mydoom | 34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487

Analysis

max time kernel
120s
max time network
118s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2025, 09:23 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe
Size

29KB
MD5

14d051160136b98c47ee90332e6803c0
SHA1

b8898529455613ca3ef012b86f35819a72760563
SHA256

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487
SHA512

8c20ace505c4f4edb3336110db101f6456a82347f3ce97d425a94ab5cd4cbd6bd86dc3b3b486d04f4354a42166cb11af38b653f1c120e07258fe6d0a2b48ebef
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/JhY:AEwVs+0jNDY1qi/qxW

Score

10^/10

mydoom discovery persistence upx worm

Malware Config

Signatures

Detects MyDoom family 5 IoCs

resource	yara_rule
behavioral2/memory/3664-13-0x0000000000500000-0x0000000000510200-memory.dmp	family_mydoom
behavioral2/memory/3664-44-0x0000000000500000-0x0000000000510200-memory.dmp	family_mydoom
behavioral2/memory/3664-49-0x0000000000500000-0x0000000000510200-memory.dmp	family_mydoom
behavioral2/memory/3664-159-0x0000000000500000-0x0000000000510200-memory.dmp	family_mydoom
behavioral2/memory/3664-178-0x0000000000500000-0x0000000000510200-memory.dmp	family_mydoom

MyDoom
MyDoom is a Worm that is written in C++.
worm mydoom
Mydoom family
mydoom

Executes dropped EXE 1 IoCs

pid	Process
4716	services.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\JavaVM = "C:\\Windows\\java.exe"	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Services = "C:\\Windows\\services.exe"	services.exe

UPX packed file 21 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3664-0-0x0000000000500000-0x0000000000510200-memory.dmp	upx
behavioral2/files/0x0007000000023c94-4.dat	upx
behavioral2/memory/4716-5-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/3664-13-0x0000000000500000-0x0000000000510200-memory.dmp	upx
behavioral2/memory/4716-15-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-16-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-21-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-26-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-28-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-33-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-38-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-40-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/3664-44-0x0000000000500000-0x0000000000510200-memory.dmp	upx
behavioral2/memory/4716-45-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/4716-50-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/3664-49-0x0000000000500000-0x0000000000510200-memory.dmp	upx
behavioral2/files/0x0006000000000034-60.dat	upx
behavioral2/memory/3664-159-0x0000000000500000-0x0000000000510200-memory.dmp	upx
behavioral2/memory/4716-160-0x0000000000400000-0x0000000000408000-memory.dmp	upx
behavioral2/memory/3664-178-0x0000000000500000-0x0000000000510200-memory.dmp	upx
behavioral2/memory/4716-179-0x0000000000400000-0x0000000000408000-memory.dmp	upx

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\services.exe	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe
File opened for modification	C:\Windows\java.exe	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe
File created	C:\Windows\java.exe	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	services.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3664 wrote to memory of 4716	3664	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe	82
PID 3664 wrote to memory of 4716	3664	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe	82
PID 3664 wrote to memory of 4716	3664	34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe	82

C:\Users\Admin\AppData\Local\Temp\34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe
"C:\Users\Admin\AppData\Local\Temp\34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe"
1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3664
- C:\Windows\services.exe
  "C:\Windows\services.exe"
  2⤵
  - Executes dropped EXE
  - Adds Run key to start application
  - System Location Discovery: System Language Discovery
  PID:4716

Network

DNS

8.8.8.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

8.8.8.8.in-addr.arpa

IN PTR

Response

8.8.8.8.in-addr.arpa

IN PTR

dnsgoogle
DNS

104.219.191.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

104.219.191.52.in-addr.arpa

IN PTR

Response
DNS

180.129.81.91.in-addr.arpa

Remote address:

8.8.8.8:53

Request

180.129.81.91.in-addr.arpa

IN PTR

Response
DNS

68.32.126.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

68.32.126.40.in-addr.arpa

IN PTR

Response
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

200.163.202.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.163.202.172.in-addr.arpa

IN PTR

Response
DNS

241.42.69.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.42.69.40.in-addr.arpa

IN PTR

Response
DNS

172.210.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.210.232.199.in-addr.arpa

IN PTR

Response
DNS

m-ou.se

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

m-ou.se

IN MX

Response

m-ou.se

IN MX

aspmx4 googlemailcom

m-ou.se

IN MX

aspmx3�.

m-ou.se

IN MX

aspmx2�.

m-ou.se

IN MX

aspmx5�.

m-ou.se

IN MX

alt2aspmxlgoogle�9

m-ou.se

IN MX

��

m-ou.se

IN MX

alt1��
DNS

aspmx4.googlemail.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

aspmx4.googlemail.com

IN A

Response

aspmx4.googlemail.com

IN A

142.250.150.27
DNS

acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

acm.org

IN MX

Response

acm.org

IN MX

mail mailroutenet
DNS

mail.mailroute.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

mail.mailroute.net

IN A

Response

mail.mailroute.net

IN A

199.89.1.120

mail.mailroute.net

IN A

199.89.3.120
DNS

cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

cs.stanford.edu

IN MX

Response

cs.stanford.edu

IN MX

�

cs.stanford.edu

IN MX

smtp1�

cs.stanford.edu

IN MX

smtp2�
DNS

cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

cs.stanford.edu

IN A

Response

cs.stanford.edu

IN A

171.64.64.64
DNS

burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

burtleburtle.net

IN MX

Response

burtleburtle.net

IN MX

mx�
DNS

mx.burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

mx.burtleburtle.net

IN A

Response

mx.burtleburtle.net

IN A

65.254.254.52

mx.burtleburtle.net

IN A

65.254.254.50

mx.burtleburtle.net

IN A

65.254.254.51
DNS

alumni.caltech.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

alumni.caltech.edu

IN MX

Response

alumni.caltech.edu

IN MX

alumni-caltech-edumail protectionoutlookcom
DNS

alumni-caltech-edu.mail.protection.outlook.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

alumni-caltech-edu.mail.protection.outlook.com

IN A

Response

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.11.13

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.11.2

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.9.24

alumni-caltech-edu.mail.protection.outlook.com

IN A

52.101.42.18
DNS

gzip.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

gzip.org

IN MX

Response

gzip.org

IN MX

�
DNS

gzip.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

gzip.org

IN A

Response

gzip.org

IN A

85.187.148.2
DNS

www.google.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.250.187.196
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOWUjrwGIjAP3Cru4SxFzSe6Z9bXzjmqbrqmZhJ-uegp5zTe7st9Le9J7vemOqxrqwmiG-TSEOAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5pSOvAYQnYPFrwESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-H25dHB3aLqiifn7lztJ9bg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: gws
Content-Length: 484
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WUyYyiNcLzLyLmFKec8Nz7HMo6fzxcDe8mj-v0ev2FB0GIAQA45Q; expires=Fri, 11-Jul-2025 09:24:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOWUjrwGIjAP3Cru4SxFzSe6Z9bXzjmqbrqmZhJ-uegp5zTe7st9Le9J7vemOqxrqwmiG-TSEOAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOWUjrwGIjAP3Cru4SxFzSe6Z9bXzjmqbrqmZhJ-uegp5zTe7st9Le9J7vemOqxrqwmiG-TSEOAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3291
X-XSS-Protection: 0
DNS

www.altavista.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

www.altavista.com

IN A

Response

www.altavista.com

IN CNAME

us.yhs4.search.yahoo.com

us.yhs4.search.yahoo.com

IN CNAME

ds-global3.l7.search.ystg1.b.yahoo.com

ds-global3.l7.search.ystg1.b.yahoo.com

IN A

212.82.100.137
GET

http://www.altavista.com/web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:54 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:54 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=20

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:54 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 INKApi Error

Date: Sun, 12 Jan 2025 09:24:56 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Content-Length: 0
DNS

31.243.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

31.243.111.52.in-addr.arpa

IN PTR

Response
DNS

196.187.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

196.187.250.142.in-addr.arpa

IN PTR

Response

196.187.250.142.in-addr.arpa

IN PTR

lhr25s33-in-f41e100net
DNS

search.lycos.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

search.lycos.com

IN A

Response

search.lycos.com

IN CNAME

search-core2.bo3.lycos.com

search-core2.bo3.lycos.com

IN A

209.202.254.10
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
Content-Length: 311
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
Content-Length: 311
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjCRUdixDhvrPh7m91_iBFw93_ONWTliyf6FDJZTMyfyImW1BtwFXwZLlxDdqpyzF7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5pSOvAYQ-_-v7QISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-EeH2zzx_AfpVSZ7B4kvSsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: gws
Content-Length: 490
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-U10Qy4ndrJA8Yg-qB0-YMXdjMH-rDAnDcRibpVsCFADcWrkuGh7Q; expires=Fri, 11-Jul-2025 09:24:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjCRUdixDhvrPh7m91_iBFw93_ONWTliyf6FDJZTMyfyImW1BtwFXwZLlxDdqpyzF7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjCRUdixDhvrPh7m91_iBFw93_ONWTliyf6FDJZTMyfyImW1BtwFXwZLlxDdqpyzF7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3309
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjDxGQifcceZfTEgCdtNv7u-TMhym47TBASKsDPTitvth7nzS69pxsnZJqykaXagy_0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI5pSOvAYQ_ZOSzgMSBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9b8Qnt4xMjKL3pjEKOUIcw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:54 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-XdvfijdqEfKbBKcCWLcIoE12-SC3KEfHAPlN3gb0NTUV3gb1NXf4s; expires=Fri, 11-Jul-2025 09:24:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjDxGQifcceZfTEgCdtNv7u-TMhym47TBASKsDPTitvth7nzS69pxsnZJqykaXagy_0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjDxGQifcceZfTEgCdtNv7u-TMhym47TBASKsDPTitvth7nzS69pxsnZJqykaXagy_0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:55 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
DNS

r11.o.lencr.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

r11.o.lencr.org

IN A

Response

r11.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN A

2.22.144.149

a1887.dscq.akamai.net

IN A

2.22.144.142
GET

http://r11.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

2.22.144.149:80

Request

GET /MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: r11.o.lencr.org

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42D27A357087AFBBE6630BEDFFF575093233F5A2F8C02AB580A9EBEA0CFB8090"
Last-Modified: Sat, 11 Jan 2025 14:22:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15457
Expires: Sun, 12 Jan 2025 13:42:31 GMT
Date: Sun, 12 Jan 2025 09:24:54 GMT
Connection: keep-alive
DNS

search.yahoo.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

search.yahoo.com

IN A

Response

search.yahoo.com

IN CNAME

ds-global3.l7.search.ystg1.b.yahoo.com

ds-global3.l7.search.ystg1.b.yahoo.com

IN A

212.82.100.137
GET

http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:54 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:55 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:54 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:55 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:55 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
Content-Length: 304
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:55 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
Content-Length: 310
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
DNS

137.100.82.212.in-addr.arpa

Remote address:

8.8.8.8:53

Request

137.100.82.212.in-addr.arpa

IN PTR

Response

137.100.82.212.in-addr.arpa

IN PTR

ats1l7searchvipir2yahoocom
DNS

10.254.202.209.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.254.202.209.in-addr.arpa

IN PTR

Response

10.254.202.209.in-addr.arpa

IN PTR

search-core2bo3lycoscom
DNS

61.45.26.184.in-addr.arpa

Remote address:

8.8.8.8:53

Request

61.45.26.184.in-addr.arpa

IN PTR

Response

61.45.26.184.in-addr.arpa

IN PTR

a184-26-45-61deploystaticakamaitechnologiescom
DNS

149.144.22.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

149.144.22.2.in-addr.arpa

IN PTR

Response

149.144.22.2.in-addr.arpa

IN PTR

a2-22-144-149deploystaticakamaitechnologiescom
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjCwb_gHn1qD6hDlfkoQxrd82pYPWUaxCoz11mlLs4DOCBzgxF7iCEOycyNPp2GmbnYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI55SOvAYQqqbR-gESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-U6B5qBnkoko9cYGNtC1vNA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:55 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-XUaCHrvKt87EazKYIvgtFjHFZqDhY3iwqKmOEmUNtSrm5--KcRk-g; expires=Fri, 11-Jul-2025 09:24:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjCwb_gHn1qD6hDlfkoQxrd82pYPWUaxCoz11mlLs4DOCBzgxF7iCEOycyNPp2GmbnYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjCwb_gHn1qD6hDlfkoQxrd82pYPWUaxCoz11mlLs4DOCBzgxF7iCEOycyNPp2GmbnYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:55 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:55 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:55 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
Content-Length: 25
Content-Type: text/html
GET

http://search.yahoo.com/search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:55 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu&hl=en&q=EgS117BTGOeUjrwGIjCHEZa9LLsG1FM0dH9C0P0_qsrpL6k0W5udWZs9COuJvbsaYxt6rp-RgK8vYREKAVoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI55SOvAYQ-pyikQMSBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6EbvpyJ3Gp5vgCt54qnVuA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:55 GMT
Server: gws
Content-Length: 478
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-Vm-FTpUUOsAjYBOWvPvCb1ozDPmUY8ZJsBXtW1lYigtgjnUKEftNA; expires=Fri, 11-Jul-2025 09:24:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjDgbg6y-_pguKQS8jwmdYvxli4oN6WLdWy7rDxcaBFkPkUSjoo1KkfshQT7PSyOL4UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6JSOvAYQtJ22oAESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-WSycpoiJ9UfmaDg-prVYBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-XfivYRXmM_J-CWXms7z0KrGhV4q1lzExIKHg_B9yRuW5nreD7CL0o; expires=Fri, 11-Jul-2025 09:24:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjC-GIUWNiokMxhrTax_qoiDBcdEeGbfHA7tOVJOjmqfHGZ6mTlB-mWpXPfCyjl4ViQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjC-GIUWNiokMxhrTax_qoiDBcdEeGbfHA7tOVJOjmqfHGZ6mTlB-mWpXPfCyjl4ViQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:56 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3315
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:55 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.yahoo.com/search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:55 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:55 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:55 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjC-GIUWNiokMxhrTax_qoiDBcdEeGbfHA7tOVJOjmqfHGZ6mTlB-mWpXPfCyjl4ViQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI6JSOvAYQn7H2RRIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bL3BNQWKE4v7Bg7vNKkQnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-VNUKdV4R3qj2zS3FZ8VupV2Lhkm8Q5c89Mket9vQjOq05zUGdqPuI; expires=Fri, 11-Jul-2025 09:24:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu&hl=en&q=EgS117BTGOeUjrwGIjCHEZa9LLsG1FM0dH9C0P0_qsrpL6k0W5udWZs9COuJvbsaYxt6rp-RgK8vYREKAVoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu&hl=en&q=EgS117BTGOeUjrwGIjCHEZa9LLsG1FM0dH9C0P0_qsrpL6k0W5udWZs9COuJvbsaYxt6rp-RgK8vYREKAVoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:56 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3273
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:55 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:55 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:55 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:56 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:56 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:56 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjBtrc-wY0tG_hgPkoVMmgsiOAj4TzxqyhQ7ap_Q3wjHMzhV952d_-zfeOcPtznVEKAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6JSOvAYQ9p7O6AISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce--iXhg7uh2qDafOp4CLRAVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: gws
Content-Length: 484
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-Wrxe30Y98NE8J5Qr3bQF9ab1iTZjqbLp5I7s7bzAhJTEMKoXnZSw; expires=Fri, 11-Jul-2025 09:24:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjBtrc-wY0tG_hgPkoVMmgsiOAj4TzxqyhQ7ap_Q3wjHMzhV952d_-zfeOcPtznVEKAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjBtrc-wY0tG_hgPkoVMmgsiOAj4TzxqyhQ7ap_Q3wjHMzhV952d_-zfeOcPtznVEKAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:56 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3291
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto
Content-Length: 313
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:57 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
Content-Length: 312
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:57 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
Content-Length: 320
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:56 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:56 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:56 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:56 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:56 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjDgbg6y-_pguKQS8jwmdYvxli4oN6WLdWy7rDxcaBFkPkUSjoo1KkfshQT7PSyOL4UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjDgbg6y-_pguKQS8jwmdYvxli4oN6WLdWy7rDxcaBFkPkUSjoo1KkfshQT7PSyOL4UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:56 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjDBB45xkmTnOw6nuOroeno1v3TZYa3d813kf3Ssisbl5gA1Y_kszxgtEyUXjhAiIfcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI6ZSOvAYQzIjxYxIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RvvRYA_VThin1yNj17mp5g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:57 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-UcLxHOImeZ2YP0Wc2bQJpgyMHVZxyUNKAKmCUY2AHnS93xlbzBssw; expires=Fri, 11-Jul-2025 09:24:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjDBB45xkmTnOw6nuOroeno1v3TZYa3d813kf3Ssisbl5gA1Y_kszxgtEyUXjhAiIfcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjDBB45xkmTnOw6nuOroeno1v3TZYa3d813kf3Ssisbl5gA1Y_kszxgtEyUXjhAiIfcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:57 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3315
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:56 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:56 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=mailto+acm.org&kgs=0&kls=0&nbq=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+acm.org&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:56 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=gzip.org+email&kgs=0&kls=0

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=gzip.org+email&kgs=0&kls=0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:57 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=email+alumni.caltech.edu&kgs=0&kls=0&nbq=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=email+alumni.caltech.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:58 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=e-mail+cs.stanford.edu&kgs=0&kls=0

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=e-mail+cs.stanford.edu&kgs=0&kls=0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:59 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=contact+mail+cs.stanford.edu&kgs=0&kls=0&nbq=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=contact+mail+cs.stanford.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:01 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=e-mail+alumni.caltech.edu&kgs=0&kls=0&nbq=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=e-mail+alumni.caltech.edu&kgs=0&kls=0&nbq=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:01 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.altavista.com/web/results?q=mailto+m-ou.se&kgs=0&kls=0

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /web/results?q=mailto+m-ou.se&kgs=0&kls=0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.altavista.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:02 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+e-mail

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+e-mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Be-mail&hl=en&q=EgS117BTGOmUjrwGIjDkvMy_MWxyHg41K4aTztuj6h02vwfgOWK3HBq7aN4sTqZBq_yF2OafLrAeSA-Jt-YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6ZSOvAYQ893W5wESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-THhA3qJB2EjHNdky7fc-VQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:57 GMT
Server: gws
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-VCwYEXnvr7tkQzEzLZfifA60AEmeW2Q5TQVuZ48h-ATF3qxvvd8NU; expires=Fri, 11-Jul-2025 09:24:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Be-mail&hl=en&q=EgS117BTGOmUjrwGIjDkvMy_MWxyHg41K4aTztuj6h02vwfgOWK3HBq7aN4sTqZBq_yF2OafLrAeSA-Jt-YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Be-mail&hl=en&q=EgS117BTGOmUjrwGIjDkvMy_MWxyHg41K4aTztuj6h02vwfgOWK3HBq7aN4sTqZBq_yF2OafLrAeSA-Jt-YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:57 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3255
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:57 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:57 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:57 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:57 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:57 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:57 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:57 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:57 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:58 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+acm.org&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+acm.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOmUjrwGIjC5Wi7U7UG-OKkjO8Gk57EXymIl6HYkowl8b9v2i2E6wWJtsf3QDiRgtufxy6j3H44yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI6pSOvAYQq9yBVhIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ji-AaPxVVzsTkGtzTqigxA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:58 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WLCr3ZbutHKB3i4nWSqes3D0xGJjS6mxP3jfdJp86EJzh_i_FOyA; expires=Fri, 11-Jul-2025 09:24:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjC2sRQx7rvhv_aZjndZUA8B70HtLtJD8SVtkRs0se1zsFv_diNmUCLZW7ZXM5_cU5EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6pSOvAYQ6O7PqwISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_b9uDSmtCi6xCbWtFQgOYQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:58 GMT
Server: gws
Content-Length: 490
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-XIioP1nt68QOBQhi-DgsDmQ9rGjXA53bM69ezb20k4TZHSapnmPXc; expires=Fri, 11-Jul-2025 09:24:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+gzip.org&num=20

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=email+gzip.org&num=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGOqUjrwGIjCqzsN_TDUH6MMqFvM2MqLbN9Lm3TQitQYMVE7lCmbvlDaq-P8gNsNXId7pwNMhwJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI65SOvAYQqeHHCxIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-OW3DqFy2QsSSJ9V_j0vJ0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: gws
Content-Length: 482
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-UdDiABawWD3Q6m5jryNkzaGuGcyzIYlnZK9yKqR7y2Vy7DB2dkTw; expires=Fri, 11-Jul-2025 09:24:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjC2sRQx7rvhv_aZjndZUA8B70HtLtJD8SVtkRs0se1zsFv_diNmUCLZW7ZXM5_cU5EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjC2sRQx7rvhv_aZjndZUA8B70HtLtJD8SVtkRs0se1zsFv_diNmUCLZW7ZXM5_cU5EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3309
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:58 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:58 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOqUjrwGIjB188IKRf9Mrr_PWRhb7AA8VMgrDHp5Wo7udCw3ZDH7zDA7vH-QoYl4ynBhZPseVaIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI6pSOvAYQhYW5oAISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YZsZXiCdVbutlUeM7odCxA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:58 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WDDneyXv1krcFLBpRAb5y3OI89IuywbeQt4mXHS374u53ie9Or5w; expires=Fri, 11-Jul-2025 09:24:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOmUjrwGIjC5Wi7U7UG-OKkjO8Gk57EXymIl6HYkowl8b9v2i2E6wWJtsf3QDiRgtufxy6j3H44yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOmUjrwGIjC5Wi7U7UG-OKkjO8Gk57EXymIl6HYkowl8b9v2i2E6wWJtsf3QDiRgtufxy6j3H44yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:58 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 500 INKApi Error

Date: Sun, 12 Jan 2025 09:24:58 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Content-Length: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+gzip.org&num=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+gzip.org&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjBaWZ3psaosEX9XZfNICMM5SC_0Y93lB_d1RbxrjXbC8lhJIVCU4SZXeWs3-ZIMZUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI65SOvAYQl92aCRIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_JixmcbP9OAKgJZn0ibrsA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: gws
Content-Length: 493
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WVpBx4dYLEggTV5cskEuRsB5TssZwf4wMge3cbiX7bOVoXHxI9Rmg; expires=Fri, 11-Jul-2025 09:24:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOqUjrwGIjB188IKRf9Mrr_PWRhb7AA8VMgrDHp5Wo7udCw3ZDH7zDA7vH-QoYl4ynBhZPseVaIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOqUjrwGIjB188IKRf9Mrr_PWRhb7AA8VMgrDHp5Wo7udCw3ZDH7zDA7vH-QoYl4ynBhZPseVaIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:58 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:58 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
Content-Length: 312
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjDlxZ-hfdtgyFiC3K5r3QMVZcREJDgdy__TF_dS_KocUsg4j2zTgPdfnNhVXjGsBrQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI65SOvAYQytmXpwESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-FDUuUcpPRHiICRFRZgmF1Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WS2FwUnHL83tbo6gCpT7tLNCA43C9Fr05RRj3a2hV15jymbO93eA; expires=Fri, 11-Jul-2025 09:24:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjBaWZ3psaosEX9XZfNICMM5SC_0Y93lB_d1RbxrjXbC8lhJIVCU4SZXeWs3-ZIMZUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjBaWZ3psaosEX9XZfNICMM5SC_0Y93lB_d1RbxrjXbC8lhJIVCU4SZXeWs3-ZIMZUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3312
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=20

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=20 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D20&hl=en&q=EgS117BTGOuUjrwGIjDGViI-3dxeTdaDYQ2Oj-gPHs4uJvZX0iCveIunN2pPp23L1gJURY7Nn6SeqsHTZLEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI65SOvAYQ0qSU6AESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HjOe-szS2YNqg41cImJ_FA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-XnzajUZsq2cnci9vSJ1Y7k7bHB184cDl5xBYcSZo-ZUcwuG56iwaE; expires=Fri, 11-Jul-2025 09:24:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjCBqaMRC359i3wCkUjuUFLDjXctlsOCo2GnJawof6Ok-KNcckcdvgED6CcXs2MWsAEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI65SOvAYQn4PDiQMSBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9tKm1VmsECg2WHXrCHIMDg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WgmFEOJmrojp2mxzFm5ldc64fnLHNvYYHbMqct0DhakfIUhLg8VQ; expires=Fri, 11-Jul-2025 09:24:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjCBqaMRC359i3wCkUjuUFLDjXctlsOCo2GnJawof6Ok-KNcckcdvgED6CcXs2MWsAEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjCBqaMRC359i3wCkUjuUFLDjXctlsOCo2GnJawof6Ok-KNcckcdvgED6CcXs2MWsAEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3315
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail
Content-Length: 312
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:59 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:59 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:24:59 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGOqUjrwGIjCqzsN_TDUH6MMqFvM2MqLbN9Lm3TQitQYMVE7lCmbvlDaq-P8gNsNXId7pwNMhwJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGOqUjrwGIjCqzsN_TDUH6MMqFvM2MqLbN9Lm3TQitQYMVE7lCmbvlDaq-P8gNsNXId7pwNMhwJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3285
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjDlxZ-hfdtgyFiC3K5r3QMVZcREJDgdy__TF_dS_KocUsg4j2zTgPdfnNhVXjGsBrQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjDlxZ-hfdtgyFiC3K5r3QMVZcREJDgdy__TF_dS_KocUsg4j2zTgPdfnNhVXjGsBrQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3312
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:59 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D20&hl=en&q=EgS117BTGOuUjrwGIjDGViI-3dxeTdaDYQ2Oj-gPHs4uJvZX0iCveIunN2pPp23L1gJURY7Nn6SeqsHTZLEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D20&hl=en&q=EgS117BTGOuUjrwGIjDGViI-3dxeTdaDYQ2Oj-gPHs4uJvZX0iCveIunN2pPp23L1gJURY7Nn6SeqsHTZLEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:24:59 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:59 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjBfGqfcA6HlIXupQzMJXLUI_JMrrypl0pUGx4k1FitAVsmc9E9vDI7vG6BuHHroZPYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI7JSOvAYQufu5DRIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-tuNZVEQ2ZXePHZMBCLY4dA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: gws
Content-Length: 482
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-X9GgdMf8Tcihrj7vjI0-PeFz3XxNEhg2sr6wqmZpEjqKqfHeR9wrE; expires=Fri, 11-Jul-2025 09:25:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjBfGqfcA6HlIXupQzMJXLUI_JMrrypl0pUGx4k1FitAVsmc9E9vDI7vG6BuHHroZPYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjBfGqfcA6HlIXupQzMJXLUI_JMrrypl0pUGx4k1FitAVsmc9E9vDI7vG6BuHHroZPYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:00 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3285
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:24:59 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:24:59 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
Content-Length: 312
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+mailto&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+mailto&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOyUjrwGIjAMT5c_R5pPhmm-UjCOhFVxPY7KUeCt_ZVaq9hOYgGcmxEq0Z7n0Pn1noOjNHFoTAoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7JSOvAYQwu6zuAESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-TlnIim38jSgkz1qRdChAWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-UWgBfW4a12NWhDT7VwjrzWTBXJCWQ5vCzEGeAK9yrVsdbvohkQ25E; expires=Fri, 11-Jul-2025 09:25:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOyUjrwGIjAMT5c_R5pPhmm-UjCOhFVxPY7KUeCt_ZVaq9hOYgGcmxEq0Z7n0Pn1noOjNHFoTAoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOyUjrwGIjAMT5c_R5pPhmm-UjCOhFVxPY7KUeCt_ZVaq9hOYgGcmxEq0Z7n0Pn1noOjNHFoTAoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:00 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3315
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGOyUjrwGIjCgDZV69tyjdmM28IA-csep_yIFbBvqMChXgYlexw06Vr66wYwChCDecfwlHwlm8C4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7JSOvAYQs620hwISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-14uzOk9Hm2yI0egplcVE_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WjtM5UkI9h-BaspDF3bIn3lUwP7m5qfDCr10qOfpVKeszIuLmQyQ; expires=Fri, 11-Jul-2025 09:25:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGOyUjrwGIjCgDZV69tyjdmM28IA-csep_yIFbBvqMChXgYlexw06Vr66wYwChCDecfwlHwlm8C4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGOyUjrwGIjCgDZV69tyjdmM28IA-csep_yIFbBvqMChXgYlexw06Vr66wYwChCDecfwlHwlm8C4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:00 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3312
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:00 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:00 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:00 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:00 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:00 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org
Content-Length: 305
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:00 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:01 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org&hl=en&q=EgS117BTGO2UjrwGIjC0UM0pqJhM9tW_4cWqe6a1fy4FBIhIPJaRNp5BBbYAFwaOKEX6NzIIP0OdnD29kEsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7ZSOvAYQrsf0iAESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-62byXtDFtaR_9I-IFWtNOg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: gws
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-W3Io6hrSB--4q9pkimC8EwMzi-3S53t9507iJdzYM1Aj9AFB1QMQ; expires=Fri, 11-Jul-2025 09:25:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjCPFJvRe7-_vhHr09jKXuWOp2eUlrmPAM7gp8epx6nKo1hE1nXv9M1PuVCrlg8SsXQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7ZSOvAYQo7qM-wISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SCcanbPT1rMdAlwyGmmAKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-XvF_3F7mckviZUqymSzmklY01dWv-9oKZC_V4WFPWYGVeQRQrX6g; expires=Fri, 11-Jul-2025 09:25:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org&hl=en&q=EgS117BTGO2UjrwGIjC0UM0pqJhM9tW_4cWqe6a1fy4FBIhIPJaRNp5BBbYAFwaOKEX6NzIIP0OdnD29kEsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org&hl=en&q=EgS117BTGO2UjrwGIjC0UM0pqJhM9tW_4cWqe6a1fy4FBIhIPJaRNp5BBbYAFwaOKEX6NzIIP0OdnD29kEsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3252
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjB1h11rn_9zfBptRblE2CFjzFAEvRXfEyzYIeMiT8aebLzwCZ-ug_5ccVsJvYlWlOkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7ZSOvAYQ7qXl2QESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-cfXA4ITKIn6EeXO7Nojz2Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: gws
Content-Length: 492
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WibN_JCO_kqBhA95_5setX3XRBK0LTZazQ0pL-eU7SVkun71C4B9g; expires=Fri, 11-Jul-2025 09:25:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGO2UjrwGIjD3Bo0SFfsqxFS_3InL6yX2XfHs2HsSxeAnoo33h1wwF2bIIvxa4MZyBNp2UFwgnf8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7ZSOvAYQycOSnwMSBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7vt6iPrUnYYOMYEOY_eAjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-Ua0DGTttXAXN2Grdoph0E102xqrGUC2MJzi-Its_Qg9-2Nu9lvSa4; expires=Fri, 11-Jul-2025 09:25:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjD4wC-nsKFrtPrpWxdketcdyeOrH1NkwkJ_khUPUxfBcuYNbOyWzDfV_D-gEBWMLZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7pSOvAYQ_9aGkQESBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_f3vX5NIA6PbR6zY3sI1Xw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: gws
Content-Length: 489
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-X44dvVpGt-8LYbpJWGLI3jif4soA90tqMzRb7l-vQlrqj2YIbqqYk; expires=Fri, 11-Jul-2025 09:25:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjBbir_8m8rGnW62lch32viHsNaEGgcbd_XlYry8HxFihkW4p-dOH28xZXfBFJN5znUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7pSOvAYQhIOe5AISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RfO6WCpbKvM9kkXtVTVNFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: gws
Content-Length: 482
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-WEBJAN4VGdUi5rp8g0ywU7YXBscerADumjz1wOWQ7RrNhphjZJ6A; expires=Fri, 11-Jul-2025 09:25:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjD57r4cNQuHOMPgdsW0R7GM5cNKdQ4kqkoo3ZmgvGt7I6N15YUTLfMQJQcLR0P88UMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjD57r4cNQuHOMPgdsW0R7GM5cNKdQ4kqkoo3ZmgvGt7I6N15YUTLfMQJQcLR0P88UMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email
Content-Length: 312
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:01 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.16
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjB1h11rn_9zfBptRblE2CFjzFAEvRXfEyzYIeMiT8aebLzwCZ-ug_5ccVsJvYlWlOkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjB1h11rn_9zfBptRblE2CFjzFAEvRXfEyzYIeMiT8aebLzwCZ-ug_5ccVsJvYlWlOkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3315
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjCPFJvRe7-_vhHr09jKXuWOp2eUlrmPAM7gp8epx6nKo1hE1nXv9M1PuVCrlg8SsXQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjCPFJvRe7-_vhHr09jKXuWOp2eUlrmPAM7gp8epx6nKo1hE1nXv9M1PuVCrlg8SsXQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3315
X-XSS-Protection: 0
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGO2UjrwGIjD3Bo0SFfsqxFS_3InL6yX2XfHs2HsSxeAnoo33h1wwF2bIIvxa4MZyBNp2UFwgnf8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGO2UjrwGIjD3Bo0SFfsqxFS_3InL6yX2XfHs2HsSxeAnoo33h1wwF2bIIvxa4MZyBNp2UFwgnf8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3312
X-XSS-Protection: 0
GET

http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:02 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjD57r4cNQuHOMPgdsW0R7GM5cNKdQ4kqkoo3ZmgvGt7I6N15YUTLfMQJQcLR0P88UMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI7pSOvAYQ4tyIkwISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UWJpl7dSyTTqKERGuAziig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-Vj_PhXafnOtn14jUZjbg4L_8mNh3l_V1Om49OglvSLoiUUhM16eQ; expires=Fri, 11-Jul-2025 09:25:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjD4wC-nsKFrtPrpWxdketcdyeOrH1NkwkJ_khUPUxfBcuYNbOyWzDfV_D-gEBWMLZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjD4wC-nsKFrtPrpWxdketcdyeOrH1NkwkJ_khUPUxfBcuYNbOyWzDfV_D-gEBWMLZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3306
X-XSS-Protection: 0
GET

https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:02 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:02 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:02 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:02 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:02 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+reply&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+reply&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Breply%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjC5jibfTcG7M4pMaLLy28WkWX3TmK6o-n-7vuvMmAMKTlgfsyWqRgheYpPi39yi5I8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI75SOvAYQ753YPBIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6RdWTqqD9YqBqiZAmvFJQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: gws
Content-Length: 483
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-UKhrjEFtUSjqq76ohGmVCNSDWC9-wN_26KaT-F98nxyBrP3xffCA; expires=Fri, 11-Jul-2025 09:25:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Breply%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjC5jibfTcG7M4pMaLLy28WkWX3TmK6o-n-7vuvMmAMKTlgfsyWqRgheYpPi39yi5I8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Breply%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjC5jibfTcG7M4pMaLLy28WkWX3TmK6o-n-7vuvMmAMKTlgfsyWqRgheYpPi39yi5I8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3288
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu
Content-Length: 318
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:02 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
Content-Length: 311
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
Content-Length: 312
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjBbir_8m8rGnW62lch32viHsNaEGgcbd_XlYry8HxFihkW4p-dOH28xZXfBFJN5znUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjBbir_8m8rGnW62lch32viHsNaEGgcbd_XlYry8HxFihkW4p-dOH28xZXfBFJN5znUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3285
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail
Content-Length: 0
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:03 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50
Content-Length: 25
Content-Type: text/html
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:03 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:80

Request

GET /search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:03 GMT
Connection: close
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
Location: https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100
Content-Length: 25
Content-Type: text/html
GET

https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.yahoo.com

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:03 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+gzip.org&num=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+gzip.org&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDdXAqh8H1rZ5YShU0GfjiqF08zGJx6G6QqdLatUPNejXYPfRVQUblDOmoXe80nlokyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI75SOvAYQ0LXPxwISBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QI0ReId0EOlmtpA0eiU7BA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: gws
Content-Length: 491
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-VehagjLg5jWbu0AorIiBoBf6RYvytpBTVbDtw_hlgjJ5yHm6hahx0; expires=Fri, 11-Jul-2025 09:25:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDdXAqh8H1rZ5YShU0GfjiqF08zGJx6G6QqdLatUPNejXYPfRVQUblDOmoXe80nlokyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDdXAqh8H1rZ5YShU0GfjiqF08zGJx6G6QqdLatUPNejXYPfRVQUblDOmoXe80nlokyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3306
X-XSS-Protection: 0
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email&num=50

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email&num=50 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDOAfHf_OgN2O2wWwS2cs_SypS30PAVizWzv6_nNgrstp4_8RRIldqIIMLpzwC8oNIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgwI75SOvAYQpe6InAMSBLXXsFM
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-p_J6eP8Jyl98XZIxvD5oJw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: gws
Content-Length: 489
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-UQSZdz1cch_P6CThECwE_GY2vrLBI851rGNaNMPTTt2U5mATLT4Kc; expires=Fri, 11-Jul-2025 09:25:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDOAfHf_OgN2O2wWwS2cs_SypS30PAVizWzv6_nNgrstp4_8RRIldqIIMLpzwC8oNIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDOAfHf_OgN2O2wWwS2cs_SypS30PAVizWzv6_nNgrstp4_8RRIldqIIMLpzwC8oNIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3306
X-XSS-Protection: 0
GET

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:80

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
Location: https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email
Content-Length: 304
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:03 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.lycos.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:04 GMT
Server: Apache
X-Powered-By: PHP/7.2.14
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

212.82.100.137:443

Request

GET /search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: search.yahoo.com
Connection: Keep-Alive

Response

HTTP/1.1 500 Internal Server Error

Content-Type: text/plain; charset=utf-8;
Secure_search_bypass: true
Date: Sun, 12 Jan 2025 09:25:03 GMT
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Server: ATS
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport
Referrer-Policy: no-referrer-when-downgrade
GET

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+m-ou.se&num=100

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+m-ou.se&num=100 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

Location: http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO-UjrwGIjCmw8RYT_I3tAYZHsQoyltUdzg0mFkhugqXb-tnXvN65grBjxsSuMrHBUNhD7hI3BMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
x-hallmonitor-challenge: CgsI8JSOvAYQ-szWKRIEtdewUw
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-shEoDYcd4wiIfr5Uv_m1uw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/xsrp
Date: Sun, 12 Jan 2025 09:25:04 GMT
Server: gws
Content-Length: 482
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: AEC=AZ6Zc-X-Ezcheoi8K13GPNQsh7ZSVI7IC9qhwVz5Y66GhpaLQ5K-cFXiJQ; expires=Fri, 11-Jul-2025 09:25:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
GET

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO-UjrwGIjCmw8RYT_I3tAYZHsQoyltUdzg0mFkhugqXb-tnXvN65grBjxsSuMrHBUNhD7hI3BMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

142.250.187.196:80

Request

GET /sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO-UjrwGIjCmw8RYT_I3tAYZHsQoyltUdzg0mFkhugqXb-tnXvN65grBjxsSuMrHBUNhD7hI3BMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.google.com
Connection: Keep-Alive

Response

HTTP/1.1 429 Too Many Requests

Date: Sun, 12 Jan 2025 09:25:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Content-Type: text/html
Server: HTTP server (unknown)
Content-Length: 3285
X-XSS-Protection: 0
GET

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 302 Found

Date: Sun, 12 Jan 2025 09:25:04 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Location: https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+email
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

209.202.254.10:443

Request

GET /default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+email HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Connection: Keep-Alive
Host: search.lycos.com

Response

HTTP/1.1 404 Not Found

Date: Sun, 12 Jan 2025 09:25:04 GMT
Server: Apache
X-Powered-By: PHP/7.2.17
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
DNS

aspmx3.googlemail.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

aspmx3.googlemail.com

IN A

Response

aspmx3.googlemail.com

IN A

142.251.9.27
DNS

acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

acm.org

IN A

Response

acm.org

IN A

104.17.78.30

acm.org

IN A

104.17.79.30
DNS

smtp1.cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

smtp1.cs.stanford.edu

IN A

Response

smtp1.cs.stanford.edu

IN A

171.64.64.25
DNS

burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

burtleburtle.net

IN A

Response

burtleburtle.net

IN A

65.254.227.224
DNS

alumni.caltech.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

Remote address:

8.8.8.8:53

Request

alumni.caltech.edu

IN A

Response

alumni.caltech.edu

IN A

204.13.239.180

172.16.1.3:1034

services.exe

260 B
5
192.168.56.176:1034

services.exe

260 B
5
10.135.189.123:1034

services.exe

260 B
5
192.168.144.131:1034

services.exe

260 B
5
10.127.0.6:1034

services.exe
142.250.150.27:25

aspmx4.googlemail.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
199.89.1.120:25

mail.mailroute.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
171.64.64.64:25

cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
171.64.64.64:25

cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
65.254.254.52:25

mx.burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
52.101.11.13:25

alumni-caltech-edu.mail.protection.outlook.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
85.187.148.2:25

gzip.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOWUjrwGIjAP3Cru4SxFzSe6Z9bXzjmqbrqmZhJ-uegp5zTe7st9Le9J7vemOqxrqwmiG-TSEOAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+gzip.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOWUjrwGIjAP3Cru4SxFzSe6Z9bXzjmqbrqmZhJ-uegp5zTe7st9Le9J7vemOqxrqwmiG-TSEOAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.9kB
1.9kB
14
9

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+alumni.caltech.edu&kgs=0&kls=0

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=20

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+gzip.org&kgs=0&kls=0&nbq=50

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

617 B
788 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

HTTP Response

301
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

617 B
788 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

HTTP Response

404
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjCRUdixDhvrPh7m91_iBFw93_ONWTliyf6FDJZTMyfyImW1BtwFXwZLlxDdqpyzF7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjCRUdixDhvrPh7m91_iBFw93_ONWTliyf6FDJZTMyfyImW1BtwFXwZLlxDdqpyzF7AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.2kB
3.9kB
12
8

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=email+cs.stanford.edu

HTTP Response

302
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjDxGQifcceZfTEgCdtNv7u-TMhym47TBASKsDPTitvth7nzS69pxsnZJqykaXagy_0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOaUjrwGIjDxGQifcceZfTEgCdtNv7u-TMhym47TBASKsDPTitvth7nzS69pxsnZJqykaXagy_0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
2.22.144.149:80

http://r11.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

428 B
1.0kB
4
3

HTTP Request

GET http://r11.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQaUrm0WeTDM5ghfoZtS72KO9ZnzgQUCLkRO6XQhRi06g%2BgrZ%2BGHo78OCcCEgTv%2BHV0Bd%2FqEQJQjG4LfvoXXw%3D%3D

HTTP Response

200
212.82.100.137:80

http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

620 B
649 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

634 B
663 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=contact+email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.0kB
1.4kB
8
5

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

HTTP Response

301

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

HTTP Response

301
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjCwb_gHn1qD6hDlfkoQxrd82pYPWUaxCoz11mlLs4DOCBzgxF7iCEOycyNPp2GmbnYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjCwb_gHn1qD6hDlfkoQxrd82pYPWUaxCoz11mlLs4DOCBzgxF7iCEOycyNPp2GmbnYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

622 B
651 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

301
212.82.100.137:80

http://search.yahoo.com/search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

633 B
662 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjC-GIUWNiokMxhrTax_qoiDBcdEeGbfHA7tOVJOjmqfHGZ6mTlB-mWpXPfCyjl4ViQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.5kB
8.3kB
16
12

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+cs.stanford.edu

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=acm.org+mailto&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjC-GIUWNiokMxhrTax_qoiDBcdEeGbfHA7tOVJOjmqfHGZ6mTlB-mWpXPfCyjl4ViQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=alumni.caltech.edu+reply&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

500
212.82.100.137:443

https://search.yahoo.com/search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=contact+email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

HTTP Response

404
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu&hl=en&q=EgS117BTGOeUjrwGIjCHEZa9LLsG1FM0dH9C0P0_qsrpL6k0W5udWZs9COuJvbsaYxt6rp-RgK8vYREKAVoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bcs.stanford.edu&hl=en&q=EgS117BTGOeUjrwGIjCHEZa9LLsG1FM0dH9C0P0_qsrpL6k0W5udWZs9COuJvbsaYxt6rp-RgK8vYREKAVoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.2kB
17.3kB
25
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+cs.stanford.edu

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

626 B
655 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

626 B
655 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

580 B
655 B
5
5

HTTP Request

GET http://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=cs.stanford.edu+mailto&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjBtrc-wY0tG_hgPkoVMmgsiOAj4TzxqyhQ7ap_Q3wjHMzhV952d_-zfeOcPtznVEKAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjBtrc-wY0tG_hgPkoVMmgsiOAj4TzxqyhQ7ap_Q3wjHMzhV952d_-zfeOcPtznVEKAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
2.1kB
10
6

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto

HTTP Response

301

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

301

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+mailto

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

629 B
658 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=e-mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

611 B
640 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=mail+gzip.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjDgbg6y-_pguKQS8jwmdYvxli4oN6WLdWy7rDxcaBFkPkUSjoo1KkfshQT7PSyOL4UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

897 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dacm.org%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOeUjrwGIjDgbg6y-_pguKQS8jwmdYvxli4oN6WLdWy7rDxcaBFkPkUSjoo1KkfshQT7PSyOL4UyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjDBB45xkmTnOw6nuOroeno1v3TZYa3d813kf3Ssisbl5gA1Y_kszxgtEyUXjhAiIfcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOiUjrwGIjDBB45xkmTnOw6nuOroeno1v3TZYa3d813kf3Ssisbl5gA1Y_kszxgtEyUXjhAiIfcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

625 B
654 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
212.82.100.137:80

http://www.altavista.com/web/results?q=mailto+m-ou.se&kgs=0&kls=0

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

3.0kB
3.2kB
16
9

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+acm.org&kgs=0&kls=0&nbq=50

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=gzip.org+email&kgs=0&kls=0

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=email+alumni.caltech.edu&kgs=0&kls=0&nbq=50

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=e-mail+cs.stanford.edu&kgs=0&kls=0

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=contact+mail+cs.stanford.edu&kgs=0&kls=0&nbq=50

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=e-mail+alumni.caltech.edu&kgs=0&kls=0&nbq=50

HTTP Response

500

HTTP Request

GET http://www.altavista.com/web/results?q=mailto+m-ou.se&kgs=0&kls=0

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Be-mail&hl=en&q=EgS117BTGOmUjrwGIjDkvMy_MWxyHg41K4aTztuj6h02vwfgOWK3HBq7aN4sTqZBq_yF2OafLrAeSA-Jt-YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.3kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+e-mail

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Be-mail&hl=en&q=EgS117BTGOmUjrwGIjDkvMy_MWxyHg41K4aTztuj6h02vwfgOWK3HBq7aN4sTqZBq_yF2OafLrAeSA-Jt-YyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

625 B
654 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.2kB
17.3kB
25
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

617 B
646 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

626 B
655 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.2kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+e-mail+cs.stanford.edu

HTTP Response

404
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=reply+cs.stanford.edu

HTTP Response

404
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjC2sRQx7rvhv_aZjndZUA8B70HtLtJD8SVtkRs0se1zsFv_diNmUCLZW7ZXM5_cU5EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.3kB
8.4kB
17
14

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+acm.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=email+gzip.org&num=20

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjC2sRQx7rvhv_aZjndZUA8B70HtLtJD8SVtkRs0se1zsFv_diNmUCLZW7ZXM5_cU5EyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
647 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=mailto+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOmUjrwGIjC5Wi7U7UG-OKkjO8Gk57EXymIl6HYkowl8b9v2i2E6wWJtsf3QDiRgtufxy6j3H44yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+acm.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOmUjrwGIjC5Wi7U7UG-OKkjO8Gk57EXymIl6HYkowl8b9v2i2E6wWJtsf3QDiRgtufxy6j3H44yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
5.7kB
17
12

HTTP Request

GET https://search.yahoo.com/search?p=e-mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOqUjrwGIjB188IKRf9Mrr_PWRhb7AA8VMgrDHp5Wo7udCw3ZDH7zDA7vH-QoYl4ynBhZPseVaIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+e-mail+gzip.org&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bacm.org%26num%3D100&hl=en&q=EgS117BTGOqUjrwGIjB188IKRf9Mrr_PWRhb7AA8VMgrDHp5Wo7udCw3ZDH7zDA7vH-QoYl4ynBhZPseVaIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
647 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
790 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

301
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjBaWZ3psaosEX9XZfNICMM5SC_0Y93lB_d1RbxrjXbC8lhJIVCU4SZXeWs3-ZIMZUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mailto&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Be-mail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGOqUjrwGIjBaWZ3psaosEX9XZfNICMM5SC_0Y93lB_d1RbxrjXbC8lhJIVCU4SZXeWs3-ZIMZUsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjCBqaMRC359i3wCkUjuUFLDjXctlsOCo2GnJawof6Ok-KNcckcdvgED6CcXs2MWsAEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.8kB
6.9kB
14
11

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+mailto&num=20

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjCBqaMRC359i3wCkUjuUFLDjXctlsOCo2GnJawof6Ok-KNcckcdvgED6CcXs2MWsAEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
790 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+cs.stanford.edu

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

617 B
646 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=email+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=m-ou.se+contact+e-mail

HTTP Response

404
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGOqUjrwGIjCqzsN_TDUH6MMqFvM2MqLbN9Lm3TQitQYMVE7lCmbvlDaq-P8gNsNXId7pwNMhwJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

896 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Demail%2Bgzip.org%26num%3D20&hl=en&q=EgS117BTGOqUjrwGIjCqzsN_TDUH6MMqFvM2MqLbN9Lm3TQitQYMVE7lCmbvlDaq-P8gNsNXId7pwNMhwJwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjDlxZ-hfdtgyFiC3K5r3QMVZcREJDgdy__TF_dS_KocUsg4j2zTgPdfnNhVXjGsBrQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

905 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjDlxZ-hfdtgyFiC3K5r3QMVZcREJDgdy__TF_dS_KocUsg4j2zTgPdfnNhVXjGsBrQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
647 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D20&hl=en&q=EgS117BTGOuUjrwGIjDGViI-3dxeTdaDYQ2Oj-gPHs4uJvZX0iCveIunN2pPp23L1gJURY7Nn6SeqsHTZLEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

897 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Bmailto%26num%3D20&hl=en&q=EgS117BTGOuUjrwGIjDGViI-3dxeTdaDYQ2Oj-gPHs4uJvZX0iCveIunN2pPp23L1gJURY7Nn6SeqsHTZLEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=e-mail+m-ou.se&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjBfGqfcA6HlIXupQzMJXLUI_JMrrypl0pUGx4k1FitAVsmc9E9vDI7vG6BuHHroZPYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGOuUjrwGIjBfGqfcA6HlIXupQzMJXLUI_JMrrypl0pUGx4k1FitAVsmc9E9vDI7vG6BuHHroZPYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

627 B
656 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
790 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

HTTP Response

301
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOyUjrwGIjAMT5c_R5pPhmm-UjCOhFVxPY7KUeCt_ZVaq9hOYgGcmxEq0Z7n0Pn1noOjNHFoTAoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=burtleburtle.net+mailto&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dburtleburtle.net%2Bmailto%26num%3D100&hl=en&q=EgS117BTGOyUjrwGIjAMT5c_R5pPhmm-UjCOhFVxPY7KUeCt_ZVaq9hOYgGcmxEq0Z7n0Pn1noOjNHFoTAoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.2kB
17.3kB
25
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+cs.stanford.edu

HTTP Response

404
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.2kB
17.3kB
25
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

HTTP Response

404
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGOyUjrwGIjCgDZV69tyjdmM28IA-csep_yIFbBvqMChXgYlexw06Vr66wYwChCDecfwlHwlm8C4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGOyUjrwGIjCgDZV69tyjdmM28IA-csep_yIFbBvqMChXgYlexw06Vr66wYwChCDecfwlHwlm8C4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

570 B
645 B
5
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mail+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

625 B
654 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

611 B
776 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

627 B
656 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=e-mail+gzip.org

HTTP Response

404
212.82.100.137:443

https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=mail+alumni.caltech.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org&hl=en&q=EgS117BTGO2UjrwGIjC0UM0pqJhM9tW_4cWqe6a1fy4FBIhIPJaRNp5BBbYAFwaOKEX6NzIIP0OdnD29kEsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.8kB
6.8kB
14
11

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=e-mail+acm.org

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+alumni.caltech.edu&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3De-mail%2Bacm.org&hl=en&q=EgS117BTGO2UjrwGIjC0UM0pqJhM9tW_4cWqe6a1fy4FBIhIPJaRNp5BBbYAFwaOKEX6NzIIP0OdnD29kEsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjD57r4cNQuHOMPgdsW0R7GM5cNKdQ4kqkoo3ZmgvGt7I6N15YUTLfMQJQcLR0P88UMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.8kB
10.0kB
20
17

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+burtleburtle.net&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+mail&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mail+gzip.org&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjD57r4cNQuHOMPgdsW0R7GM5cNKdQ4kqkoo3ZmgvGt7I6N15YUTLfMQJQcLR0P88UMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
790 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=burtleburtle.net+email

HTTP Response

404
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mailto+acm.org

HTTP Response

404
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjB1h11rn_9zfBptRblE2CFjzFAEvRXfEyzYIeMiT8aebLzwCZ-ug_5ccVsJvYlWlOkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

906 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjB1h11rn_9zfBptRblE2CFjzFAEvRXfEyzYIeMiT8aebLzwCZ-ug_5ccVsJvYlWlOkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjCPFJvRe7-_vhHr09jKXuWOp2eUlrmPAM7gp8epx6nKo1hE1nXv9M1PuVCrlg8SsXQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

906 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Balumni.caltech.edu%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjCPFJvRe7-_vhHr09jKXuWOp2eUlrmPAM7gp8epx6nKo1hE1nXv9M1PuVCrlg8SsXQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGO2UjrwGIjD3Bo0SFfsqxFS_3InL6yX2XfHs2HsSxeAnoo33h1wwF2bIIvxa4MZyBNp2UFwgnf8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

905 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmailto%2Bburtleburtle.net%26num%3D50&hl=en&q=EgS117BTGO2UjrwGIjD3Bo0SFfsqxFS_3InL6yX2XfHs2HsSxeAnoo33h1wwF2bIIvxa4MZyBNp2UFwgnf8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:80

http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

618 B
647 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjD4wC-nsKFrtPrpWxdketcdyeOrH1NkwkJ_khUPUxfBcuYNbOyWzDfV_D-gEBWMLZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=mailto+m-ou.se&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bmail%26num%3D100&hl=en&q=EgS117BTGO2UjrwGIjD4wC-nsKFrtPrpWxdketcdyeOrH1NkwkJ_khUPUxfBcuYNbOyWzDfV_D-gEBWMLZ0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
212.82.100.137:443

https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mailto+acm.org&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

617 B
646 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=acm.org+e-mail&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

619 B
648 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.3kB
15
11

HTTP Request

GET https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Breply%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjC5jibfTcG7M4pMaLLy28WkWX3TmK6o-n-7vuvMmAMKTlgfsyWqRgheYpPi39yi5I8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=gzip.org+reply&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dgzip.org%2Breply%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjC5jibfTcG7M4pMaLLy28WkWX3TmK6o-n-7vuvMmAMKTlgfsyWqRgheYpPi39yi5I8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

624 B
802 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

HTTP Response

301
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.0kB
1.5kB
8
5

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

HTTP Response

301

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

HTTP Response

301
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjBbir_8m8rGnW62lch32viHsNaEGgcbd_XlYry8HxFihkW4p-dOH28xZXfBFJN5znUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

896 B
3.8kB
8
5

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dmail%2Bgzip.org%26num%3D100&hl=en&q=EgS117BTGO6UjrwGIjBbir_8m8rGnW62lch32viHsNaEGgcbd_XlYry8HxFihkW4p-dOH28xZXfBFJN5znUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.6kB
17.6kB
26
19

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=contact+mail+cs.stanford.edu

HTTP Response

404
212.82.100.137:80

http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

623 B
652 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+e-mail

HTTP Response

404
212.82.100.137:443

https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=mail+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=50

HTTP Response

500
212.82.100.137:80

http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

626 B
655 B
6
5

HTTP Request

GET http://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

301
212.82.100.137:443

https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.5kB
6.2kB
15
10

HTTP Request

GET https://search.yahoo.com/search?p=email+burtleburtle.net&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDdXAqh8H1rZ5YShU0GfjiqF08zGJx6G6QqdLatUPNejXYPfRVQUblDOmoXe80nlokyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=contact+mail+gzip.org&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcontact%2Bmail%2Bgzip.org%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDdXAqh8H1rZ5YShU0GfjiqF08zGJx6G6QqdLatUPNejXYPfRVQUblDOmoXe80nlokyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDOAfHf_OgN2O2wWwS2cs_SypS30PAVizWzv6_nNgrstp4_8RRIldqIIMLpzwC8oNIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.4kB
12
9

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=cs.stanford.edu+email&num=50

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dcs.stanford.edu%2Bemail%26num%3D50&hl=en&q=EgS117BTGO-UjrwGIjDOAfHf_OgN2O2wWwS2cs_SypS30PAVizWzv6_nNgrstp4_8RRIldqIIMLpzwC8oNIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
209.202.254.10:80

http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

610 B
774 B
6
4

HTTP Request

GET http://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

HTTP Response

301
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.7kB
16.8kB
22
17

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=mail+burtleburtle.net

HTTP Response

404
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=cs.stanford.edu+mailto

HTTP Response

404
212.82.100.137:443

https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.6kB
6.3kB
16
11

HTTP Request

GET https://search.yahoo.com/search?p=email+cs.stanford.edu&ei=UTF-8&fr=fp-tab-web-t&cop=mss&tab=&n=100

HTTP Response

500
142.250.187.196:80

http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO-UjrwGIjCmw8RYT_I3tAYZHsQoyltUdzg0mFkhugqXb-tnXvN65grBjxsSuMrHBUNhD7hI3BMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

1.4kB
5.3kB
11
8

HTTP Request

GET http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=reply+m-ou.se&num=100

HTTP Response

302

HTTP Request

GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fhl%3Den%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dreply%2Bm-ou.se%26num%3D100&hl=en&q=EgS117BTGO-UjrwGIjCmw8RYT_I3tAYZHsQoyltUdzg0mFkhugqXb-tnXvN65grBjxsSuMrHBUNhD7hI3BMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429
171.64.64.64:25

cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

260 B
5
209.202.254.10:443

https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

tls, http

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

2.1kB
17.2kB
24
18

HTTP Request

GET https://search.lycos.com/default.asp?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

HTTP Response

302

HTTP Request

GET https://search.lycos.com/default.asp/?lpv=1&loc=searchhp&tab=web&query=gzip.org+email

HTTP Response

404
10.135.150.237:1034

services.exe

208 B
4
142.251.9.27:25

aspmx3.googlemail.com

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

156 B
3
104.17.78.30:25

acm.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

156 B
3
171.64.64.25:25

smtp1.cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

156 B
3
171.64.64.25:25

smtp1.cs.stanford.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

156 B
3
65.254.227.224:25

burtleburtle.net

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

156 B
3
204.13.239.180:25

alumni.caltech.edu

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

156 B
3
85.187.148.2:25

gzip.org

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

156 B
3

8.8.8.8:53

8.8.8.8.in-addr.arpa

dns

66 B
90 B
1
1

DNS Request

8.8.8.8.in-addr.arpa
8.8.8.8:53

104.219.191.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

104.219.191.52.in-addr.arpa
8.8.8.8:53

180.129.81.91.in-addr.arpa

dns

72 B
147 B
1
1

DNS Request

180.129.81.91.in-addr.arpa
8.8.8.8:53

68.32.126.40.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

68.32.126.40.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

200.163.202.172.in-addr.arpa

dns

74 B
160 B
1
1

DNS Request

200.163.202.172.in-addr.arpa
8.8.8.8:53

241.42.69.40.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

241.42.69.40.in-addr.arpa
8.8.8.8:53

172.210.232.199.in-addr.arpa

dns

74 B
128 B
1
1

DNS Request

172.210.232.199.in-addr.arpa
8.8.8.8:53

m-ou.se

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

53 B
232 B
1
1

DNS Request

m-ou.se
8.8.8.8:53

aspmx4.googlemail.com

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

67 B
83 B
1
1

DNS Request

aspmx4.googlemail.com

DNS Response

142.250.150.27
8.8.8.8:53

acm.org

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

53 B
87 B
1
1

DNS Request

acm.org
8.8.8.8:53

mail.mailroute.net

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

64 B
96 B
1
1

DNS Request

mail.mailroute.net

DNS Response

199.89.1.120

199.89.3.120
8.8.8.8:53

cs.stanford.edu

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

61 B
121 B
1
1

DNS Request

cs.stanford.edu
8.8.8.8:53

cs.stanford.edu

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

61 B
77 B
1
1

DNS Request

cs.stanford.edu

DNS Response

171.64.64.64
8.8.8.8:53

burtleburtle.net

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

62 B
81 B
1
1

DNS Request

burtleburtle.net
8.8.8.8:53

mx.burtleburtle.net

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

65 B
113 B
1
1

DNS Request

mx.burtleburtle.net

DNS Response

65.254.254.52

65.254.254.50

65.254.254.51
8.8.8.8:53

alumni.caltech.edu

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

64 B
126 B
1
1

DNS Request

alumni.caltech.edu
8.8.8.8:53

alumni-caltech-edu.mail.protection.outlook.com

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

92 B
156 B
1
1

DNS Request

alumni-caltech-edu.mail.protection.outlook.com

DNS Response

52.101.11.13

52.101.11.2

52.101.9.24

52.101.42.18
8.8.8.8:53

gzip.org

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

54 B
70 B
1
1

DNS Request

gzip.org
8.8.8.8:53

gzip.org

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

54 B
70 B
1
1

DNS Request

gzip.org

DNS Response

85.187.148.2
8.8.8.8:53

www.google.com

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

60 B
76 B
1
1

DNS Request

www.google.com

DNS Response

142.250.187.196
8.8.8.8:53

www.altavista.com

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

63 B
157 B
1
1

DNS Request

www.altavista.com

DNS Response

212.82.100.137
8.8.8.8:53

31.243.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

31.243.111.52.in-addr.arpa
8.8.8.8:53

196.187.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

196.187.250.142.in-addr.arpa
8.8.8.8:53

search.lycos.com

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

62 B
109 B
1
1

DNS Request

search.lycos.com

DNS Response

209.202.254.10
8.8.8.8:53

r11.o.lencr.org

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

61 B
160 B
1
1

DNS Request

r11.o.lencr.org

DNS Response

2.22.144.149

2.22.144.142
8.8.8.8:53

search.yahoo.com

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

62 B
121 B
1
1

DNS Request

search.yahoo.com

DNS Response

212.82.100.137
8.8.8.8:53

137.100.82.212.in-addr.arpa

dns

73 B
119 B
1
1

DNS Request

137.100.82.212.in-addr.arpa
8.8.8.8:53

10.254.202.209.in-addr.arpa

dns

73 B
113 B
1
1

DNS Request

10.254.202.209.in-addr.arpa
8.8.8.8:53

61.45.26.184.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

61.45.26.184.in-addr.arpa
8.8.8.8:53

149.144.22.2.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

149.144.22.2.in-addr.arpa
8.8.8.8:53

aspmx3.googlemail.com

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

67 B
83 B
1
1

DNS Request

aspmx3.googlemail.com

DNS Response

142.251.9.27
8.8.8.8:53

acm.org

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

53 B
85 B
1
1

DNS Request

acm.org

DNS Response

104.17.78.30

104.17.79.30
8.8.8.8:53

smtp1.cs.stanford.edu

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

67 B
83 B
1
1

DNS Request

smtp1.cs.stanford.edu

DNS Response

171.64.64.25
8.8.8.8:53

burtleburtle.net

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

62 B
78 B
1
1

DNS Request

burtleburtle.net

DNS Response

65.254.227.224
8.8.8.8:53

alumni.caltech.edu

dns

34d562415caac06b0c5d89659e4ea48deb7ba3b2cf9c815770be3722f3732487N.exe

64 B
80 B
1
1

DNS Request

alumni.caltech.edu

DNS Response

204.13.239.180

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0BHOTC3C\search[1].htm

Filesize
25B

MD5
8ba61a16b71609a08bfa35bc213fce49

SHA1
8374dddcc6b2ede14b0ea00a5870a11b57ced33f

SHA256
6aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1

SHA512
5855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmp1F77.tmp

Filesize
29KB

MD5
f8feda7736c6fc0f0ab55946ca4b5173

SHA1
0783f97d110ed21152167075bb356fec6796bbca

SHA256
2d42ddd876e5412515bb60dcd71d9dbea94490c5fd56273174dbd3b30340a06a

SHA512
f7ba26d48dae50b4232ef36330d30078c595c02102852c0802eafd3aad149c09efe3f6a626a765e7d39af6186f27c917a7ed77c933020df84b90b6e15437ca35

Download Submit
C:\Users\Admin\AppData\Local\Temp\zincite.log

Filesize
320B

MD5
c77be9fbe728236ac7b52aabb4515704

SHA1
bae217c5511849902cddf608817b654ecfae3dea

SHA256
e6c5ccadb620587db4b021f8fdf9de76e95cb6189151d114ae920ae7ab97de27

SHA512
fcfabf3308d03758c83696a7bdbfc4e9f8bd466beea84a95001c67642ef3d643e98440cd55ab12b61927f12f2840ac316daef0861e752500838ac26378a945c7

Download Submit
C:\Windows\services.exe

Filesize
8KB

MD5
b0fe74719b1b647e2056641931907f4a

SHA1
e858c206d2d1542a79936cb00d85da853bfc95e2

SHA256
bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c

SHA512
9c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2

Download Submit
memory/3664-44-0x0000000000500000-0x0000000000510200-memory.dmp

Filesize
64KB

Download
memory/3664-178-0x0000000000500000-0x0000000000510200-memory.dmp

Filesize
64KB

Download
memory/3664-13-0x0000000000500000-0x0000000000510200-memory.dmp

Filesize
64KB

Download
memory/3664-159-0x0000000000500000-0x0000000000510200-memory.dmp

Filesize
64KB

Download
memory/3664-0-0x0000000000500000-0x0000000000510200-memory.dmp

Filesize
64KB

Download
memory/3664-49-0x0000000000500000-0x0000000000510200-memory.dmp

Filesize
64KB

Download
memory/4716-16-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-40-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-38-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-45-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-50-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-33-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-28-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-26-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-21-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-15-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-160-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-5-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4716-179-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request