Advertisement
Kafeine

KovterAdfraudInstruction_2018-01-21

Jan 21st, 2018
374
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.88 KB | None | 0 0
  1. 14bb3d0c55dd9fa02dd2258b4e335a0023e0933417134d244e457ce39258bbd9fd1330e53cea43RESP:OK|http://washingtonexaminer.com/?p=1175221|<>|http://washingtonexaminer.com/|<>|4:59:63:68:62:77:63:97:78:50:56:101:65:72:70:114:67:|od_od:washingtonexaminer.com:od_od|fd_fd:85.10.203.133:fd_fd||scrl_cfg:1000-2457-66:scrl_cfg|fcs_cfg:30000-15320:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:0:scrtype|setcpu:1:setcpu|veryfast:94:veryfast|lowl_c:0:lowl_c|minms:38:minms|hst_count:2:hst_count|check_jscmd:1:check_jscmd|doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::155::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Sitka Small.Nirmala UI Semilight.Nirmala UI Semilight:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1440x900-1440x860-0-5-0-1.00:scr_data|spf_c_dta:11:spf_c_dta|spf_s_dt:83:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:5:0,c:6:1,g:7:0,@g:4:2,#93c9950e589e0dc945ac8d5c2f5af8fd:srtds|spf_r_dt:46.35.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNrlUstqw0AM/BUdfLDLYCTterO+1eDWNdQ5mFB6C8E1NFCc4IR+f5WEkJZ+QljQWzNi2Cmpls3rE6XtdBy/0j6jl5qaebP/3A4H8sxM9XYeh6OrRej7sC7WTPuzyxKGwKPAAgERWqKEWE0gCnEQDymgCsdQB/VQSwOcQBfQCKeJBBd9fraQXNiGLok9LsNp1RlYwK9W8BwvoV1gYI4fjcPZCcZrdDeumCj7eAKJuG7/s/kfqIfpqsjyra3biprxeTcPIzWrdyoDd3erR9XV1G8+xt2UrrqM+sXtn9yXJD86/a+V:gl_dat|jsshh:2190000000:jsshh|mrysf:8.0:mrysf|sltd:-1307:sltd|sbyd:187:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  2. http://girlgeniusonline.com/?p=1161535|<>|http://girlgeniusonline.com/|<>|2:68:88:126:101:61:61:81:136:62:112:96:95:66:61:86:117:|od_od:girlgeniusonline.com:od_od|fd_fd:136.243.48.209:fd_fd||scrl_cfg:180000-3977-72:scrl_cfg|fcs_cfg:3000-1346:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:0:scrtype|setcpu:1:setcpu|veryfast:81:veryfast|lowl_c:0:lowl_c|minms:43:minms|hst_count:0:hst_count|check_jscmd:1:check_jscmd|doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::131::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Calibri Light.Segoe UI.Javanese Text:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1600x900-1600x860-1-5-0-1.00:scr_data|spf_c_dta:7:spf_c_dta|spf_s_dt:180:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:4:0,c:5:1,g:6:0,@,#835ec1840eca25e829d11fe719c8336a:srtds|spf_r_dt:31.29.0:spf_r_dt|spf_cc_dt:8:spf_cc_dt|gl_dat:packeNrlkcFqwzAMhl/Fhxza8S9IsuM4twW8dYGtsB7KbiU0gRVGW9Juzz8lWdeOXncbBlmyrF/iU5OU89nTvZlU22P7PllMzWM0s67ev23WB+M8kYmbrl0fbWQ2n4dVtiKzH65pQmA4ZMjhESAFCrC+MVjAFuzAGURgCWIhDqKhh2VIDgmwkrC3waWDBadM+mkM9FDh+1KrYh4XKe8ojK5OoGKW7rSH1RG0r7Y79wqJkAu9SMCp+sqmv6RumhOR+bKKVWlePuqm25mHV8PhioYbabg/ohG4kLQ3JxaD/41CBS5QDJmBRO/9gLg9z18+R7Oom3a37XeaZ57iP9vlFz3PnLg=:gl_dat|jsshh:2190000000:jsshh|mrysf:4.0:mrysf|sltd:3193:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  3. http://areavibes.com/?p=1172128|<>|http://areavibes.com/|<>|3:108:68:79:87:100:136:63:95:61:58:77:54:87:126:103:80:|od_od:areavibes.com:od_od|fd_fd:136.243.19.198:fd_fd||scrl_cfg:180000-4570-69:scrl_cfg|fcs_cfg:3000-1785:fcs_cfg||p_hhw:0:p_hhw|w_w_perc:5:w_w_perc|scrtype:1:scrtype|setcpu:1:setcpu|veryfast:116:veryfast|lowl_c:0:lowl_c|minms:27:minms|hst_count:18:hst_count|check_jscmd:1:check_jscmd|doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::126::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Malgun Gothic Semilight.Segoe UI Black.Segoe UI Black:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36:setua|scr_data:1920x1080-1920x1040-0-5-0-1.00:scr_data|spf_c_dta:11:spf_c_dta|spf_s_dt:192:2:0.01:96000:spf_s_dt|srtds:,@,@,#28bd2aff896452505603f934dbb9dd6f:srtds|spf_r_dt:59.66.