Advertisement
Kafeine

Kovter - CEF instructions - 2018-03-12

Mar 12th, 2018
385
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.20 KB | None | 0 0
  1. 9c9206e2f0adab363add6eacf89b3a7630b46d9292702e00ba4d7a904d7d6873390a834ababf096c7944363a020RESP:OK|http://192.133.139.25/feedrs4/click?feed_id=11620&sub_id=0&cid=180c07c316289988ec5746c5b2effe4f-1&spoof_domain=www.viceland.com&land_ip=192.133.141.209|<>|http://www.viceland.com/|<>|2:128:87:51:50:71:59:117:54:50:76:66:53:64:58:61:58:|od_od:www.viceland.com:od_od|fd_fd:192.133.141.209:fd_fd||scrl_cfg:180000-2260-51:scrl_cfg|fcs_cfg:3000-2231:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:0:scrtype|setcpu:1:setcpu|veryfast:109:veryfast|lowl_c:0:lowl_c|minms:38:minms|hst_count:3:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m|hos_crm:6.1:hos_crm|hfont_crm:Sitka Subheading.Courier New.Courier New:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.40 Safari/537.36:setua|scr_data:1920x1080-1920x1040-0-5-0-1.00:scr_data|spf_c_dta:3:spf_c_dta|spf_s_dt:166:2:0.01:44100:spf_s_dt|srtds:,@d:1:0,c:2:1,g:3:2,g:4:0,@,#9a1c10c3908cd8339767e2f261fdb035:srtds|spf_r_dt:64.5.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNqtkcFqwzAMhl/FhxzaoQVLchz71kDaLDB6KGXXEpLAAl1b0jK2t5+cLOvKDrsUg/zbln99tpooWxfPSzUrD5d2P9vM1VOuir46vXb1Wa2qt27/qfKub+sL5375od7PO95pdRqmeaQBIYEUHJAHDyhrBCRABjSACRABayADJNoCI5ADpsihpzgEwJgSC4MMWSw2pIMkHHeZvOdBRqOTWTw+NBP4+qXMy0wV7erY160qtiol/YOMGIiTkTiZiM3AbP+l5lvw9JsdLTsTD1HoUUvSuJChvQ1XWcws/DqyRrtRCoGYsV5IDXlWqCvlrrVcRNq4YOJguv0nxjdW19/ItqXaVE17PIRGMml97ebd2niPBn4BZXCNAA==:gl_dat|jsshh:553000000:jsshh|mrysf:2.0:mrysf|sltd:-4385:sltd|sbyd:0:sbyd||force_use_cont_id::21::force_use_cont_id||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  2. http://192.133.139.25/feedrs4/click?feed_id=11620&sub_id=0&cid=180c07c316289988ec5746c5b2effe4f-2&spoof_domain=www.hookandbullet.com&land_ip=173.214.244.3|<>|http://www.hookandbullet.com/|<>|2:167:67:59:51:68:101:62:64:50:63:50:66:70:64:87:107:|od_od:www.hookandbullet.com:od_od|fd_fd:173.214.244.3:fd_fd||scrl_cfg:180000-6521-68:scrl_cfg|fcs_cfg:3000-2166:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:2:scrtype|setcpu:1:setcpu|veryfast:109:veryfast|lowl_c:0:lowl_c|minms:34:minms|hst_count:18:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m|hos_crm:10.0:hos_crm|hfont_crm:Times New Roman Greek.Sitka Banner.Cambria:hfont_crm|flash_p:plugins\pepflashplayer32_27_0_0_187.dll:flash_p|flash_v:27.0.0.187:flash_v|setua:Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1920x1080-1920x1040-1-5-0-1.50:scr_data|spf_c_dta:10:spf_c_dta|spf_s_dt:186:2:0.01:44100:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:5:0,c:6:1,g:7:0,@g:4:2,#0c14b764d17e2d54fb0f5f91f7414c97:srtds|spf_r_dt:25.55.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNrlkkFLxDAQhf9KDj3syqNkJmma3ixUa0H3sIp4K0sbsCC7S7v4+522lHVV8OJNApOZSea98JE2yjfl/Y1aVftTeFtt1+quUGW/O752zaCKrg/NyRRE6n2obU3qOG3rSINgkSCFgwdnyEDSIxCDDMiCEjDDaLABW7CUDobAKdjDcOQp43gMoJi0XJlzWJ25cc5I4XA+cVb7KRNz0TH6WuSNuIulOJ1tfJRIS14ga5q8DPFnjat2AbB5rooqV2W4PfRNUOXTi0pT/QVBUusRgWx/goCc8Tae4gJhLuxPFOajCcOU/s6BtfWjiMcy/S3GF1JnHPlDoba7Nhz2449IUq3VY+i7MPwzIh8u9KsW:gl_dat|jsshh:894000000:jsshh|mrysf:4.0:mrysf|sltd:4254:sltd|sbyd:0:sbyd||force_use_cont_id::33::force_use_cont_id||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  3. http://192.133.139.25/feedrs4/click?feed_id=11620&sub_id=0&cid=180c07c316289988ec5746c5b2effe4f-3&spoof_domain=www.consumerreports.org&land_ip=173.214.244.3|<>|http://www.consumerreports.org/|<>|2:67:51:74:92:53:51:78:67:67:79:103:67:52:63:106:94:|od_od:www.consumerreports.org:od_od|fd_fd:173.214.244.3:fd_fd||scrl_cfg:180000-18846-56:scrl_cfg|fcs_cfg:3000-1441:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:1:scrtype|setcpu:1:setcpu|veryfast:89:veryfast|lowl_c:0:lowl_c|minms:50:minms|hst_count:13:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m|hos_crm:6.1:hos_crm|hfont_crm:Arial Black.Arial CE.Courier New:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1920x1080-1920x1040-1-5-0-1.00:scr_data|spf_c_dta:8:spf_c_dta|spf_s_dt:33:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,g:4:0,g:5:0,g:6:0,@d:8:0,c:9:1,g:10:0,g:11:3,@g:7:2,#a5eed393cb956a30ee51ec9f77958e9d:srtds|spf_r_dt:97.31.1:spf_r_dt|spf_cc_dt:2:spf_cc_dt|gl_dat:packeNrlkktrwkAQx7/KHHLQMg3z2Ky7NwOxaaDxIFJ6E2sDBiSKhj6+fXdNxZYe+gHKwuw8dv4z/NguyeflwwxGVdc3u9FiDPcFlMf1YdtuTmCICIr22Gx6LZjh9bTKVgSH8zVOCBkNZjhBiw7Fo0cOOUYWZEU2yBmKoBKKohiUEFpURpmgOFRJ2Koz6dkip0zh0RCEQ97GVg1iFr+VrCE3uGGDIKY0DTM0rBDmhnHXWS4RMi6KOLx0/7LpD6mb7kJk/lgVVQ5lc7c/bhool0+QWar/LY+8LqB2jkp4a/st5MsK6v1zu2v7D1isX5p9F/+Okez6ZfzsPTLSgZFeGEVCf/H5WjgycewljSYQkSygjW6saxAQiq7wkFXxXs9uMmiY6e0nzOmhiw==:gl_dat|jsshh:2190000000:jsshh|mrysf:8.0:mrysf|sltd:4450:sltd|sbyd:213:sbyd||force_use_cont_id::20::force_use_cont_id||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  4. http://192.133.139.25/feedrs4/click?feed_id=11620&sub_id=0&cid=180c07c316289988ec5746c5b2effe4f-4&spoof_domain=www.cincinnati.com&land_ip=5.45.79.34|<>|http://www.cincinnati.com/|<>|2:71:53:57:53:112:62:55:70:101:80:54:85:53:56:52:143:|od_od:www.cincinnati.com:od_od|fd_fd:5.45.79.34:fd_fd||scrl_cfg:180000-11240-88:scrl_cfg|fcs_cfg:3000-2718:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:2:scrtype|setcpu:1:setcpu|veryfast:94:veryfast|lowl_c:0:lowl_c|minms:31:minms|hst_count:5:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m|hos_crm:6.1:hos_crm|hfont_crm:Symbol.Microsoft