Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-01-2025 16:51

General

  • Target

    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe

  • Size

    29KB

  • MD5

    3b2dc4dad3c5ce4ea2eb8a9605d406cd

  • SHA1

    d894f18cc5e3b2d75fdfa60eb8ed9c8ddf922792

  • SHA256

    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609

  • SHA512

    2ccbda37d4bffce082f01136b4a928124e7bedf6695f825e0c874bf913d36e342c5f899d829513480ef5626763451326adbeef5afb36ebf05428a005360e7bdd

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/7hQ:AEwVs+0jNDY1qi/qDm

Malware Config

Signatures

  • Detects MyDoom family 5 IoCs
  • MyDoom

    MyDoom is a Worm that is written in C++.

  • Mydoom family
  • Executes dropped EXE 1 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Windows directory 3 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    "C:\Users\Admin\AppData\Local\Temp\605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:864
    • C:\Windows\services.exe
      "C:\Windows\services.exe"
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      • System Location Discovery: System Language Discovery
      PID:1832

Network

  • flag-us
    DNS
    8.8.8.8.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    8.8.8.8.in-addr.arpa
    IN PTR
    Response
    8.8.8.8.in-addr.arpa
    IN PTR
    dnsgoogle
  • flag-us
    DNS
    196.249.167.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    196.249.167.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    133.130.81.91.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    133.130.81.91.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    140.32.126.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    140.32.126.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    95.221.229.192.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    95.221.229.192.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    228.249.119.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    228.249.119.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    149.220.183.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    149.220.183.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    212.20.149.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    212.20.149.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    241.42.69.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    241.42.69.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    172.214.232.199.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    172.214.232.199.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    85.49.80.91.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    85.49.80.91.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    13.227.111.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    13.227.111.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    m-ou.se
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    m-ou.se
    IN MX
    Response
    m-ou.se
    IN MX
    aspmxlgooglecom
    m-ou.se
    IN MX
    aspmx2 googlemail�6
    m-ou.se
    IN MX
    aspmx5�P
    m-ou.se
    IN MX
    alt2�'
    m-ou.se
    IN MX
    aspmx3�P
    m-ou.se
    IN MX
    alt1�'
    m-ou.se
    IN MX
    aspmx4�P
  • flag-us
    DNS
    aspmx.l.google.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    aspmx.l.google.com
    IN A
    Response
    aspmx.l.google.com
    IN A
    66.102.1.26
  • flag-us
    DNS
    acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    acm.org
    IN MX
    Response
    acm.org
    IN MX
    mail mailroutenet
  • flag-us
    DNS
    mail.mailroute.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    mail.mailroute.net
    IN A
    Response
    mail.mailroute.net
    IN A
    199.89.1.120
    mail.mailroute.net
    IN A
    199.89.3.120
  • flag-us
    DNS
    cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    cs.stanford.edu
    IN MX
    Response
    cs.stanford.edu
    IN MX
    smtp1�
    cs.stanford.edu
    IN MX
    smtp2�
    cs.stanford.edu
    IN MX
  • flag-us
    DNS
    smtp1.cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp1.cs.stanford.edu
    IN A
    Response
    smtp1.cs.stanford.edu
    IN A
    171.64.64.25
  • flag-us
    DNS
    burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    burtleburtle.net
    IN MX
    Response
    burtleburtle.net
    IN MX
    mx�
  • flag-us
    DNS
    mx.burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    mx.burtleburtle.net
    IN A
    Response
    mx.burtleburtle.net
    IN A
    65.254.254.50
    mx.burtleburtle.net
    IN A
    65.254.254.52
    mx.burtleburtle.net
    IN A
    65.254.254.51
  • flag-us
    DNS
    alumni.caltech.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    alumni.caltech.edu
    IN MX
    Response
    alumni.caltech.edu
    IN MX
    alumni-caltech-edumail protectionoutlookcom
  • flag-us
    DNS
    alumni-caltech-edu.mail.protection.outlook.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    Response
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.42.4
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.41.0
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.41.22
    alumni-caltech-edu.mail.protection.outlook.com
    IN A
    52.101.41.4
  • flag-us
    DNS
    gzip.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    gzip.org
    IN MX
    Response
    gzip.org
    IN MX
  • flag-us
    DNS
    gzip.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    gzip.org
    IN A
    Response
    gzip.org
    IN A
    85.187.148.2
  • flag-us
    DNS
    search.lycos.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    search.lycos.com
    IN A
    Response
    search.lycos.com
    IN CNAME
    search-core2.bo3.lycos.com
    search-core2.bo3.lycos.com
    IN A
    209.202.254.10
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:08 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    Content-Length: 312
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:08 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    Content-Length: 311
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    DNS
    www.google.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    www.google.com
    IN A
    Response
    www.google.com
    IN A
    142.250.187.196
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se&hl=en&q=EgS117BTGPT9_7sGIjDZXvWhVNNyR3xPtvvQI5XIGQlFtRF7me9g33TiTPB6zPmnCfV6f4RG8JEVFUaCp2YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgwI9P3_uwYQk5GhmgMSBLXXsFM
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-V93qMM9RPcW8kNafp_HsSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:08 GMT
    Server: gws
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-VgWVlUEZ1Ltykxoqe-ImeIRRlIj24Ga2CTSIhdXzyeQKZ9Folxjg; expires=Tue, 08-Jul-2025 16:53:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se&hl=en&q=EgS117BTGPT9_7sGIjDZXvWhVNNyR3xPtvvQI5XIGQlFtRF7me9g33TiTPB6zPmnCfV6f4RG8JEVFUaCp2YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se&hl=en&q=EgS117BTGPT9_7sGIjDZXvWhVNNyR3xPtvvQI5XIGQlFtRF7me9g33TiTPB6zPmnCfV6f4RG8JEVFUaCp2YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3252
    X-XSS-Protection: 0
  • flag-us
    DNS
    search.yahoo.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    search.yahoo.com
    IN A
    Response
    search.yahoo.com
    IN CNAME
    ds-global3.l7.search.ystg1.b.yahoo.com
    ds-global3.l7.search.ystg1.b.yahoo.com
    IN A
    212.82.100.137
