mydoom | 9db116ab607dd6c2774018c2fc200fcabb53c1ee1f07b9be7ea6be56f2efe00d

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
15/09/2024, 12:20 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe
Size

28KB
MD5

e2782725ff19b07aff77868dbdc744da
SHA1

e95a23354ea5dcef1e548bda4bf698f0e263ddd7
SHA256

9db116ab607dd6c2774018c2fc200fcabb53c1ee1f07b9be7ea6be56f2efe00d
SHA512

d642d6797cdfc8d4db4f264799c6fb95ca7dcc28fddde8d838b4929f0963bc02537ac4019fe905eedb70308ba124e9dc9517be7f6fbf26dc8f30ca2627c26de5
SSDEEP

384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNzdpN:Dv8IRRdsxq1DjJcqfSdpN

Score

10^/10

mydoom discovery persistence upx worm

Malware Config

Signatures

Detects MyDoom family 5 IoCs

resource	yara_rule
behavioral2/memory/4544-13-0x0000000000500000-0x0000000000510000-memory.dmp	family_mydoom
behavioral2/memory/4544-51-0x0000000000500000-0x0000000000510000-memory.dmp	family_mydoom
behavioral2/memory/4544-102-0x0000000000500000-0x0000000000510000-memory.dmp	family_mydoom
behavioral2/memory/4544-160-0x0000000000500000-0x0000000000510000-memory.dmp	family_mydoom
behavioral2/memory/4544-162-0x0000000000500000-0x0000000000510000-memory.dmp	family_mydoom

MyDoom
MyDoom is a Worm that is written in C++.
worm mydoom

Executes dropped EXE 1 IoCs

pid	Process
4908	services.exe

UPX packed file 24 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4544-0-0x0000000000500000-0x0000000000510000-memory.dmp	upx
behavioral2/files/0x00090000000234dd-4.dat	upx
behavioral2/memory/4908-5-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4544-13-0x0000000000500000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/4908-15-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-16-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-21-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-26-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-28-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-33-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-38-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-40-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-45-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-50-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4544-51-0x0000000000500000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/4908-52-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/files/0x0004000000000705-65.dat	upx
behavioral2/memory/4544-102-0x0000000000500000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/4908-103-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4544-160-0x0000000000500000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/4908-161-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4544-162-0x0000000000500000-0x0000000000510000-memory.dmp	upx
behavioral2/memory/4908-163-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4908-168-0x0000000000400000-0x0000000000408000-memory.dmp	upx

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\JavaVM = "C:\\Windows\\java.exe"	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Services = "C:\\Windows\\services.exe"	services.exe

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\services.exe	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe
File opened for modification	C:\Windows\java.exe	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe
File created	C:\Windows\java.exe	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	services.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4544 wrote to memory of 4908	4544	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe	83
PID 4544 wrote to memory of 4908	4544	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe	83
PID 4544 wrote to memory of 4908	4544	e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe	83

C:\Users\Admin\AppData\Local\Temp\e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe"
1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4544
- C:\Windows\services.exe
  "C:\Windows\services.exe"
  2⤵
  - Executes dropped EXE
  - Adds Run key to start application
  - System Location Discovery: System Language Discovery
  PID:4908

Network

DNS

232.168.11.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

232.168.11.51.in-addr.arpa

IN PTR

Response
DNS

240.221.184.93.in-addr.arpa

Remote address:

8.8.8.8:53

Request

240.221.184.93.in-addr.arpa

IN PTR

Response
DNS

68.32.126.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

68.32.126.40.in-addr.arpa

IN PTR

Response
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

241.150.49.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.150.49.20.in-addr.arpa

IN PTR

Response
DNS

26.165.165.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.165.165.52.in-addr.arpa

IN PTR

Response
DNS

206.23.85.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.85.13.in-addr.arpa

IN PTR

Response
DNS

21.236.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.236.111.52.in-addr.arpa

IN PTR

Response
DNS

21.236.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.236.111.52.in-addr.arpa

IN PTR
DNS

m-ou.se

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

m-ou.se

IN MX

Response

m-ou.se

IN MX

alt1aspmxlgooglecom

m-ou.se

IN MX

aspmx2 googlemail�;

m-ou.se

IN MX

�,

m-ou.se

IN MX

aspmx5�U

m-ou.se

IN MX

alt2�,

m-ou.se

IN MX

aspmx3�U

m-ou.se

IN MX

aspmx4�U
DNS

alt1.aspmx.l.google.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

alt1.aspmx.l.google.com

IN A

Response

alt1.aspmx.l.google.com

IN A

142.251.9.26
DNS

acm.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

acm.org

IN MX

Response

acm.org

IN MX

mail mailroutenet
DNS

mail.mailroute.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

mail.mailroute.net

IN A

Response

mail.mailroute.net

IN A

199.89.3.120

mail.mailroute.net

IN A

199.89.1.120
DNS

cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

cs.stanford.edu

IN MX

Response

cs.stanford.edu

IN MX

�

cs.stanford.edu

IN MX

smtp2�

cs.stanford.edu

IN MX

smtp1�
DNS

cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

cs.stanford.edu

IN A

Response

cs.stanford.edu

IN A

171.64.64.64
DNS

burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

burtleburtle.net

IN MX

Response

burtleburtle.net

IN MX

mx�
DNS

mx.burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

mx.burtleburtle.net

IN A

Response

mx.burtleburtle.net

IN A

65.254.254.51

mx.burtleburtle.net

IN A

65.254.254.52

mx.burtleburtle.net

IN A

65.254.254.50
DNS

alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

alumni.caltech.edu

IN MX

Response

alumni.caltech.edu

IN MX

alumni-caltech-edumail protectionoutlookcom
DNS

alumni-caltech-edu.mail.protection.outlook.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

alumni-caltech-edu.mail.protection.outlook.com

IN A

Response

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.41.4

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.9.2

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.41.58

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.8.46
DNS

gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

gzip.org

IN MX

Response

gzip.org

IN MX

�
DNS

gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

gzip.org

IN A

Response

gzip.org

IN A

85.187.148.2
DNS

www.google.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.250.178.4
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAGaXm6HCTMzgryuMma6RVwi6hxbuI8Wg1ss99h4XJu8cTxT1Icpg-QPOR4NNhbVLAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5aKbtwYQ_OC80wESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-g5YqQK5L7uFk3nn5Y-NNMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:57 GMT
Server: gws
Content-Length: 481
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpLXUtk0J9iMPtPT4mz5YzCxvqHznanWqLttfcG3PGYyRrMlYMiGQ; expires=Fri, 14-Mar-2025 12:21:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=20

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D20&hl=en&q=EgTCbg1GGOWim7cGIjDcgU34eDo8U6t35PGQ-kGAJWMbKlv0Dv3Vyaeq1IJI2A8515mNdEtgVcX721zeBCgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5aKbtwYQsuLHhQMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-r2o8PfgVaySWQ8VyDbGUPg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:57 GMT
Server: gws
Content-Length: 490
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqb9Kn6wqm56A6-bGUeuKdb7X4ylXqupUuKwo3VgiSRWLojKUESWsM; expires=Fri, 14-Mar-2025 12:21:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAGaXm6HCTMzgryuMma6RVwi6hxbuI8Wg1ss99h4XJu8cTxT1Icpg-QPOR4NNhbVLAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAGaXm6HCTMzgryuMma6RVwi6hxbuI8Wg1ss99h4XJu8cTxT1Icpg-QPOR4NNhbVLAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:57 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3259
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+m-ou.se&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+m-ou.se&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjCOWKb6nK3zH_9PEGPk9PxUZLE7Z9GLiIZVfnW4DBjDMOVk8Av9kSYW9g0OZCK5eqAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5aKbtwYQ2LiGwwESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-M5biltB7yM7szBeaJkSQmw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:57 GMT
Server: gws
Content-Length: 482
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpiESkdSG-SIpfM2MHTGmKXQTfR9qxXsfJURTJv18bsfB-K38wemA; expires=Fri, 14-Mar-2025 12:21:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAiMq8iJQ11ky-sqSUYkMoR_Wq4ss3ZmstMgGUMq1J9QE0kWz2GTD45VuiAUUOVz7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5aKbtwYQyryV8wISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Wvq4vkqm1mXUFjRgR0kDgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:57 GMT
Server: gws
Content-Length: 490
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cp4MB-bc464zvsQblOL0-3xmDieDnoFX_jd_19A_qLwXkfso4fcDIA; expires=Fri, 14-Mar-2025 12:21:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjCOWKb6nK3zH_9PEGPk9PxUZLE7Z9GLiIZVfnW4DBjDMOVk8Av9kSYW9g0OZCK5eqAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjCOWKb6nK3zH_9PEGPk9PxUZLE7Z9GLiIZVfnW4DBjDMOVk8Av9kSYW9g0OZCK5eqAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:57 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3262
X-XSS-Protection: 0
DNS

search.lycos.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

search.lycos.com

IN A

Response

search.lycos.com

IN CNAME

search-core2.bo3.lycos.com

search-core2.bo3.lycos.com

IN A

209.202.254.10
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:21:57 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu
Content-Length: 314
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
DNS

www.altavista.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

www.altavista.com

IN A

Response

www.altavista.com

IN CNAME

us.yhs4.search.yahoo.com

us.yhs4.search.yahoo.com

IN CNAME

ds-global3.l7.search.ystg1.b.yahoo.com

ds-global3.l7.search.ystg1.b.yahoo.com

IN A

212.82.100.137
GET

http://www.altavista.com/web/results?q=mailto+acm.org&kgs=0&kls=0

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+acm.org&kgs=0&kls=0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:21:57 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0&nbq=20

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0&nbq=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:21:58 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=gzip.org+mailto&kgs=0&kls=0&nbq=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=gzip.org+mailto&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 INKApi Error

Date: Sun, 15 Sep 2024 12:22:00 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Content-Length: 0
DNS

r10.o.lencr.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

r10.o.lencr.org

IN A

Response

r10.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN A

88.221.135.106

a1887.dscq.akamai.net

IN A

88.221.135.115

a1887.dscq.akamai.net

IN A

88.221.134.137

a1887.dscq.akamai.net

IN A

88.221.134.91
GET

http://r10.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRpD%2BQVZ%2B1vf7U0RGQGBm8JZwdxcgQUdKR2KRcYVIUxN75n5gZYwLzFBXICEgQm%2FTGeMjmA8601cvXq8gl6CA%3D%3D

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

88.221.135.106:80

Request

GET /MFMwUTBPME0wSzAJBgUrDgMCGgUABBRpD%2BQVZ%2B1vf7U0RGQGBm8JZwdxcgQUdKR2KRcYVIUxN75n5gZYwLzFBXICEgQm%2FTGeMjmA8601cvXq8gl6CA%3D%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: r10.o.lencr.org

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "18029DAE7E1B39724101B292EB906ECAEFE6FFCC5F710B04D54EFA7047537373"
Last-Modified: Sun, 15 Sep 2024 06:03:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15028
Expires: Sun, 15 Sep 2024 16:32:25 GMT
Date: Sun, 15 Sep 2024 12:21:57 GMT
Connection: keep-alive
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjB9UDrD3rMDzq_-8oVdK-o9pi6QLa0Q_1xh-pOEX3Tk5FOqa8jDR1E6ER2Fl_qKCIcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5qKbtwYQ_JumxAESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1nGDk1xBv4d17zjjwujXQQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crzo5NYinDGRBc-_6_40V6AL4Oeghpfiw0yaRmN2aLJNvwRVJrtSw; expires=Fri, 14-Mar-2025 12:21:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D20&hl=en&q=EgTCbg1GGOWim7cGIjDcgU34eDo8U6t35PGQ-kGAJWMbKlv0Dv3Vyaeq1IJI2A8515mNdEtgVcX721zeBCgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D20&hl=en&q=EgTCbg1GGOWim7cGIjDcgU34eDo8U6t35PGQ-kGAJWMbKlv0Dv3Vyaeq1IJI2A8515mNdEtgVcX721zeBCgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:58 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+e-mail&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+e-mail&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjCfgRY8-r87sPTUpj3qDojmtMH8adV3TDFZJYz0hBhvu8TGnaFz5mr6XC4IExp0dDwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5qKbtwYQybHjmgESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-vwhl-_nycFcI0N3jXFuWbA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpp56eO7-FpbzXMb_VRjDrEXlxAFX4Bh8cb32vd05h3y-fCJ0Op1HM; expires=Fri, 14-Mar-2025 12:21:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAiMq8iJQ11ky-sqSUYkMoR_Wq4ss3ZmstMgGUMq1J9QE0kWz2GTD45VuiAUUOVz7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAiMq8iJQ11ky-sqSUYkMoR_Wq4ss3ZmstMgGUMq1J9QE0kWz2GTD45VuiAUUOVz7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:58 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
DNS

10.254.202.209.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.254.202.209.in-addr.arpa

IN PTR

Response

10.254.202.209.in-addr.arpa

IN PTR

search-core2bo3lycoscom
DNS

137.100.82.212.in-addr.arpa

Remote address:

8.8.8.8:53

Request

137.100.82.212.in-addr.arpa

IN PTR

Response

137.100.82.212.in-addr.arpa

IN PTR

ats1l7searchvipir2yahoocom
DNS

168.245.100.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

168.245.100.95.in-addr.arpa

IN PTR

Response

168.245.100.95.in-addr.arpa

IN PTR

a95-100-245-168deploystaticakamaitechnologiescom
DNS

106.135.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

106.135.221.88.in-addr.arpa

IN PTR

Response

106.135.221.88.in-addr.arpa

IN PTR

a88-221-135-106deploystaticakamaitechnologiescom
DNS

search.yahoo.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

search.yahoo.com

IN A

Response

search.yahoo.com

IN CNAME

ds-global3.l7.search.ystg1.b.yahoo.com

ds-global3.l7.search.ystg1.b.yahoo.com

IN A

212.82.100.137
GET

http://search.yahoo.com/search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:21:58 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=20

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D20&hl=en&q=EgTCbg1GGOaim7cGIjBe5850CS0B1TMb1lCJqZ0Y_Xtrqkx14TMhuOruLuavkM3RJfFMH302fKPjJMn1AloyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5qKbtwYQkPjj3wISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xiSCgW0-d7fk0QE6MTDu-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: gws
Content-Length: 493
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cohif2TbWWzDvzJSIWXcsHWA7HiPD6vVI-KgPf1jvwC3ToncEpngA; expires=Fri, 14-Mar-2025 12:21:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=alumni.caltech.edu+e-mail&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=alumni.caltech.edu+e-mail&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjA3Pk5tXKRfDfv4HpxrNHRS2YX26Z6VAbnhw_h97M8oJLpsQvRBFM_pCuBTMWFB58AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI56KbtwYQ1eCNgQESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SB0j9QnJGmnsXsYdzUsAzA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:59 GMT
Server: gws
Content-Length: 494
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqBPZnglmVNch8fwDpCqeFBoxWpBzfqAZLpF2sBUdzjg407Jzcn17s; expires=Fri, 14-Mar-2025 12:21:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjA40Zd-s2YCjr2mYUxUB3Al6WqgpzoX3pYX-BrkyQ21t9xlvHbtryAeUDJdRRYBiyUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI56KbtwYQlcSh5wISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2TzzRYRA6BzMKnqmNri-nQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:59 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cphIw8Qx-bbzjBZwrD0dgdcR-KGnJfbGonbnogZj43sLi8XJG_8rw; expires=Fri, 14-Mar-2025 12:21:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D20&hl=en&q=EgTCbg1GGOaim7cGIjBe5850CS0B1TMb1lCJqZ0Y_Xtrqkx14TMhuOruLuavkM3RJfFMH302fKPjJMn1AloyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D20&hl=en&q=EgTCbg1GGOaim7cGIjBe5850CS0B1TMb1lCJqZ0Y_Xtrqkx14TMhuOruLuavkM3RJfFMH302fKPjJMn1AloyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3295
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:21:58 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+alumni.caltech.edu&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+alumni.caltech.edu&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGOaim7cGIjCDM0oPYWi2KuFUkw699yCPXJWd9yHfQjVyOr2Lc-mPYgjpZgI5ymStphzmDrTJp3kyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5qKbtwYQj7XL_QISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Jb2uXjVJLat51AHXHXz2OA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:58 GMT
Server: gws
Content-Length: 493
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqxRh23vwVgUR5R4EXTIQSLOJo2WcEGx8ECCbmVy2dYUVGSIytLgA; expires=Fri, 14-Mar-2025 12:21:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjCfgRY8-r87sPTUpj3qDojmtMH8adV3TDFZJYz0hBhvu8TGnaFz5mr6XC4IExp0dDwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjCfgRY8-r87sPTUpj3qDojmtMH8adV3TDFZJYz0hBhvu8TGnaFz5mr6XC4IExp0dDwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:58 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3265
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:21:58 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:00 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjB9UDrD3rMDzq_-8oVdK-o9pi6QLa0Q_1xh-pOEX3Tk5FOqa8jDR1E6ER2Fl_qKCIcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjB9UDrD3rMDzq_-8oVdK-o9pi6QLa0Q_1xh-pOEX3Tk5FOqa8jDR1E6ER2Fl_qKCIcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3292
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:21:58 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:21:59 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjC4yzcSvIQTkuBZ5qCm5Jjponp02ql5PjhVdKvYavlqbdnq7XNt4hdqSoRmzjbTEJoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI56KbtwYQ26WxrAISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gV1IZ-aWz1wgPbQphOBkGg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:21:59 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7coWEC-5nDlH5vn6kM33qsJLqiRU0tXBMz79Opc3H0pEg3uJ5lHjU_M; expires=Fri, 14-Mar-2025 12:21:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjBqwHhF29ALNHz7V1rc8vI0ZDWnkjqxvgpehxigxtbrZaLjkcuSFpW-8IMwhl02Wv4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI6KKbtwYQ18X6EhIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-aYGi9yIrvp2fdyzGwKzNsg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: gws
Content-Length: 494
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqwk-2acm1qrv-ZFUgob7gZq_cWQ7dAGAl8KYOqqWl2MffH-lESuA; expires=Fri, 14-Mar-2025 12:22:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCqqyqxoRMse_4dtaTvw4uriRoq1pAtqvGU8WbDDfBH_D8P2DkR0a2noLxPZqggo5UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6KKbtwYQvrzprAISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-WLwv5kBr5s_w-A-sL-0Uvg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: gws
Content-Length: 494
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqQtM4KLAY5nOwqXFHTS2UQZpR4GqBi-_meyLtw2oAx5nVNOr1LUw; expires=Fri, 14-Mar-2025 12:22:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCBJ5rodRX1sVbIQcg_dUS7QdfzEryyl1mUMD-UsJzsn9-1eDburzSxfOgwY6JOqRMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI6aKbtwYQ9omjYhIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-vj7ljexWEVm-mfj2KpYtVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7croXIq29H7v_tukieiRPw-FhsdiZ4ouOQLAeNVcCz9fPTX925Xwb0w; expires=Fri, 14-Mar-2025 12:22:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjA40Zd-s2YCjr2mYUxUB3Al6WqgpzoX3pYX-BrkyQ21t9xlvHbtryAeUDJdRRYBiyUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjA40Zd-s2YCjr2mYUxUB3Al6WqgpzoX3pYX-BrkyQ21t9xlvHbtryAeUDJdRRYBiyUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3289
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:21:59 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
Content-Length: 304
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:21:59 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:21:59 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:21:59 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGOaim7cGIjCDM0oPYWi2KuFUkw699yCPXJWd9yHfQjVyOr2Lc-mPYgjpZgI5ymStphzmDrTJp3kyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGOaim7cGIjCDM0oPYWi2KuFUkw699yCPXJWd9yHfQjVyOr2Lc-mPYgjpZgI5ymStphzmDrTJp3kyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:21:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3295
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
Content-Length: 303
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgTCbg1GGOiim7cGIjCgAT2yOk3zZd9EoUqle-MKu98xWSom3Jotw2uj4GAG3AetcoiSRSVsXBkDk-OuesgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6KKbtwYQo5T77AESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-C3VKG2-tz_QdNoBgaKDTgw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: gws
Content-Length: 490
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7coz76rTktGvPZv-LxO3OoMmfWcpXdt_JULeyNzH4UbH0_6i-u2vCA; expires=Fri, 14-Mar-2025 12:22:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjA3Pk5tXKRfDfv4HpxrNHRS2YX26Z6VAbnhw_h97M8oJLpsQvRBFM_pCuBTMWFB58AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjA3Pk5tXKRfDfv4HpxrNHRS2YX26Z6VAbnhw_h97M8oJLpsQvRBFM_pCuBTMWFB58AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:00 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3298
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
Content-Length: 312
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org
Content-Length: 0
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=20

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgTCbg1GGOiim7cGIjAIsCiyz8JDEjR1676RwCEcaAqgz6pgJrrQJVyqh7fooIGIW-QAhj5DRI2IkYEPEH8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI6aKbtwYQuYHQGxIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2-p0QwoMcbERCWJOOWnCKQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: gws
Content-Length: 489
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7codjCABFgyh-B7u2snD7ddgSmXFMgwZq_gz5vn34nE_MwfvqdVWFQ; expires=Fri, 14-Mar-2025 12:22:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjC4yzcSvIQTkuBZ5qCm5Jjponp02ql5PjhVdKvYavlqbdnq7XNt4hdqSoRmzjbTEJoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjC4yzcSvIQTkuBZ5qCm5Jjponp02ql5PjhVdKvYavlqbdnq7XNt4hdqSoRmzjbTEJoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3292
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:01 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBbuzR5Nbvg0SudBkcTZA-j_eVbsxFciXpCPoW1JLSf8wGFk0YfnQGXrRXHCZJRq4cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6aKbtwYQ78GZhwISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-rzfyi94ecvGxgj2YXPCahg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: gws
Content-Length: 489
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpetuI_DA7z-2pHGgA0t8MQKGLTVg7selud-J9DIXDcTvrTImqQXA; expires=Fri, 14-Mar-2025 12:22:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjBqwHhF29ALNHz7V1rc8vI0ZDWnkjqxvgpehxigxtbrZaLjkcuSFpW-8IMwhl02Wv4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjBqwHhF29ALNHz7V1rc8vI0ZDWnkjqxvgpehxigxtbrZaLjkcuSFpW-8IMwhl02Wv4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3298
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:01 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOmim7cGIjBvISCkpOCFDvMjjYdx-LQjprvYAB9LhspX0AXt9Zq5-zolB2KjZ30bZ-Jtqd3Zi-EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6aKbtwYQ2d7J_gISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lbQSTOIqrgYmIQghwS171Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: gws
Content-Length: 488
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crIX4HkgiGtHFNgFqCMbGS1erTNLiYWJ5PBzRl6pBR5Kk4fUVcPp80; expires=Fri, 14-Mar-2025 12:22:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+alumni.caltech.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjCBQMI6SJGrdraMlebtULwFEk3yFj3lN9bFjs5iceNmmxkn3zjnHy3UVsMQH5aVlSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6qKbtwYQtbb1owESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3UhjhnPhIfI49bhlWWyDRg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: gws
Content-Length: 503
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cplXaXUnsjcqy0cHYlVuDFIxC4tuwb0TjVybFJa8Oxbnlulc47szg; expires=Fri, 14-Mar-2025 12:22:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOqim7cGIjD2GTCOKFDqRqRYNsYA0pQmlVXzARhbhjsT1uA_MDghTjHW4LX9TGnPHyQMUHDJeuAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6qKbtwYQxfr_xAMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-cU5r1LmUwjC6H6vdl_t1KA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: gws
Content-Length: 488
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqgYUNdypwUVnYGgyWcR9jvUjsBN3N4SShGCc1NSd3nPW8wTetHy1w; expires=Fri, 14-Mar-2025 12:22:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCBJ5rodRX1sVbIQcg_dUS7QdfzEryyl1mUMD-UsJzsn9-1eDburzSxfOgwY6JOqRMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCBJ5rodRX1sVbIQcg_dUS7QdfzEryyl1mUMD-UsJzsn9-1eDburzSxfOgwY6JOqRMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3265
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
Content-Length: 312
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:01 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:01 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
Content-Length: 311
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
Content-Length: 0
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBOMn0S2cGK5qnSXvUvg-OZUqjJu9nVykOmyJUf8uA4II4aPl7O33Z5Sc1JIVMUDbwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI6qKbtwYQ4YOGchIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-z7ukTbHJJjdxLf00IzWmyA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: gws
Content-Length: 481
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqsXVcdbk0_nFFYW8nTTDKH2Ah65I4KYw-0sEkLQZhj5aOsLgCwlFE; expires=Fri, 14-Mar-2025 12:22:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgTCbg1GGOiim7cGIjCgAT2yOk3zZd9EoUqle-MKu98xWSom3Jotw2uj4GAG3AetcoiSRSVsXBkDk-OuesgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgTCbg1GGOiim7cGIjCgAT2yOk3zZd9EoUqle-MKu98xWSom3Jotw2uj4GAG3AetcoiSRSVsXBkDk-OuesgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:02 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:02 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:02 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGOqim7cGIjD_-p6KfuKQNqk_gOWqb8Ch_axJHFCtTKbn80xaOB-NL0b54myXtQbqnkBJL_s8jUIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6qKbtwYQ18z2jwMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1-dp3RKSxepPXbWqRZPpLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crpfjgQWPjJmOpl4Xhec6ElL3o3AbwuLhEszJ6yTTXpM4Nn-7ZUzL4; expires=Fri, 14-Mar-2025 12:22:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCqqyqxoRMse_4dtaTvw4uriRoq1pAtqvGU8WbDDfBH_D8P2DkR0a2noLxPZqggo5UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCqqyqxoRMse_4dtaTvw4uriRoq1pAtqvGU8WbDDfBH_D8P2DkR0a2noLxPZqggo5UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3298
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:02 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=e-mail+gzip.org&kgs=0&kls=0

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=e-mail+gzip.org&kgs=0&kls=0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:02 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=mail+cs.stanford.edu&kgs=0&kls=0&nbq=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mail+cs.stanford.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:04 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:02 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
Content-Length: 304
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgTCbg1GGOiim7cGIjAIsCiyz8JDEjR1676RwCEcaAqgz6pgJrrQJVyqh7fooIGIW-QAhj5DRI2IkYEPEH8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgTCbg1GGOiim7cGIjAIsCiyz8JDEjR1676RwCEcaAqgz6pgJrrQJVyqh7fooIGIW-QAhj5DRI2IkYEPEH8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3283
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:03 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+gzip.org&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+gzip.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjAzHxgQGJXkKlDjwZXIzvRDGro5Rrnd5U1twyWQrX6iCi-rE2kXnwbeJbRtvl6ECO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI66KbtwYQvcHOigISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HpOHfcZVVis6o_Lwc8aXZw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: gws
Content-Length: 494
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crvO2i2IRSw8w4WcAYbx_WxbqxQ_bjDD5jGncZhBpwwJXujSzbxPJM; expires=Fri, 14-Mar-2025 12:22:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto&hl=en&q=EgTCbg1GGOuim7cGIjCeoGVsTQ7SHxWR3INgGs5qM8H68EBqWgtAmS-PwABZaRIybYlbR0wSGeek26oXoOgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI7KKbtwYQ_6-lEhIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-wSspTG-mNRuKLLYCHsjsVA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: gws
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cq2KByya0WoaWw6DwmjxiYOYJh8_ZOEcZxiKS8ErhIKWWR1XAAVwg; expires=Fri, 14-Mar-2025 12:22:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+gzip.org&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+gzip.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjAUM-v_JF3xLmYs3d2wtj-5fRJyRhfwsmQg2RrNRrJnXm1wZKbcicHzO8JVo9PpEo0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7KKbtwYQmq3X0wESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2536c6MdV7D-XX7HTinZTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crz5DS-iaSf3bExXgdzWcVs2for9wTZuPnHF_kSBQ-Rpy5x-FRNHg; expires=Fri, 14-Mar-2025 12:22:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+burtleburtle.net&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+burtleburtle.net&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjApfMTs8gHSesp2yP-uGjXKjNy0uxpe8hNJ3RHYKUb6caEUK_lv1LB3TEZrA9xwoyIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI7aKbtwYQ5_XsBBIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1a7hIbRSuSFD3FozwQNoXg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpHC_hvA47MygJHu-jh4eq-BJ_XbijIns5wxae9l-ehngyNSb-7Ug; expires=Fri, 14-Mar-2025 12:22:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjAWHO509rzae8Pa9Micshx07MpiJkki6YCKkAwtC-oL6v4cJAcLpiDMgTwh1viH2jwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7aKbtwYQqs3WqgESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-hs8qHVapc4eZwhD_6CQmww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqpbYkhqoLGtz0r4QlJtef2lnsxRSa9XeACarsGfYPXEmcsQriCgJU; expires=Fri, 14-Mar-2025 12:22:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGOqim7cGIjD_-p6KfuKQNqk_gOWqb8Ch_axJHFCtTKbn80xaOB-NL0b54myXtQbqnkBJL_s8jUIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGOqim7cGIjD_-p6KfuKQNqk_gOWqb8Ch_axJHFCtTKbn80xaOB-NL0b54myXtQbqnkBJL_s8jUIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:05 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3289
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjDSYb0wtS6eQcYQg6_MNH4_ykIzeew92f2N7ti-bD0QWAATYLf71zp5qgr00h7yYyQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI66KbtwYQzNOBzwESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RcYFWL13tyLlpEZngQChOA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpe_RwCHxf0RzIeekKCD7oKs2qn1Y_BzJwC_h4agNrtqi2C75eviQ; expires=Fri, 14-Mar-2025 12:22:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBbuzR5Nbvg0SudBkcTZA-j_eVbsxFciXpCPoW1JLSf8wGFk0YfnQGXrRXHCZJRq4cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBbuzR5Nbvg0SudBkcTZA-j_eVbsxFciXpCPoW1JLSf8wGFk0YfnQGXrRXHCZJRq4cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3283
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:03 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail
Content-Length: 303
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:03 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:03 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+gzip.org&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+gzip.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjC8eUShjyEWUxzsTbmkIt2MJITKFN_SET0yDb9xL49tfYsyaH-S_lT1prNS_ZZplPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI66KbtwYQiJy72AMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-eKaqmUZnsZLd536pFB3wzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: gws
Content-Length: 484
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7creOUN6S4Kj8S4xnYKWV9_KAmPxWd-VCZ6-EeOSblg_TvuJ5ld7hw; expires=Fri, 14-Mar-2025 12:22:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOmim7cGIjBvISCkpOCFDvMjjYdx-LQjprvYAB9LhspX0AXt9Zq5-zolB2KjZ30bZ-Jtqd3Zi-EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOmim7cGIjBvISCkpOCFDvMjjYdx-LQjprvYAB9LhspX0AXt9Zq5-zolB2KjZ30bZ-Jtqd3Zi-EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3280
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:03 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:03 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:03 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu
Content-Length: 319
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
Content-Length: 312
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:03 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:03 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjBDcZxdf2mFs1Z4k4PRmlx0aeIYLhffBFb2gyT6DaOqEDl9rsG8QappkQTMq-vG4oQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7KKbtwYQ-s2SvAISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-W2sImR0_DNBqrNAN4dHR2g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: gws
Content-Length: 489
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7coHfpuY8uQeS2-JzAa_7mbjp7sel2RlvXhx4zN38E53x4NBxCuiug; expires=Fri, 14-Mar-2025 12:22:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBOMn0S2cGK5qnSXvUvg-OZUqjJu9nVykOmyJUf8uA4II4aPl7O33Z5Sc1JIVMUDbwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBOMn0S2cGK5qnSXvUvg-OZUqjJu9nVykOmyJUf8uA4II4aPl7O33Z5Sc1JIVMUDbwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3259
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:04 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:04 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:04 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:04 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:04 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:04 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:04 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjCBQMI6SJGrdraMlebtULwFEk3yFj3lN9bFjs5iceNmmxkn3zjnHy3UVsMQH5aVlSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjCBQMI6SJGrdraMlebtULwFEk3yFj3lN9bFjs5iceNmmxkn3zjnHy3UVsMQH5aVlSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3319
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjCXwNUrc5Mws0CkAJb52Y-fN6tFRQNlKFIYjqkXGI6IxIt92LQC0qyQh3esIuzOygUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI7aKbtwYQ08LwXRIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Ee3icMh7jgJ0hTMwZC1D9w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crKkMc554mzGUmA-SVqW2D3rJmOqrWi00WuEXA5BfYtdOCeUochFQ; expires=Fri, 14-Mar-2025 12:22:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+alumni.caltech.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjC6aj1MB4QAbe6eyW9MOZIqYdJPqUJ-u8rMuY73mLNvHy_tG1JmDcZjI_HtHTwmz0syAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7aKbtwYQtZHZ6AISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-tDjfRIKYuM5xl8jPO9RbCQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: gws
Content-Length: 493
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpFiZ4oQPbPJPOxngxDiEyPuoemrbdN7zXGS47C6bf-__S9E9iVVA; expires=Fri, 14-Mar-2025 12:22:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGO2im7cGIjAI7Kdel4d1M2tS98PNSyrt5wRYta1I5jfWEvSxzIplqxO7B64tDSjX_T8-SbUVSAcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI7qKbtwYQw47JQxIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YaAOzjA5nwPupwPHqbWhKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: gws
Content-Length: 480
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cphlotSD24-nTMPjaSBATeDHU7ma_rhQqSzts83rpM6gYOK4L1-D_4; expires=Fri, 14-Mar-2025 12:22:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+e-mail&num=20

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+e-mail&num=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Be-mail%26num%3D20&hl=en&q=EgTCbg1GGO6im7cGIjBbfTbWYySsA5W3wITqvurWObHPdBjhPdn23yJe0a5Vd6tBA_UH3p50Hw2BH4A6A9gyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7qKbtwYQ7rnghgISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SZN9yC_nbG462Sm6dla59g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: gws
Content-Length: 490
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpQGwLMfBu2DiEMvLvIFS_nUGXA2-VZDHSfdmYxLGpy6xFMVjfJeQ; expires=Fri, 14-Mar-2025 12:22:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto&hl=en&q=EgTCbg1GGOuim7cGIjCeoGVsTQ7SHxWR3INgGs5qM8H68EBqWgtAmS-PwABZaRIybYlbR0wSGeek26oXoOgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto&hl=en&q=EgTCbg1GGOuim7cGIjCeoGVsTQ7SHxWR3INgGs5qM8H68EBqWgtAmS-PwABZaRIybYlbR0wSGeek26oXoOgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3232
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu
Content-Length: 321
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
Content-Length: 315
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
Content-Length: 0
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOqim7cGIjD2GTCOKFDqRqRYNsYA0pQmlVXzARhbhjsT1uA_MDghTjHW4LX9TGnPHyQMUHDJeuAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOqim7cGIjD2GTCOKFDqRqRYNsYA0pQmlVXzARhbhjsT1uA_MDghTjHW4LX9TGnPHyQMUHDJeuAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:05 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3280
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+contact+email&num=20

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+contact+email&num=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bcontact%2Bemail%26num%3D20&hl=en&q=EgTCbg1GGO2im7cGIjC-fb66vopkMTYYn5KARp5o4VLhNUvhtMn2LsJsYwymUUJV4Xx2TnJp9jXCQeCODJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7aKbtwYQyLz7qwMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-XTouVpfUHgPUemGV3wBzFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crOziBAUFVxDn-yPb7UFcLba4LinHwZe1Uffta1sIDAhBQNkZN3pRI; expires=Fri, 14-Mar-2025 12:22:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjDSYb0wtS6eQcYQg6_MNH4_ykIzeew92f2N7ti-bD0QWAATYLf71zp5qgr00h7yYyQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjDSYb0wtS6eQcYQg6_MNH4_ykIzeew92f2N7ti-bD0QWAATYLf71zp5qgr00h7yYyQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:05 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3292
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:05 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:05 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
Content-Length: 313
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:05 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjAzHxgQGJXkKlDjwZXIzvRDGro5Rrnd5U1twyWQrX6iCi-rE2kXnwbeJbRtvl6ECO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjAzHxgQGJXkKlDjwZXIzvRDGro5Rrnd5U1twyWQrX6iCi-rE2kXnwbeJbRtvl6ECO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3292
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDmjO75d6SYr77j1h8d0cLDw_tOovQsD1eCobqd0rDwv2GlisvWr6iTW7KKD8ZDEx8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7qKbtwYQmdeKxgESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-jT8fyCr7bFyFArH6B67v3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: gws
Content-Length: 489
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7coTO1fMKLEDIYbUDKSibyK9xr-6qDhFHzsALmSWep1MOFeLBsCfIzE; expires=Fri, 14-Mar-2025 12:22:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjC8eUShjyEWUxzsTbmkIt2MJITKFN_SET0yDb9xL49tfYsyaH-S_lT1prNS_ZZplPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjC8eUShjyEWUxzsTbmkIt2MJITKFN_SET0yDb9xL49tfYsyaH-S_lT1prNS_ZZplPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3268
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se
Content-Length: 310
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:06 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:06 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
Content-Length: 0
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:06 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
Content-Length: 312
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGO6im7cGIjDKNmzIxptLFzwNUywEKx3wv5NwVzzQZclMiwG-qrN4yDKVqr8EtzzuPnFt9uiikiMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7qKbtwYQjdDm2wMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-r-uInE_8HFmELtjxSDXqjQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:07 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqmcavRtQQTkYUzjaj6-YUIAZLpRvhTMeoGdR78gPrbmJIWSKMRqjQ; expires=Fri, 14-Mar-2025 12:22:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjD3GJ8HTCkbuGNYRkeEF6dAxDKBwNNrD0rKQgjL2B4EPBsqCu4Uwkvr0ZRIFWfz4R8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI76KbtwYQ_buAogISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-PvoqJwmtHIPcehxHblxqEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:07 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpQgdiYm38EmMrj5CkGOiAOD85W_nNuGZVD9ljmDRXPF7e1RsxAVw; expires=Fri, 14-Mar-2025 12:22:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjCXwNUrc5Mws0CkAJb52Y-fN6tFRQNlKFIYjqkXGI6IxIt92LQC0qyQh3esIuzOygUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjCXwNUrc5Mws0CkAJb52Y-fN6tFRQNlKFIYjqkXGI6IxIt92LQC0qyQh3esIuzOygUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:07 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3265
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjAUM-v_JF3xLmYs3d2wtj-5fRJyRhfwsmQg2RrNRrJnXm1wZKbcicHzO8JVo9PpEo0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjAUM-v_JF3xLmYs3d2wtj-5fRJyRhfwsmQg2RrNRrJnXm1wZKbcicHzO8JVo9PpEo0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:07 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 15 Sep 2024 12:22:06 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjBDcZxdf2mFs1Z4k4PRmlx0aeIYLhffBFb2gyT6DaOqEDl9rsG8QappkQTMq-vG4oQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjBDcZxdf2mFs1Z4k4PRmlx0aeIYLhffBFb2gyT6DaOqEDl9rsG8QappkQTMq-vG4oQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3283
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 15 Sep 2024 12:22:06 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDZk0N_7oYj2PE3zMyfcn144CIpn7ou59Wq_k7Xryt9KWs1cCprEwQpz8957hR76k4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI76KbtwYQgYnIhQESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_TdPWfbWCDNxHIXA-x_1zw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:07 GMT
Server: gws
Content-Length: 484
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crT8Q6Y_QDKgR16EPUgn2Hp5t6oo6tRMFjZf5JedLnTvDd136vZDA; expires=Fri, 14-Mar-2025 12:22:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjApfMTs8gHSesp2yP-uGjXKjNy0uxpe8hNJ3RHYKUb6caEUK_lv1LB3TEZrA9xwoyIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjApfMTs8gHSesp2yP-uGjXKjNy0uxpe8hNJ3RHYKUb6caEUK_lv1LB3TEZrA9xwoyIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:07 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3289
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 15 Sep 2024 12:22:07 GMT
Server: Apache
X-Powered-By: PHP/7.2.22
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjDjiVqRMqJ1FdzwPiXDH6ComgH8vP699SgiqZqdJ12v_An3FgJvvkCFyPKptN5BeIkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI76KbtwYQocud1AISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Y-SKNw0tEf4pWUrIPvnZxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:07 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7coR6IUGpn5PduU-1klf4btESMpS8R_AAXDHqsqktjmKDZ5iVdjRhA; expires=Fri, 14-Mar-2025 12:22:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjAWHO509rzae8Pa9Micshx07MpiJkki6YCKkAwtC-oL6v4cJAcLpiDMgTwh1viH2jwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjAWHO509rzae8Pa9Micshx07MpiJkki6YCKkAwtC-oL6v4cJAcLpiDMgTwh1viH2jwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:07 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3289
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+alumni.caltech.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjBPNZeG1BkWsHzLbDSiOeVUOZRd6ZFpd17H6tbBU29TJWKE4w6pREAYSvzI0fhtPRAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI8KKbtwYQhveqERIEwm4NRg
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7FwPNuV84hPYANoYTMtB7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:08 GMT
Server: gws
Content-Length: 503
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crhM05pryCsMpt34GBjVTgcEQDrwh_xwGglZQmt9KwGAT_M0aQSksY; expires=Fri, 14-Mar-2025 12:22:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjC6aj1MB4QAbe6eyW9MOZIqYdJPqUJ-u8rMuY73mLNvHy_tG1JmDcZjI_HtHTwmz0syAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjC6aj1MB4QAbe6eyW9MOZIqYdJPqUJ-u8rMuY73mLNvHy_tG1JmDcZjI_HtHTwmz0syAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:08 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3295
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjCfJCDknHmZ9wjlrHzOHJV6coTufkVJBj56H1aKgNQIak2EeH905QRjANBD708y8p0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8KKbtwYQhrGxlwESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9Mcu4Jxe_44iH6tugb_1jQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:08 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpddUQPycNVzLEMhWYQKb2C5Bi9CZ0bxWtbCXgElnbZwkA24ou5Tg; expires=Fri, 14-Mar-2025 12:22:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bcontact%2Bemail%26num%3D20&hl=en&q=EgTCbg1GGO2im7cGIjC-fb66vopkMTYYn5KARp5o4VLhNUvhtMn2LsJsYwymUUJV4Xx2TnJp9jXCQeCODJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bcontact%2Bemail%26num%3D20&hl=en&q=EgTCbg1GGO2im7cGIjC-fb66vopkMTYYn5KARp5o4VLhNUvhtMn2LsJsYwymUUJV4Xx2TnJp9jXCQeCODJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:08 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+alumni.caltech.edu&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+alumni.caltech.edu&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjCkhs2-Wu02Z00k5xt_Hu86NRBkQ2zs7-_fMvqWmdAkpsH315V3s50QYQuIWyVNyZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8KKbtwYQ_L_OswISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Ny3qcdZ-xHbf0bZVHK3fuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:08 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cr2-aNOGUtbxFZE8bNof3j_z9hnVW1oExbiN0XQGAJo934DQ3vECQ; expires=Fri, 14-Mar-2025 12:22:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPCim7cGIjAHL1aWlpN0eAHA9l4qWJ9zuq2-rgkyJKWWQFhB07tXokLywBZZQNrU5Fv7JxAYQBMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8KKbtwYQktjQzAMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3Prji7Rco_jYImX9bOyt-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:08 GMT
Server: gws
Content-Length: 490
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqz7xFyWWJ4fI91y-kt0RMhqpN4KZAn-omCjPvbX2PsHy9Ler6uNQ; expires=Fri, 14-Mar-2025 12:22:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDmjO75d6SYr77j1h8d0cLDw_tOovQsD1eCobqd0rDwv2GlisvWr6iTW7KKD8ZDEx8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDmjO75d6SYr77j1h8d0cLDw_tOovQsD1eCobqd0rDwv2GlisvWr6iTW7KKD8ZDEx8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:09 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3283
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+acm.org&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+acm.org&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjClFWtxIcnM-zwjuVToYVYFsfnv_xHerX2sGarbMaRb60WlaL51kVqDVsJfaE5owX0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8KKbtwYQxrD56wISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-i9geCBQJalKH46teGj_Mlg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:08 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cpiU8xJs4l-8VSAzbSZtjwUX_EBCw8pzxDFAcbSUVjkmklAfue2vjs; expires=Fri, 14-Mar-2025 12:22:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGO2im7cGIjAI7Kdel4d1M2tS98PNSyrt5wRYta1I5jfWEvSxzIplqxO7B64tDSjX_T8-SbUVSAcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGO2im7cGIjAI7Kdel4d1M2tS98PNSyrt5wRYta1I5jfWEvSxzIplqxO7B64tDSjX_T8-SbUVSAcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:08 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3256
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjC99uxDzm_ii8KkqIz5en1L7Y4kvuS5nMsaqvdVm1OLZDNhBYIj3Dr_laQ9rtwCy8QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8aKbtwYQq5OftgESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-X374xrSzsFryv8tPRjSiVA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:09 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cqU7esxMxPAwx0hQJczksF2fkget9L8Gp-SAdAYaSaUpQ5Jko8jf0M; expires=Fri, 14-Mar-2025 12:22:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Be-mail%26num%3D20&hl=en&q=EgTCbg1GGO6im7cGIjBbfTbWYySsA5W3wITqvurWObHPdBjhPdn23yJe0a5Vd6tBA_UH3p50Hw2BH4A6A9gyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Be-mail%26num%3D20&hl=en&q=EgTCbg1GGO6im7cGIjBbfTbWYySsA5W3wITqvurWObHPdBjhPdn23yJe0a5Vd6tBA_UH3p50Hw2BH4A6A9gyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:09 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjAANxfXiapoqrDGdb7AVymZLxp66kFMYkAfWYLgOdrs3nGaryfn0hJhNbhq63QZiHcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8aKbtwYQqeOovQESBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-TInEOcW1_enWniNhhdQhGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:09 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7crL4VKzYi33T6QmKDYhEbJRj8f606h6NU92tCXCTRgp2Vw95tqk5LQ; expires=Fri, 14-Mar-2025 12:22:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu&hl=en&q=EgTCbg1GGPGim7cGIjD5d9vIhZzBmE471a9OY30QlZk5QHjXW0B-SARSqnkN-3OSf84pDjtiAqnK0dE5mRwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8aKbtwYQodiA0gMSBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lebryW8y5n4TZfpVnx0Wiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:09 GMT
Server: gws
Content-Length: 479
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7cq6JDmfR4RF5N5NjAoQNxb7HkE08B9UVAANPqJTP4CxGWIDIyNSQdw; expires=Fri, 14-Mar-2025 12:22:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjBPNZeG1BkWsHzLbDSiOeVUOZRd6ZFpd17H6tbBU29TJWKE4w6pREAYSvzI0fhtPRAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjBPNZeG1BkWsHzLbDSiOeVUOZRd6ZFpd17H6tbBU29TJWKE4w6pREAYSvzI0fhtPRAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3319
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjBv8nc5UQIRqUbtTAtxMGOK7sHsNjIhnUa49TBcSvZ2ArC_EagIMUZefu5Sqr9FJHAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI8aKbtwYQrq2X-wISBMJuDUY
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-usCy-sOvNnvjsuTBGDaZJw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 15 Sep 2024 12:22:09 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AVYB7colMKeeVi-5mcs_URsm3fEXhDdUVzdS1TNNjlFMU0OUx2IxDUE5YA; expires=Fri, 14-Mar-2025 12:22:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGO6im7cGIjDKNmzIxptLFzwNUywEKx3wv5NwVzzQZclMiwG-qrN4yDKVqr8EtzzuPnFt9uiikiMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGO6im7cGIjDKNmzIxptLFzwNUywEKx3wv5NwVzzQZclMiwG-qrN4yDKVqr8EtzzuPnFt9uiikiMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:09 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3265
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDZk0N_7oYj2PE3zMyfcn144CIpn7ou59Wq_k7Xryt9KWs1cCprEwQpz8957hR76k4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDZk0N_7oYj2PE3zMyfcn144CIpn7ou59Wq_k7Xryt9KWs1cCprEwQpz8957hR76k4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:09 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3268
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjD3GJ8HTCkbuGNYRkeEF6dAxDKBwNNrD0rKQgjL2B4EPBsqCu4Uwkvr0ZRIFWfz4R8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjD3GJ8HTCkbuGNYRkeEF6dAxDKBwNNrD0rKQgjL2B4EPBsqCu4Uwkvr0ZRIFWfz4R8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3265
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjDjiVqRMqJ1FdzwPiXDH6ComgH8vP699SgiqZqdJ12v_An3FgJvvkCFyPKptN5BeIkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjDjiVqRMqJ1FdzwPiXDH6ComgH8vP699SgiqZqdJ12v_An3FgJvvkCFyPKptN5BeIkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3289
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjCfJCDknHmZ9wjlrHzOHJV6coTufkVJBj56H1aKgNQIak2EeH905QRjANBD708y8p0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjCfJCDknHmZ9wjlrHzOHJV6coTufkVJBj56H1aKgNQIak2EeH905QRjANBD708y8p0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3265
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjCkhs2-Wu02Z00k5xt_Hu86NRBkQ2zs7-_fMvqWmdAkpsH315V3s50QYQuIWyVNyZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjCkhs2-Wu02Z00k5xt_Hu86NRBkQ2zs7-_fMvqWmdAkpsH315V3s50QYQuIWyVNyZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3292
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjClFWtxIcnM-zwjuVToYVYFsfnv_xHerX2sGarbMaRb60WlaL51kVqDVsJfaE5owX0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjClFWtxIcnM-zwjuVToYVYFsfnv_xHerX2sGarbMaRb60WlaL51kVqDVsJfaE5owX0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPCim7cGIjAHL1aWlpN0eAHA9l4qWJ9zuq2-rgkyJKWWQFhB07tXokLywBZZQNrU5Fv7JxAYQBMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPCim7cGIjAHL1aWlpN0eAHA9l4qWJ9zuq2-rgkyJKWWQFhB07tXokLywBZZQNrU5Fv7JxAYQBMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3286
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjC99uxDzm_ii8KkqIz5en1L7Y4kvuS5nMsaqvdVm1OLZDNhBYIj3Dr_laQ9rtwCy8QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjC99uxDzm_ii8KkqIz5en1L7Y4kvuS5nMsaqvdVm1OLZDNhBYIj3Dr_laQ9rtwCy8QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3289
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjAANxfXiapoqrDGdb7AVymZLxp66kFMYkAfWYLgOdrs3nGaryfn0hJhNbhq63QZiHcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjAANxfXiapoqrDGdb7AVymZLxp66kFMYkAfWYLgOdrs3nGaryfn0hJhNbhq63QZiHcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3289
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjBv8nc5UQIRqUbtTAtxMGOK7sHsNjIhnUa49TBcSvZ2ArC_EagIMUZefu5Sqr9FJHAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjBv8nc5UQIRqUbtTAtxMGOK7sHsNjIhnUa49TBcSvZ2ArC_EagIMUZefu5Sqr9FJHAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3292
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu&hl=en&q=EgTCbg1GGPGim7cGIjD5d9vIhZzBmE471a9OY30QlZk5QHjXW0B-SARSqnkN-3OSf84pDjtiAqnK0dE5mRwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

142.250.178.4:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu&hl=en&q=EgTCbg1GGPGim7cGIjD5d9vIhZzBmE471a9OY30QlZk5QHjXW0B-SARSqnkN-3OSf84pDjtiAqnK0dE5mRwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 15 Sep 2024 12:22:10 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3253
X-XSS-Protection: 0
DNS

aspmx2.googlemail.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

aspmx2.googlemail.com

IN A

Response

aspmx2.googlemail.com

IN A

142.251.9.26
DNS

acm.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

acm.org

IN A

Response

acm.org

IN A

104.17.79.30

acm.org

IN A

104.17.78.30
DNS

smtp2.cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

smtp2.cs.stanford.edu

IN A

Response

smtp2.cs.stanford.edu

IN A

171.64.64.26
DNS

burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

burtleburtle.net

IN A

Response

burtleburtle.net

IN A

65.254.227.224
DNS

alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

Remote address:

8.8.8.8:53

Request

alumni.caltech.edu

IN A

Response

alumni.caltech.edu

IN A

204.13.239.180

16.113.41.36:1034

services.exe

260 B
5
4.240.75.111:1034

services.exe

260 B
5
4.240.78.69:1034

services.exe

260 B
5
4.240.78.69:1034

services.exe

260 B
5
4.240.75.91:1034

services.exe

260 B
5
159.134.164.135:1034

services.exe

260 B
5
142.251.9.26:25

alt1.aspmx.l.google.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
199.89.3.120:25

mail.mailroute.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
171.64.64.64:25

cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
171.64.64.64:25

cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
65.254.254.51:25

mx.burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
52.101.41.4:25

alumni-caltech-edu.mail.protection.outlook.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
85.187.148.2:25

gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAGaXm6HCTMzgryuMma6RVwi6hxbuI8Wg1ss99h4XJu8cTxT1Icpg-QPOR4NNhbVLAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.9kB
6.9kB
15
12

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=20

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAGaXm6HCTMzgryuMma6RVwi6hxbuI8Wg1ss99h4XJu8cTxT1Icpg-QPOR4NNhbVLAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjCOWKb6nK3zH_9PEGPk9PxUZLE7Z9GLiIZVfnW4DBjDMOVk8Av9kSYW9g0OZCK5eqAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.9kB
6.9kB
15
12

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+m-ou.se&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjCOWKb6nK3zH_9PEGPk9PxUZLE7Z9GLiIZVfnW4DBjDMOVk8Av9kSYW9g0OZCK5eqAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

620 B
794 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

HTTP Response

404
212.82.100.137:80

http://www.altavista.com/web/results?q=gzip.org+mailto&kgs=0&kls=0&nbq=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
1.4kB
10
7

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+acm.org&kgs=0&kls=0

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0&nbq=20

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=gzip.org+mailto&kgs=0&kls=0&nbq=50

HTTP Response

500
88.221.135.106:80

http://r10.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRpD%2BQVZ%2B1vf7U0RGQGBm8JZwdxcgQUdKR2KRcYVIUxN75n5gZYwLzFBXICEgQm%2FTGeMjmA8601cvXq8gl6CA%3D%3D

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

426 B
1.0kB
4
3

HTTP Request

GET http://r10.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRpD%2BQVZ%2B1vf7U0RGQGBm8JZwdxcgQUdKR2KRcYVIUxN75n5gZYwLzFBXICEgQm%2FTGeMjmA8601cvXq8gl6CA%3D%3D

HTTP Response

200
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D20&hl=en&q=EgTCbg1GGOWim7cGIjDcgU34eDo8U6t35PGQ-kGAJWMbKlv0Dv3Vyaeq1IJI2A8515mNdEtgVcX721zeBCgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D20&hl=en&q=EgTCbg1GGOWim7cGIjDcgU34eDo8U6t35PGQ-kGAJWMbKlv0Dv3Vyaeq1IJI2A8515mNdEtgVcX721zeBCgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAiMq8iJQ11ky-sqSUYkMoR_Wq4ss3ZmstMgGUMq1J9QE0kWz2GTD45VuiAUUOVz7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+e-mail&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgTCbg1GGOWim7cGIjAiMq8iJQ11ky-sqSUYkMoR_Wq4ss3ZmstMgGUMq1J9QE0kWz2GTD45VuiAUUOVz7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+alumni.caltech.edu

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

617 B
646 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D20&hl=en&q=EgTCbg1GGOaim7cGIjBe5850CS0B1TMb1lCJqZ0Y_Xtrqkx14TMhuOruLuavkM3RJfFMH302fKPjJMn1AloyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.3kB
8.4kB
17
14

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=20

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=alumni.caltech.edu+e-mail&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D20&hl=en&q=EgTCbg1GGOaim7cGIjBe5850CS0B1TMb1lCJqZ0Y_Xtrqkx14TMhuOruLuavkM3RJfFMH302fKPjJMn1AloyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
6.8kB
17
12

HTTP Request

GET https://search.yahoo.com/search?p=acm.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjCfgRY8-r87sPTUpj3qDojmtMH8adV3TDFZJYz0hBhvu8TGnaFz5mr6XC4IExp0dDwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
7

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+alumni.caltech.edu&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjCfgRY8-r87sPTUpj3qDojmtMH8adV3TDFZJYz0hBhvu8TGnaFz5mr6XC4IExp0dDwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

709 B
686 B
8
6

HTTP Request

GET http://search.yahoo.com/search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
909 B
12
7

HTTP Request

GET https://search.yahoo.com/search?p=acm.org+email&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjB9UDrD3rMDzq_-8oVdK-o9pi6QLa0Q_1xh-pOEX3Tk5FOqa8jDR1E6ER2Fl_qKCIcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

906 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOWim7cGIjB9UDrD3rMDzq_-8oVdK-o9pi6QLa0Q_1xh-pOEX3Tk5FOqa8jDR1E6ER2Fl_qKCIcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

617 B
646 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=m-ou.se+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjA40Zd-s2YCjr2mYUxUB3Al6WqgpzoX3pYX-BrkyQ21t9xlvHbtryAeUDJdRRYBiyUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.8kB
10.0kB
20
17

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjA40Zd-s2YCjr2mYUxUB3Al6WqgpzoX3pYX-BrkyQ21t9xlvHbtryAeUDJdRRYBiyUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

610 B
774 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

HTTP Response

404
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

HTTP Response

404
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGOaim7cGIjCDM0oPYWi2KuFUkw699yCPXJWd9yHfQjVyOr2Lc-mPYgjpZgI5ymStphzmDrTJp3kyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

907 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGOaim7cGIjCDM0oPYWi2KuFUkw699yCPXJWd9yHfQjVyOr2Lc-mPYgjpZgI5ymStphzmDrTJp3kyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

701 B
1.4kB
8
5

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

HTTP Response

301
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjA3Pk5tXKRfDfv4HpxrNHRS2YX26Z6VAbnhw_h97M8oJLpsQvRBFM_pCuBTMWFB58AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dalumni.caltech.edu%2Be-mail%26num%3D100&hl=en&q=EgTCbg1GGOaim7cGIjA3Pk5tXKRfDfv4HpxrNHRS2YX26Z6VAbnhw_h97M8oJLpsQvRBFM_pCuBTMWFB58AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.3kB
3.9kB
13
8

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

HTTP Response

302
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

618 B
790 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.6kB
17.6kB
26
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

404
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjC4yzcSvIQTkuBZ5qCm5Jjponp02ql5PjhVdKvYavlqbdnq7XNt4hdqSoRmzjbTEJoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=20

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjC4yzcSvIQTkuBZ5qCm5Jjponp02ql5PjhVdKvYavlqbdnq7XNt4hdqSoRmzjbTEJoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

617 B
646 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjBqwHhF29ALNHz7V1rc8vI0ZDWnkjqxvgpehxigxtbrZaLjkcuSFpW-8IMwhl02Wv4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOeim7cGIjBqwHhF29ALNHz7V1rc8vI0ZDWnkjqxvgpehxigxtbrZaLjkcuSFpW-8IMwhl02Wv4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=gzip.org+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCBJ5rodRX1sVbIQcg_dUS7QdfzEryyl1mUMD-UsJzsn9-1eDburzSxfOgwY6JOqRMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.4kB
8.5kB
18
15

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCBJ5rodRX1sVbIQcg_dUS7QdfzEryyl1mUMD-UsJzsn9-1eDburzSxfOgwY6JOqRMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

618 B
790 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

HTTP Response

301
212.82.100.137:80

http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

625 B
654 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

617 B
788 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+gzip.org

HTTP Response

404
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.6kB
17.6kB
26
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

404
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgTCbg1GGOiim7cGIjCgAT2yOk3zZd9EoUqle-MKu98xWSom3Jotw2uj4GAG3AetcoiSRSVsXBkDk-OuesgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgTCbg1GGOiim7cGIjCgAT2yOk3zZd9EoUqle-MKu98xWSom3Jotw2uj4GAG3AetcoiSRSVsXBkDk-OuesgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

627 B
656 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

626 B
655 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCqqyqxoRMse_4dtaTvw4uriRoq1pAtqvGU8WbDDfBH_D8P2DkR0a2noLxPZqggo5UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOiim7cGIjCqqyqxoRMse_4dtaTvw4uriRoq1pAtqvGU8WbDDfBH_D8P2DkR0a2noLxPZqggo5UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
212.82.100.137:80

http://www.altavista.com/web/results?q=mail+cs.stanford.edu&kgs=0&kls=0&nbq=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

916 B
982 B
6
4

HTTP Request

GET http://www.altavista.com/web/results?q=e-mail+gzip.org&kgs=0&kls=0

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=mail+cs.stanford.edu&kgs=0&kls=0&nbq=50

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
16.9kB
23
18

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

HTTP Response

404
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

610 B
774 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+m-ou.se

HTTP Response

404
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgTCbg1GGOiim7cGIjAIsCiyz8JDEjR1676RwCEcaAqgz6pgJrrQJVyqh7fooIGIW-QAhj5DRI2IkYEPEH8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

903 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D20&hl=en&q=EgTCbg1GGOiim7cGIjAIsCiyz8JDEjR1676RwCEcaAqgz6pgJrrQJVyqh7fooIGIW-QAhj5DRI2IkYEPEH8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

625 B
654 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGOqim7cGIjD_-p6KfuKQNqk_gOWqb8Ch_axJHFCtTKbn80xaOB-NL0b54myXtQbqnkBJL_s8jUIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

3.2kB
11.5kB
23
20

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+gzip.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+gzip.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+burtleburtle.net&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGOqim7cGIjD_-p6KfuKQNqk_gOWqb8Ch_axJHFCtTKbn80xaOB-NL0b54myXtQbqnkBJL_s8jUIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBbuzR5Nbvg0SudBkcTZA-j_eVbsxFciXpCPoW1JLSf8wGFk0YfnQGXrRXHCZJRq4cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBbuzR5Nbvg0SudBkcTZA-j_eVbsxFciXpCPoW1JLSf8wGFk0YfnQGXrRXHCZJRq4cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

609 B
772 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

HTTP Response

301
212.82.100.137:80

http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

623 B
652 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mail

HTTP Response

404
212.82.100.137:443

https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOmim7cGIjBvISCkpOCFDvMjjYdx-LQjprvYAB9LhspX0AXt9Zq5-zolB2KjZ30bZ-Jtqd3Zi-EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+gzip.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOmim7cGIjBvISCkpOCFDvMjjYdx-LQjprvYAB9LhspX0AXt9Zq5-zolB2KjZ30bZ-Jtqd3Zi-EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

624 B
653 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=reply+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.1kB
1.5kB
8
5

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu

HTTP Response

301

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

HTTP Response

301
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

626 B
655 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.2kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+cs.stanford.edu

HTTP Response

404
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBOMn0S2cGK5qnSXvUvg-OZUqjJu9nVykOmyJUf8uA4II4aPl7O33Z5Sc1JIVMUDbwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjBOMn0S2cGK5qnSXvUvg-OZUqjJu9nVykOmyJUf8uA4II4aPl7O33Z5Sc1JIVMUDbwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

618 B
647 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=email+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

626 B
655 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=cs.stanford.edu+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

629 B
658 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=contact+e-mail+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjCBQMI6SJGrdraMlebtULwFEk3yFj3lN9bFjs5iceNmmxkn3zjnHy3UVsMQH5aVlSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

917 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOmim7cGIjCBQMI6SJGrdraMlebtULwFEk3yFj3lN9bFjs5iceNmmxkn3zjnHy3UVsMQH5aVlSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto&hl=en&q=EgTCbg1GGOuim7cGIjCeoGVsTQ7SHxWR3INgGs5qM8H68EBqWgtAmS-PwABZaRIybYlbR0wSGeek26oXoOgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.7kB
9.9kB
20
17

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+acm.org&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+e-mail&num=20

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto&hl=en&q=EgTCbg1GGOuim7cGIjCeoGVsTQ7SHxWR3INgGs5qM8H68EBqWgtAmS-PwABZaRIybYlbR0wSGeek26oXoOgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

627 B
808 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

HTTP Response

301
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

621 B
796 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
4.3kB
14
9

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

HTTP Response

302
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.2kB
17.3kB
25
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+alumni.caltech.edu

HTTP Response

404
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOqim7cGIjD2GTCOKFDqRqRYNsYA0pQmlVXzARhbhjsT1uA_MDghTjHW4LX9TGnPHyQMUHDJeuAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

902 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D50&hl=en&q=EgTCbg1GGOqim7cGIjD2GTCOKFDqRqRYNsYA0pQmlVXzARhbhjsT1uA_MDghTjHW4LX9TGnPHyQMUHDJeuAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjDSYb0wtS6eQcYQg6_MNH4_ykIzeew92f2N7ti-bD0QWAATYLf71zp5qgr00h7yYyQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+contact+email&num=20

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjDSYb0wtS6eQcYQg6_MNH4_ykIzeew92f2N7ti-bD0QWAATYLf71zp5qgr00h7yYyQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

617 B
646 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

619 B
792 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

HTTP Response

404
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+alumni.caltech.edu

HTTP Response

404
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjAzHxgQGJXkKlDjwZXIzvRDGro5Rrnd5U1twyWQrX6iCi-rE2kXnwbeJbRtvl6ECO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

954 B
3.8kB
9
6

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjAzHxgQGJXkKlDjwZXIzvRDGro5Rrnd5U1twyWQrX6iCi-rE2kXnwbeJbRtvl6ECO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjC8eUShjyEWUxzsTbmkIt2MJITKFN_SET0yDb9xL49tfYsyaH-S_lT1prNS_ZZplPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOuim7cGIjC8eUShjyEWUxzsTbmkIt2MJITKFN_SET0yDb9xL49tfYsyaH-S_lT1prNS_ZZplPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.2kB
3.9kB
12
8

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

HTTP Response

302
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

616 B
786 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

HTTP Response

301
212.82.100.137:80

http://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

618 B
647 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

2.6kB
17.7kB
27
20

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+m-ou.se

HTTP Response

404
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

618 B
790 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

301
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjCXwNUrc5Mws0CkAJb52Y-fN6tFRQNlKFIYjqkXGI6IxIt92LQC0qyQh3esIuzOygUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.8kB
6.8kB
14
11

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+m-ou.se&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjCXwNUrc5Mws0CkAJb52Y-fN6tFRQNlKFIYjqkXGI6IxIt92LQC0qyQh3esIuzOygUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjAUM-v_JF3xLmYs3d2wtj-5fRJyRhfwsmQg2RrNRrJnXm1wZKbcicHzO8JVo9PpEo0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

952 B
3.8kB
9
6

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D100&hl=en&q=EgTCbg1GGOyim7cGIjAUM-v_JF3xLmYs3d2wtj-5fRJyRhfwsmQg2RrNRrJnXm1wZKbcicHzO8JVo9PpEo0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+burtleburtle.net

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

620 B
649 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

301
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjBDcZxdf2mFs1Z4k4PRmlx0aeIYLhffBFb2gyT6DaOqEDl9rsG8QappkQTMq-vG4oQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

903 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjBDcZxdf2mFs1Z4k4PRmlx0aeIYLhffBFb2gyT6DaOqEDl9rsG8QappkQTMq-vG4oQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

500
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjApfMTs8gHSesp2yP-uGjXKjNy0uxpe8hNJ3RHYKUb6caEUK_lv1LB3TEZrA9xwoyIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGOyim7cGIjApfMTs8gHSesp2yP-uGjXKjNy0uxpe8hNJ3RHYKUb6caEUK_lv1LB3TEZrA9xwoyIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

tls, http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

404
171.64.64.64:25

cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjAWHO509rzae8Pa9Micshx07MpiJkki6YCKkAwtC-oL6v4cJAcLpiDMgTwh1viH2jwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjAWHO509rzae8Pa9Micshx07MpiJkki6YCKkAwtC-oL6v4cJAcLpiDMgTwh1viH2jwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjC6aj1MB4QAbe6eyW9MOZIqYdJPqUJ-u8rMuY73mLNvHy_tG1JmDcZjI_HtHTwmz0syAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.4kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+email+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO2im7cGIjC6aj1MB4QAbe6eyW9MOZIqYdJPqUJ-u8rMuY73mLNvHy_tG1JmDcZjI_HtHTwmz0syAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bcontact%2Bemail%26num%3D20&hl=en&q=EgTCbg1GGO2im7cGIjC-fb66vopkMTYYn5KARp5o4VLhNUvhtMn2LsJsYwymUUJV4Xx2TnJp9jXCQeCODJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bcontact%2Bemail%26num%3D20&hl=en&q=EgTCbg1GGO2im7cGIjC-fb66vopkMTYYn5KARp5o4VLhNUvhtMn2LsJsYwymUUJV4Xx2TnJp9jXCQeCODJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDmjO75d6SYr77j1h8d0cLDw_tOovQsD1eCobqd0rDwv2GlisvWr6iTW7KKD8ZDEx8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.8kB
6.9kB
14
11

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+alumni.caltech.edu&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDmjO75d6SYr77j1h8d0cLDw_tOovQsD1eCobqd0rDwv2GlisvWr6iTW7KKD8ZDEx8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGO2im7cGIjAI7Kdel4d1M2tS98PNSyrt5wRYta1I5jfWEvSxzIplqxO7B64tDSjX_T8-SbUVSAcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+acm.org&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGO2im7cGIjAI7Kdel4d1M2tS98PNSyrt5wRYta1I5jfWEvSxzIplqxO7B64tDSjX_T8-SbUVSAcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Be-mail%26num%3D20&hl=en&q=EgTCbg1GGO6im7cGIjBbfTbWYySsA5W3wITqvurWObHPdBjhPdn23yJe0a5Vd6tBA_UH3p50Hw2BH4A6A9gyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Be-mail%26num%3D20&hl=en&q=EgTCbg1GGO6im7cGIjBbfTbWYySsA5W3wITqvurWObHPdBjhPdn23yJe0a5Vd6tBA_UH3p50Hw2BH4A6A9gyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjBPNZeG1BkWsHzLbDSiOeVUOZRd6ZFpd17H6tbBU29TJWKE4w6pREAYSvzI0fhtPRAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.8kB
6.9kB
14
11

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bemail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjBPNZeG1BkWsHzLbDSiOeVUOZRd6ZFpd17H6tbBU29TJWKE4w6pREAYSvzI0fhtPRAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGO6im7cGIjDKNmzIxptLFzwNUywEKx3wv5NwVzzQZclMiwG-qrN4yDKVqr8EtzzuPnFt9uiikiMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D50&hl=en&q=EgTCbg1GGO6im7cGIjDKNmzIxptLFzwNUywEKx3wv5NwVzzQZclMiwG-qrN4yDKVqr8EtzzuPnFt9uiikiMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDZk0N_7oYj2PE3zMyfcn144CIpn7ou59Wq_k7Xryt9KWs1cCprEwQpz8957hR76k4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

898 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgTCbg1GGO6im7cGIjDZk0N_7oYj2PE3zMyfcn144CIpn7ou59Wq_k7Xryt9KWs1cCprEwQpz8957hR76k4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjD3GJ8HTCkbuGNYRkeEF6dAxDKBwNNrD0rKQgjL2B4EPBsqCu4Uwkvr0ZRIFWfz4R8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

897 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bm-ou.se%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjD3GJ8HTCkbuGNYRkeEF6dAxDKBwNNrD0rKQgjL2B4EPBsqCu4Uwkvr0ZRIFWfz4R8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjDjiVqRMqJ1FdzwPiXDH6ComgH8vP699SgiqZqdJ12v_An3FgJvvkCFyPKptN5BeIkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

905 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjDjiVqRMqJ1FdzwPiXDH6ComgH8vP699SgiqZqdJ12v_An3FgJvvkCFyPKptN5BeIkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjCfJCDknHmZ9wjlrHzOHJV6coTufkVJBj56H1aKgNQIak2EeH905QRjANBD708y8p0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

943 B
3.8kB
9
6

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgTCbg1GGO-im7cGIjCfJCDknHmZ9wjlrHzOHJV6coTufkVJBj56H1aKgNQIak2EeH905QRjANBD708y8p0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjCkhs2-Wu02Z00k5xt_Hu86NRBkQ2zs7-_fMvqWmdAkpsH315V3s50QYQuIWyVNyZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

906 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Balumni.caltech.edu%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjCkhs2-Wu02Z00k5xt_Hu86NRBkQ2zs7-_fMvqWmdAkpsH315V3s50QYQuIWyVNyZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjClFWtxIcnM-zwjuVToYVYFsfnv_xHerX2sGarbMaRb60WlaL51kVqDVsJfaE5owX0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

952 B
3.8kB
9
6

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bacm.org%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjClFWtxIcnM-zwjuVToYVYFsfnv_xHerX2sGarbMaRb60WlaL51kVqDVsJfaE5owX0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPCim7cGIjAHL1aWlpN0eAHA9l4qWJ9zuq2-rgkyJKWWQFhB07tXokLywBZZQNrU5Fv7JxAYQBMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

950 B
3.8kB
9
6

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPCim7cGIjAHL1aWlpN0eAHA9l4qWJ9zuq2-rgkyJKWWQFhB07tXokLywBZZQNrU5Fv7JxAYQBMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjC99uxDzm_ii8KkqIz5en1L7Y4kvuS5nMsaqvdVm1OLZDNhBYIj3Dr_laQ9rtwCy8QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

905 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgTCbg1GGPCim7cGIjC99uxDzm_ii8KkqIz5en1L7Y4kvuS5nMsaqvdVm1OLZDNhBYIj3Dr_laQ9rtwCy8QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjAANxfXiapoqrDGdb7AVymZLxp66kFMYkAfWYLgOdrs3nGaryfn0hJhNbhq63QZiHcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

951 B
3.8kB
9
6

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjAANxfXiapoqrDGdb7AVymZLxp66kFMYkAfWYLgOdrs3nGaryfn0hJhNbhq63QZiHcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjBv8nc5UQIRqUbtTAtxMGOK7sHsNjIhnUa49TBcSvZ2ArC_EagIMUZefu5Sqr9FJHAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

906 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgTCbg1GGPGim7cGIjBv8nc5UQIRqUbtTAtxMGOK7sHsNjIhnUa49TBcSvZ2ArC_EagIMUZefu5Sqr9FJHAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.178.4:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu&hl=en&q=EgTCbg1GGPGim7cGIjD5d9vIhZzBmE471a9OY30QlZk5QHjXW0B-SARSqnkN-3OSf84pDjtiAqnK0dE5mRwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

893 B
3.7kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu&hl=en&q=EgTCbg1GGPGim7cGIjD5d9vIhZzBmE471a9OY30QlZk5QHjXW0B-SARSqnkN-3OSf84pDjtiAqnK0dE5mRwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
16.126.5.194:1034

services.exe

260 B
5
142.251.9.26:25

aspmx2.googlemail.com

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
104.17.79.30:25

acm.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
171.64.64.26:25

smtp2.cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
171.64.64.26:25

smtp2.cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
65.254.227.224:25

burtleburtle.net

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
204.13.239.180:25

alumni.caltech.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
85.187.148.2:25

gzip.org

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

260 B
5
171.64.64.26:25

smtp2.cs.stanford.edu

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

208 B
4
10.0.0.5:1034

services.exe

104 B
2

8.8.8.8:53

232.168.11.51.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

232.168.11.51.in-addr.arpa
8.8.8.8:53

240.221.184.93.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

240.221.184.93.in-addr.arpa
8.8.8.8:53

68.32.126.40.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

68.32.126.40.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

241.150.49.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

241.150.49.20.in-addr.arpa
8.8.8.8:53

26.165.165.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

26.165.165.52.in-addr.arpa
8.8.8.8:53

206.23.85.13.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

206.23.85.13.in-addr.arpa
8.8.8.8:53

21.236.111.52.in-addr.arpa

dns

144 B
158 B
2
1

DNS Request

21.236.111.52.in-addr.arpa

DNS Request

21.236.111.52.in-addr.arpa
8.8.8.8:53

m-ou.se

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

53 B
232 B
1
1

DNS Request

m-ou.se
8.8.8.8:53

alt1.aspmx.l.google.com

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

69 B
85 B
1
1

DNS Request

alt1.aspmx.l.google.com

DNS Response

142.251.9.26
8.8.8.8:53

acm.org

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

53 B
87 B
1
1

DNS Request

acm.org
8.8.8.8:53

mail.mailroute.net

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

64 B
96 B
1
1

DNS Request

mail.mailroute.net

DNS Response

199.89.3.120

199.89.1.120
8.8.8.8:53

cs.stanford.edu

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

61 B
121 B
1
1

DNS Request

cs.stanford.edu
8.8.8.8:53

cs.stanford.edu

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

61 B
77 B
1
1

DNS Request

cs.stanford.edu

DNS Response

171.64.64.64
8.8.8.8:53

burtleburtle.net

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

62 B
81 B
1
1

DNS Request

burtleburtle.net
8.8.8.8:53

mx.burtleburtle.net

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

65 B
113 B
1
1

DNS Request

mx.burtleburtle.net

DNS Response

65.254.254.51

65.254.254.52

65.254.254.50
8.8.8.8:53

alumni.caltech.edu

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

64 B
126 B
1
1

DNS Request

alumni.caltech.edu
8.8.8.8:53

alumni-caltech-edu.mail.protection.outlook.com

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

92 B
156 B
1
1

DNS Request

alumni-caltech-edu.mail.protection.outlook.com

DNS Response

52.101.41.4

52.101.9.2

52.101.41.58

52.101.8.46
8.8.8.8:53

gzip.org

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

54 B
70 B
1
1

DNS Request

gzip.org
8.8.8.8:53

gzip.org

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

54 B
70 B
1
1

DNS Request

gzip.org

DNS Response

85.187.148.2
8.8.8.8:53

www.google.com

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

60 B
76 B
1
1

DNS Request

www.google.com

DNS Response

142.250.178.4
8.8.8.8:53

search.lycos.com

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

62 B
109 B
1
1

DNS Request

search.lycos.com

DNS Response

209.202.254.10
8.8.8.8:53

www.altavista.com

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

63 B
157 B
1
1

DNS Request

www.altavista.com

DNS Response

212.82.100.137
8.8.8.8:53

r10.o.lencr.org

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

61 B
192 B
1
1

DNS Request

r10.o.lencr.org

DNS Response

88.221.135.106

88.221.135.115

88.221.134.137

88.221.134.91
8.8.8.8:53

10.254.202.209.in-addr.arpa

dns

73 B
113 B
1
1

DNS Request

10.254.202.209.in-addr.arpa
8.8.8.8:53

137.100.82.212.in-addr.arpa

dns

73 B
119 B
1
1

DNS Request

137.100.82.212.in-addr.arpa
8.8.8.8:53

168.245.100.95.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

168.245.100.95.in-addr.arpa
8.8.8.8:53

106.135.221.88.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

106.135.221.88.in-addr.arpa
8.8.8.8:53

search.yahoo.com

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

62 B
121 B
1
1

DNS Request

search.yahoo.com

DNS Response

212.82.100.137
8.8.8.8:53

aspmx2.googlemail.com

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

67 B
83 B
1
1

DNS Request

aspmx2.googlemail.com

DNS Response

142.251.9.26
8.8.8.8:53

acm.org

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

53 B
85 B
1
1

DNS Request

acm.org

DNS Response

104.17.79.30

104.17.78.30
8.8.8.8:53

smtp2.cs.stanford.edu

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

67 B
83 B
1
1

DNS Request

smtp2.cs.stanford.edu

DNS Response

171.64.64.26
8.8.8.8:53

burtleburtle.net

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

62 B
78 B
1
1

DNS Request

burtleburtle.net

DNS Response

65.254.227.224
8.8.8.8:53

alumni.caltech.edu

dns

e2782725ff19b07aff77868dbdc744da_JaffaCakes118.exe

64 B
80 B
1
1

DNS Request

alumni.caltech.edu

DNS Response

204.13.239.180
8.8.8.8:53

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NUB8HZ4Z\search[1].htm

Filesize
25B

MD5
8ba61a16b71609a08bfa35bc213fce49

SHA1
8374dddcc6b2ede14b0ea00a5870a11b57ced33f

SHA256
6aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1

SHA512
5855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1

Download Submit
C:\Users\Admin\AppData\Local\Temp\Fql6zW.log

Filesize
1KB

MD5
cc56c896ee2a9161c55603a81bb81a0c

SHA1
7c2c0c6e27efb8eaa658589c9f9158cfa97fe5dc

SHA256
fd2f8faa2917ebc3d7015e250e9984dac5a00c8314d2a45776ec310ddc3f7386

SHA512
1531a06f5af599ec854043646451bcde5a5ce32c5fb2374b828a0b728200c46888d83fc06accbff88b7f0dd63e01d32f2c5b7a7e788ed2aa7a0866ef980ea611

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmp5859.tmp

Filesize
28KB

MD5
549ca1cadaf19981503128328ec62e5c

SHA1
29a8488f8009d4fcef4a5c89e0843db503579088

SHA256
d577c9c2314f14c9ba6ccb9d512fa8b0f1ffde14de1c032069a5fcff8c73d1a8

SHA512
890bf5e38b640c13534b97e132241850bdfd29d493833c171bffcd4466a01839a42ecbe0e9504a9e513c0adcfc98233401436210119c3b9712bc92fa14207e5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\zincite.log

Filesize
1KB

MD5
59d20dbe080315fb4132034ef993562e

SHA1
c97ca16a220af4591e7ffd203d0a73e55e12dd37

SHA256
083ed38a6ca6ea0638065895057eea9fbfe97bbab0bf05bf1313418095c06ace

SHA512
3dd648b04f93c287979fbd97f35f97c62f1f1521bd72caf8fbf95644d74d99404f1b0fe6574f236fbbad36e2bc91b01a39029cc22ebcf21aa18f9063090ed3b4

Download Submit
C:\Windows\services.exe

Filesize
8KB

MD5
b0fe74719b1b647e2056641931907f4a

SHA1
e858c206d2d1542a79936cb00d85da853bfc95e2

SHA256
bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c

SHA512
9c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2

Download Submit
memory/4544-162-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/4544-13-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/4544-160-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/4544-102-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/4544-51-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/4544-0-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/4908-45-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-26-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-38-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-50-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-33-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-52-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-28-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-40-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-21-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-103-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-16-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-15-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-161-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-5-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-163-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4908-168-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request