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNrlUk1rwkAQ/St7yEHLI8zHZt3cGkibBqoHKcWbSLqgIFGi9Pd3okhbeum5ZeHtzO7Me8Nj+qxaNM8PbtL257SfLKfuqXbNsDlud93J1bshdWetmd37aV2syR0v1zQjMDwKzBAQISVKsL0xWMAK9uACIlCCKMRDLA1QhswgESoZB40+vyA4Z7Kia2KHyjC2qpEFfPkKnuI1tAmMTOneNNRGMF2T+9SKmZCPI0nErfsH5t+o7vqbGYvXtm4r16THw9Al17ysXBlo/m/9qOa1W27e0qEf1yMo0x/bEf9bTz4AxDOuqA==:gl_dat|jsshh:2190000000:jsshh|mrysf:4.0:mrysf|sltd:10607:sltd|sbyd:169:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  4. http://money.pl/?p=1176553|<>|http://money.pl/|<>|2:110:74:80:77:64:77:157:55:126:58:97:52:163:91:127:79:|od_od:money.pl:od_od|fd_fd:136.243.35.2:fd_fd||scrl_cfg:1000-18995-62:scrl_cfg|fcs_cfg:184912-104:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:1:scrtype|setcpu:1:setcpu|veryfast:87:veryfast|lowl_c:0:lowl_c|minms:50:minms|hst_count:2:hst_count|check_jscmd:1:check_jscmd|doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::152::force_use_cont_id|hos_crm:6.1:hos_crm|hfont_crm:Sitka Display.Courier New CYR.Courier New CYR:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.40 Safari/537.36:setua|scr_data:1920x1080-1920x1040-1-5-0-1.00:scr_data|spf_c_dta:5:spf_c_dta|spf_s_dt:126:2:0.01:48000:spf_s_dt|srtds:,@d:1:0,c:2:1,g:3:0,g:4:2,@,#5bf5f5ae9ed35935939938a7511b4fad:srtds|spf_r_dt:55.16.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNq1j09rwkAQxb/KHHLQMk13/iRmbw2NtYEiaKVXKWahQlExofjxOyZqtR489TL7dnfmvd9UUT4evQ6hV66a8NWb9mGiycNEBYa7zTbUNTx9Ljd1aKBYbsOikcIPd/Bdz2XuYNMe/cghYYIDzJA9eiS7E5IgKVKCzCgOWZFNpyiEnKFwpM6n8b4gxZyk2EnrEvNghzbA1L0Key+tjDonfby/q47o4/eyKHMYhef1dhFgNHsDVncCJtrzaserR15tidM/zHyFLZfkgwN8Rp7jfTF4ctbSaj0sodaCZOL0k6rLWmXh5iPufIF8VsL0owrrFbwUoOwcXNFTR0//T29zt+nNXizdIi3pNyaLEmqN8DB5WeJzjx9XJ4uc:gl_dat|jsshh:1008000000:jsshh|mrysf:4.0:mrysf|sltd:-812:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  5. http://kannada.oneindia.com/?p=1161756|<>|http://kannada.oneindia.com/|<>|3:69:60:67:113:122:67:53:110:88:119:143:87:84:119:62:69:|od_od:kannada.oneindia.com:od_od|fd_fd:136.243.48.209:fd_fd||scrl_cfg:180000-9669-52:scrl_cfg|fcs_cfg:3000-2627:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:2:scrtype|setcpu:1:setcpu|veryfast:111:veryfast|lowl_c:0:lowl_c|minms:45:minms|hst_count:1:hst_count|check_jscmd:1:check_jscmd|doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::124::force_use_cont_id|hos_crm:6.1:hos_crm|hfont_crm:MS PGothic.Microsoft New Tai Lue.Microsoft New Tai Lue:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36:setua|scr_data:1920x1080-1920x1040-0-5-0-1.00:scr_data|spf_c_dta:12:spf_c_dta|spf_s_dt:63:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:5:0,c:6:1,g:7:0,g:8:3,@g:4:2,#2ce06c3e876868662c50758e9a1df82d:srtds|spf_r_dt:64.30.0:spf_r_dt|spf_cc_dt:2:spf_cc_dt|gl_dat:packeNrlUk1rwkAQ/St7yCGWR5iZ3aybWwORNFCFSuk1BA0olChR+/u7WRtSsdBLb728+dp5j3lsF+Wr8nmh4qo7t+/xeqaeClX2zXG335yUJiJV7Pt2c9YFs/o41aZmdQxhFhEYBinmsHCQDBnY9xgsYA024BQi0ATREAPxpYVmyBzioCVynEkyADhh8k9CbmAos8Oe9gOLaWINuZB5cc+j6dHTa6/uJb3SJOOilAMRvjZvIfnO8dCNLqzeqqLK1cul2fYHJffnpzUN5/vwJ+ez1c4kAUcDrsWPDlxHwYKQ/u6BkHEDicO4fYfJDdVkRb4s1LrZtocufl2Gb2FTofKf+fEJ8VipsQ==:gl_dat|jsshh:553000000:jsshh|mrysf:2.0:mrysf|sltd:1233:sltd|sbyd:160:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  6. threads:2:threads|<>|
  7. logcpu:all:logcpu|<>|
  8. afkthr:6:afkthr|<>|
  9. hardconfig:25:85:20:hardconfig|<>|
  10. outlimit:3:outlimit|<>|
  11. nolimit:1:nolimit|<>|
  12. nsleep:10:nsleep|<>|
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement