB

    MD5

    2f9e947a6eee8a7221bc14b640038865

    SHA1

    c2bc61245f77f3ac66fd7b73b5e418d383a3f7fa

    SHA256

    154deae6c719623b656fbe7b201a6755357383858b5eb6ad03c549409a572e59

    SHA512

    8c412c4e825ba4ecb497fd35093e8bf9695385cc5ef5255e4cc6a7e61289b72bb09c0570caca65fb65376e9836b8e9fe710e08df8ec278aa6d12a13fb3e3d3cd

    Download Submit

  • C:\Windows\services.exe
    Filesize

    8KB

    MD5

    b0fe74719b1b647e2056641931907f4a

    SHA1

    e858c206d2d1542a79936cb00d85da853bfc95e2

    SHA256

    bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c

    SHA512

    9c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2

    Download Submit

  • memory/1552-174-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-403-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-207-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-178-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-7-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-170-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-303-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-169-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-26-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-22-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-204-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-21-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-17-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-485-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1552-13-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1608-0-0x0000000000500000-0x000000000050D000-memory.dmp

    Filesize

    52KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.