www.myantispyware.com/download/security-tools/HijackThis.exe
302 Found 20 B URL User Request GET HTTP/1.1 www.myantispyware.com/download/security-tools/HijackThis.exe
IP
ASN #36352 AS-COLOCROSSING
Certificate IssuerLet's Encrypt
Subjectmyantispyware.com
Fingerprint3F:2C:4B:6C:8B:01:27:DB:81:09:EF:0B:A6:5B:AA:C8:BC:CF:B3:06
ValidityFri, 15 Sep 2023 00:05:54 GMT - Thu, 14 Dec 2023 00:05:53 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /download/security-tools/HijackThis.exe HTTP/1.1
Host: www.myantispyware.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 19 Oct 2023 22:07:10 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/7.3.25
Set-Cookie: dwqa_anonymous=aGzjF1aU2EhyLpXajjo25jSHQnSGxiAbfkeJG0bl6Zk; expires=Sun, 16-Oct-2033 22:07:10 GMT; Max-Age=315360000; path=/; secure; HttpOnly
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://downloads.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?r=&ts=1446894688&use_mirror=iweb
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 20
Keep-Alive: timeout=10, max=1000
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
downloads.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?r=&ts=1446894688&use_mirror=iweb
301 Moved Permanently 460 B URL User Request GET HTTP/1.1 downloads.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?r=&ts=1446894688&use_mirror=iweb
IP
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 1db67b5114a3657c0e5552f94c57585e
c3ce3fcc73a8013e44d1ce3e1a5af92c564c7e1a
3f04c3041e776e1e7ceb6a2f8c6e56b39fa03821d7242de46693d084d0f00afc
GET /project/hjt/2.0.5%20beta/HijackThis.exe?r=&ts=1446894688&use_mirror=iweb HTTP/1.1
Host: downloads.sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 19 Oct 2023 22:07:11 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 460
Connection: keep-alive
Location: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
a.fsdn.com/con/js/adgenerator.js?1697658516
200 OK 17 B URL GET HTTP/2 a.fsdn.com/con/js/adgenerator.js?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1a9f5b5d41007226049e6ef054c9f935
a87bdd1b9261b669e5867e6e84d6d2f388d51431
e3e69cc01ad15179eb67e1f90e1774ed5a5da075f85420a1d9b01029b28b14dc
GET /con/js/adgenerator.js?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: application/javascript
content-length: 17
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=35
etag: "6359804d-23"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Wed, 26 Oct 2022 18:45:33 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94121
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f7e5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/images/sandiego/github-sync.png
200 OK 3.4 kB URL GET HTTP/2 a.fsdn.com/con/images/sandiego/github-sync.png
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash cf4dfed9e5ba2265269673036538ff5d
6d3f7802e4bc94647b38910cffd6c698857fe3df
014ce3c0ad550d1c13e6e042f2f352c7c6bf7f28079dc04a0f6efa7ba4ba44a8
GET /con/images/sandiego/github-sync.png HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/webp
content-length: 3406
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6746
content-disposition: inline; filename="github-sync.webp"
etag: "631a0033-1a5a"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Thu, 08 Sep 2022 14:46:11 GMT
timing-allow-origin: *
vary: Accept
cf-cache-status: HIT
age: 30344219
accept-ranges: bytes
server: cloudflare
cf-ray: 818c55247f8c5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/app/nel_img/16443
200 OK 16 kB URL GET HTTP/2 a.fsdn.com/con/app/nel_img/16443
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ef0187ce704ffc02f63204cef0219c0
e88beacca2f168b1ced73a59688039334c93fc7e
cf3d16a2e993793f2d2bc0550a42e4f8b99ff3554e9b31f1633c482678d6dcf2
GET /con/app/nel_img/16443 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/png
content-length: 16190
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
content-security-policy: frame-ancestors 'self'; script-src 'self' adservice.google.com.gt adservice.google.co.ug adservice.google.ae adservice.google.bi adservice.google.dk adservice.google.com.co adservice.google.sm *.microsoft.com adservice.google.co.il adservice.google.com.gh adservice.google.ga adservice.google.dz adservice.google.lt adservice.google.mn adservice.google.ad adservice.google.com.ph adservice.google.bj adservice.google.com.jm adservice.google.com.fj *.googleadsserving.cn adservice.google.com.ua adservice.google.tm *.doubleverify.com adservice.google.co.ck adservice.google.ee adservice.google.hu translate.google.cn adservice.google.me adservice.google.ci adservice.google.com.qa adservice.google.com.ng *.moatads.com adservice.google.com.na adservice.google.com.my adservice.google.nu adservice.google.bt adservice.google.ms adservice.google.com.ar a.fsdn.com adservice.google.com.pk *.doubleclick.net adservice.google.co.za *.s-onetag.com adservice.google.ca adservice.google.cv adservice.google.mu *.lijit.com adservice.google.dm adservice.google.ro adservice.google.fm *.crsspxl.com adservice.google.com.sg adservice.google.co.kr adservice.google.co.zm adservice.google.mg adservice.google.co.mz adservice.google.com.lb *.flashtalking.com adservice.google.com.au adservice.google.co.id adservice.google.com.et adservice.google.tn adservice.google.co.ls adservice.google.rw adservice.google.at http://*.pro-market.net *.recaptcha.net *.adsafeprotected.com adservice.google.co.jp adservice.google.cd adservice.google.com.sa adservice.google.kg adservice.google.gy adservice.google.st adservice.google.com.np adservice.google.sc adservice.google.com.uy adservice.google.es adservice.google.tt adservice.google.az adservice.google.ge adservice.google.ru adservice.google.com.pa adservice.google.com.cy *.microsofttranslator.com *.trustarc.com adservice.google.com.mm adservice.google.co.zw adservice.google.com.bh adservice.google.bg adservice.google.hr adservice.google.co.uz adservice.google.mw adservice.google.cf adservice.google.cm adservice.google.la *.4dex.io adservice.google.fr adservice.google.com.py adservice.google.com.mt adservice.google.com.vn adservice.google.com.bo adservice.google.com.sv adservice.google.co.ve adservice.google.com.hk adservice.google.de *.sharethrough.com adservice.google.com.bn adservice.google.bf adservice.google.ht adservice.google.com.pr adservice.google.si adservice.google.sr adservice.google.pl adservice.google.co.bw adservice.google.gr adservice.google.cl adservice.google.com.tr adservice.google.jo adservice.google.com.ly adservice.google.td *.licdn.com *.googletagmanager.com adservice.google.pt adservice.google.com.bd *.adnxs.com adservice.google.com.sb adservice.google.lk adservice.google.it adservice.google.im adservice.google.nl adservice.google.com.pg adservice.google.cz *.consentmanager.net adservice.google.com.mx adservice.google.li adservice.google.co.cr adservice.google.ml adservice.google.co.nz adservice.google.co.th adservice.google.com.kw adservice.google.as btloader.com adservice.google.md *.slashdotmedia.com adservice.google.co.in adservice.google.co.tz adservice.google.ie adservice.google.ki adservice.google.gt *.cloudflareinsights.com adservice.google.cg adservice.google.co.vi *.gstatic.com adservice.google.com.ec adservice.google.lv adservice.google.ne *.2mdn.net adservice.google.hn adservice.google.gl adservice.google.com.gi translate.googleapis.com adservice.google.com.tw adservice.google.iq adservice.google.co.ke adservice.google.com.ai adservice.google.co.uk *.googletagservices.com adservice.google.so adservice.google.vg adservice.google.lu adservice.google.se adservice.google.ws *.gstatic.cn adservice.google.gg adservice.google.sn *.google-analytics.com adservice.google.co.ao adservice.google.com.pe adservice.google.to adservice.google.mk adservice.google.ps adservice.google.je adservice.google.sk adservice.google.fi adservice.google.com.om *.script.ac adservice.google.tg *.google.com adservice.google.com.af adservice.google.com.tj adservice.google.is adservice.google.com.ni adservice.google.nr adservice.google.tl adservice.google.no adservice.google.kz adservice.google.al *.tiny.cloud adservice.google.com.kh adservice.google.vu *.googlesyndication.com adservice.google.be adservice.google.com.bz adservice.google.com.vc ml314.com recaptcha.net adservice.google.gm adservice.google.dj adservice.google.mv adservice.google.com.eg adservice.google.com.cu adservice.google.com.br adservice.google.bs adservice.google.com.ag adservice.google.rs adservice.google.ch 'unsafe-inline' 'unsafe-eval'; script-src-attr 'none' 'report-sample'; form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.lijit.com *.btloader.com; object-src 'none'
expires: Sun, 19 Nov 2023 22:07:12 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
last-modified: Thu, 19 Oct 2023 20:26:04 GMT
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
cf-cache-status: HIT
age: 2431
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f915684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/mirrorimages/master-xlarge.png
200 OK 2.2 kB URL GET HTTP/2 a.fsdn.com/mirrorimages/master-xlarge.png
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7359a144a1f7f5d4f8da0bccac6b8ce3
357c981144edc5113492e19e532df8500b080b75
258605fb6cb8ffc08bb602271e60f82eadc010c6583fbe979e4d030f39ff5af7
GET /mirrorimages/master-xlarge.png HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/webp
content-length: 2184
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2711
content-disposition: inline; filename="master-xlarge.webp"
etag: "5d72f8bf-a97"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Sat, 07 Sep 2019 00:24:31 GMT
vary: Accept
cf-cache-status: HIT
age: 19797603
accept-ranges: bytes
server: cloudflare
cf-ray: 818c55247f8f5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/app/nel_img/16347
200 OK 4.4 kB URL GET HTTP/2 a.fsdn.com/con/app/nel_img/16347
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash db07ba2a770af27caefea472e2ad815d
9cac0fb84e71ef1ccf63ba167fbe35e7655404d3
830d8e1ff8d032c48db0114ee2eef41e74ddfb0b05620f07a667bbf441e7c0f6
GET /con/app/nel_img/16347 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/webp
content-length: 4400
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6810
content-security-policy: script-src 'self' adservice.google.tl adservice.google.com.ni adservice.google.com.co adservice.google.az adservice.google.co.uk adservice.google.ml adservice.google.com.mt adservice.google.lu adservice.google.com.et adservice.google.fm adservice.google.com.lb *.doubleclick.net adservice.google.com.mm adservice.google.kg adservice.google.si adservice.google.com.eg adservice.google.kz adservice.google.tg adservice.google.nr adservice.google.co.ve adservice.google.com.gt adservice.google.com.vn adservice.google.com.mx adservice.google.hr translate.googleapis.com recaptcha.net *.gstatic.cn adservice.google.se adservice.google.com.af adservice.google.sr adservice.google.com.ar adservice.google.com.sa *.s-onetag.com adservice.google.bf adservice.google.lt btloader.com adservice.google.ci adservice.google.co.tz adservice.google.tt adservice.google.com.bo adservice.google.je adservice.google.co.ke adservice.google.co.ls adservice.google.co.th adservice.google.hn adservice.google.td adservice.google.dm adservice.google.cv *.crsspxl.com adservice.google.sn adservice.google.mu *.recaptcha.net adservice.google.pt adservice.google.tm adservice.google.to adservice.google.com.ai adservice.google.com.qa adservice.google.ae *.4dex.io *.microsofttranslator.com adservice.google.iq adservice.google.so adservice.google.co.in adservice.google.co.ao adservice.google.mk adservice.google.de adservice.google.gr adservice.google.mv adservice.google.com.ng adservice.google.bg adservice.google.li translate.google.cn *.cloudflareinsights.com *.trustarc.com adservice.google.com.br adservice.google.ga adservice.google.com.sv *.adnxs.com adservice.google.com.jm adservice.google.ps adservice.google.co.uz adservice.google.co.zm adservice.google.ki adservice.google.co.kr adservice.google.co.bw adservice.google.com.tr adservice.google.ro adservice.google.ca adservice.google.gt adservice.google.ch adservice.google.co.jp adservice.google.mg adservice.google.sc *.sharethrough.com adservice.google.cz adservice.google.com.cu adservice.google.com.na adservice.google.co.vi adservice.google.com.fj *.licdn.com adservice.google.com.pk adservice.google.nu adservice.google.gy adservice.google.me adservice.google.ms adservice.google.ge adservice.google.fr adservice.google.cg adservice.google.hu adservice.google.pl adservice.google.es adservice.google.com.ph adservice.google.com.vc adservice.google.bs adservice.google.ie adservice.google.cm adservice.google.com.pr ml314.com adservice.google.it adservice.google.ws adservice.google.com.my adservice.google.be adservice.google.com.bh *.microsoft.com adservice.google.com.ag *.2mdn.net *.googleadsserving.cn adservice.google.nl adservice.google.sk adservice.google.co.zw adservice.google.rs adservice.google.co.za adservice.google.com.ly adservice.google.la adservice.google.ht adservice.google.com.tw adservice.google.com.tj adservice.google.co.ck adservice.google.com.np adservice.google.com.au adservice.google.com.om adservice.google.im adservice.google.com.ua adservice.google.com.gi *.doubleverify.com adservice.google.fi adservice.google.tn adservice.google.gm *.flashtalking.com adservice.google.lv *.tiny.cloud adservice.google.gl *.googletagmanager.com adservice.google.com.bn *.slashdotmedia.com adservice.google.com.pe adservice.google.vu adservice.google.ru adservice.google.is adservice.google.gg *.googlesyndication.com *.script.ac adservice.google.com.gh adservice.google.bj adservice.google.mw adservice.google.at adservice.google.cd adservice.google.com.pa adservice.google.al adservice.google.com.pg adservice.google.com.ec adservice.google.co.nz adservice.google.cf *.googletagservices.com adservice.google.com.bz adservice.google.com.kw adservice.google.as adservice.google.co.ug adservice.google.no *.gstatic.com adservice.google.bt *.consentmanager.net adservice.google.bi *.adsafeprotected.com adservice.google.co.cr adservice.google.sm adservice.google.com.py adservice.google.md adservice.google.co.il *.moatads.com adservice.google.dz adservice.google.co.mz *.google.com adservice.google.co.id adservice.google.com.uy adservice.google.ne adservice.google.vg adservice.google.com.kh adservice.google.com.sb adservice.google.mn adservice.google.lk adservice.google.com.hk adservice.google.jo adservice.google.rw *.lijit.com adservice.google.com.bd adservice.google.dk adservice.google.cl a.fsdn.com http://*.pro-market.net adservice.google.ad adservice.google.st adservice.google.ee adservice.google.dj *.google-analytics.com adservice.google.com.cy adservice.google.com.sg 'unsafe-inline' 'unsafe-eval'; frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.lijit.com *.btloader.com; form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; script-src-attr 'none' 'report-sample'; object-src 'none'; frame-ancestors 'self'
expires: Sun, 19 Nov 2023 22:07:12 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Thu, 19 Oct 2023 21:30:46 GMT
cf-cache-status: HIT
age: 71
accept-ranges: bytes
server: cloudflare
cf-ray: 818c55247f935684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/app/nel_img/16303
200 OK 8.2 kB URL GET HTTP/2 a.fsdn.com/con/app/nel_img/16303
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 268eec1602b3c98d605612a6114fb998
e5a5aee6cbe7f3bd38f7b0d76556681978ebd753
ddef902acceb677796bf671fd697b8980bd3230d7ec2e173f60d1b9f1ddcaa65
GET /con/app/nel_img/16303 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/webp
content-length: 8182
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=11835
content-security-policy: script-src 'self' adservice.google.ro adservice.google.co.jp adservice.google.ch adservice.google.si *.microsoft.com adservice.google.com.ai adservice.google.gg adservice.google.com.fj adservice.google.lu *.trustarc.com *.adnxs.com adservice.google.com.py translate.googleapis.com adservice.google.hu adservice.google.com.ni adservice.google.ee adservice.google.fr adservice.google.cf adservice.google.com.pr adservice.google.se adservice.google.com.eg adservice.google.com.gi *.4dex.io adservice.google.im *.script.ac adservice.google.com.bh adservice.google.fi adservice.google.ps *.doubleverify.com adservice.google.gl adservice.google.co.il adservice.google.no adservice.google.com.lb adservice.google.com.pg adservice.google.gy adservice.google.com.vc adservice.google.cz adservice.google.com.jm adservice.google.dj *.microsofttranslator.com adservice.google.vg adservice.google.sn adservice.google.com.sa adservice.google.ne adservice.google.to adservice.google.com.pe *.tiny.cloud adservice.google.ad adservice.google.com.tj adservice.google.nu adservice.google.sc adservice.google.co.nz *.moatads.com adservice.google.ws adservice.google.ge adservice.google.co.cr adservice.google.ms adservice.google.com.bd adservice.google.ae adservice.google.kz adservice.google.ca adservice.google.nl adservice.google.com.kh adservice.google.cv adservice.google.bi translate.google.cn adservice.google.lk adservice.google.cm adservice.google.com.na adservice.google.com.uy adservice.google.com.np adservice.google.co.bw adservice.google.kg *.flashtalking.com adservice.google.ie adservice.google.com.qa adservice.google.com.cu recaptcha.net adservice.google.com.bz *.gstatic.com adservice.google.mg adservice.google.tl adservice.google.com.ec adservice.google.com.ua adservice.google.tt adservice.google.co.in adservice.google.is adservice.google.co.za adservice.google.co.id adservice.google.as *.cloudflareinsights.com adservice.google.sk adservice.google.com.my adservice.google.mn adservice.google.ht adservice.google.dk adservice.google.gr adservice.google.co.ve adservice.google.co.mz adservice.google.me adservice.google.pt adservice.google.com.sg *.gstatic.cn adservice.google.ml adservice.google.mk adservice.google.at adservice.google.dm adservice.google.com.af adservice.google.co.tz adservice.google.com.co adservice.google.co.ao adservice.google.je adservice.google.bj adservice.google.com.mt adservice.google.co.ck adservice.google.li *.doubleclick.net *.sharethrough.com *.slashdotmedia.com adservice.google.com.ly adservice.google.mv adservice.google.com.hk adservice.google.com.au adservice.google.rs adservice.google.al *.crsspxl.com adservice.google.bf adservice.google.md *.googlesyndication.com adservice.google.st adservice.google.com.bn adservice.google.com.br adservice.google.gm adservice.google.hr adservice.google.ki adservice.google.td *.consentmanager.net adservice.google.com.pa adservice.google.com.ag adservice.google.com.mx *.lijit.com adservice.google.com.ng adservice.google.cd *.recaptcha.net adservice.google.com.gh *.googleadsserving.cn adservice.google.com.sb *.2mdn.net adservice.google.lt adservice.google.co.ke adservice.google.co.ug adservice.google.cl adservice.google.co.ls adservice.google.vu adservice.google.com.tr adservice.google.com.gt adservice.google.tm adservice.google.nr adservice.google.cg adservice.google.mu adservice.google.so adservice.google.co.kr adservice.google.dz adservice.google.bt adservice.google.com.kw adservice.google.com.cy adservice.google.lv *.googletagservices.com adservice.google.tg adservice.google.com.tw *.googletagmanager.com adservice.google.es *.google-analytics.com adservice.google.bg adservice.google.fm adservice.google.be adservice.google.sr adservice.google.co.vi adservice.google.co.uk adservice.google.az adservice.google.ci adservice.google.co.zm *.s-onetag.com btloader.com adservice.google.tn ml314.com adservice.google.com.ar *.adsafeprotected.com adservice.google.com.bo a.fsdn.com adservice.google.jo adservice.google.co.th adservice.google.com.om adservice.google.pl adservice.google.com.pk adservice.google.com.ph adservice.google.de adservice.google.hn adservice.google.it adservice.google.com.et adservice.google.ru adservice.google.bs adservice.google.ga adservice.google.com.sv adservice.google.iq *.licdn.com adservice.google.com.mm adservice.google.rw adservice.google.co.zw http://*.pro-market.net adservice.google.co.uz adservice.google.sm adservice.google.gt adservice.google.com.vn *.google.com adservice.google.la adservice.google.mw 'unsafe-inline' 'unsafe-eval'; script-src-attr 'none' 'report-sample'; frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.lijit.com *.btloader.com; upgrade-insecure-requests; object-src 'none'; frame-ancestors 'self'; form-action 'self' lists.sourceforge.net
expires: Sun, 19 Nov 2023 22:07:12 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Thu, 19 Oct 2023 21:30:59 GMT
cf-cache-status: HIT
age: 1060
accept-ranges: bytes
server: cloudflare
cf-ray: 818c55247f945684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/app/nel_img/10624
200 OK 5.0 kB URL GET HTTP/2 a.fsdn.com/con/app/nel_img/10624
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1fe2b1dff2ba32940ddd3c7f0f147d36
38f42bdedc5f51ab61e1ace43e253db73b8e26de
fb9020875e0b1cd649e02cef73977fbf8a36c4ea6e4b5519f6f66c1c3848b6ef
GET /con/app/nel_img/10624 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/webp
content-length: 4960
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6297
content-security-policy: script-src 'self' adservice.google.com.ua adservice.google.hn adservice.google.fr adservice.google.mu *.tiny.cloud adservice.google.com.eg adservice.google.mv translate.googleapis.com adservice.google.im adservice.google.com.na adservice.google.vu adservice.google.com.bh adservice.google.tl adservice.google.ws adservice.google.com.et adservice.google.ad adservice.google.ee adservice.google.com.br adservice.google.me adservice.google.ge adservice.google.com.kw adservice.google.gl adservice.google.rw adservice.google.com.bn adservice.google.no adservice.google.com.pa adservice.google.com.vn adservice.google.com.cu adservice.google.cm adservice.google.com.lb adservice.google.fm adservice.google.lu adservice.google.gm adservice.google.pl adservice.google.com.ng adservice.google.com.fj adservice.google.com.ni adservice.google.sr adservice.google.bs adservice.google.com.my adservice.google.cl adservice.google.ro adservice.google.hr *.googletagservices.com adservice.google.sn adservice.google.co.nz adservice.google.dj *.s-onetag.com adservice.google.tg adservice.google.be adservice.google.co.ke adservice.google.com.co adservice.google.ms adservice.google.si adservice.google.co.za adservice.google.as *.script.ac adservice.google.lt adservice.google.com.vc adservice.google.com.af adservice.google.al adservice.google.com.ph adservice.google.tn adservice.google.vg *.google.com http://*.pro-market.net adservice.google.com.bd adservice.google.co.th adservice.google.com.py adservice.google.com.mx adservice.google.fi adservice.google.com.gh *.recaptcha.net *.adnxs.com adservice.google.co.kr adservice.google.com.np adservice.google.bf *.trustarc.com adservice.google.co.in adservice.google.so adservice.google.com.gi adservice.google.sm *.consentmanager.net adservice.google.de adservice.google.co.ck adservice.google.com.mm adservice.google.nr adservice.google.at adservice.google.co.mz adservice.google.com.sg adservice.google.co.zw *.microsofttranslator.com adservice.google.cz adservice.google.com.gt adservice.google.dz adservice.google.ki adservice.google.gg *.microsoft.com adservice.google.pt adservice.google.ga adservice.google.rs adservice.google.com.om adservice.google.az adservice.google.com.ec adservice.google.cv adservice.google.tt adservice.google.co.uk adservice.google.com.pe adservice.google.co.cr ml314.com adservice.google.nl adservice.google.bt adservice.google.ch adservice.google.is adservice.google.ht *.adsafeprotected.com adservice.google.com.ai *.2mdn.net *.googlesyndication.com adservice.google.se adservice.google.com.au adservice.google.com.tr adservice.google.gt adservice.google.co.bw adservice.google.mg adservice.google.com.pg adservice.google.iq adservice.google.tm adservice.google.hu adservice.google.ie *.flashtalking.com adservice.google.es *.cloudflareinsights.com adservice.google.com.kh adservice.google.co.uz adservice.google.bg adservice.google.com.uy adservice.google.to adservice.google.co.vi adservice.google.kg *.crsspxl.com *.licdn.com adservice.google.ne recaptcha.net a.fsdn.com adservice.google.com.mt adservice.google.ca adservice.google.co.ve adservice.google.co.zm *.4dex.io adservice.google.dk *.google-analytics.com adservice.google.co.il adservice.google.ps adservice.google.com.bz adservice.google.lv *.googleadsserving.cn adservice.google.com.sb adservice.google.ru adservice.google.co.jp adservice.google.com.ag *.sharethrough.com btloader.com *.lijit.com adservice.google.cd adservice.google.mw adservice.google.ae *.gstatic.com adservice.google.dm *.doubleclick.net adservice.google.com.sa adservice.google.kz *.gstatic.cn adservice.google.nu adservice.google.td adservice.google.md adservice.google.mk adservice.google.com.tw adservice.google.ci adservice.google.co.id adservice.google.jo adservice.google.com.ly adservice.google.cf adservice.google.com.sv adservice.google.sc adservice.google.com.ar adservice.google.co.ug adservice.google.co.ao adservice.google.mn adservice.google.lk adservice.google.com.tj adservice.google.bi adservice.google.com.bo adservice.google.la *.doubleverify.com adservice.google.ml adservice.google.com.qa translate.google.cn adservice.google.com.jm adservice.google.co.tz adservice.google.bj adservice.google.je *.moatads.com *.slashdotmedia.com adservice.google.co.ls adservice.google.st adservice.google.com.pr adservice.google.li adservice.google.gr adservice.google.com.pk adservice.google.gy adservice.google.it adservice.google.com.cy *.googletagmanager.com adservice.google.com.hk adservice.google.sk adservice.google.cg 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; script-src-attr 'none' 'report-sample'; frame-ancestors 'self'; form-action 'self' lists.sourceforge.net; object-src 'none'; frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.lijit.com *.btloader.com
expires: Sun, 19 Nov 2023 22:07:12 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Thu, 19 Oct 2023 20:28:31 GMT
cf-cache-status: HIT
age: 2664
accept-ranges: bytes
server: cloudflare
cf-ray: 818c55247f965684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/app/nel_img/9266
200 OK 6.0 kB URL GET HTTP/2 a.fsdn.com/con/app/nel_img/9266
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 841201507e47e503db6e837bcb9a5617
0e420d01c2a1ca043b2f7d68ade6affa828b3f48
95571c510b56d2992bad3e2942c24e2503c6b3a0e5b7e9bdca4ce12a4a15f0c4
GET /con/app/nel_img/9266 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/webp
content-length: 6006
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8214
content-security-policy: frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.lijit.com *.btloader.com; upgrade-insecure-requests; object-src 'none'; frame-ancestors 'self'; form-action 'self' lists.sourceforge.net; script-src 'self' *.gstatic.cn adservice.google.ae adservice.google.kz adservice.google.co.th adservice.google.nl adservice.google.cg adservice.google.co.id adservice.google.bs adservice.google.com.ai *.moatads.com *.lijit.com adservice.google.com.ph translate.googleapis.com adservice.google.sk adservice.google.lt adservice.google.com.bd ml314.com adservice.google.to adservice.google.com.sb adservice.google.md adservice.google.com.mt adservice.google.nr adservice.google.im adservice.google.co.jp *.adnxs.com adservice.google.com.ua adservice.google.ro adservice.google.rs adservice.google.com.bn adservice.google.com.uy adservice.google.com.ly *.gstatic.com adservice.google.com.fj adservice.google.lv adservice.google.com.kh adservice.google.co.tz adservice.google.co.vi *.doubleclick.net adservice.google.ca *.googlesyndication.com adservice.google.mu adservice.google.mg adservice.google.com.gh adservice.google.td adservice.google.ci adservice.google.mk adservice.google.fi adservice.google.hu *.4dex.io *.googletagmanager.com adservice.google.bj adservice.google.co.nz a.fsdn.com adservice.google.co.ve adservice.google.it adservice.google.pt adservice.google.cf *.licdn.com adservice.google.com.sv adservice.google.ga adservice.google.com.bz *.google.com *.sharethrough.com btloader.com adservice.google.gm adservice.google.tg adservice.google.co.ls adservice.google.dm adservice.google.co.mz *.adsafeprotected.com adservice.google.com.sa adservice.google.lu adservice.google.co.ao adservice.google.com.ec adservice.google.ne adservice.google.ht adservice.google.co.ke recaptcha.net adservice.google.co.uk adservice.google.ee adservice.google.fm adservice.google.com.my adservice.google.pl *.slashdotmedia.com adservice.google.tm *.doubleverify.com adservice.google.com.pk adservice.google.is adservice.google.st adservice.google.com.af adservice.google.gl adservice.google.com.hk adservice.google.ie adservice.google.dj *.script.ac adservice.google.me adservice.google.com.et adservice.google.com.co adservice.google.com.np adservice.google.hr adservice.google.ws adservice.google.com.tw adservice.google.gr adservice.google.com.vn adservice.google.cz adservice.google.as adservice.google.gg adservice.google.mn *.s-onetag.com adservice.google.tn adservice.google.com.ni adservice.google.co.za adservice.google.com.ag adservice.google.al translate.google.cn adservice.google.vg adservice.google.de adservice.google.com.bh adservice.google.bg adservice.google.co.cr adservice.google.com.tr adservice.google.iq adservice.google.ru adservice.google.sr adservice.google.com.pg adservice.google.ch adservice.google.co.uz adservice.google.vu adservice.google.com.eg adservice.google.co.bw adservice.google.com.om adservice.google.cl adservice.google.com.cy adservice.google.com.sg adservice.google.mv adservice.google.lk adservice.google.sn adservice.google.bi adservice.google.nu adservice.google.ms *.googletagservices.com adservice.google.at adservice.google.sc *.crsspxl.com adservice.google.si adservice.google.com.kw *.microsoft.com *.cloudflareinsights.com adservice.google.com.qa adservice.google.se adservice.google.com.ar adservice.google.no *.recaptcha.net adservice.google.dk adservice.google.com.jm adservice.google.tl *.trustarc.com *.2mdn.net adservice.google.com.ng adservice.google.com.mx adservice.google.com.br adservice.google.az adservice.google.jo adservice.google.cm adservice.google.com.pe adservice.google.com.cu adservice.google.je adservice.google.co.kr adservice.google.com.pr adservice.google.co.zw adservice.google.rw adservice.google.co.ug adservice.google.com.py adservice.google.com.bo adservice.google.dz adservice.google.fr adservice.google.gt adservice.google.kg adservice.google.com.tj *.microsofttranslator.com adservice.google.tt *.tiny.cloud adservice.google.com.lb adservice.google.ml *.google-analytics.com http://*.pro-market.net adservice.google.bt adservice.google.co.zm adservice.google.com.vc adservice.google.com.au adservice.google.cv adservice.google.be adservice.google.bf adservice.google.ge adservice.google.li adservice.google.cd adservice.google.co.il adservice.google.hn adservice.google.com.mm *.googleadsserving.cn adservice.google.ps adservice.google.gy adservice.google.com.pa adservice.google.mw *.consentmanager.net adservice.google.sm *.flashtalking.com adservice.google.co.in adservice.google.com.gt adservice.google.com.na adservice.google.ad adservice.google.la adservice.google.ki adservice.google.es adservice.google.com.gi adservice.google.so adservice.google.co.ck 'unsafe-inline' 'unsafe-eval'; script-src-attr 'none' 'report-sample'
expires: Sun, 19 Nov 2023 22:07:12 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Thu, 19 Oct 2023 22:06:39 GMT
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 818c55247f975684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2
200 OK 25 kB URL GET HTTP/2 a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 25320, version 1.0\012- data
Hash 344ee6eaad74df6b72dec90b1b888aab
490e2d92c7f8f3934c14e6c467d8409194bb2c9a
a3cf4861c7d0c966f0ed6564f6aad6b28cbd3421a9ca4f60e2246848d249f196
GET /con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sourceforge.net/
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: font/woff2
content-length: 25320
last-modified: Mon, 17 Jan 2022 17:18:46 GMT
etag: "61e5a4f6-62e8"
expires: Fri, 18 Oct 2024 22:07:12 GMT
cache-control: public, max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 7318743
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c5525fe8d1bfe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2
200 OK 25 kB URL GET HTTP/2 a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 24712, version 1.0\012- data
Hash 5366c57b20a86f1956780da5e26aac90
927dca34817d3c42d9647a846854dad3cbcdb533
f254eb93b015455a3c89aaf970631bc989fe2bd387f79e871b514992359651aa
GET /con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sourceforge.net/
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: font/woff2
content-length: 24712
last-modified: Tue, 18 Jan 2022 22:19:24 GMT
etag: "61e73cec-6088"
expires: Fri, 18 Oct 2024 22:07:12 GMT
cache-control: public, max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 23649594
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c5525fe901bfe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sourceforge.net/directory/tp3/?b=62465&c=12085&z=59809&cb=72409e0e1b
200 OK 43 B URL GET HTTP/3 sourceforge.net/directory/tp3/?b=62465&c=12085&z=59809&cb=72409e0e1b
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /directory/tp3/?b=62465&c=12085&z=59809&cb=72409e0e1b HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; sourceforge=6caf07086d2c205f3bc3c05503c5f36fd1417684gAJ9cQAoWAcAAABfZG9tYWlucQFOWAUAAABfcGF0aHECWAEAAAAvcQNYAwAAAF9pZHEEWCAAAAAxYTNhNjA4ZDM3OGY0YTlkYjBhYjI2YjgyN2ViNTIwOHEFWAMAAABrZXlxBlgkAAAAZTE1YWEyNDctM2YxOS00Y2U0LTg5MjYtM2M2ZDQ1YTg1MjBjcQdYBQAAAHByZWZzcQh9cQlYBgAAAGRsaGlzdHEKXXELfXEMKFgHAAAAcHJvamVjdHENfXEOKFgJAAAAc2hvcnRuYW1lcQ9YAwAAAGhqdHEQWAQAAABuYW1lcRFYCgAAAEhpSmFja1RoaXNxElgFAAAAc2ZfaWRxE0rcBQoAdVgHAAAAcmVsZWFzZXEUfXEVKFgKAAAAc2ZfZmlsZV9pZHEWSnDwfQBYCAAAAGZpbGVuYW1lcRdYGgAAAC8yLjAuNSBiZXRhL0hpamFja1RoaXMuZXhlcRhYBAAAAGRhdGVxGWNkYXRldGltZQpkYXRldGltZQpxGmNfY29kZWNzCmVuY29kZQpxG1gLAAAAB8OdBQkRHwoAAABxHFgGAAAAbGF0aW4xcR2GcR5ScR+FcSBScSF1dWFYDgAAAF9jcmVhdGlvbl90aW1lcSJHQdlMaiPmnBVYDgAAAF9hY2Nlc3NlZF90aW1lcSNHQdlMaiPmnBh1Lg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
cache-control: private, max-age=0, no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: OAID=e5c4ab612d204a235721f96e44430189; expires=Fri, 18-Oct-2024 22:07:13 GMT; path=/
x-frame-options: SameOrigin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests
x-robots-tag: noindex
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 818c5529bf84b50c-OSL
alt-svc: h3=":443"; ma=86400
sourceforge.net/directory/tp3/?b=62339&c=12059&z=59673&cb=3195bd1eac
200 OK 43 B URL GET HTTP/3 sourceforge.net/directory/tp3/?b=62339&c=12059&z=59673&cb=3195bd1eac
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /directory/tp3/?b=62339&c=12059&z=59673&cb=3195bd1eac HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; sourceforge=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
cache-control: private, max-age=0, no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: OAID=daa4c10759ed3359a7879d98c9c538ef; expires=Fri, 18-Oct-2024 22:07:13 GMT; path=/
x-frame-options: SameOrigin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests
x-robots-tag: noindex
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 818c5529bf86b50c-OSL
alt-svc: h3=":443"; ma=86400
sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
200 OK 24 kB URL User Request GET HTTP/2 sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
IP
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1143)
Hash 429a734046a039f825675a27261af0f4
8b83eb3234ad0ed8605bd04412685d173a945a94
f3ce025526cd5c6f1aa7e3ad7f37ee3fef60f3357810bc50b9ea457f75d4c1c7
GET /projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:11 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
pragma: no-cache
link: <https://a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1697658516>; rel=preload; as=script, <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1697658516>; rel=preload; as=script, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/lato.css?1697658516>; rel=preload; as=style, <https://a.fsdn.com/con/css/sandiego.css?1697658516>; rel=preload; as=style, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1697658516>; rel=preload; as=script
x-ua-compatible: IE=edge,chrome=1
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
x-frame-options: SAMEORIGIN
content-security-policy: frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.lijit.com *.btloader.com; form-action 'self' lists.sourceforge.net; script-src 'self' adservice.google.dz adservice.google.so adservice.google.dm adservice.google.dj adservice.google.nu adservice.google.com.ua adservice.google.bj *.googletagservices.com adservice.google.com.ar adservice.google.sm adservice.google.com.ni adservice.google.com.ph adservice.google.ch adservice.google.co.id adservice.google.se *.google.com *.flashtalking.com adservice.google.fi adservice.google.co.ug adservice.google.as *.trustarc.com adservice.google.co.jp adservice.google.com.sa adservice.google.com.tr adservice.google.com.fj adservice.google.bg *.googleadsserving.cn adservice.google.com.my adservice.google.im *.script.ac adservice.google.gl adservice.google.ge adservice.google.ru *.licdn.com *.sharethrough.com adservice.google.com.eg adservice.google.com.gt adservice.google.sr adservice.google.com.hk *.googletagmanager.com adservice.google.cf adservice.google.com.bz adservice.google.mw adservice.google.ml adservice.google.com.sb adservice.google.li *.consentmanager.net adservice.google.com.co adservice.google.al adservice.google.com.au *.doubleverify.com *.gstatic.com adservice.google.rs adservice.google.co.th adservice.google.ro adservice.google.com.py adservice.google.co.in adservice.google.lu http://*.pro-market.net adservice.google.com.ec adservice.google.no adservice.google.com.bh adservice.google.mg adservice.google.fr adservice.google.com.pe adservice.google.ki adservice.google.com.tw adservice.google.co.bw ml314.com *.adsafeprotected.com adservice.google.com.kh adservice.google.co.vi adservice.google.co.nz adservice.google.rw adservice.google.st adservice.google.gm adservice.google.com.cu adservice.google.jo *.gstatic.cn *.cloudflareinsights.com adservice.google.ci adservice.google.ht *.crsspxl.com adservice.google.ca adservice.google.cl adservice.google.la adservice.google.tm adservice.google.com.bd adservice.google.co.ke adservice.google.com.pg *.recaptcha.net adservice.google.com.mm *.microsofttranslator.com adservice.google.co.tz adservice.google.com.et adservice.google.com.gi adservice.google.ne adservice.google.sn adservice.google.co.uk adservice.google.gt *.doubleclick.net *.2mdn.net adservice.google.co.kr adservice.google.kg adservice.google.bs adservice.google.tn adservice.google.ae adservice.google.hu adservice.google.lt adservice.google.mv *.s-onetag.com adservice.google.co.zm adservice.google.com.uy *.google-analytics.com *.googlesyndication.com *.adnxs.com adservice.google.cm adservice.google.com.mt adservice.google.com.np adservice.google.co.mz adservice.google.sc adservice.google.com.tj *.tiny.cloud *.moatads.com a.fsdn.com adservice.google.tl adservice.google.nl adservice.google.to adservice.google.com.ai adservice.google.tt adservice.google.co.uz adservice.google.co.za adservice.google.ee adservice.google.ie adservice.google.pl translate.google.cn adservice.google.td adservice.google.com.gh adservice.google.com.br adservice.google.com.pk adservice.google.com.bn adservice.google.is adservice.google.be adservice.google.kz adservice.google.iq adservice.google.cd adservice.google.hr adservice.google.si adservice.google.com.vn adservice.google.co.ao *.4dex.io adservice.google.de *.microsoft.com adservice.google.nr adservice.google.gg adservice.google.com.na adservice.google.ga adservice.google.ad adservice.google.com.sg adservice.google.com.sv adservice.google.pt adservice.google.md adservice.google.mu adservice.google.bi adservice.google.com.kw adservice.google.es adservice.google.co.ck adservice.google.mk adservice.google.com.bo adservice.google.com.ng adservice.google.co.ls adservice.google.co.il adservice.google.cv adservice.google.cz adservice.google.hn translate.googleapis.com *.lijit.com adservice.google.com.cy adservice.google.com.pr adservice.google.bf adservice.google.cg adservice.google.com.om btloader.com adservice.google.lv adservice.google.fm adservice.google.com.qa adservice.google.com.ag adservice.google.com.pa adservice.google.com.lb adservice.google.dk adservice.google.co.ve adservice.google.ws adservice.google.me adservice.google.ps adservice.google.az adservice.google.vg adservice.google.gy adservice.google.lk adservice.google.com.af adservice.google.com.ly adservice.google.vu adservice.google.mn recaptcha.net *.slashdotmedia.com adservice.google.co.cr adservice.google.ms adservice.google.bt adservice.google.com.mx adservice.google.sk adservice.google.gr adservice.google.je adservice.google.co.zw adservice.google.it adservice.google.com.jm adservice.google.com.vc adservice.google.tg adservice.google.at 'unsafe-inline' 'unsafe-eval'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; script-src-attr 'none' 'report-sample'
set-cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; Max-Age=315360000; Path=/; expires=Sun, 16-Oct-2033 22:07:11 GMT; secure; HttpOnly
sourceforge=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; expires=Tue, 19-Jan-2038 03:14:07 GMT; HttpOnly; Path=/; SameSite=Lax; Secure
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 818c551ffdde56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sourceforge.net/directory/tp3/?b=35047&c=7503&z=32343&cb=ce2e6839fb
200 OK 43 B URL GET HTTP/3 sourceforge.net/directory/tp3/?b=35047&c=7503&z=32343&cb=ce2e6839fb
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /directory/tp3/?b=35047&c=7503&z=32343&cb=ce2e6839fb HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; sourceforge=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
cache-control: private, max-age=0, no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: OAID=9969b82c8490e7f01b46878bafd8b564; expires=Fri, 18-Oct-2024 22:07:13 GMT; path=/
x-frame-options: SameOrigin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests
x-robots-tag: noindex
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 818c5529cf99b50c-OSL
alt-svc: h3=":443"; ma=86400
a.fsdn.com/con/js/min/sf.sandiego-head.js?1697658516
200 OK 42 kB URL GET HTTP/2 a.fsdn.com/con/js/min/sf.sandiego-head.js?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 34453d67d47190f2ac1765a8707a00e5
7eb6ca8bdae362e71ef7f14d972632eec8f65309
b6b5412ac4a94c35ea4dfab8953ba4d4cd858d3260e77148a6557ff284a380d5
GET /con/js/min/sf.sandiego-head.js?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=126413
etag: W/"65303871-1edcd"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Wed, 18 Oct 2023 19:56:33 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94133
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f875684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/js/min/sf.sandiego-base.js?1697658516
200 OK 36 kB URL GET HTTP/2 a.fsdn.com/con/js/min/sf.sandiego-base.js?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (33509)
Hash 80f2419f055a74a6b18626aca93e971f
4553c6b2deb733bc2d53785591dbd1f8c97defa4
b7547012de798d3f335199320469e3d42c57ba965d790e62bbc6fa223230dd0f
GET /con/js/min/sf.sandiego-base.js?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=114497
etag: W/"64d6b9e1-1bf41"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Fri, 11 Aug 2023 22:44:49 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94121
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f885684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
200 OK 14 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (38164)
Hash b12307d8111512557ad2fa3edceb88e7
68eff8d14af603bebedab81d24b01f96b581b82d
866698a0ed6ee8b7f9aa7d3dac5f9f3f80bb5f10b92e4d8c2f2f5df3bb0147ef
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c552478c4b4ed-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
a.fsdn.com/con/js/min/sf.sandiego-foundation-base.js?1697658516
200 OK 61 kB URL GET HTTP/2 a.fsdn.com/con/js/min/sf.sandiego-foundation-base.js?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash f23fbd469bb0d9569486b62e2c50d996
357cd77f34e36682ba6fdeaad6550227cd30644b
d30c030593aee31e4bdd1a458e6739df804f6d50012d2e3141d585b4acf91a08
GET /con/js/min/sf.sandiego-foundation-base.js?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=88111
etag: W/"61e73ced-1582f"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Tue, 18 Jan 2022 22:19:25 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94121
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f895684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash e5859c2374da9f13e3cd95b21b5dae5f
d9689461e50bbc979f91dea4cb387fc86a32c4e0
42bc1f3fc6b968175e502d40ce357a434629afef833f3eeb7bf2316686afafd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Oct 2023 22:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad-delivery.net/px.gif?ch=2
200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=2
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:7E:C3:56:0A:04:84:BD:24:32:3D:C3:8E:66:52:26:37:E8:90:D3
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdttmZw-mhoOG0rz6gX7hG4ZU0EDhg0VH0_KPcYrqtHADaUigglDqoMPjQorSWUQD1pmA-J7cFH1keTmNOf__xRi8j5msZT-
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Sun, 01 Oct 2023 14:57:10 GMT
cache-control: public, max-age=86400
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
age: 1584603
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=58d53n%2Bb4pUR70J0Z8p0cStMnnwCV24gKd%2BXX5RM3oaS36t8ojzaCpaAeJWHSeNsZqOWPMoY%2FRVZXp6puXr9EocjbnrGO8sRFQey9kIAM8%2BvE1mWcbrqW6viWkezZdV7Ig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c552d0f1356cc-OSL
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=1&e=0.3694762630447125
200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.3694762630447125
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:7E:C3:56:0A:04:84:BD:24:32:3D:C3:8E:66:52:26:37:E8:90:D3
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.3694762630447125 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdttmZw-mhoOG0rz6gX7hG4ZU0EDhg0VH0_KPcYrqtHADaUigglDqoMPjQorSWUQD1pmA-J7cFH1keTmNOf__xRi8j5msZT-
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Sun, 01 Oct 2023 14:57:10 GMT
cache-control: public, max-age=86400
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
age: 1584603
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aXvC%2Funv2joL8WuYDB2Xzr3mH4F00u5xTw72GELHNiO75lZW0MZ6gBFzYrOTCJ3RgQxcXSQ6WaBV%2B%2BvLr4YJsGv6VdscU7XTJykKPYZN3ANeoPwAzBf1h7kBYh2eG5FTpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c552d0f1956cc-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/QMx17cePnHo
472 B URL ocsp.pki.goog/s/gts1d4/QMx17cePnHo
IP
Hash 4489d7f775f9f0bc8974dadffacf39f5
0b6b846980995ce36f78483cff82450f6ca14abf
f9862717fef202f0fede98428dc791a86a7bd427dfd98e93eb2299877cfdfd38
POST /s/gts1d4/QMx17cePnHo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Oct 2023 22:07:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-1H226E4E4L&l=dataLayer&cx=c
200 OK 95 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-1H226E4E4L&l=dataLayer&cx=c
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
ValidityMon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
File type ASCII text, with very long lines (7711)
Hash b6b1c8bdbe3b4dd02457cd73a01a21c2
b1a76e6c15ba904796799215fac6d2c806759529
781b70a04209aea2a13c3ed751deed363284e75c3fecb9eb4355e25350f7e380
GET /gtag/js?id=G-1H226E4E4L&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 19 Oct 2023 22:07:13 GMT
expires: Thu, 19 Oct 2023 22:07:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95278
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
sourceforge.net/directory/tp3/?b=63621&c=12299&z=60957&cb=91dc7a13f3
200 OK 43 B URL GET HTTP/3 sourceforge.net/directory/tp3/?b=63621&c=12299&z=60957&cb=91dc7a13f3
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /directory/tp3/?b=63621&c=12299&z=60957&cb=91dc7a13f3 HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; sourceforge=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
cache-control: private, max-age=0, no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: OAID=9b23b912d993bedc9a507947db5d00e0; expires=Fri, 18-Oct-2024 22:07:13 GMT; path=/
x-frame-options: SameOrigin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests
x-robots-tag: noindex
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 818c5529bf82b50c-OSL
alt-svc: h3=":443"; ma=86400
api.btloader.com/mw/state?bt_env=prod
204 No Content 0 B URL GET HTTP/2 api.btloader.com/mw/state?bt_env=prod
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerGoogle Trust Services LLC
Subjectapi.btloader.com
FingerprintE3:DF:8E:52:D3:DB:3D:FB:A3:E9:88:5C:1C:A4:25:E5:21:14:71:2A
ValidityTue, 10 Oct 2023 05:09:40 GMT - Mon, 08 Jan 2024 06:03:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mw/state?bt_env=prod HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sourceforge.net/
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
vary: Origin
date: Thu, 19 Oct 2023 22:07:13 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/QMx17cePnHo
472 B URL ocsp.pki.goog/s/gts1d4/QMx17cePnHo
IP
Hash 4489d7f775f9f0bc8974dadffacf39f5
0b6b846980995ce36f78483cff82450f6ca14abf
f9862717fef202f0fede98428dc791a86a7bd427dfd98e93eb2299877cfdfd38
POST /s/gts1d4/QMx17cePnHo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Oct 2023 22:07:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.btloader.com/country
200 OK 16 B IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerGoogle Trust Services LLC
Subjectapi.btloader.com
FingerprintE3:DF:8E:52:D3:DB:3D:FB:A3:E9:88:5C:1C:A4:25:E5:21:14:71:2A
ValidityTue, 10 Oct 2023 05:09:40 GMT - Mon, 08 Jan 2024 06:03:14 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 452880c1a375b8fba8c9499f0930d05f
ffe5484a23512c2a574d837fe2d3267b134e48c8
8b3383aa4c71f1d816bfaf33e3ef2e8ded067698a7798b9f306204d5777b140d
GET /country HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sourceforge.net/
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600
content-type: application/json
vary: Origin
date: Thu, 19 Oct 2023 22:07:13 GMT
content-length: 16
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.btloader.com/pv?tid=AeYsKcI3qD&w=5483815487668224&o=5098683085881344&cv=2.1.20-1-gef591d7&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fhjt%2Ffiles%2F2.0.5%2520beta%2FHijackThis.exe%2Fdownload%3Fuse_mirror%3Dmaster%26r%3D%26use_mirror%3Diweb&sid=K2uo23V2D&upapi=true
204 No Content 0 B URL GET HTTP/2 api.btloader.com/pv?tid=AeYsKcI3qD&w=5483815487668224&o=5098683085881344&cv=2.1.20-1-gef591d7&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fhjt%2Ffiles%2F2.0.5%2520beta%2FHijackThis.exe%2Fdownload%3Fuse_mirror%3Dmaster%26r%3D%26use_mirror%3Diweb&sid=K2uo23V2D&upapi=true
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerGoogle Trust Services LLC
Subjectapi.btloader.com
FingerprintE3:DF:8E:52:D3:DB:3D:FB:A3:E9:88:5C:1C:A4:25:E5:21:14:71:2A
ValidityTue, 10 Oct 2023 05:09:40 GMT - Mon, 08 Jan 2024 06:03:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=AeYsKcI3qD&w=5483815487668224&o=5098683085881344&cv=2.1.20-1-gef591d7&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fhjt%2Ffiles%2F2.0.5%2520beta%2FHijackThis.exe%2Fdownload%3Fuse_mirror%3Dmaster%26r%3D%26use_mirror%3Diweb&sid=K2uo23V2D&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Thu, 19 Oct 2023 22:07:13 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.slashdotmedia.com/sf.js
200 OK 66 kB URL GET HTTP/1.1 analytics.slashdotmedia.com/sf.js
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerLet's Encrypt
Subjectanalytics.slashdotmedia.com
FingerprintCF:4F:FA:CC:04:C7:46:2D:D3:58:AA:31:76:DB:93:1D:3F:9B:A5:80
ValidityThu, 31 Aug 2023 03:33:12 GMT - Wed, 29 Nov 2023 03:33:11 GMT
File type ASCII text, with very long lines (1795)
Hash 34d5015941e4901485c7974667b85162
cf032e42cf197dcc3022001a0bde9d74eb11ac15
5c166a5d40aeefd0679a14f95e47ff28824e66abba82adfa30be41803cc25632
GET /sf.js HTTP/1.1
Host: analytics.slashdotmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Oct 2023 22:07:13 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 65458
Connection: keep-alive
last-modified: Mon, 19 Nov 2018 03:20:15 GMT
vary: Accept-Encoding
expires: Sat, 18 Nov 2023 22:07:13 GMT
cache-control: max-age=2592000, max-age=31449600, no-transform, public
accept-ranges: bytes
a.fsdn.com/con/img/sandiego/logo-180x180.png
200 OK 1.1 kB URL GET HTTP/3 a.fsdn.com/con/img/sandiego/logo-180x180.png
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 65e00a5c4e51a60fbef5cb124c6fbfb5
e9f929b2004fb240bc1136fbbb4775b60cb28990
2b016afb2ae224198ef8d92e672fb607169ecad9a3fe4183e00bd2c512b4b019
GET /con/img/sandiego/logo-180x180.png HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/webp
content-length: 1148
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1512
content-disposition: inline; filename="logo-180x180.webp"
etag: "5a9fdf20-5e8"
expires: Fri, 18 Oct 2024 22:07:13 GMT
last-modified: Wed, 07 Mar 2018 12:46:24 GMT
timing-allow-origin: *
vary: Accept
cf-cache-status: HIT
age: 2525292
accept-ranges: bytes
server: cloudflare
cf-ray: 818c553019c35688-OSL
alt-svc: h3=":443"; ma=86400
analytics.slashdotmedia.com/sf.php?action_name=Download%20HijackThis.exe%20(HiJackThis)&idsite=39&rec=1&r=813806&h=22&m=7&s=14&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fhjt%2Ffiles%2F2.0.5%20beta%2FHijackThis.exe%2Fdownload%3Fuse_mirror%3Dmaster%26r%3D%26use_mirror%3Diweb&_id=a1d46c39463c1668&_idts=1697753235&_idvc=1&_idn=0&_refts=0&_viewts=1697753235&send_image=1&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&dimension1=hjt&dimension2=pg_dwnld&dimension3=undefined>_ms=339&pv_id=IaM2Wk
200 OK 43 B URL GET HTTP/1.1 analytics.slashdotmedia.com/sf.php?action_name=Download%20HijackThis.exe%20(HiJackThis)&idsite=39&rec=1&r=813806&h=22&m=7&s=14&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fhjt%2Ffiles%2F2.0.5%20beta%2FHijackThis.exe%2Fdownload%3Fuse_mirror%3Dmaster%26r%3D%26use_mirror%3Diweb&_id=a1d46c39463c1668&_idts=1697753235&_idvc=1&_idn=0&_refts=0&_viewts=1697753235&send_image=1&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&dimension1=hjt&dimension2=pg_dwnld&dimension3=undefined>_ms=339&pv_id=IaM2Wk
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerLet's Encrypt
Subjectanalytics.slashdotmedia.com
FingerprintCF:4F:FA:CC:04:C7:46:2D:D3:58:AA:31:76:DB:93:1D:3F:9B:A5:80
ValidityThu, 31 Aug 2023 03:33:12 GMT - Wed, 29 Nov 2023 03:33:11 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sf.php?action_name=Download%20HijackThis.exe%20(HiJackThis)&idsite=39&rec=1&r=813806&h=22&m=7&s=14&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fhjt%2Ffiles%2F2.0.5%20beta%2FHijackThis.exe%2Fdownload%3Fuse_mirror%3Dmaster%26r%3D%26use_mirror%3Diweb&_id=a1d46c39463c1668&_idts=1697753235&_idvc=1&_idn=0&_refts=0&_viewts=1697753235&send_image=1&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&dimension1=hjt&dimension2=pg_dwnld&dimension3=undefined>_ms=339&pv_id=IaM2Wk HTTP/1.1
Host: analytics.slashdotmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Oct 2023 22:07:14 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
tk: N
cache-control: no-store
x-frame-options: SameOrigin
x-content-type-options: nosniff
sourceforge.net/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 sourceforge.net/cdn-cgi/rum?
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 14733
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; sourceforge=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; OAID=9b23b912d993bedc9a507947db5d00e0; _ga_1H226E4E4L=GS1.1.1697753234.1.0.1697753234.0.0.0; _ga=GA1.1.599136790.1697753234; _pk_id.39.0d7e=a1d46c39463c1668.1697753235.1.1697753235.1697753235.; _pk_ses.39.0d7e=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Thu, 19 Oct 2023 22:07:14 GMT
access-control-allow-origin: https://sourceforge.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 818c55319d06b50c-OSL
x-frame-options: DENY
x-content-type-options: nosniff
sourceforge.net/p/sfapi/push_vid
200 OK 16 B URL POST HTTP/3 sourceforge.net/p/sfapi/push_vid
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash bdb8d8342b1841d0a9a1b3a1e1db4d81
5e8a0332fde0032a0992c2298765bc17fb59deec
e8dc051cac81ea5e30899600db6c085894f31a248ab46ace77d3b1756d58e730
POST /p/sfapi/push_vid HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 84
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; sourceforge=6caf07086d2c205f3bc3c05503c5f36fd1417684gAJ9cQAoWAcAAABfZG9tYWlucQFOWAUAAABfcGF0aHECWAEAAAAvcQNYAwAAAF9pZHEEWCAAAAAxYTNhNjA4ZDM3OGY0YTlkYjBhYjI2YjgyN2ViNTIwOHEFWAMAAABrZXlxBlgkAAAAZTE1YWEyNDctM2YxOS00Y2U0LTg5MjYtM2M2ZDQ1YTg1MjBjcQdYBQAAAHByZWZzcQh9cQlYBgAAAGRsaGlzdHEKXXELfXEMKFgHAAAAcHJvamVjdHENfXEOKFgJAAAAc2hvcnRuYW1lcQ9YAwAAAGhqdHEQWAQAAABuYW1lcRFYCgAAAEhpSmFja1RoaXNxElgFAAAAc2ZfaWRxE0rcBQoAdVgHAAAAcmVsZWFzZXEUfXEVKFgKAAAAc2ZfZmlsZV9pZHEWSnDwfQBYCAAAAGZpbGVuYW1lcRdYGgAAAC8yLjAuNSBiZXRhL0hpamFja1RoaXMuZXhlcRhYBAAAAGRhdGVxGWNkYXRldGltZQpkYXRldGltZQpxGmNfY29kZWNzCmVuY29kZQpxG1gLAAAAB8OdBQkRHwoAAABxHFgGAAAAbGF0aW4xcR2GcR5ScR+FcSBScSF1dWFYDgAAAF9jcmVhdGlvbl90aW1lcSJHQdlMaiPmnBVYDgAAAF9hY2Nlc3NlZF90aW1lcSNHQdlMaiPmnBh1Lg==; OAID=9b23b912d993bedc9a507947db5d00e0; _ga_1H226E4E4L=GS1.1.1697753234.1.0.1697753234.0.0.0; _ga=GA1.1.599136790.1697753234; _pk_id.39.0d7e=a1d46c39463c1668.1697753235.1.1697753235.1697753235.; _pk_ses.39.0d7e=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:14 GMT
content-type: application/json; charset=utf-8
content-length: 16
cache-control: no-cache
pragma: no-cache
content-security-policy: frame-src 'self' *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; frame-ancestors 'self'; upgrade-insecure-requests; form-action 'self'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; script-src-attr 'none' 'report-sample'; script-src 'self' a.fsdn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; object-src 'none'
permissions-policy: microphone=(), geolocation=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; payment 'none'; document-domain 'none'; display 'none'; autoplay 'none'
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 818c55305c2cb50c-OSL
alt-svc: h3=":443"; ma=86400
ib.adnxs.com/ut/v3/prebid
200 OK 53 B URL POST HTTP/2 ib.adnxs.com/ut/v3/prebid
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerDigiCert Inc
Subject*.adnxs.com
Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08
ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 383f9c4be349dffa576501d3bb905192
00ca8d8ed02e204dd27d5aa0309cd8e7fc514a47
a68a70f7be9281f3f7148b38d7f5971f1dc946d3034a40e55021d0fb6fb78d73
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sourceforge.net/
content-type: text/plain
Content-Length: 1406
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.4
date: Thu, 19 Oct 2023 22:07:14 GMT
content-type: application/json; charset=utf-8
content-length: 53
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://sourceforge.net
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
an-x-request-uuid: 4a98ce5b-dc05-4240-9db0-3c6022ad1bbd
x-proxy-origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
X-Firefox-Spdy: h2
downloads.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?ts=gAAAAABlMaiPaE9DTUhGyyrQK5OU-t0pSL3LGN06vmjTEk_8h4eMIgTLzwhfu4Iz72GfY4_fZOwZVKLtdls4iVKtgz_OGxpXLQ%3D%3D&use_mirror=master&r=
302 Found 345 B URL User Request GET HTTP/2 downloads.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?ts=gAAAAABlMaiPaE9DTUhGyyrQK5OU-t0pSL3LGN06vmjTEk_8h4eMIgTLzwhfu4Iz72GfY4_fZOwZVKLtdls4iVKtgz_OGxpXLQ%3D%3D&use_mirror=master&r=
IP
ASN #209242 Cloudflare London, LLC
Certificate IssuerLet's Encrypt
Subjectsourceforge.net
Fingerprint64:3B:13:EB:E8:97:35:80:0B:70:74:E1:E1:54:5F:5D:6A:98:C5:FE
ValidityTue, 05 Sep 2023 05:15:20 GMT - Mon, 04 Dec 2023 05:15:19 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6496451f7da165bb0df977bdd8d585cd
3bbf758aa69c2b4ba279e35514171ce1c89be4ab
ffb036fc33eef79e0eb3071958657db19b44c48d88ba6b987e980ec5434e11ff
GET /project/hjt/2.0.5%20beta/HijackThis.exe?ts=gAAAAABlMaiPaE9DTUhGyyrQK5OU-t0pSL3LGN06vmjTEk_8h4eMIgTLzwhfu4Iz72GfY4_fZOwZVKLtdls4iVKtgz_OGxpXLQ%3D%3D&use_mirror=master&r= HTTP/1.1
Host: downloads.sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Cookie: _ga_1H226E4E4L=GS1.1.1697753234.1.0.1697753234.0.0.0; _ga=GA1.1.599136790.1697753234
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 19 Oct 2023 22:07:19 GMT
content-type: text/html; charset=UTF-8
content-length: 345
location: https://master.dl.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?viasf=1
content-disposition: attachment; filename="HijackThis.exe"
set-cookie: sf_mirror_attempt=hjt:master:2.0.5%20beta/HijackThis.exe; Max-Age=120; Path=/; expires=Thu, 19-Oct-2023 22:09:19 GMT
X-Firefox-Spdy: h2
master.dl.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?viasf=1
200 OK 389 kB URL User Request GET HTTP/1.1 master.dl.sourceforge.net/project/hjt/2.0.5%20beta/HijackThis.exe?viasf=1
IP
Certificate IssuerLet's Encrypt
Subjectmaster.dl.sourceforge.net
FingerprintA5:88:9A:04:3B:99:56:35:15:E2:C6:08:4E:62:E8:79:A8:2D:DB:B3
ValiditySun, 01 Oct 2023 03:18:56 GMT - Sat, 30 Dec 2023 03:18:55 GMT
File type PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed\012- data
Size 389 kB (388608 bytes)
Hash 47811d50390a86a17102d7496e6eabb9
2623749cdb27887f6746acdee7e8065475f8b541
9da5a899b9d55e1d43718ec0ad6368f9e9ef0242a4e88cd5ddb2cc6d7bfa5fb3
Analyzer Verdict Alert VirusTotal suspicious
GET /project/hjt/2.0.5%20beta/HijackThis.exe?viasf=1 HTTP/1.1
Host: master.dl.sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sourceforge.net/
DNT: 1
Connection: keep-alive
Cookie: _ga_1H226E4E4L=GS1.1.1697753234.1.0.1697753234.0.0.0; _ga=GA1.1.599136790.1697753234
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Oct 2023 22:07:19 GMT
Content-Type: application/octet-stream
Content-Length: 388608
Connection: keep-alive
last-modified: Thu, 09 May 2013 17:31:09 GMT
etag: "518bdd5d-5ee00"
accept-ranges: bytes
sourceforge.net/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 sourceforge.net/cdn-cgi/rum?
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 662
Origin: https://sourceforge.net
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Thu, 19 Oct 2023 22:07:27 GMT
access-control-allow-origin: https://sourceforge.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 818c55827f45b50c-OSL
x-frame-options: DENY
x-content-type-options: nosniff
www.googletagmanager.com/gtag/js
200 OK 114 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
ValidityMon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
File type ASCII text, with very long lines (2213)
Size 114 kB (114265 bytes)
Hash 40e1d3b4e803c9caf35507e855f4523e
f89bd3d3c1a3172e4cb6f40e5c37da57db66264e
2cc019f39aa43bacbb8f2316fec64e1fb192e71b6bdd85e6af09a73af53c1175
GET /gtag/js HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 19 Oct 2023 22:07:13 GMT
expires: Thu, 19 Oct 2023 22:07:13 GMT
cache-control: private, max-age=900
last-modified: Thu, 19 Oct 2023 21:18:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44315
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.fsdn.com/allura/p/hjt/icon?1511519810
200 OK 1.0 kB URL GET HTTP/2 a.fsdn.com/allura/p/hjt/icon?1511519810
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7e0a102da773649ea721acc419c6d2c5
a0904221775f69681f663ecab09e9978e5e3d866
6f4639d101eda80ee890a7ea190201cdad1fab8d44496fe5e05c6f7a1dd17946
GET /allura/p/hjt/icon?1511519810 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/webp
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=2637
content-security-policy: form-action 'self'; upgrade-insecure-requests; frame-src 'self' *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com; object-src 'none'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; script-src-attr 'none' 'report-sample'; script-src 'self' a.fsdn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; frame-ancestors 'self'
etag: "hjticon.gif?2013-03-23 03:20:35+00:00"
expires: Sun, 19 Nov 2023 22:07:12 GMT
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; payment 'none'; document-domain 'none'; display 'none'; autoplay 'none'
last-modified: Sat, 23 Mar 2013 03:20:35 GMT
permissions-policy: microphone=(), geolocation=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 18829
server: cloudflare
cf-ray: 818c55247f8d5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1697658516
200 OK 301 kB URL GET HTTP/2 a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 301 kB (301003 bytes)
Hash 2feb766fe3388ce95689e7a38a803be8
2d7f5e04cfc8d402286bbaa335f940572f9ca288
9b849eae4f1d7e44645ec3579f85a364eefb2755cc5b58daa62d59f23daeed32
GET /con/js/sftheme/vendor/bizx-prebid.js?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=301091
etag: W/"6530386e-49823"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Wed, 18 Oct 2023 19:56:30 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94122
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f7f5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1697658516
200 OK 27 kB URL GET HTTP/2 a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (26958), with no line terminators
Hash 9a868bb63474068de4dc505425ea47a7
b1fe09a5907b6f0c5a43699d3d16367082763202
99436c5706b65fc49cc408ec87eef8c80023c79fbb8e4d6c58eebc139a6b7cda
GET /con/js/min/sf.sandiego-cmp-top.js?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=26998
etag: W/"6530386e-6976"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Wed, 18 Oct 2023 19:56:30 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94133
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f835684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
btloader.com/tag?o=5098683085881344&upapi=true
200 OK 18 kB URL GET HTTP/2 btloader.com/tag?o=5098683085881344&upapi=true
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerGoogle Trust Services LLC
Subjectbtloader.com
FingerprintCA:53:B2:07:58:99:D9:F5:8D:2A:FB:76:F6:B4:9F:6B:09:17:7F:40
ValidityThu, 19 Oct 2023 20:28:18 GMT - Wed, 17 Jan 2024 20:28:17 GMT
File type ASCII text, with very long lines (18178)
Hash f207d2df9aa08a2cd27317c66ae73c9c
8c6e7fcee43faa8a2b97f2f3fa7ab557f9f69634
9266048e760af84271a31d514688b13c892174dc74f9a02fe78231ac1e30bc20
GET /tag?o=5098683085881344&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: application/javascript
content-length: 7553
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "ca040e27a17e20bfb53be18c7f754a44"
last-modified: Thu, 19 Oct 2023 21:28:27 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 2301
accept-ranges: bytes
server: cloudflare
cf-ray: 818c552bc9ea2e07-ARN
X-Firefox-Spdy: h2
a.fsdn.com/con/js/min/sf.sandiego-dwnld.js?1697658516
200 OK 125 kB URL GET HTTP/2 a.fsdn.com/con/js/min/sf.sandiego-dwnld.js?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 125 kB (125022 bytes)
Hash bf53e34429710a3dc301b7f6f0f05144
9cc67350a3b346430546186efc2289c47c92ddc4
a3b7909923b7dff6b3ef1d57e95dd65f6f05ec93426a9c7364360b33d9863faa
GET /con/js/min/sf.sandiego-dwnld.js?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=125287
etag: W/"64dd18c7-1e967"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Wed, 16 Aug 2023 18:43:19 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94113
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f8a5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/img/sandiego/svg/originals/sf-icon-orange-no_sf.svg
200 OK 1.3 kB URL GET HTTP/3 a.fsdn.com/con/img/sandiego/svg/originals/sf-icon-orange-no_sf.svg
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1389), with no line terminators
Hash 9e6900e1bc179d1d9d1e8b335a940d6d
c9bddec10f4faab1808227c0fbefed7c23d84238
b38888bf2b1c9bab8853911871709472a3d86fc0b7ecfd1c276cb906043830c6
GET /con/img/sandiego/svg/originals/sf-icon-orange-no_sf.svg HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/svg+xml
last-modified: Tue, 18 Jan 2022 22:19:25 GMT
etag: W/"61e73ced-526"
expires: Fri, 18 Oct 2024 22:07:13 GMT
cache-control: public, max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 11657549
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c553019c45688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
a.fsdn.com/con/css/lato.css?1697658516
200 OK 444 B URL GET HTTP/2 a.fsdn.com/con/css/lato.css?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (444), with no line terminators
Hash f8e080b9b4da31a73171708533721fb0
04303d25691fdadb9abfe06cbd1d3ca8c844bdc6
f627e80890942d312723c73fe13440ded842195ee441529fb03f0c0b27f81bdd
GET /con/css/lato.css?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=811
etag: W/"61a64acc-32b"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Tue, 30 Nov 2021 16:01:16 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94133
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f855684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c.sf-syn.com/conversion_outbound_tracker/sf
200 OK 2.2 kB URL GET HTTP/2 c.sf-syn.com/conversion_outbound_tracker/sf
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsf-syn.com
Fingerprint58:F4:AC:9A:E6:94:18:D3:E8:1E:E8:4A:51:BA:00:C1:F8:35:E1:84
ValidityWed, 15 Feb 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2308), with no line terminators
Hash 01229440f90f1a99bd9ca2f34da1178f
7976dc3a02478946ed4c2c8a8b0350aa9d45c6e9
98d08e90a3c0c261e0a45e03363f3db4562d8a1d9fb41f85a7f2b52518841280
GET /conversion_outbound_tracker/sf HTTP/1.1
Host: c.sf-syn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: text/html; charset=utf-8
x-ua-compatible: IE=edge,chrome=1
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
content-security-policy: form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.lijit.com *.btloader.com; script-src 'self' *.s-onetag.com adservice.google.ge adservice.google.me adservice.google.mw adservice.google.dm adservice.google.ne ml314.com *.adsafeprotected.com adservice.google.bf adservice.google.td adservice.google.im *.moatads.com *.trustarc.com adservice.google.co.ve adservice.google.com.sg adservice.google.com.vn adservice.google.ws adservice.google.sk adservice.google.co.kr adservice.google.md adservice.google.tl btloader.com adservice.google.tm adservice.google.com.fj adservice.google.iq adservice.google.com.pr adservice.google.co.ls recaptcha.net adservice.google.sc *.google-analytics.com adservice.google.gt adservice.google.gy adservice.google.com.gh *.tiny.cloud adservice.google.com.ph adservice.google.fm *.recaptcha.net adservice.google.ru translate.googleapis.com adservice.google.com.np adservice.google.ca adservice.google.cz adservice.google.com.py adservice.google.com.pg adservice.google.cd adservice.google.cv adservice.google.mu adservice.google.co.uz *.microsofttranslator.com adservice.google.is adservice.google.mk adservice.google.com.mx adservice.google.com.bn adservice.google.sr *.googleadsserving.cn *.doubleverify.com adservice.google.com.ua adservice.google.com.ag adservice.google.com.eg adservice.google.it adservice.google.ht translate.google.cn adservice.google.ee adservice.google.rs adservice.google.co.ao adservice.google.dj adservice.google.pl adservice.google.co.zm adservice.google.se adservice.google.fr *.lijit.com *.googletagmanager.com adservice.google.co.zw adservice.google.com.kw *.slashdotmedia.com adservice.google.com.tr adservice.google.co.tz *.4dex.io adservice.google.com.sv adservice.google.gg adservice.google.com.bd adservice.google.dz adservice.google.az adservice.google.cl adservice.google.com.bz adservice.google.com.qa adservice.google.com.br adservice.google.ad adservice.google.ps adservice.google.la *.sharethrough.com *.script.ac adservice.google.com.co adservice.google.co.vi adservice.google.co.th adservice.google.bt http://*.pro-market.net adservice.google.tg adservice.google.ki adservice.google.lv *.google.com adservice.google.co.bw adservice.google.com.lb adservice.google.com.pk a.fsdn.com adservice.google.bj adservice.google.co.cr adservice.google.ie adservice.google.com.uy adservice.google.com.pa adservice.google.mn *.gstatic.com adservice.google.al adservice.google.co.id adservice.google.com.sb adservice.google.gm adservice.google.si adservice.google.hn adservice.google.com.ec adservice.google.com.cu *.adnxs.com *.microsoft.com adservice.google.be adservice.google.gr adservice.google.com.cy adservice.google.de *.cloudflareinsights.com adservice.google.cm adservice.google.com.gt adservice.google.com.gi adservice.google.ci adservice.google.com.mm adservice.google.lk adservice.google.vu adservice.google.nr adservice.google.com.om adservice.google.com.bh adservice.google.co.nz adservice.google.mv adservice.google.ro adservice.google.co.mz *.flashtalking.com adservice.google.com.bo adservice.google.no adservice.google.ml adservice.google.com.ar adservice.google.ae *.gstatic.cn adservice.google.cg adservice.google.com.hk adservice.google.ch adservice.google.st adservice.google.com.ai adservice.google.ms *.licdn.com adservice.google.co.jp adservice.google.com.sa *.consentmanager.net adservice.google.rw adservice.google.com.tj adservice.google.tn adservice.google.com.af adservice.google.co.il adservice.google.pt adservice.google.com.tw adservice.google.lu adservice.google.lt adservice.google.hu adservice.google.co.ck adservice.google.com.kh adservice.google.je adservice.google.nu adservice.google.com.my *.googletagservices.com adservice.google.jo adservice.google.com.et adservice.google.com.pe adservice.google.nl adservice.google.li adservice.google.com.jm adservice.google.co.ke *.googlesyndication.com *.crsspxl.com *.doubleclick.net adservice.google.tt adservice.google.bi adservice.google.co.uk adservice.google.bs adservice.google.com.ly adservice.google.com.ni adservice.google.at adservice.google.as adservice.google.com.mt adservice.google.co.in adservice.google.com.na *.2mdn.net adservice.google.sm adservice.google.com.au adservice.google.fi adservice.google.es adservice.google.vg adservice.google.com.ng adservice.google.co.ug adservice.google.sn adservice.google.com.vc adservice.google.hr adservice.google.co.za adservice.google.so adservice.google.ga adservice.google.bg adservice.google.gl adservice.google.to adservice.google.kz adservice.google.cf adservice.google.kg adservice.google.dk adservice.google.mg 'unsafe-inline' 'unsafe-eval'; script-src-attr 'none' 'report-sample'; object-src 'none'
x-content-type-options: nosniff
expires: Fri, 20 Oct 2023 02:07:12 GMT
cache-control: public, max-age=14400
last-modified: Thu, 19 Oct 2023 17:18:12 GMT
cf-cache-status: HIT
age: 3208
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c5529eb51b4eb-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.fsdn.com/con/css/sandiego.css?1697658516
200 OK 394 kB URL GET HTTP/2 a.fsdn.com/con/css/sandiego.css?1697658516
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
Size 394 kB (394299 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /con/css/sandiego.css?1697658516 HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: status=cannot_optimize
etag: W/"6530386d-6043b"
expires: Fri, 18 Oct 2024 22:07:12 GMT
last-modified: Wed, 18 Oct 2023 19:56:29 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 94133
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f865684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sourceforge.net/directory/tp3/?b=42599&c=8289&z=39894&cb=f4cadf4c7b
200 OK 43 B URL GET HTTP/3 sourceforge.net/directory/tp3/?b=42599&c=8289&z=39894&cb=f4cadf4c7b
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectsourceforge.net
FingerprintB4:99:70:4F:2A:01:12:CB:85:B5:C7:E7:B0:EA:AA:FF:EB:9E:A5:C9
ValiditySat, 07 Oct 2023 00:00:00 GMT - Fri, 05 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /directory/tp3/?b=42599&c=8289&z=39894&cb=f4cadf4c7b HTTP/1.1
Host: sourceforge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Cookie: VISITOR=e15aa247-3f19-4ce4-8926-3c6d45a8520c; sourceforge=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 19 Oct 2023 22:07:13 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
cache-control: private, max-age=0, no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: OAID=b2da66cee8dea9da5f6cb2b25051b53b; expires=Fri, 18-Oct-2024 22:07:13 GMT; path=/
x-frame-options: SameOrigin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests
x-robots-tag: noindex
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 818c5529cf8fb50c-OSL
alt-svc: h3=":443"; ma=86400
a.fsdn.com/con/images/sandiego/sf-logo-full.svg
200 OK 16 kB URL GET HTTP/2 a.fsdn.com/con/images/sandiego/sf-logo-full.svg
IP
Requested by https://sourceforge.net/projects/hjt/files/2.0.5%20beta/HijackThis.exe/download?use_mirror=master&r=&use_mirror=iweb
Certificate IssuerCloudflare, Inc.
Subjectfsdn.com
Fingerprint59:06:E1:74:47:73:D4:BB:36:EE:74:99:8B:16:34:A7:A2:32:B0:EB
ValidityWed, 20 Sep 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 535de5a927a8eb5a004cdc0a6b6320dd
ae858f2cca92e59584b7fe9f54bb3fb90b21dadb
1744fb413b91b276f5e17347382b664d6ca6c4ea4db69825caa97c16dd5d37c3
GET /con/images/sandiego/sf-logo-full.svg HTTP/1.1
Host: a.fsdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sourceforge.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 19 Oct 2023 22:07:12 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Sep 2022 19:46:29 GMT
etag: W/"6334a495-3ff8"
expires: Fri, 18 Oct 2024 22:07:12 GMT
cache-control: public, max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1822763
vary: Accept-Encoding
server: cloudflare
cf-ray: 818c55247f8b5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
23.95.97.34
104.22.75.216
37.252.171.85
0.0.0.0