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:08 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-7PZcTJ/1pGYpetL2g9Uz0A==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com https://*.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self' https://*.yimg.com; connect-src * blob:; font-src * data:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 09 Jan 2025 16:53:09 GMT
    x-envoy-upstream-service-time: 38
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 1
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    DNS
    www.altavista.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    www.altavista.com
    IN A
    Response
    www.altavista.com
    IN CNAME
    us.yhs4.search.yahoo.com
    us.yhs4.search.yahoo.com
    IN CNAME
    ds-global3.l7.search.ystg1.b.yahoo.com
    ds-global3.l7.search.ystg1.b.yahoo.com
    IN A
    212.82.100.137
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=cs.stanford.edu+email&kgs=0&kls=0&nbq=50
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=cs.stanford.edu+email&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 09 Jan 2025 16:53:08 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    http://www.altavista.com/web/results?q=m-ou.se+mail&kgs=0&kls=0&nbq=50
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /web/results?q=m-ou.se+mail&kgs=0&kls=0&nbq=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.altavista.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    date: Thu, 09 Jan 2025 16:53:09 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    location: https://search.yahoo.com/?fr=altavista
    cache-control: private
    content-type: text/html
    x-envoy-upstream-service-time: 1
    server: ATS
    Content-Encoding: gzip
    Age: 1
    Transfer-Encoding: chunked
    Connection: keep-alive
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-us
    DNS
    r11.o.lencr.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    r11.o.lencr.org
    IN A
    Response
    r11.o.lencr.org
    IN CNAME
    o.lencr.edgesuite.net
    o.lencr.edgesuite.net
    IN CNAME
    a1887.dscq.akamai.net
    a1887.dscq.akamai.net
    IN A
    88.221.134.137
    a1887.dscq.akamai.net
    IN A
    88.221.135.105
  • flag-gb
    GET
    http://r11.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    88.221.134.137:80
    Request
    GET /MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/10.0
    Host: r11.o.lencr.org
    Response
    HTTP/1.1 200 OK
    Server: nginx
    Content-Type: application/ocsp-response
    Content-Length: 504
    ETag: "4D4A774E91E9D0C724EA71E4E21A4529AE9E94D990E338388048B4DB2A4AA8DF"
    Last-Modified: Thu, 09 Jan 2025 02:10:00 UTC
    Cache-Control: public, no-transform, must-revalidate, max-age=3409
    Expires: Thu, 09 Jan 2025 17:49:57 GMT
    Date: Thu, 09 Jan 2025 16:53:08 GMT
    Connection: keep-alive
  • flag-ie
    GET
    https://search.yahoo.com/?fr=altavista
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /?fr=altavista HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Response
    HTTP/1.1 200 OK
    date: Thu, 09 Jan 2025 16:53:09 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    set-cookie: PROMO=ono_sc=1&ono_fts=1736441589&ltv_pid=altavista&ltv_new=1&ltv_ts=1736441589&ltv_sts=1736441589&ltv_c=1; expires=Fri, 09-Jan-2026 16:53:09 GMT; Max-Age=31536000; path=/; domain=.search.yahoo.com
    secure_search_bypass: true
    x-frame-options: DENY
    content-security-policy: frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-zXPiEJnpURi9Pn3C7hdMZw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com *.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: blob: https://*.aol.com https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com https://bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://fun.games.com/ https://interactives.ap.org; media-src * blob:; object-src *; connect-src * blob:; font-src * data:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    cache-control: private
    content-length: 43727
    content-type: text/html; charset=UTF-8
    x-envoy-upstream-service-time: 34
    server: ATS
    Age: 0
    Connection: keep-alive
    Strict-Transport-Security: max-age=31536000
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-ie
    GET
    https://search.yahoo.com/?fr=altavista
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /?fr=altavista HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Response
    HTTP/1.1 200 OK
    date: Thu, 09 Jan 2025 16:53:09 GMT
    p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
    set-cookie: PROMO=ono_sc=1&ono_fts=1736441589&ltv_pid=altavista&ltv_new=1&ltv_ts=1736441589&ltv_sts=1736441589&ltv_c=1; expires=Fri, 09-Jan-2026 16:53:09 GMT; Max-Age=31536000; path=/; domain=.search.yahoo.com
    secure_search_bypass: true
    x-frame-options: DENY
    content-security-policy: frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-ekxsVZFVMPh3MnuF4XX+0Q==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com *.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: blob: https://*.aol.com https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com https://bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://fun.games.com/ https://interactives.ap.org; media-src * blob:; object-src *; connect-src * blob:; font-src * data:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    cache-control: private
    content-length: 43727
    content-type: text/html; charset=UTF-8
    x-envoy-upstream-service-time: 36
    server: ATS
    Age: 0
    Connection: keep-alive
    Strict-Transport-Security: max-age=31536000
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=50
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS117BTGPX9_7sGIjDhuchAG8DX4LjUN2tHvIMZVhgBSEpNnz_Z5A36ZuE9JrnSKP-SxLdfXM_ZAYy1efQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgwI9f3_uwYQ75u90AISBLXXsFM
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6qhbRaE7_nOh3scKZibIBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: gws
    Content-Length: 490
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-Xcx_Yw3o4jHvMOSsIuvS_KB0AgLEgYu5k5xtTeAGs4r-Rr-_G3kw; expires=Tue, 08-Jul-2025 16:53:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjA8mZyPAumsxd-SZANZk_iOHUrUuheyczQ5jQP1sL9G0KWPkOpZyPysVd9ATdQnrFAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgwI9v3_uwYQ4eufuwMSBLXXsFM
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-x3Tn_q6wu1V_cETsrQo1Pw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: gws
    Content-Length: 483
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-WYpCwWd_s5NfocO6JN2jLeJZKewa7sEmT3D8R05dIhMXqkbZiQKqg; expires=Tue, 08-Jul-2025 16:53:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Bmailto%26num%3D20&hl=en&q=EgS117BTGPX9_7sGIjBRjc8vgfmo_cZnK3Z8XJekLNOONS_nJBlup_uPTxih2WDaLCj9mi_cWXtO8zxbi3UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Bmailto%26num%3D20&hl=en&q=EgS117BTGPX9_7sGIjBRjc8vgfmo_cZnK3Z8XJekLNOONS_nJBlup_uPTxih2WDaLCj9mi_cWXtO8zxbi3UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3285
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    Content-Length: 305
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    Content-Length: 311
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    DNS
    196.187.250.142.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    196.187.250.142.in-addr.arpa
    IN PTR
    Response
    196.187.250.142.in-addr.arpa
    IN PTR
    lhr25s33-in-f41e100net
  • flag-us
    DNS
    10.254.202.209.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    10.254.202.209.in-addr.arpa
    IN PTR
    Response
    10.254.202.209.in-addr.arpa
    IN PTR
    search-core2bo3lycoscom
  • flag-us
    DNS
    137.100.82.212.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    137.100.82.212.in-addr.arpa
    IN PTR
    Response
    137.100.82.212.in-addr.arpa
    IN PTR
    ats1l7searchvipir2yahoocom
  • flag-us
    DNS
    168.245.100.95.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    168.245.100.95.in-addr.arpa
    IN PTR
    Response
    168.245.100.95.in-addr.arpa
    IN PTR
    a95-100-245-168deploystaticakamaitechnologiescom
  • flag-us
    DNS
    137.134.221.88.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    137.134.221.88.in-addr.arpa
    IN PTR
    Response
    137.134.221.88.in-addr.arpa
    IN PTR
    a88-221-134-137deploystaticakamaitechnologiescom
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+mailto&num=20
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+mailto&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Bmailto%26num%3D20&hl=en&q=EgS117BTGPX9_7sGIjBRjc8vgfmo_cZnK3Z8XJekLNOONS_nJBlup_uPTxih2WDaLCj9mi_cWXtO8zxbi3UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgsI9v3_uwYQiveQERIEtdewUw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6GigkETJOaaUoDj_3EB1Ig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: gws
    Content-Length: 482
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-VGXAyq-2awPD0NK7MIWO6BQNJmMyeXuGSxNc7kgeJiUg3YSaopz5U; expires=Tue, 08-Jul-2025 16:53:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS117BTGPX9_7sGIjDhuchAG8DX4LjUN2tHvIMZVhgBSEpNnz_Z5A36ZuE9JrnSKP-SxLdfXM_ZAYy1efQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS117BTGPX9_7sGIjDhuchAG8DX4LjUN2tHvIMZVhgBSEpNnz_Z5A36ZuE9JrnSKP-SxLdfXM_ZAYy1efQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3309
    X-XSS-Protection: 0
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    Content-Length: 323
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ono_sc=1&ono_fts=1736441589&ltv_pid=altavista&ltv_new=1&ltv_ts=1736441589&ltv_sts=1736441589&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:09 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    Content-Length: 25
    Content-Type: text/html
  • flag-ie
    GET
    https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ono_sc=1&ono_fts=1736441589&ltv_pid=altavista&ltv_new=1&ltv_ts=1736441589&ltv_sts=1736441589&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-CDuReI+wgVWFtYPCPydfXg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com https://*.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self' https://*.yimg.com; connect-src * blob:; font-src * data:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 09 Jan 2025 16:53:10 GMT
    x-envoy-upstream-service-time: 19
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-ie
    GET
    http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:80
    Request
    GET /search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.yahoo.com
    Connection: Keep-Alive
    Cookie: PROMO=ono_sc=1&ono_fts=1736441589&ltv_pid=altavista&ltv_new=1&ltv_ts=1736441589&ltv_sts=1736441589&ltv_c=1
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Connection: close
    Server: ATS
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
    Referrer-Policy: no-referrer-when-downgrade
    Location: https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    Content-Length: 25
    Content-Type: text/html
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    Content-Length: 303
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+burtleburtle.net&num=100
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+burtleburtle.net&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjDGiLZpz0ZTua_YWCb6QMaOo8ycXmERDMZ7finovDwBlys6d49c9aZq-g-S4RAQFUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgwI9v3_uwYQm9GF5QISBLXXsFM
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CYewPqCDmN6GHbcxWwjczw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: gws
    Content-Length: 491
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-Xn9jKI7SeEgVoWWwzSzT6dbZhbq03NsnTdlK08s5HlhPWIu1Wcxw; expires=Tue, 08-Jul-2025 16:53:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGPf9_7sGIjCn9gCOaWguDN09FXuvoffYoxvLDB_wUwH4yMIdRZMPmF00nWhv2UWeOKuvXSphJAUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgsI-P3_uwYQ7pLuTxIEtdewUw
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ZaqWv_UjlWUwiJvXaJPSug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: gws
    Content-Length: 491
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-XzpmFYmw0cjvMvf9AtrQz62BnZJJjXAyPh9PFUMLNncpIKnH_avw; expires=Tue, 08-Jul-2025 16:53:12 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto&hl=en&q=EgS117BTGPj9_7sGIjDXSIy14Lai5OHcdxLADCZbyLIxGrK6rgAuEyJPUFz4ZK9Ip6ZxUHCDYG23MR-q_YMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgwI-P3_uwYQm4_WwAMSBLXXsFM
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Xd-XP1TJpenELwvPbZeOCg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: gws
    Content-Length: 479
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-VHD0IMWVKnRqRS0HEpBDdE3UiOg4Ce28kqfrnjZN9DxHkrvKaZ; expires=Tue, 08-Jul-2025 16:53:12 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGPf9_7sGIjD8wT-JCYyx9rhr1vXkdOK-oFqLwuQFrvk5C-l-VCWMKDDbPEpI0T6VWu_bpX0HSO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGPf9_7sGIjD8wT-JCYyx9rhr1vXkdOK-oFqLwuQFrvk5C-l-VCWMKDDbPEpI0T6VWu_bpX0HSO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:13 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3282
    X-XSS-Protection: 0
  • flag-ie
    GET
    https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    212.82.100.137:443
    Request
    GET /search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.yahoo.com
    Cookie: PROMO=ono_sc=1&ono_fts=1736441589&ltv_pid=altavista&ltv_new=1&ltv_ts=1736441589&ltv_sts=1736441589&ltv_c=1
    Response
    HTTP/1.1 200 OK
    expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
    referrer-policy: no-referrer-when-downgrade
    strict-transport-security: max-age=31536000
    x-content-type-options: nosniff
    x-frame-options: DENY
    x-xss-protection: 1; mode=block
    content-type: text/html; charset=utf-8
    secure_search_bypass: true
    content-security-policy: frame-ancestors 'none'; base-uri 'self'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-5bX8wvnKXsLMk8MwafmSgA==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.hereapi.com https://*.youtube.com https://*.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv https://*.advertising.com https://interactives.ap.org; img-src 'self' data: blob: https://s.aolcdn.com https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv https://*.yahoo.net https://*.footprint.net https://*.akamaized.net https://*.cloudfront.net https://*.llnwd.net; media-src * blob:; object-src 'self' https://*.yimg.com; connect-src * blob:; font-src * data:; child-src blob:;
    vary: Accept-Encoding
    content-encoding: gzip
    date: Thu, 09 Jan 2025 16:53:10 GMT
    x-envoy-upstream-service-time: 10
    server: ATS
    x-envoy-decorator-operation: sfe-k8s--syc-production-bf1.search--web-syc-k8s.svc.yahoo.local:4080/*
    Age: 0
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org
    Content-Length: 311
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:10 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
    Content-Length: 312
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    Content-Length: 304
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    DNS
    hq.acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    hq.acm.org
    IN MX
    Response
    hq.acm.org
    IN MX
    mail mailroutenet
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.17
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=20
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=20 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGPf9_7sGIjD8wT-JCYyx9rhr1vXkdOK-oFqLwuQFrvk5C-l-VCWMKDDbPEpI0T6VWu_bpX0HSO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgwI9_3_uwYQta2PxwISBLXXsFM
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-nKya7WsSTaZxXiHM84oxhA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: gws
    Content-Length: 481
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-XA2mObnpWC2FipMOx6Xjrrk2SH7T6G1kjHvRRRNPbvpKPv2cG5JTI; expires=Tue, 08-Jul-2025 16:53:11 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+reply&num=100
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+reply&num=100 HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Breply%26num%3D100&hl=en&q=EgS117BTGPj9_7sGIjBiV_cRy42fVSmnxFi3-e_OuuGE9x29NFmVa2XStif2DnTp7eLb_x16bRcVkblW56UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    x-hallmonitor-challenge: CgwI-P3_uwYQu-L6hgMSBLXXsFM
    Content-Type: text/html; charset=UTF-8
    Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Ln67H9EcUCN5JmSMrqIeiA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: gws
    Content-Length: 491
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Set-Cookie: AEC=AZ6Zc-VSDW6TymwIGH7xUeJTxHrhLZe5pAtLJ39-JNF74FVKx6st4XkmL4o; expires=Tue, 08-Jul-2025 16:53:12 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjDGiLZpz0ZTua_YWCb6QMaOo8ycXmERDMZ7finovDwBlys6d49c9aZq-g-S4RAQFUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjDGiLZpz0ZTua_YWCb6QMaOo8ycXmERDMZ7finovDwBlys6d49c9aZq-g-S4RAQFUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:13 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3312
    X-XSS-Protection: 0
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
    Content-Length: 0
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    Content-Length: 0
    Keep-Alive: timeout=15, max=98
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=97
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:80
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: search.lycos.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail
    Content-Length: 320
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:11 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.14
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 302 Found
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail
    Content-Length: 0
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=99
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.22
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-us
    GET
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    209.202.254.10:443
    Request
    GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Connection: Keep-Alive
    Host: search.lycos.com
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 09 Jan 2025 16:53:12 GMT
    Server: Apache
    X-Powered-By: PHP/7.2.16
    Keep-Alive: timeout=15, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjA8mZyPAumsxd-SZANZk_iOHUrUuheyczQ5jQP1sL9G0KWPkOpZyPysVd9ATdQnrFAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjA8mZyPAumsxd-SZANZk_iOHUrUuheyczQ5jQP1sL9G0KWPkOpZyPysVd9ATdQnrFAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:13 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3288
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGPf9_7sGIjCn9gCOaWguDN09FXuvoffYoxvLDB_wUwH4yMIdRZMPmF00nWhv2UWeOKuvXSphJAUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGPf9_7sGIjCn9gCOaWguDN09FXuvoffYoxvLDB_wUwH4yMIdRZMPmF00nWhv2UWeOKuvXSphJAUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:13 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3312
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Breply%26num%3D100&hl=en&q=EgS117BTGPj9_7sGIjBiV_cRy42fVSmnxFi3-e_OuuGE9x29NFmVa2XStif2DnTp7eLb_x16bRcVkblW56UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Breply%26num%3D100&hl=en&q=EgS117BTGPj9_7sGIjBiV_cRy42fVSmnxFi3-e_OuuGE9x29NFmVa2XStif2DnTp7eLb_x16bRcVkblW56UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:13 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3312
    X-XSS-Protection: 0
  • flag-gb
    GET
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto&hl=en&q=EgS117BTGPj9_7sGIjDXSIy14Lai5OHcdxLADCZbyLIxGrK6rgAuEyJPUFz4ZK9Ip6ZxUHCDYG23MR-q_YMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    142.250.187.196:80
    Request
    GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto&hl=en&q=EgS117BTGPj9_7sGIjDXSIy14Lai5OHcdxLADCZbyLIxGrK6rgAuEyJPUFz4ZK9Ip6ZxUHCDYG23MR-q_YMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 429 Too Many Requests
    Date: Thu, 09 Jan 2025 16:53:13 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Content-Type: text/html
    Server: HTTP server (unknown)
    Content-Length: 3276
    X-XSS-Protection: 0
  • flag-us
    DNS
    aspmx2.googlemail.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    aspmx2.googlemail.com
    IN A
    Response
    aspmx2.googlemail.com
    IN A
    142.250.153.27
  • flag-us
    DNS
    aspmx2.googlemail.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    aspmx2.googlemail.com
    IN A
    Response
    aspmx2.googlemail.com
    IN A
    142.250.153.27
  • flag-us
    DNS
    acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    acm.org
    IN A
    Response
    acm.org
    IN A
    104.17.79.30
    acm.org
    IN A
    104.17.78.30
  • flag-us
    DNS
    acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    acm.org
    IN A
    Response
    acm.org
    IN A
    104.17.78.30
    acm.org
    IN A
    104.17.79.30
  • flag-us
    DNS
    smtp2.cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    smtp2.cs.stanford.edu
    IN A
    Response
    smtp2.cs.stanford.edu
    IN A
    171.64.64.26
  • flag-us
    DNS
    burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    burtleburtle.net
    IN A
    Response
    burtleburtle.net
    IN A
    65.254.227.224
  • flag-us
    DNS
    alumni.caltech.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    alumni.caltech.edu
    IN A
    Response
    alumni.caltech.edu
    IN A
    204.13.239.180
  • flag-us
    DNS
    alumni.caltech.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    alumni.caltech.edu
    IN A
    Response
    alumni.caltech.edu
    IN A
    204.13.239.180
  • flag-us
    DNS
    hq.acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    hq.acm.org
    IN A
    Response
    hq.acm.org
    IN A
    104.21.93.140
    hq.acm.org
    IN A
    172.67.210.221
  • flag-us
    DNS
    hq.acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    Remote address:
    8.8.8.8:53
    Request
    hq.acm.org
    IN A
    Response
    hq.acm.org
    IN A
    104.21.93.140
    hq.acm.org
    IN A
    172.67.210.221
  • 172.16.1.3:1034
    services.exe
    260 B
    5
  • 192.168.56.176:1034
    services.exe
    260 B
    5
  • 10.135.189.123:1034
    services.exe
    260 B
    5
  • 192.168.144.131:1034
    services.exe
    260 B
    5
  • 10.127.0.6:1034
    services.exe
  • 10.135.150.237:1034
    services.exe
    260 B
    5
  • 66.102.1.26:25
    aspmx.l.google.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 199.89.1.120:25
    mail.mailroute.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 171.64.64.25:25
    smtp1.cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 65.254.254.50:25
    mx.burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 171.64.64.25:25
    smtp1.cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 52.101.42.4:25
    alumni-caltech-edu.mail.protection.outlook.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 85.187.148.2:25
    gzip.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.0kB
    1.5kB
    8
    5

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

    HTTP Response

    301
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se&hl=en&q=EgS117BTGPT9_7sGIjDZXvWhVNNyR3xPtvvQI5XIGQlFtRF7me9g33TiTPB6zPmnCfV6f4RG8JEVFUaCp2YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.3kB
    5.3kB
    11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se&hl=en&q=EgS117BTGPT9_7sGIjDZXvWhVNNyR3xPtvvQI5XIGQlFtRF7me9g33TiTPB6zPmnCfV6f4RG8JEVFUaCp2YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    616 B
    645 B
    6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.2kB
    3.9kB
    12
    8

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    302
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    2.9kB
    48.7kB
    49
    46

    HTTP Request

    GET https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

    HTTP Response

    200
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.2kB
    3.9kB
    12
    8

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

    HTTP Response

    302
  • 212.82.100.137:80
    http://www.altavista.com/web/results?q=m-ou.se+mail&kgs=0&kls=0&nbq=50
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.1kB
    4.9kB
    9
    8

    HTTP Request

    GET http://www.altavista.com/web/results?q=cs.stanford.edu+email&kgs=0&kls=0&nbq=50

    HTTP Response

    301

    HTTP Request

    GET http://www.altavista.com/web/results?q=m-ou.se+mail&kgs=0&kls=0&nbq=50

    HTTP Response

    301
  • 88.221.134.137:80
    http://r11.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    480 B
    1.1kB
    5
    4

    HTTP Request

    GET http://r11.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D

    HTTP Response

    200
  • 212.82.100.137:443
    https://search.yahoo.com/?fr=altavista
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    5.0kB
    100.9kB
    85
    82

    HTTP Request

    GET https://search.yahoo.com/?fr=altavista

    HTTP Response

    200

    HTTP Request

    GET https://search.yahoo.com/?fr=altavista

    HTTP Response

    200
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Bmailto%26num%3D20&hl=en&q=EgS117BTGPX9_7sGIjBRjc8vgfmo_cZnK3Z8XJekLNOONS_nJBlup_uPTxih2WDaLCj9mi_cWXtO8zxbi3UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.8kB
    6.9kB
    14
    11

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+cs.stanford.edu&num=50

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dm-ou.se%2Bmailto%26num%3D20&hl=en&q=EgS117BTGPX9_7sGIjBRjc8vgfmo_cZnK3Z8XJekLNOONS_nJBlup_uPTxih2WDaLCj9mi_cWXtO8zxbi3UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    611 B
    776 B
    6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto

    HTTP Response

    301
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    617 B
    788 B
    6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

    HTTP Response

    404
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS117BTGPX9_7sGIjDhuchAG8DX4LjUN2tHvIMZVhgBSEpNnz_Z5A36ZuE9JrnSKP-SxLdfXM_ZAYy1efQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.4kB
    5.3kB
    11
    8

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=m-ou.se+mailto&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bcs.stanford.edu%26num%3D50&hl=en&q=EgS117BTGPX9_7sGIjDhuchAG8DX4LjUN2tHvIMZVhgBSEpNnz_Z5A36ZuE9JrnSKP-SxLdfXM_ZAYy1efQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    629 B
    812 B
    6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.2kB
    3.9kB
    12
    8

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto

    HTTP Response

    302
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    728 B
    641 B
    6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    301
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    3.3kB
    52.2kB
    50
    48

    HTTP Request

    GET https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

    HTTP Response

    200
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.2kB
    3.9kB
    12
    8

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail

    HTTP Response

    302
  • 212.82.100.137:80
    http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    733 B
    646 B
    6
    5

    HTTP Request

    GET http://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    301
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    609 B
    772 B
    6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se

    HTTP Response

    301
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGPf9_7sGIjD8wT-JCYyx9rhr1vXkdOK-oFqLwuQFrvk5C-l-VCWMKDDbPEpI0T6VWu_bpX0HSO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    2.3kB
    8.4kB
    17
    14

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+burtleburtle.net&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+cs.stanford.edu&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGPf9_7sGIjD8wT-JCYyx9rhr1vXkdOK-oFqLwuQFrvk5C-l-VCWMKDDbPEpI0T6VWu_bpX0HSO8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 212.82.100.137:443
    https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    3.2kB
    50.6kB
    48
    46

    HTTP Request

    GET https://search.yahoo.com/search?p=e-mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

    HTTP Response

    200
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    617 B
    788 B
    6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.2kB
    4.0kB
    12
    8

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu

    HTTP Response

    302
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+mailto

    HTTP Response

    404
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.0kB
    1.4kB
    8
    5

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

    HTTP Response

    301

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mail

    HTTP Response

    404
  • 199.89.1.120:25
    mail.mailroute.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    260 B
    5
  • 209.202.254.10:443
    https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.2kB
    3.9kB
    12
    8

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se

    HTTP Response

    302
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjDGiLZpz0ZTua_YWCb6QMaOo8ycXmERDMZ7finovDwBlys6d49c9aZq-g-S4RAQFUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.8kB
    6.9kB
    14
    11

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=20

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+reply&num=100

    HTTP Response

    302

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjDGiLZpz0ZTua_YWCb6QMaOo8ycXmERDMZ7finovDwBlys6d49c9aZq-g-S4RAQFUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    3.0kB
    18.0kB
    28
    20

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+m-ou.se

    HTTP Response

    404
  • 209.202.254.10:80
    http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    626 B
    806 B
    6
    4

    HTTP Request

    GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail

    HTTP Response

    301
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+alumni.caltech.edu

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    2.2kB
    17.3kB
    25
    19

    HTTP Request

    GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail

    HTTP Response

    302

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+burtleburtle.net

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+email+acm.org

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=acm.org+mailto

    HTTP Response

    404
  • 209.202.254.10:443
    https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail
    tls, http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    1.7kB
    16.8kB
    22
    17

    HTTP Request

    GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+contact+e-mail

    HTTP Response

    404
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjA8mZyPAumsxd-SZANZk_iOHUrUuheyczQ5jQP1sL9G0KWPkOpZyPysVd9ATdQnrFAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    943 B
    3.8kB
    9
    6

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGPb9_7sGIjA8mZyPAumsxd-SZANZk_iOHUrUuheyczQ5jQP1sL9G0KWPkOpZyPysVd9ATdQnrFAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGPf9_7sGIjCn9gCOaWguDN09FXuvoffYoxvLDB_wUwH4yMIdRZMPmF00nWhv2UWeOKuvXSphJAUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    951 B
    3.8kB
    9
    6

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGPf9_7sGIjCn9gCOaWguDN09FXuvoffYoxvLDB_wUwH4yMIdRZMPmF00nWhv2UWeOKuvXSphJAUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Breply%26num%3D100&hl=en&q=EgS117BTGPj9_7sGIjBiV_cRy42fVSmnxFi3-e_OuuGE9x29NFmVa2XStif2DnTp7eLb_x16bRcVkblW56UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    905 B
    3.8kB
    8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Breply%26num%3D100&hl=en&q=EgS117BTGPj9_7sGIjBiV_cRy42fVSmnxFi3-e_OuuGE9x29NFmVa2XStif2DnTp7eLb_x16bRcVkblW56UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 142.250.187.196:80
    http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto&hl=en&q=EgS117BTGPj9_7sGIjDXSIy14Lai5OHcdxLADCZbyLIxGrK6rgAuEyJPUFz4ZK9Ip6ZxUHCDYG23MR-q_YMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
    http
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    893 B
    3.8kB
    8
    5

    HTTP Request

    GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto&hl=en&q=EgS117BTGPj9_7sGIjDXSIy14Lai5OHcdxLADCZbyLIxGrK6rgAuEyJPUFz4ZK9Ip6ZxUHCDYG23MR-q_YMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

    HTTP Response

    429
  • 10.202.221.84:1034
    services.exe
    260 B
    5
  • 142.250.153.27:25
    aspmx2.googlemail.com
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    208 B
    4
  • 104.17.79.30:25
    acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    208 B
    4
  • 171.64.64.26:25
    smtp2.cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    208 B
    4
  • 65.254.227.224:25
    burtleburtle.net
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    208 B
    4
  • 171.64.64.26:25
    smtp2.cs.stanford.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    208 B
    4
  • 204.13.239.180:25
    alumni.caltech.edu
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    208 B
    4
  • 85.187.148.2:25
    gzip.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    208 B
    4
  • 104.21.93.140:25
    hq.acm.org
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    156 B
    3
  • 10.135.150.237:1034
    services.exe
    104 B
    2
  • 8.8.8.8:53
    8.8.8.8.in-addr.arpa
    dns
    66 B
    90 B
    1
    1

    DNS Request

    8.8.8.8.in-addr.arpa

  • 8.8.8.8:53
    196.249.167.52.in-addr.arpa
    dns
    73 B
    147 B
    1
    1

    DNS Request

    196.249.167.52.in-addr.arpa

  • 8.8.8.8:53
    133.130.81.91.in-addr.arpa
    dns
    72 B
    147 B
    1
    1

    DNS Request

    133.130.81.91.in-addr.arpa

  • 8.8.8.8:53
    140.32.126.40.in-addr.arpa
    dns
    72 B
    158 B
    1
    1

    DNS Request

    140.32.126.40.in-addr.arpa

  • 8.8.8.8:53
    95.221.229.192.in-addr.arpa
    dns
    73 B
    144 B
    1
    1

    DNS Request

    95.221.229.192.in-addr.arpa

  • 8.8.8.8:53
    228.249.119.40.in-addr.arpa
    dns
    73 B
    159 B
    1
    1

    DNS Request

    228.249.119.40.in-addr.arpa

  • 8.8.8.8:53
    149.220.183.52.in-addr.arpa
    dns
    73 B
    147 B
    1
    1

    DNS Request

    149.220.183.52.in-addr.arpa

  • 8.8.8.8:53
    212.20.149.52.in-addr.arpa
    dns
    72 B
    146 B
    1
    1

    DNS Request

    212.20.149.52.in-addr.arpa

  • 8.8.8.8:53
    241.42.69.40.in-addr.arpa
    dns
    71 B
    145 B
    1
    1

    DNS Request

    241.42.69.40.in-addr.arpa

  • 8.8.8.8:53
    172.214.232.199.in-addr.arpa
    dns
    74 B
    128 B
    1
    1

    DNS Request

    172.214.232.199.in-addr.arpa

  • 8.8.8.8:53
    85.49.80.91.in-addr.arpa
    dns
    70 B
    145 B
    1
    1

    DNS Request

    85.49.80.91.in-addr.arpa

  • 8.8.8.8:53
    13.227.111.52.in-addr.arpa
    dns
    72 B
    158 B
    1
    1

    DNS Request

    13.227.111.52.in-addr.arpa

  • 8.8.8.8:53
    m-ou.se
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    53 B
    232 B
    1
    1

    DNS Request

    m-ou.se

  • 8.8.8.8:53
    aspmx.l.google.com
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    64 B
    80 B
    1
    1

    DNS Request

    aspmx.l.google.com

    DNS Response

    66.102.1.26

  • 8.8.8.8:53
    acm.org
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    53 B
    87 B
    1
    1

    DNS Request

    acm.org

  • 8.8.8.8:53
    mail.mailroute.net
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    64 B
    96 B
    1
    1

    DNS Request

    mail.mailroute.net

    DNS Response

    199.89.1.120
    199.89.3.120

  • 8.8.8.8:53
    cs.stanford.edu
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    61 B
    121 B
    1
    1

    DNS Request

    cs.stanford.edu

  • 8.8.8.8:53
    smtp1.cs.stanford.edu
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    67 B
    83 B
    1
    1

    DNS Request

    smtp1.cs.stanford.edu

    DNS Response

    171.64.64.25

  • 8.8.8.8:53
    burtleburtle.net
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    62 B
    81 B
    1
    1

    DNS Request

    burtleburtle.net

  • 8.8.8.8:53
    mx.burtleburtle.net
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    65 B
    113 B
    1
    1

    DNS Request

    mx.burtleburtle.net

    DNS Response

    65.254.254.50
    65.254.254.52
    65.254.254.51

  • 8.8.8.8:53
    alumni.caltech.edu
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    64 B
    126 B
    1
    1

    DNS Request

    alumni.caltech.edu

  • 8.8.8.8:53
    alumni-caltech-edu.mail.protection.outlook.com
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    92 B
    156 B
    1
    1

    DNS Request

    alumni-caltech-edu.mail.protection.outlook.com

    DNS Response

    52.101.42.4
    52.101.41.0
    52.101.41.22
    52.101.41.4

  • 8.8.8.8:53
    gzip.org
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    54 B
    70 B
    1
    1

    DNS Request

    gzip.org

  • 8.8.8.8:53
    gzip.org
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    54 B
    70 B
    1
    1

    DNS Request

    gzip.org

    DNS Response

    85.187.148.2

  • 8.8.8.8:53
    search.lycos.com
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    62 B
    109 B
    1
    1

    DNS Request

    search.lycos.com

    DNS Response

    209.202.254.10

  • 8.8.8.8:53
    www.google.com
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    60 B
    76 B
    1
    1

    DNS Request

    www.google.com

    DNS Response

    142.250.187.196

  • 8.8.8.8:53
    search.yahoo.com
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    62 B
    121 B
    1
    1

    DNS Request

    search.yahoo.com

    DNS Response

    212.82.100.137

  • 8.8.8.8:53
    www.altavista.com
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    63 B
    157 B
    1
    1

    DNS Request

    www.altavista.com

    DNS Response

    212.82.100.137

  • 8.8.8.8:53
    r11.o.lencr.org
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    61 B
    160 B
    1
    1

    DNS Request

    r11.o.lencr.org

    DNS Response

    88.221.134.137
    88.221.135.105

  • 8.8.8.8:53
    196.187.250.142.in-addr.arpa
    dns
    74 B
    112 B
    1
    1

    DNS Request

    196.187.250.142.in-addr.arpa

  • 8.8.8.8:53
    10.254.202.209.in-addr.arpa
    dns
    73 B
    113 B
    1
    1

    DNS Request

    10.254.202.209.in-addr.arpa

  • 8.8.8.8:53
    137.100.82.212.in-addr.arpa
    dns
    73 B
    119 B
    1
    1

    DNS Request

    137.100.82.212.in-addr.arpa

  • 8.8.8.8:53
    168.245.100.95.in-addr.arpa
    dns
    73 B
    139 B
    1
    1

    DNS Request

    168.245.100.95.in-addr.arpa

  • 8.8.8.8:53
    137.134.221.88.in-addr.arpa
    dns
    73 B
    139 B
    1
    1

    DNS Request

    137.134.221.88.in-addr.arpa

  • 8.8.8.8:53
    hq.acm.org
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    56 B
    90 B
    1
    1

    DNS Request

    hq.acm.org

  • 8.8.8.8:53
    aspmx2.googlemail.com
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    134 B
    166 B
    2
    2

    DNS Request

    aspmx2.googlemail.com

    DNS Request

    aspmx2.googlemail.com

    DNS Response

    142.250.153.27

    DNS Response

    142.250.153.27

  • 8.8.8.8:53
    acm.org
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    106 B
    170 B
    2
    2

    DNS Request

    acm.org

    DNS Request

    acm.org

    DNS Response

    104.17.79.30
    104.17.78.30

    DNS Response

    104.17.78.30
    104.17.79.30

  • 8.8.8.8:53
    smtp2.cs.stanford.edu
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    67 B
    83 B
    1
    1

    DNS Request

    smtp2.cs.stanford.edu

    DNS Response

    171.64.64.26

  • 8.8.8.8:53
    burtleburtle.net
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    62 B
    78 B
    1
    1

    DNS Request

    burtleburtle.net

    DNS Response

    65.254.227.224

  • 8.8.8.8:53
    alumni.caltech.edu
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    128 B
    160 B
    2
    2

    DNS Request

    alumni.caltech.edu

    DNS Request

    alumni.caltech.edu

    DNS Response

    204.13.239.180

    DNS Response

    204.13.239.180

  • 8.8.8.8:53
    hq.acm.org
    dns
    605a7e9ff88673d278fe5146464280ac7a9601b48ab71bc816f5db3c0ba86609.exe
    112 B
    176 B
    2
    2

    DNS Request

    hq.acm.org

    DNS Request

    hq.acm.org

    DNS Response

    104.21.93.140
    172.67.210.221

    DNS Response

    104.21.93.140
    172.67.210.221

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\tmp7E6F.tmp

    Filesize

    29KB

    MD5

    18e475e379f7e94422020d28dfd4d82b

    SHA1

    14fdaffa193c367cea077bbc077b07a8b563b4d9

    SHA256

    bd15faddd8eea21dec681f6f44757270fc84431dccef8fde6b384d7ca8fce8f8

    SHA512

    989d5886264f802952f47d41fa69491b3bf3e44864f5e6c5c1158fc1d417cb89ba64d8192872f88b30a8966ceb5bbccfe55091cfed1e4a5e85fff5e7b24596b4

  • C:\Users\Admin\AppData\Local\Temp\zincite.log

    Filesize

    320B

    MD5

    93493eaa4ddffd4f03041bfce914304e

    SHA1

    db03a8824d274a3e51b4e4c06aba18af787c35ab

    SHA256

    2006457e8ea260d8e5fe1c6f5b66e9a6ce98d02aa8395b4615b7c0b00f4aa111

    SHA512

    90a03e769b0d67727224e72266b6e3d7ce7e9537c9235a418eb5cfdd6ea63c30a6befee58d575b821f9abb1fd3ccbe68d64076d9349deae8074edcff75630ca6

  • C:\Windows\services.exe

    Filesize

    8KB

    MD5

    b0fe74719b1b647e2056641931907f4a

    SHA1

    e858c206d2d1542a79936cb00d85da853bfc95e2

    SHA256

    bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c

    SHA512

    9c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2

  • memory/864-56-0x0000000000500000-0x0000000000510200-memory.dmp

    Filesize

    64KB

  • memory/864-173-0x0000000000500000-0x0000000000510200-memory.dmp

    Filesize

    64KB

  • memory/864-13-0x0000000000500000-0x0000000000510200-memory.dmp

    Filesize

    64KB

  • memory/864-169-0x0000000000500000-0x0000000000510200-memory.dmp

    Filesize

    64KB

  • memory/864-0-0x0000000000500000-0x0000000000510200-memory.dmp

    Filesize

    64KB

  • memory/864-61-0x0000000000500000-0x0000000000510200-memory.dmp

    Filesize

    64KB

  • memory/1832-16-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-57-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-40-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-45-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-50-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-52-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-33-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-38-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-28-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-62-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-26-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-21-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-15-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-170-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-6-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

  • memory/1832-174-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.