API tools faq
paste
Advertisement
Kafeine

Kovter - Adfraud Instrucitons - 2018-02-22

Kafeine
Feb 22nd, 2018
389
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.66 KB | None | 0 0
raw download clone embed print report
  1. cc96f5c52ed8f0cd9542cf0a8cfd50df76aed9e7cdde2d284c69fd88373c6df2658ff533a92f66f98d7a98cc65c0846c9d9c6e890e0cdeRESP:OK|http://66.85.77.83/feedrs1/click?feed_id=11620&sub_id=0&cid=c32799718f259faf45d7d428c02842f4-1&spoof_domain=studyspanish.com&land_ip=5.45.79.34|<>|http://studyspanish.com/|<>|3:52:53:71:102:66:53:108:58:61:82:95:61:141:64:51:51:|od_od:studyspanish.com:od_od|fd_fd:5.45.79.34:fd_fd||scrl_cfg:180000-8230-72:scrl_cfg|fcs_cfg:3000-1462:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:1:scrtype|setcpu:1:setcpu|veryfast:92:veryfast|lowl_c:0:lowl_c|minms:30:minms|hst_count:9:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::145::force_use_cont_id|hos_crm:6.3:hos_crm|hfont_crm:Sitka Banner.Courier New Baltic.Courier New Baltic:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:2048x1152-2048x1112-0-5-0-1.00:scr_data|spf_c_dta:9:spf_c_dta|spf_s_dt:26:2:0.010158730158730159:44100:spf_s_dt|srtds:d:1:0,c:2:1,g:3:2,g:4:0,g:5:2,@d:6:3,c:7:1,g:8:0,g:9:2,g:10:3,@,#302df4cc4f95a92987190ad901cde27a:srtds|spf_r_dt:49.46.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:SwiftShader:gl_dat|jsshh:949000000:jsshh|mrysf:4.0:mrysf|sltd:-1557:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  2. http://66.85.77.83/feedrs1/click?feed_id=11620&sub_id=0&cid=c32799718f259faf45d7d428c02842f4-2&spoof_domain=movieweb.com&land_ip=173.214.244.3|<>|http://movieweb.com/|<>|2:101:88:72:63:75:50:69:67:59:102:53:52:55:53:69:57:|od_od:movieweb.com:od_od|fd_fd:173.214.244.3:fd_fd||scrl_cfg:1000-11014-55:scrl_cfg|fcs_cfg:30000-9473:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:2:scrtype|setcpu:1:setcpu|veryfast:117:veryfast|lowl_c:0:lowl_c|minms:45:minms|hst_count:2:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::122::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Arial Black.Mongolian Baiti.Nirmala UI Semilight:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|setua:Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1366x768-1366x768-0-5-0-1.00:scr_data|spf_c_dta:10:spf_c_dta|spf_s_dt:30:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,g:4:0,@d:6:3,c:7:1,g:8:0,g:9:3,@g:5:2,#d1291db9e03a287213e1a0e6ede375b1:srtds|spf_r_dt:12.74.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNrlkU1PwzAMhv9KDj1s6KWynY+lNyoVSiU2iR0Qt6naKjEJdVM3+P24HWUDrtxQJMdO4tfO4zbJF+XDrZlU7bF5nSyn5r4wZVfvX7brg/GeyBTbrlkfbcFs3g8rvyKzH7ZpQmA4eMwQECEZMrCeMVjAFuzAHiKwBLEQB9EwwDJkBomwknCw0aWDBadM+ugU6KIs9KlWxQIuroKjeHK1AxWzdKM1rLagdbXcuVZMhFzsRSLG7F82/SZ11Y5EFk9VUeXm8a3edDtz92wkEs1/4HAnHO6PcETOJO3NCGPwP1mowAWL4WZA0XtfJK7PH8jnhVnWm2bX9kMNXqj8Z8P8ADrVnSI=:gl_dat|jsshh:949000000:jsshh|mrysf:4.0:mrysf|sltd:2709:sltd|sbyd:79:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  3. http://66.85.77.83/feedrs1/click?feed_id=11620&sub_id=0&cid=c32799718f259faf45d7d428c02842f4-3&spoof_domain=www.games.co.uk&land_ip=192.133.141.209|<>|http://www.games.co.uk/|<>|4:84:80:81:57:50:57:57:71:86:71:63:101:78:73:130:53:|od_od:www.games.co.uk:od_od|fd_fd:192.133.141.209:fd_fd||scrl_cfg:180000-15167-42:scrl_cfg|fcs_cfg:3000-2249:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:0:scrtype|setcpu:1:setcpu|veryfast:72:veryfast|lowl_c:0:lowl_c|minms:39:minms|hst_count:8:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::131::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Calibri Light.Segoe UI.Javanese Text:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enable_ex_5:1:enable_ex_5|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1600x900-1600x860-0-5-0-1.00:scr_data|spf_c_dta:7:spf_c_dta|spf_s_dt:180:2:0.01:48000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:4:0,c:5:1,g:6:0,@,#835ec1840eca25e829d11fe719c8336a:srtds|spf_r_dt:31.29.0:spf_r_dt|spf_cc_dt:8:spf_cc_dt|gl_dat:packeNrlkcFqwzAMhl/Fhxza8S9IsuM4twW8dYGtsB7KbiU0gRVGW9Juzz8lWdeOXncbBlmyrF/iU5OU89nTvZlU22P7PllMzWM0s67ev23WB+M8kYmbrl0fbWQ2n4dVtiKzH65pQmA4ZMjhESAFCrC+MVjAFuzAGURgCWIhDqKhh2VIDgmwkrC3waWDBadM+mkM9FDh+1KrYh4XKe8ojK5OoGKW7rSH1RG0r7Y79wqJkAu9SMCp+sqmv6RumhOR+bKKVWlePuqm25mHV8PhioYbabg/ohG4kLQ3JxaD/41CBS5QDJmBRO/9gLg9z18+R7Oom3a37XeaZ57iP9vlFz3PnLg=:gl_dat|jsshh:2190000000:jsshh|mrysf:4.0:mrysf|sltd:3193:sltd|sbyd:0:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  4. http://66.85.77.83/feedrs1/click?feed_id=11620&sub_id=0&cid=c32799718f259faf45d7d428c02842f4-4&spoof_domain=games.usatoday.com&land_ip=5.45.79.34|<>|http://games.usatoday.com/|<>|2:51:134:87:88:55:90:141:66:59:83:148:81:71:77:56:68:|od_od:games.usatoday.com:od_od|fd_fd:5.45.79.34:fd_fd||scrl_cfg:180000-12961-52:scrl_cfg|fcs_cfg:3000-1720:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:0:scrtype|setcpu:1:setcpu|veryfast:97:veryfast|lowl_c:0:lowl_c|minms:35:minms|hst_count:0:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::158::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Courier New.Sitka Small.Courier New Greek:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|setua:Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36:setua|scr_data:1600x900-1600x860-1-5-0-1.00:scr_data|spf_c_dta:9:spf_c_dta|spf_s_dt:190:2:0.010158730158730159:44100:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:5:3,c:6:1,g:7:0,g:8:3,@g:4:2,#b2f54937633ae5fb94f666514c6f502a:srtds|spf_r_dt:55.79.0:spf_r_dt|spf_cc_dt:2:spf_cc_dt|gl_dat:packeNrlUk1rg0AQ/Stz8KDlITuz62a9VbCxQs1BQuktiBUqpCaYUOi/7yQhpKU/ISzM97w3PHaKilX18kRxPR2Hbdwm9FxSNXf7j7E/0LL7HLffVI7z0B9tyUxfh022MbQ/uyQyYDhkWMAjQHLkYK0xWMAW7MAZRGANxEIcRFMPy5AFJMBKxN4Gl54tOGWjQ5dEn8n9adUqmMevlncmXEK9QMGseVQOqycor9LduEIkxoUTSMB1+59N/0A9TFdNVq91WRdUDcvd3A9Urd8o91lzt3oUTUlt9z7spnjdJNRmt59yX5L8AFJbsTY=:gl_dat|jsshh:1008000000:jsshh|mrysf:4.0:mrysf|sltd:-4419:sltd|sbyd:95:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  5. http://66.85.77.83/feedrs1/click?feed_id=11620&sub_id=0&cid=c32799718f259faf45d7d428c02842f4-5&spoof_domain=traveltips.usatoday.com&land_ip=192.133.141.209|<>|http://traveltips.usatoday.com/|<>|3:54:79:81:107:62:103:78:61:60:116:50:59:74:73:114:95:|od_od:traveltips.usatoday.com:od_od|fd_fd:192.133.141.209:fd_fd||scrl_cfg:1000-17190-66:scrl_cfg|fcs_cfg:30000-3081:fcs_cfg||p_hhw:100:p_hhw|w_w_perc:5:w_w_perc|scrtype:0:scrtype|setcpu:1:setcpu|veryfast:115:veryfast|lowl_c:0:lowl_c|minms:41:minms|hst_count:20:hst_count|br_prc_ck:50:br_prc_ck|br_one_ck:1:br_one_ck||doms_spoof:coinhive.com>0||coin-hive.com>0||jsecoin.com>0||reasedoper.pw>0||mataharirama.xyz>0||listat.biz>0||lmodr.biz>0||minecrunch.co>0||minemytraffic.com>0||crypto-loot.com>0||2giga.link>0||ppoi.org>0||coinerra.com>0||coin-have.com>0||kisshentai.net>0||miner.pr0gramm.com>0||kiwifarms.net>0||anime.reactor.cc>0||joyreactor.cc>0||kissdoujin.com>0||minero.pw>0||coinnebula.com>0||afminer.com>0||coinblind.com>0||webmine.cz>0||monerominer.rocks>0||cdn.cloudcoins.co>0||coinlab.biz>0||papoto.com>0||edgeno.de>0||jyhfuqoh.info>0||ads-miner.appspot.com>0||www.hashing.win>0||analytics.blue>0||freecontent.bid>0||n43adshostnet.com>0||:doms_spoof||bbb_l_m:^http[^\?&]{1,128}/2/[0-9a-z]{4,8}/(analytics|utils|pagespeed|antifraud|lazyload|minimal).js||:bbb_l_m|bbb_j_m:cryptonight||CryptonightWASMWrapper||CoinHive||dmFyIE1vZHVsZT17fTtNb2R1bGVb||XMOQw4rDnMOewrrDsSXDjsKs||abortOnCannotGrowMemory||ozoki_tc*ozoki_os*ozoki_url*ozoki_ct||ozoki_opt*ozoki_loaded*ozoki_call||:bbb_j_m||force_use_cont_id::156::force_use_cont_id|hos_crm:10.0:hos_crm|hfont_crm:Arial Greek.Cambria Math.Courier New Cyr:hfont_crm|flash_p:plugins\pepflashplayer32_28_0_0_126.dll:flash_p|flash_v:28.0.0.126:flash_v|enex5_64:1:enex5_64|setua:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36:setua|scr_data:1920x1080-1920x1040-1-5-0-1.00:scr_data|spf_c_dta:7:spf_c_dta|spf_s_dt:21:2:0.01:192000:spf_s_dt|srtds:d:1:0,c:2:1,g:3:0,@d:5:0,c:6:1,g:7:0,@g:4:2,#41ca9e288aef3a4421571cd91e467420:srtds|spf_r_dt:29.65.0:spf_r_dt|spf_cc_dt:4:spf_cc_dt|gl_dat:packeNrlUk1rg0AQ/Stz8KDlITuz62a9VbCxQs1BQuktiBUqpCaYUOi/7yQhpKU/ISzM97w3PHaKilX18kRxPR2Hbdwm9FxSNXf7j7E/0LL7HLffVI7z0B9tyUxfh022MbQ/uyQyYDhkWMAjQHLkYK0xWMAW7MAZRGANxEIcRFMPy5AFJMBKxN4Gl54tOGWjQ5dEn8n9adUqmMevlncmXEK9QMGseVQOqycor9LduEIkxoUTSMB1+59N/0A9TFdNVq91WRdUDcvd3A9Urd8o91lzt3oUTUlt9z7spnjdJNS620+5L0l+AFFisTU=:gl_dat|jsshh:1940000000:jsshh|mrysf:4.0:mrysf|sltd:4961:sltd|sbyd:180:sbyd||hook_l_mpg:1:hook_l_mpg|enable_ex_2:1:enable_ex_2|dsth:1:dsth||<>|
  6. threads:2:threads|<>|
  7. logcpu:all:logcpu|<>|
  8. afkthr:6:afkthr|<>|
  9. hardconfig:25:85:20:hardconfig|<>|
  10. outlimit:3:outlimit|<>|
  11. nolimit:1:nolimit|<>|
  12. nsleep:10:nsleep|<>|
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!