YaHei UI.Microsoft YaHei UI Light:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1600x900-1600x860-1-5-0-1.00:scr_data|spf_c_dta:2:spf_c_dta|spf_s_dt:61:2:0.01:44100:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:4:0,c:5:1,g:6:0,@,#b19a6451786994db4de2ad7bf602e55a:srtds|spf_r_dt:40.66.0:spf_r_dt|spf_cc_dt:2:spf_cc_dt|gl_dat:packeNrlkcFqwzAMhl/Fhxza8S9YkuPatxbSdYWthxZ2LSUxLDDakpSxx5+dtKRljzAMtmVLv6RPdbbYrN6WarI+XsLXZDtVr6VatYfzZ1N1ylitVdm0obpISaS+u32x1+rcH9NMg2BQYAYLB/bwoPhGIAYJyIAKMEM0WMAGHE0LIfAM7CCckRVn8n4H5aSj02DEpb1NoRLFLO6+rNFuuMYKopjoecwhsYSYN6Ybc7mMtXFJxOEW/WfPH6Se6huRzce6XC/UKryc2iooS4XeLdVxsIyMYPzyJ5GRgYzcyCQuj1Tkjse1wMQgNZr33VLuyPPQeXKQFGsR3ZmuPNh76a/ZIGLmz2PJi/dSbQ91OB3TGG2a3i60Tej+2RB/AacXnhg=:gl_dat|jsshh:894000000:jsshh|mrysf:4.0:mrysf|sltd:1324:sltd|sbyd:0:sbyd||force_use_cont_id::23::force_use_cont_id||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  5. http://192.133.139.25/feedrs4/click?feed_id=11620&sub_id=0&cid=180c07c316289988ec5746c5b2effe4f-5&spoof_domain=www.informationweek.com&land_ip=5.45.79.34|<>|http://www.informationweek.com/|<>|3:51:61:91:61:66:81:85:78:55:72:58:60:57:63:72:61:|od_od:www.informationweek.com:od_od|fd_fd:5.45.79.34:fd_fd||scrl_cfg:180000-14362-81:scrl_cfg|fcs_cfg:3000-2086:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:1:scrtype|setcpu:1:setcpu|veryfast:100:veryfast|lowl_c:0:lowl_c|minms:25:minms|hst_count:2:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m|hos_crm:10.0:hos_crm|hfont_crm:Segoe MDL2 Assets.Sitka Display.Arial TUR:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1920x1080-1920x1040-1-5-0-1.00:scr_data|spf_c_dta:11:spf_c_dta|spf_s_dt:80:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:6:0,c:7:1,g:8:0,@g:4:2,g:5:2,#1d1dee116f9eda303777a57230bd2311:srtds|spf_r_dt:63.24.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNrdUsFqwzAM/RUfcmjHI0iy4zi3BTK6wJpDB72G0gVWGFlpy75/ikPIug22w07DIEuy9Z7fw31SNquHO7Oo+0v3stgszX1lVqfd8fmwPxtLRKY6nLr9xVbM5u3cupbNMW7LhMBwyJDDI0AKFGDtMVjAFuzAGURgCWIhDqKlh2VIDgmwkgQuJB0COGXSK2MOR4Uf5qwWHvOJdxRipuSKY+lW4a2yK6UyzTQhybSlL9AVJ69D+hHjpp9caLZ1VZem2T6aTIjWn8RnLQ3idfsT8extcGmMk/yxcN/pH4+iATH92QEhFwaQgGn6S0yvoGYjynVlNrun7rUfPoR3+X/xwv3Wi3dbJaeZ:gl_dat|jsshh:2190000000:jsshh|mrysf:8.0:mrysf|sltd:7972:sltd|sbyd:96:sbyd||force_use_cont_id::15::force_use_cont_id||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  6. threads:2:threads|<>|
  7. logcpu:all:logcpu|<>|
  8. afkthr:6:afkthr|<>|
  9. hardconfig:25:85:20:hardconfig|<>|
  10. outlimit:3:outlimit|<>|
  11. nolimit:1:nolimit|<>|
  12. nsleep:10:nsleep|<>|
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement